1z0-1109-23 試験問題を無料オンラインアクセス

As a cloud engineer, you are responsible for managing a Kubernetes cluster on the Oracle Cloud Infrastructure (OCI) platform for your organization. You are looking for ways to ensure reliable operations of Kubernetes at scale while minimizing the operational overhead of managing the worker node infrastructure. Which cluster option is the best fit for your requirement?

• A.Using OCI OKE virtual nodes to eliminate worker node infrastructure management.
• B.Using Kubernetes cluster add-ons to automate worker node management.
• C.Creating and managing worker nodes using OCI compute instances.
• D.Using OCI OKE managed nodes with cluster autoscalers to eliminate worker node infrastructure management.

Which two statements are INCORRECT with respect to a Dockerfile? (Choose two.)

• A.If CMD instruction provides default arguments for the ENTRYPOINT instruction, both should be specified in JSON format.
• B.The COPY instruction copies new files, directories, or remote file URLS from <src> and adds them to the filesystem of the image at the path <dest>.
• C.An ENV instruction sets the environment value to the key, and it is available for the subsequent build steps and in the running container as well.
• D.WORKDIR instruction sets the working directory for any RUN, CMD, ENTRY-POINT instructions and not for COPY and ADD instructions in the Dockerfile.
• E.The RUN instruction will execute any commands in a new layer on top of the current image and commit the results.

As a DevOps engineer working on containerizing a microservices-based application to be hosted on OCI Cloud platforms, which step can help ensure that the container images have not been modified after being pushed to OCI Registry?

• A.Scanning the image upon ingestion and comparing the image size for changes
• B.Signing the image using the Container Registry CLI and creating an image signature that associates the image with the master encryption key and key version in the Vault service
• C.Deploying a manifest to the Kubernetes cluster that references the container image and its unique hash
• D.Enabling scanning of container images stored in OCI Registry

As a DevOps engineer, you are tasked with implementing a DevSecOps approach in your organization. Which two statements best describe the goal of DevSecOps?

• A.Create applications that are faster and more efficient without regard for security concerns.
• B.Codify security as part of the larger goal structure of DevOps.
• C.Prioritize the functional requirements of the application over security.
• D.Frame security as an individual responsibility of the security team alone.
• E.Find and fix security issues early in the software development process.

Which command creates the docker registry secret required in the application mani-fests for OKE to pull images from Oracle Cloud Infrastructure Registry?

• A.kubectl create secret docker-registry secret-name> --docker-server- <region-key>.oke.io
  --docker-username=<oci-username> --docker- password='<oci-auth-token>'
  --docker-email-<email-address>
• B.kubectl create secret docker-registry <secret-name> --docker-server- <region-key>.ocir.io
  --docker-username=coci-username> --docker- password='<oci-auth-token>
  --docker-email-email-address>
• C.kubectl create secret docker-registry <secret-name> --docker-server- <region-key>.ocir.io
  --docker-username=<tenancy-namespace>/<oci- username>
  --docker-password='<oci-auth-token>'--docker-email-cemail- address>
• D.kubectl create secret docker-registry <secret-name> --docker-server- <region-key>.oke.io
  --docker-username=<tenancy-namespace>/<oci-username>
  --docker-password='<oci-auth-token>'--docker-email-cemail- address>