[2023] Verified 1z0-1084-23 Dumps Q&As - 1 Year Free & Quickly Updates
Latest 2023 Realistic Verified 1z0-1084-23 Dumps - 100% Free 1z0-1084-23 Exam Dumps
NEW QUESTION # 11
(CHK_4>2) Which TWO statements are NOT valid regarding the Oracle Cloud Infrastructure (OCI) Streaming service? (Choose two.)
- A. Although OCI Streaming automatically encrypts all data while in transit, it is the developer's responsibility to encrypt data at rest, if needed.
- B. OCI Streaming can support up to 2,000 requests per second to each partition.
- C. A stream can be configured with either a public or a private endpoint with support for customer managed encryption keys.
- D. OCI Streaming stores all data for 24 hours by default, but that can be extended up to 7 days.B
- E. The throughput of a stream is defined by a partition. A partition provides 1 MB/sec data input and 2 MB/sec data output.
Answer: B,C
Explanation:
The two statements that are NOT valid regarding the Oracle Cloud Infrastructure (OCI) Streaming service are: A stream can be configured with either a public or a private endpoint with support for customer managed encryption keys. This statement is not valid because the OCI Streaming service currently supports only private endpoints. Customer managed encryption keys are not currently supported for OCI Streaming. OCI Streaming can support up to 2,000 requests per second to each partition. This statement is not valid because the throughput of a stream is not defined by the partition in terms of requests per second. The throughput of a stream is defined in terms of data input and output rates. Each partition provides 1 MB/sec data input and 2 MB/sec data output, but it does not correspond to a specific number of requests per second. The other statements are valid: OCI Streaming stores all data for 24 hours by default, but that can be extended up to 7 days. Although OCI Streaming automatically encrypts all data while in transit, it is the developer's responsibility to encrypt data at rest, if needed.
NEW QUESTION # 12
Who is responsible for patching, upgrading, and maintaining the worker nodes in Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE)? (Choose the best answer.)
- A. It is automated
- B. Oracle Support
- C. The user
- D. Independent Software Vendors
Answer: C
Explanation:
Explanation
The user is responsible for patching, upgrading, and maintaining the worker nodes in Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE). In OKE, the user has control over the worker nodes, which are the compute instances that run the Kubernetes worker components. As the user, you are responsible for managing and maintaining these worker nodes, including tasks such as patching the underlying operating system, upgrading Kubernetes versions, and performing any necessary maintenance activities. While Oracle provides the underlying infrastructure and support services, including managing the control plane and ensuring the availability of the OKE service, the responsibility for managing the worker nodes lies with the user. This allows you to have control and flexibility in managing your Kubernetes environment according to your specific needs and requirements.
NEW QUESTION # 13
You encounter an unexpected error when invoking Oracle Functions from your Cloud Shell session named myfunction in the myapp application. Which option will get you more information on the error?
- A. fn --debug invoke myapp myfunction
- B. fn --verbose invoke myapp myfunction
- C. Contact Oracle support with your error message
- D. DEBUG=1 fn invoke myapp myfunction
Answer: D
Explanation:
The option that will get you more information on the error when invoking Oracle Functions from your Cloud Shell session is: "DEBUG=1 fn invoke myapp myfunction". Setting the environment variable DEBUG=1 before invoking the function using the fn command allows you to enable debug mode, which provides more detailed information about the execution of the function. This can be useful for troubleshooting and understanding the root cause of the error. By using the command "DEBUG=1 fn invoke myapp myfunction", the function invocation will be executed with debug mode enabled, and additional debug information will be displayed in the console output. This information can include stack traces, detailed error messages, and other relevant details that can help identify and resolve the issue. Using the verbose option (--verbose) or debug option (--debug) with the fn command may also provide additional information, but the specific behavior may depend on the version and configuration of the fn CLI tool. While contacting Oracle support with the error message is always an option, enabling debug mode using the DEBUG=1 environment variable provides immediate access to more detailed information and can help in diagnosing and resolving the error more efficiently.
NEW QUESTION # 14
A DevOps engineer is troubleshooting the Meshifyd application, which is running in an Oracle Cloud Infrastructure (OCI) environment. The engineer has set up the OCI Logging service to store access logs for the application but notices that the logs from the Meshifyd application are not showing up in the logging service.
The engineer suspects that there might be an issue with the logging configuration. Which two statements are potential reasons for logs from the Meshifyd application not showing up in the OCI Logging service?
- A. The logconfig.json file has incorrect or missing information in the application namespace in the src field.
