Free 1Z0-1084-25 sample questions

Correct answers: Store the secrets in OCI Vault.; Grant the OKE worker nodes an instance principal IAM policy to access the secrets from OCI Vault.

Storing secrets in OCI Vault is the most secure and recommended approach. Vault provides a centralized, managed, and highly available service for secrets and encryption keys, with fine-grained access control via IAM policies.

Using an instance principal allows the application running on OKE worker nodes to securely authenticate with OCI Vault without needing to store long-lived credentials. This is a best practice for service-to-service authentication within OCI.

Correct answer: OCI Monitoring

OCI Monitoring is the service designed for collecting metrics from resources and creating alarms based on them. You can define an alarm rule that specifies the metric (CPU utilization), the threshold (80%), the statistical function (average), and the trigger delay period (5 minutes). Logging Analytics is for analyzing log data, Events Service reacts to state changes, and APM is for distributed tracing.

Correct answer: False

This statement is false. Factor III of the 12-Factor App methodology explicitly states that configuration should be stored in the environment and strictly separated from the code. Storing config in the code is an anti-pattern because it tightly couples the application to a specific environment and poses a security risk for credentials.

Correct answer: Multi-stage builds

Multi-stage builds are a Docker feature designed for this exact purpose. They allow you to use multiple `FROM` instructions in a single Dockerfile. Each `FROM` instruction begins a new build stage. You can selectively copy artifacts from one stage to another, leaving behind everything you don't want in the final image, such as build tools and intermediate files.

Correct answer: The maximum timeout for an OCI Function is 300 seconds (5 minutes), so the design must be changed to be asynchronous.

OCI Functions have a maximum execution timeout of 300 seconds (5 minutes). A task that takes 10 minutes will always fail. The correct architectural pattern is to have the initial HTTP-triggered function accept the request, place the task details onto a queue (like OCI Queue), and return an immediate '202 Accepted' response. A separate, asynchronously triggered function (or another worker process) would then consume from the queue to perform the long-running task.

Correct answer: `docker push iad.ocir.io/mytenancy/my-app:v1.1`

The correct command is `docker push`. To push to OCIR, the image must first be tagged with the fully qualified repository name, which follows the format ` .ocir.io/ / : `. Assuming the image was correctly tagged (e.g., `docker tag my-app:v1.1 iad.ocir.io/mytenancy/my-app:v1.1`), this `docker push` command will upload it to the specified OCIR repository. `iad` is the region key for `us-ashburn-1`.

Correct answer: Configure an OCI Events Service rule that listens for the 'Object - Create' event type in the specific bucket and sets the action to trigger the target OCI Function.

OCI Events Service is designed for this exact use case. It allows you to create rules that respond to state changes in OCI resources. By creating a rule that filters for the 'Object - Create' event in the specified compartment and bucket, and setting the action to invoke an OCI Function, you create a fully managed, event-driven, and efficient pipeline without any custom polling or intermediate services.

Correct answer: `kubectl logs `

The `kubectl logs ` command fetches the logs from the standard output and standard error streams of the container(s) within the pod. For a `CrashLoopBackOff` error, this is the most direct way to see the application's error messages or stack traces that are causing it to exit prematurely. `kubectl describe` is useful for viewing events and configuration, but the application's specific error will be in its logs.

Correct answer: Circuit Breaker

The Circuit Breaker pattern is a resiliency mechanism that monitors for failures. When the number of failures reaches a certain threshold, the circuit breaker 'trips' or 'opens', and for a configured duration, all further calls to that service fail immediately without being attempted. After the timeout, the circuit breaker allows a limited number of test requests to pass through. If those succeed, it 'closes' the circuit and resumes normal operation. This prevents a client from repeatedly trying to call a failing service, which can exhaust resources and cause cascading failures.

Correct answer: To ensure that a service provider (e.g., an API) and a service consumer have a shared understanding of the requests and responses, allowing them to evolve independently.

The primary goal of contract testing is to verify that two separate systems (like a consumer and a provider microservice) are compatible and can communicate with each other. It captures the interactions in a 'contract' that is tested against each service independently. This allows teams to detect integration issues early in their respective CI/CD pipelines without needing to deploy and run a full, complex end-to-end integration test environment.