Practice 1Z0-1109-23 Exam Online

Question 1

Your customer has deployed their microservices based application on Oracle Container Engine for Kubernetes (OKE) and they are using Oracle Cloud Infrastructure Registry (OCIR) service as their Docker image repository. They have deployed the OKE cluster using the 'custom create' option, and their Virtual Cloud Network (VCN) has three public subnets with associated route tables, security lists, and an internet gateway. They are facing an issue where their application containers are falling to deploy. Upon investigation, they learn that the images are not getting pulled from the designated OCIR repository. The YAML configuration has the correct path to the images. What is a valid concern that needs to be further investigated?

A : They need to add a security list rule for TCP port 22 to connect to the OCIR service.

B : The VCN hosting the OKE cluster worker nodes needs to have a NAT gateway to access OCIR repositories.

C : They need to add IAM credentials for each user that deploys applications to the OKE cluster.

D : The OKE cluster needs to have a secret with credentials of their OCIR repository and use that secret in the Kubernetes deployment manifest.

Answer: D

Question 2

How can customers rotate their master encryption keys in the Oracle Cloud Infra-structure (OCI) Vault

service?

A :

Customers can rotate their keys every 30 days. They may enter a service request (SR) to request a

rotation sooner than 30 days since the last rotation.

B : If you import your own key, you cannot rotate the key. You will have to import a new key to rotate.

C : If you import your own key, you cannot rotate the key. You will have to import a new key to rotate.

Answer: C

Question 3

A company has an Oracle Cloud Infrastructure (OCI) DevOps deployment pipeline set up in US East (us-ashburn 1) region, but they want to deploy an application in Japan Central (ap-osaka-1). How can they deploy their application in the ap-osaka-1 region with the deployment pipeline set up in the us ashburn-1 region in the most efficient manner?

A : It is not possible to use the same deployment pipeline across regions.

B : Deploy application in us-ashburn-1 and duplicate the same in ap-osaka-1.

C : Deploy directly in ap-osaka-1 from the us-ashburn-1 deployment pipeline.

D : Create another deployment pipeline in ap-osaka-1 to connect to the deployment pipeline in us ashburn-1

Answer: C

Question 4

A company wants to automate the infrastructure and configure OCI resources on OCI DevOps. Which tool should the company use? (Choose the best answer.)

A : Jenkins

B : Chef

C : Ansible

D : Terraform

Answer: C

Question 5

You need to create a secret in Oracle Cloud Infrastructure in vault service. Which of the fol-lowing is a prerequisite? (Choose the best answer.)

A : Vault managed key to encrypt the secret

B : You need to unlock the vault using AES secret sharing.

C : To create hash digest, secret value is required

D : The user need to create OCI object storage to run secret service

Answer: A

Name:	Oracle Cloud Infrastructure 2023 DevOps Professional
Exam Code:	1Z0-1109-23
Certification:	Oracle Cloud
Vendor:	Oracle
Total Questions:	101
Last Updated:	Apr 22, 2024

Oracle 1Z0-1109-23