- B. The logconfig.json file has incorrect or missing information in the application namespace in the paths field.
- C. The OCI Logging service is set up to pre access logs by creating a log group and custom log within the same compartment.
- D. The logconfig.json file has incorrect or missing OCID for the custom log group in the logGroupObjectId field.
- E. The logconfig.json file has incorrect or missing OCID for the custom log in the logobjectId field.
Answer: D,E
Explanation:
Explanation
The logconfig.json file is a configuration file that specifies how the Unified Monitoring Agent collects and uploads custom logs to the OCI Logging service2. The logconfig.json file contains an array of objects, each representing a custom log configuration2. Each custom log configuration object has the following fields2:
* logGroupObjectId: The OCID of the log group where the custom log is stored.
* logObjectId: The OCID of the custom log.
* paths: An array of paths to files or directories containing the custom logs.
* src: A regular expression that matches the files containing the custom logs.
* parser: A parser definition that specifies how to parse the custom logs. If the logconfig.json file has incorrect or missing OCID for the custom log in the logobjectId field, or incorrect or missing OCID for the custom log group in the logGroupObjectId field, then the Unified Monitoring Agent will not be able to upload the custom logs to the OCI Logging service2. Therefore, these are potential reasons for logs from the Meshifyd application not showing up in the OCI Logging service. Verified References: Unified Monitoring Agent Configuration File
NEW QUESTION # 15
You encounter an unexpected error when invoking Oracle Functions from your Cloud Shell session named myfunction in the myapp application. Which option will get you more information on theerror?
- A. fn --debug invoke myapp myfunction
- B. fn --verbose invoke myapp myfunction
- C. Contact Oracle support with your error message
- D. DEBUG=1 fn invoke myapp myfunction
Answer: D
Explanation:
Explanation
The option that will get you more information on the error when invoking Oracle Functions from your Cloud Shell session is: "DEBUG=1 fn invoke myapp myfunction". Setting the environment variable DEBUG=1 before invoking the function using the fn command allows you to enable debug mode, which provides more detailed information about the execution of the function. This can be useful for troubleshooting and understanding the root cause of the error. By using the command "DEBUG=1 fn invoke myapp myfunction", the function invocation will be executed with debug mode enabled, and additional debug information will be displayed in the console output. This information can include stack traces, detailed error messages, and other relevant details that can help identify and resolve the issue. Using the verbose option (--verbose) or debug option (--debug) with the fn command may also provide additional information, but the specific behavior may depend on the version and configuration of the fn CLI tool. While contacting Oracle support with the error message is always an option, enabling debug mode using the DEBUG=1 environment variable provides immediate access to more detailed information and can help in diagnosing and resolving the error more efficiently.
NEW QUESTION # 16
Which open source engine is used by Oracle Cloud Infrastructure (OCI) to power Oracle Functions?
- A. Knative
- B. Kubeless
- C. Apache OpenWhisk
- D. Fn Project
Answer: D
Explanation:
Fn Project is the open source engine that is used by OCI to power Oracle Functions1. Fn Project is an open source, container native, serverless platform that can be run anywhere - any cloud or on-premises1. Fn Project is easy to use, extensible, and performant. You can download and install the open source distribution of Fn Project, develop and test a function locally, and then use the same tooling to deploy that function to Oracle Functions1. Verified Reference: Overview of Functions
NEW QUESTION # 17
You have two microservices, A and B running in production. Service A relies on APIs from service B. You want to test changes to service A without deploying all of its dependencies, which includes service B. Which approach should you take to test service A?
- A. This is not possible because service B is a dependency.
- B. Test using a previous test version of service B.
- C. Test using the current production version of service B.
- D. Test using an API mock of service
Answer: D
Explanation:
Explanation
The correct answer is: Test using an API mock of service B. To test service A without deploying all of its dependencies, including service B, you can use an API mock of service B. An API mock is a simulated version of the API that mimics the behavior of the actual service. By using an API mock, you can isolate the testing of service A and simulate the responses and behavior of service B's APIs. With an API mock, you can define the expected responses and behavior of service B's APIs, allowing you to test the integration between service A and the mocked version of service B. This approach enables you to verify the functionality of service A without relying on the availability or changes in the actual service B. By decoupling the dependencies and using an API mock, you can perform independent testing of service A, ensuring its functionality in isolation.
NEW QUESTION # 18
Which is NOT a valid option to execute a function deployed in Oracle Functions?
- A. Invoke from the Docker CLI.
