Free Oracle 1Z0-1109-25 Exam Dumps Questions & Answers

In Kubernetes clusters created by Container Engine for Kubernetes, how is data in etcd encrypted at rest by default?

• A.  No encryption applied
• B.  Using encryption keys managed by Oracle using a master encryption key
• C.  Encryption using TLS certificates
• D.  Using encryption keys managed by the user

You're using Oracle Cloud Infrastructure (OCI) DevOps service to automate your software releases to release features more frequently and with fewer errors. While deploying an update to production, one of your deployment stages failed.
What action should you perform in your Deployment Pipeline?

• A.  Add Rescue and Trigger stages to automatically trigger the failed deployment.
• B.  Automate back up and use the rerelease stage in the Deployment Pipeline.
• C.  Use OCI DevOps Trigger and Rerun tool to avoid downtime.
• D.  Roll back the failed stage in the pipeline to the previous successful released version

A DevOps team is deploying a new version of their application to their production environment using the Canary deployment strategy in the OCI DevOps service. They want to ensure that the production environment is not affected by any potential issues caused by the new version.
Which statement is true in regards to the Canary deployment strategy?

• A.  The Shift Traffic stage in the Canary deployment strategy shifts the entire 100% of the production traffic to the Canary environment.
• B.  The Production stage in the Canary deployment strategy deploys the new version to the production environment without any manual approval.
• C.  The Canary deployment strategy only supports pipeline redeployment for OKE and not for instance group deployments.
• D.  The Invoke Function stage is an optional stage that can be used to validate the new version before moving to the production environment.

A fully qualified path to a particular image in an OCIR repository is given as iad.ocir.io/ansh81vru1zp/project01/acme-web-app:version2.0.test.
Identify the two options with correct terms and their associated values. (Choose two.)

• A.  iad represents <region-key>
• B.  iad.ocir.io/ansh81vru1zp represents <region-key>
• C.  version2.0.test represents <tenancy-namespace>
• D.  ansh81vru1zp represents <tenancy-namespace>
• E.  ansh81vru1zp/project01/acme-web-app:version2.0.test represents <repo-name>

Which two are prerequisites for creating a secret in Oracle Cloud Infrastructure Vault service? (Choose two.)

• A.  You must have a Vault managed key to encrypt the secret.
• B.  You must have the required permissions to create and manage secrets in the Vault service.
• C.  You must first create a hash digest of the secret value.
• D.  The user must create a compute instance to run the secret service.
• E.  You must have an auth token to encrypt the secret.