Oracle 1z0-1084-26 Value Pack (Frequently Bought Together)

You have a containerized application that requires access to an Autonomous Transaction Processing (ATP) Database. Which option is NOT valid when the container is deployed in an OKE cluster? (Choose the best answer.)

• A. Use Kubernetes secrets to configure environment variables on the container with ATP instance OCID, and OCI API credentials. Then use the CreateConnection API endpoint from the service runtime.
• B. Enable Oracle REST Data Services for the required schemas and connect via HTTPS.
• C. Install the Oracle Cloud Infrastructure Service Broker on the Kubernetes cluster and deploy ServiceInstance and ServiceBinding resources for ATP. Then use the specified binding name as a volume in the application deployment manifest.
• D. Create a Kubernetes secret with contents from the instance Wallet files. Use this secret to create a volume mounted to the appropriate path in the application deployment manifest.

Your organization has mandated strict IAM policy isolation for microservices accessing an Oracle Cloud Infrastructure (OCI) Queue named payment-queue in a compartment named prod-payment-compartment. A producer microservice deployed on an OCI Compute instance needs to publish transaction messages into the queue, but corporate security dictates that this microservice must not have permission to view queue configurations, delete queues, or read/consume messages. You have created a dynamic group named payment- producer-dg that contains the Compute instance hosting the producer microservice.
Which IAM policy statement must you write to satisfy this security requirement with the least privilege?

• A. Allow dynamic-group payment-producer-dg to use queue-push in compartment prod-payment- compartment
• B. Allow dynamic-group payment-producer-dg to use queues in compartment prod-payment-compartment
• C. Allow dynamic-group payment-producer-dg to use queue-pull in compartment prod-payment- compartment
• D. Allow dynamic-group payment-producer-dg to manage queue-push in compartment prod-payment- compartment

Your organization requires automatic rotation of third-party API keys stored as secrets in OCI Vault every 90 days. You have created a custom serverless OCI Function named rotate-api-keys that handles the API key generation and updates. You are now configuring the automatic rotation properties of the OCI Vault secret via the OCI API. Which configuration must you specify on the secret to automatically run this custom OCI Function at the required interval?

• A. Define a metric alarm in the OCI Monitoring service that triggers an OCI Notification topic whenever the secret ' s age exceeds 90 days, which then invokes the OCI Function.
• B. Set the rotation_config with is_scheduled_rotation_enabled to true, set the rotation_interval to " P90D "
  , and specify target_system_details with target_system_type set to " FUNCTION " and the function_id of your custom function.
• C. Define an IAM policy that allows the vault to execute the OCI Function, and configure an OCI Events rule to capture the " Secret Expired " event to invoke the function.
• D. Associate a Secret Rule of type SecretExpiryRule on the secret, and configure the rule configuration to trigger your OCI Function ' s API endpoint dynamically every 90 days.

Your company has recently deployed a new web application that uses Oracle Functions. Your manager instructs you to implement monitoring metrics to manage your systems more effectively. You know that Oracle Functions automatically monitors functions on your behalf and reports metrics via Oracle Cloud Infrastructure (OCI) Monitoring. Which TWO metrics are collected and made available by this feature?
(Choose two.)

• A. Number of times a function is invoked
• B. Amount of RAM used by a function
• C. Amount of CPU used by a function
• D. Length of time a function runs
• E. Number of times a function Is removed

You are using Oracle Cloud Infrastructure (OCI) Resource Manager to manage your infrastructure lifecycle and wish to receive an email each time a Terraform action begins. How should you use the OCI Events service to do this without writing any code?

• A. Create a rule in OCI Events service matching the " Resource Manager Stack - Update " condition. Then select " Action Type: Email " and provide the destination email address.
• B. Create an OCI Email Delivery configuration with the destination email address. Then create an OCI Events rule matching " Resource Manager Job - Create " condition, and select the email configuration for the corresponding action.
• C. Create an OCI Notifications topic and email subscription with the destination email address. Then create an OCI Events rule matching " Resource Manager Stack - Update " condition, and select the notification topic for the corresponding action.
• D. Create an OCI Notification topic and email subscription with the destination email address. Then create an OCI Events rule matching " Resource Manager Job - Create " condition, and select the notification topic for the corresponding action.