- B. Send signed HTTP requests to the function's invoke endpoint.
- C. Trigger by an event in the Oracle Cloud Infrastructure (OCI) Events service.
- D. Invoke from the Fn Project CLI.
- E. Invoke from the OCI CLI.
Answer: A
Explanation:
The correct answer is: Invoke from the Docker CLI. Executing a function deployed in Oracle Functions is typically done using the following options: Invoke from the Fn Project CLI: The Fn Project CLI provides a command-line interface specifically designed for interacting with Oracle Functions. You can use commands like fn invoke to invoke a function. Trigger by an event in the Oracle Cloud Infrastructure (OCI) Events service: You can configure events in OCI to trigger your function based on various criteria, such as object storage events, resource state changes, or scheduled events. Invoke from the OCI CLI: The OCI CLI (Command Line Interface) allows you to interact with various services in Oracle Cloud Infrastructure, including Oracle Functions. You can use the fn invoke command to invoke a function. Send signed HTTP requests to the function's invoke endpoint: Oracle Functions provides an HTTP endpoint that can be used to invoke functions. You can send signed HTTP requests to this endpoint using tools or programming languages that support making HTTP requests. On the other hand, invoking a function deployed in Oracle Functions using the Docker CLI is not a valid option. The Docker CLI is primarily used for managing Docker containers and images, and it does not provide a direct mechanism for invoking functions in Oracle Functions.
NEW QUESTION # 19
What is the difference between continuous delivery and continuous deployment in the DevOps methodology? (Choose the best answer.)
- A. Continuous delivery is a process that Initiates deployment manually, whereas continuous deployment is based on automating the deployment process.
- B. Continuous delivery involves automation of developer tasks, whereas continuous deployment involves manual operational tasks.
- C. Continuous delivery utilizes automatic deployment to a development environment, whereas continuous deployment involves automatic deployment to a production environment.
- D. Continuous delivery requires automatic linting, whereas continuous deployment testing must be run manually.
Answer: C
Explanation:
The two correct differences between continuous delivery and continuous deployment in the DevOps lifecycle are: Continuous delivery is a process that initiates deployment manually, while continuous deployment is based on automating the deployment process. In continuous delivery, the software is ready for deployment, but the decision to deploy is made manually by a human. On the other hand, continuous deployment automates the deployment process, and once the software passes all the necessary tests and quality checks, it is automatically deployed without human intervention. Continuous delivery utilizes automatic deployment to a development environment, while continuous deployment involves automatic deployment to a production environment. In continuous delivery, the software is automatically deployed to a development or staging environment for further testing and validation. However, the actual deployment to the production environment is performed manually. In continuous deployment, the software is automatically deployed to the production environment, eliminating the need for manual intervention in the deployment process. These differences highlight the level of automation and human involvement in the deployment process between continuous delivery and continuous deployment approaches in the DevOps lifecycle.
NEW QUESTION # 20
Which command is used to get a Docker image from Oracle Cloud Infrastructure Registry (OCIR) to the client machine?
- A. docker fetch <tenancy-namespace>/<region-key>.ocir.io/<repo-name>:<tag>
- B. docker pull <region-key>.ocir.io/<tenancy-namespace>/<repo-name>: <tag>
- C. docker fetch <region-key>.ocir.io/<tenancy-namespace>/<repo-name>:<tag>
- D. docker pull <tenancy-namespace>/<region-key>.ocir.io/<repo-name>: <tag>
Answer: B
Explanation:
To pull a Docker image from OCI Registry to the client machine, you need to use the docker pull command with the following syntax1: docker pull <region-key>.ocir.io/<tenancy-namespace>/<repo-name>:<tag> where:
<region-key> is the key for the OCI Registry region you're using. For example, iad. See Availability by Region1.
ocir.io is the OCI Registry name.
<tenancy-namespace> is the auto-generated Object Storage namespace string of the tenancy that owns the repository from which you want to pull the image (as shown on the Tenancy Information page)1.
<repo-name> is the name of the repository that contains the image you want to pull.
<tag> is the tag of the image you want to pull.
