Free Practice Questions for Oracle 1Z0-1109-25 Exam

Question 1

How can system administrators ensure that only signed images from Oracle Cloud Infrastructure Registry are deployed to a Container Engine for Kubernetes cluster?

ABy disabling access to the Container Engine for Kubernetes cluster

BBy manually inspecting each image before deployment

CBy encrypting the images using a custom encryption algorithm

DBy configuring an image verification policy for the cluster

Correct Answer: D. By configuring an image verification policy for the cluster

Explanation:

Image verification policies are used to ensure that only trusted and signed images are deployed to an Oracle Kubernetes Engine (OKE) cluster. By configuring such policies, administrators can enforce that images must be signed and come from trusted sources, such as the Oracle Cloud Infrastructure Registry.

Question 2

As a DevOps engineer working on an OCI project, you're setting up a deployment pipeline to automate your application deployments.

Which statement is false about deployment pipeline in OCI DevOps?

AUsing deployment pipeline, you can deploy helm charts in OCI Function.

BYou can add a Wait stage that adds a specified duration of delay in the pipeline.

CYou can add a Traffic Shift stage that routes the traffic between two environments.

DYou can add an Approval stage that pauses the deployment for a specified duration for manual decision from the approver.

Correct Answer: A. Using deployment pipeline, you can deploy helm charts in OCI Function.

Explanation:

Helm charts are used to manage Kubernetes deployments, not OCI Functions. Helm charts are deployed to Kubernetes clusters, such as OCI Container Engine for Kubernetes (OKE), to manage containerized applications. OCI Functions are serverless and do not use Helm charts for deployment.

Question 3

A small company is moving to a DevOps framework to better accommodate their intermittent workloads, which are dynamic and irregular. They want to adopt a consumption-based pricing model.

Which Oracle Cloud Infrastructure service can be used as a target deployment environment?

AVirtual machine compute instance

BOracle Kubernetes (OKE)

CBare metal compute instance

DFunctions

Correct Answer: D. Functions

Explanation:

Oracle Cloud Infrastructure Functions is a serverless compute service that supports a consumption-based pricing model. This means that you are only charged for the compute resources when your function is invoked. This is ideal for intermittent, dynamic, and irregular workloads since the company does not need to provision infrastructure in advance, and costs are directly tied to usage.

Question 4

As a DevOps engineer working with OCI DevOps, you are managing artifacts for a microservices application.

Based on your understanding of working with DevOps projects and artifacts, which statement is true?

AArtifacts can be used directly by OCI DevOps without the need for them to be located or mirrored in an OCI Artifact or Container registry.

BIn the build pipeline, to store the Managed Build stage outputArtifacts. you need an OCI Object storage.

CIt is recommended to make artifacts immutable to prevent any modifications after they are uploaded.

DOnce created, the artifact's name. type, and source cannot be modified.

Correct Answer: C. It is recommended to make artifacts immutable to prevent any modifications after they are uploaded.

Explanation:

Making artifacts immutable ensures that the build artifacts are not altered after being published. This is a best practice to maintain the integrity and consistency of the artifacts used in deployments, preventing unintentional changes that could introduce issues during subsequent deployment stages.

Question 5

In Kubernetes clusters created by Container Engine for Kubernetes, how is data in etcd encrypted at rest by default?

AUsing encryption keys managed by Oracle using a master encryption key

BUsing encryption keys managed by the user

CEncryption using TLS certificates

DNo encryption applied

Correct Answer: A. Using encryption keys managed by Oracle using a master encryption key

Explanation:

In Kubernetes clusters created by Oracle Container Engine for Kubernetes (OKE), data in etcd (the key-value store that holds cluster state and configuration data) is encrypted at rest by default using encryption keys managed by Oracle. Oracle manages the encryption using a master encryption key to protect sensitive data.

Question 6

An operations team wants to leverage the advanced features of Container Engine for Kubernetes (OKE) and requires granular control over cluster add-ons, workload identity, and improved worker node management. They also prioritize strong security measures and require a financially-backed service level agreement (SLA) for Kubernetes API server uptime.

Which type of cluster should they choose to meet their requirements?

AEnhanced clusters

BFederated clusters

CVirtual clusters

DSpecialized clusters

Correct Answer: A. Enhanced clusters

Explanation:

Enhanced clusters in Oracle Container Engine for Kubernetes (OKE) provide advanced features such as granular control over cluster add-ons, workload identity, and improved worker node management. They also offer strong security measures and come with a financially-backed service level agreement (SLA) for Kubernetes API server uptime, ensuring higher reliability and support for production workloads.