NEW QUESTION # 21
You are developing a distributed application and you need a call to a path to always return a specific JSON content deploy an OCI API Gateway with the below API deployment specification. What is the correct value for type? { "routes" : [{ "path" : "/hello", "methods" : ["Get"), "backend" : { "type" : " ---------------- ", "status": 200, "headers" : [{ "name" : "Content-Type", "value" : "application/json" }] "body" : "{\"myjson\":
\"consistent response\"}" }}]}
- A. HTTP_BACKEND
- B. JSON_BACKEND
- C. CONSTANT_BACKEND
- D. STOCK_RESPONSE_BACKEND
Answer: D
Explanation:
Explanation
The correct value for the "type" field in the API deployment specification is
"STOCK_RESPONSE_BACKEND". By setting the "type" to "STOCK_RESPONSE_BACKEND", you are indicating that the backend for the specified route should return a pre-defined response. This type of backend is commonly used when you want a specific response to be returned consistently, regardless of the actual backend service implementation. In this case, the API deployment specification is configured to have a single route with the path "/hello" and the method "GET". The backend section specifies the type as
"STOCK_RESPONSE_BACKEND". Additionally, it defines the response status code as 200, setsthe
"Content-Type" header to "application/json", and provides the JSON content in the "body" field. Using this configuration, any request to the "/hello" path with the "GET" method will always receive a consistent JSON response with the content "{"myjson": "consistent response"}".
NEW QUESTION # 22
(CHK_4>2) You have a scenario where a DevOps team wants to store secrets in Oracle Cloud Infrastructure (OCI) Vault so that it can inject the secrets into an app's environment variables (for example, MYSQL_DB_PASSWD) at deployment time. Which is NOT valid about managing secrets in the OCI Vault service?
- A. New secret versions automatically expire in 90 days unless you configure an expiry rule.
- B. A unique OCID is automatically generated for each secret and remains unchanged even when creating a new secret version.
- C. A secret reuse rule prevents the use of secret contents across different versions of a secret.
- D. You can manually create new secrets as well as new secret versions using the OCI Console:
Answer: B
Explanation:
Explanation
The correct answer is: "A unique OCID is automatically generated for each secret and remains unchanged even when creating a new secret version." The statement that is NOT valid about managing secrets in the OCI Vault service is: "A unique OCID is automatically generated for each secret and remains unchanged even when creating a new secret version." In OCI Vault, a secret is identified by its OCID (Oracle Cloud Identifier), which is a unique identifier for each resource inOracle Cloud Infrastructure. However, when a new secret version is created for an existing secret, the OCID remains the same for the secret itself, but a new OCID is generated for the secret version. This allows you to track and manage different versions of a secret while maintaining a consistent OCID for the secret itself. The other statements mentioned are valid: You can manually create new secrets as well as new secret versions using the OCI Console. This means you have control over creating and managing secrets within the Vault service. A secret reuse rule prevents the use of secret contents across different versions of a secret. This ensures that each secret version maintains its own unique set of contents and avoids accidental reuse or sharing of secrets across versions. By default, new secret versions automatically expire in 90 days unless you configure an expiry rule. This helps enforce good security practices by automatically rotating secrets periodically, reducing the risk of unauthorized access in case of compromise. Therefore, the statement that is NOT valid is the one regarding the uniqueness and consistency of the OCID when creating new secret versions.
NEW QUESTION # 23
Which technique is used for testing the entire user flow as well as the moving parts of a cloud native app, ensuring that there are no high-level discrepancies?
- A. Unit Testing
- B. End-to-end Testing
- C. Integration Testing
- D. Contract Testing
- E. Component Testing
Answer: B
Explanation:
End-to-end testing is a technique that involves checking the entire user flow as well as the moving parts of a cloud native app, ensuring that there are no high-level discrepancies3. End-to-end testing simulates real user scenarios and validates the functionality, performance, reliability, and security of the app from start to finish3. End-to-end testing has several benefits, such as3:
Comprehensive testing: You can test your app as a whole and verify that all the components work together as expected.
User-centric testing: You can test your app from the user's perspective and ensure that it meets the user's needs and expectations.
Quality assurance: You can test your app in a realistic environment and identify any issues or defects before releasing it to the users.
NEW QUESTION # 24
Which TWO are required to access the Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) cluster from the kubectl CLI? (Choose two.)
- A. An SSH key pair with the public key added to the cluster worker nodes.
- B. OCI Identity and Access Management (IAM) Auth Token.
- C. Install and configure the OCI CLI.
- D. Tiller enabled on the OKE cluster.
- E. A configured OCI API signing key pair.
Answer: C,E
Explanation:
Explanation
The correct options are: A configured OCI API signing key pair: The API signing key pair is used for authentication and authorization to access OCI resources, including the OKE cluster. The private key should be configured on your local machine to authenticate API requests. An SSH key pair with the public key added to the cluster worker nodes: This is required for secure SSH access to the worker nodes in the OKE cluster.
You need to generate an SSH key pair and add the public key to the cluster's worker node pool during cluster creation or update. Therefore, the correct options are having a configured OCI API signing key pair and an SSH key pair with the public key added to the cluster worker nodes.
NEW QUESTION # 25
You deployed a Python application to an Oracle Container Engine for Kubernetes (OKE) cluster. However, while testing you found a bug, which you rectified and then created a new Docker image. You now need to ensure that if this new image does not work once deployed, you should be able to roll back to the previous version. Using kubect1, which strategy should you use?
- A. A/B Testing
- B. Rolling Update
- C. Blue/Green Deployment
- D. Canary Deployment
Answer: B
Explanation:
Explanation
A rolling update is a deployment strategy that gradually replaces the old version of an application with the new version without any downtime4. OKE supports rolling updates by using the kubectl rollout command4. A rolling update allows you to roll back to the previous version if something goes wrong with the new version4.
Therefore, using a rolling update strategy with kubectl ensures that you can roll back to the previous version of your Python application if the new image does not work once deployed.Verified References: Deploy Oracle Container Engine for Kubernetes
NEW QUESTION # 26
Which concept in OCI Queue is responsible for hiding a message from other consumers for a predefined amount of time after it has been delivered to a consumer?
- A. Maximum retention period
- B. Polling timeout
- C. Visibility timeout
- D. Delivery count
Answer: C
Explanation:
Visibility timeout is the concept in OCI Queue that is responsible for hiding a message from other consumers for a predefined amount of time after it has been delivered to a consumer1. The visibility timeout can be set at the queue level when creating a queue, or it can be specified when consuming or updating messages1. If a consumer is having difficulty successfully processing a message, it can update the message to extend its invisibility1. If a message's visibility timeout is not extended, and the consumer does not delete the message, it returns to the queue1. Verified Reference: Overview of Queue
NEW QUESTION # 27
Which statement best describes the term "cloud native"?
- A. Cloud native refers to the use of cloud-based development tools to build traditional on-premises applications.
- B. Cloud native refers to the process of migrating applications from on-premises infrastructure to the cloud.
- C. Cloud native refers to the design and deployment of applications that are optimized for cloud infrastructure.
- D. Cloud native refers to the use of cloud infrastructure to run traditional on-premises applications.
Answer: C
Explanation:
Cloud native is the software approach of building, deploying, and managing modern applications in cloud computing environments3. Cloud native apps are designed and built to exploit the scale, elasticity, resiliency, and flexibility the cloud provides4. Cloud native technologies support fast and frequent changes to applications without impacting service delivery, providing adopters with an innovative, competitive advantage3. Therefore, cloud native refers to the design and deployment of applications that are optimized for cloud infrastructure. Verified Reference: What is Cloud Native? - Everything you need to know, What is Cloud Native? | Microsoft Learn
NEW QUESTION # 28
You are developing a polyglot serverless application using Oracle Functions. Which language cannot be used to write your function code?
- A. Python
- B. Java
- C. Go
- D. PL/SQL
- E. Node.js
Answer: D
Explanation:
Explanation
Oracle Functions does not currently support PL/SQL as a language for writing function code. PL/SQL is a procedural language used in Oracle Database for developing stored procedures, triggers, and other database-related code. However, Oracle Functions supports several other popular programming languages such as Go, Node.js, Python, and Java, allowing developers to choose the language that best suits their application requirements and their familiarity with the language. While PL/SQL is powerful for working with the Oracle Database, it is not an option for writing function code in the Oracle Functions serverless architecture.
NEW QUESTION # 29
As a Cloud Native developer, you have written a web service for your company. However, your security team has suggested that your web service should address Distributed Denial-of-Service (DDoS) attack. You are time-constrained and you need to ensure that this is implemented as soon as possible. What should you do in this scenario? (Choose the best answer.)
- A. Re-write your web service and implement rate limiting.
- B. Use a third party service integration to Implement DDoS attack mitigation.
- C. Use the OCI API Gateway service and configure rate limiting.
- D. Use the OCI Virtual Cloud Network (VCN) segregation to control DDoS.
Answer: C
Explanation:
The correct answer in this scenario is to use the OCI API Gateway service and configure rate limiting. Using the OCI API Gateway service and configuring rate limiting is an effective approach to address Distributed Denial-of-Service (DDoS) attacks. By implementing rate limiting, you can control the number of requests that can be made to your web service within a specific time frame. This helps to prevent overload and ensures that your service can handle legitimate traffic while mitigating the impact of DDoS attacks. By leveraging the OCI API Gateway service, you can easily configure rate limiting rules to restrict the number of requests per second or per minute. This allows you to set appropriate thresholds and safeguard your web service from being overwhelmed by excessive requests. The API Gateway acts as a protective layer, filtering out malicious traffic and ensuring the smooth operation of your service. While options like OCI Virtual Cloud Network (VCN) segregation and third-party service integrations may contribute to overall security, they do not specifically address DDoS attacks as efficiently as rate limiting. VCN segregation focuses more on network segmentation and isolation, while third-party service integration may introduce additional dependencies and complexities. Re-writing your web service and implementing rate limiting is a viable option, but it may not be feasible considering the time constraints mentioned. Leveraging the OCI API Gateway service provides a quicker and easier solution to implement DDoS attack mitigation through rate limiting.
NEW QUESTION # 30
As a developer, you have been tasked with implementing a microservices-based application. Which THREE technologies are best suited to accomplish the task? (Choose three.)
- A. Terraform
- B. Docker
- C. Big Data
- D. Anomaly Detection
- E. Kubemetes
- F. Service Mesh
Answer: B,E,F
Explanation:
The three technologies best suited for implementing a microservices-based application are: Service Mesh: A service mesh is a dedicated infrastructure layer that provides features like service discovery, load balancing, encryption, authentication, and observability for microservices. It helps in managing the communication and interactions between microservices in a scalable and secure manner. Kubernetes: Kubernetes is an open-source container orchestration platform that enables the deployment, scaling, and management of containerized applications. It provides features like automated scaling, service discovery, load balancing, and self-healing capabilities, which are essential for managing microservices in a distributed environment. Docker: Docker is a popular containerization platform that allows packaging applications and their dependencies into lightweight containers. It provides a consistent and portable environment for running microservices, enabling easy deployment and scalability. Docker also facilitates isolation and resource efficiency, making it an ideal choice for deploying microservices. While Big Data, Anomaly Detection, and Terraform are valuable technologies, they are not specifically focused on enabling the implementation of microservices-based applications.
NEW QUESTION # 31
A developer has created another version of a microservice and wants 10% of the traffic to flow towards it for testing purposes. The application is already configured using OCI (Oracle Cloud Infrastructure) Service Mesh.
Which of the following steps is the right approach to achieve this goal?
- A. Create a new entry in the routeRules field of the ingress gateway route table manifest to configure traffic splitting between the old and new versions of the microservice and set the percentage to 10%.
- B. Create a new entry in the routeRules field of the virtual service route table manifest to configure traffic splitting between the old and new versions of the microservice and set the percentage to 10%.
- C. Create a new Kubernetes deployment for the new version of the microservice and set the trafficsplitting percentage to 10% in the Kubernetes service manifest.
- D. Use Kubernetes HPA (Horizontal Pod Autoscaler) to scale the new version of the microservice to handle
10% of the traffic automatically.
Answer: B
NEW QUESTION # 32
You are creating an API deployment in Oracle Cloud Infrastructure (OCI) API Gateway and you want to configure request policies to control access. Which is NOT available in OCI API Gateway?
- A. Limiting the number of requests sent to the backend services.
- B. Controlling access to the backend OCI resources.
- C. Enabling Cross-Origin Resource Sharing (CORS) support.
- D. Providing authentication and authorization.
Answer: B
Explanation:
Explanation
The correct answer is: Controlling access to the backend OCI resources. OCI API Gateway does not provide direct control over access to backend OCI resources. It primarily focuses on managing and securing access to APIs exposed through the gateway. The gateway acts as a front-end for APIs and provides features such as authentication, authorization, rate limiting, and CORS support. While you can configure authentication and authorization policies, limit the number of requests, and enable CORS support in OCI API Gateway, it does not directly control access to backend OCI resources. Access to backend resources is typically managed through other means, such as IAM policies, network security rules, or resource-specific access controls.
NEW QUESTION # 33
......
Oracle 1z0-1084-23 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
1z0-1084-23 Dumps PDF and Test Engine Exam Questions: https://www.vceengine.com/1z0-1084-23-vce-test-engine.html
Get 2023 Updated Free Oracle 1z0-1084-23 Exam Questions and Answer: https://drive.google.com/open?id=13FFF5lXy1UIanF9fCwPMRBUHyjz87NMz
