Free Oracle 1Z0-1084-25 Exam Questions

Become Oracle Certified with updated 1Z0-1084-25 exam questions and correct answers

Page: 1 / 30

Total 148 Questions | Updated On: Jan 28, 2026

Add To Cart

Question 1

You are developing a serverless application with Oracle Functions and Oracle Cloud Infrastructure Object

Storage- Your function needs to read a JSON file object from an Object Storage bucket named"input-bucket"

in compartment "qa-compartment". Your corporate security standards mandate the use of Resource Principals

for this use case.

Which two statements are needed to implement this use case

A : Set up a policy with the following statement to grant read access to the bucket:allow dynamic-group read-file-dg to read objects in compartment qa-compartment where target .bucket.name=' input-bucket *

B : Set up the following dynamic group for your function-s OCID: Name: read-file-dgRule: resource. id = ' ocid1. f nf unc. ocl -phx. aaaaaaaakeaobctakezj z5i4uj j 7g25q7sx5mvr55pms6f4da !

C : Set up a policy to grant all functions read access to the bucket:allow all functions in compartment qa-compartment to read objects in target.bucket.name='input-bucket'

D : Set up a policy to grant your user account read access to the bucket:allow user XYZ to read objects in compartment qa-compartment where target .bucket,name-'input-bucket'

E : No policies are needed. By default, every function has read access to Object Storage buckets in the tenancy

Answer: A,B

Question 2

As a Cloud Native developer, you develop two services in Node.js and deploy them to two different Container Engine for Kubernetes (OKE) clusters that use the same Virtual Cloud Network (VCN). Your security team wants to analyze the network communication between them. How can this requirement be met in the most cost-effective way?

A : Rewrite the application and send the application logs to an outside log aggregator.

B : Deploy a third-party logging service and aggregate the network flow logs.

C : Use the OCI Logging service and enable VCN flow logs.

D : Deploy Wireshark and intercept the packets.

Answer: C

Question 3

You have been asked to update an OKE cluster to a network configuration that has the least attack surface while the deployed applications are still directly available for access from the Internet. Which is a valid OKE cluster network configuration that meets this requirement? (Choose the best answer.)

A : Private subnets for nodes, the Kubemetes API endpoint, and load balancers

B : Private subnets for nodes; public subnets for the Kubemetes API endpoint and load balancers

C : Private subnets for nodes and the Kubemetes API endpoint; public subnets for load balancers

D : Private subnet for the Kubemetes API endpoint; public subnets for nodes and load balancers

Answer: C

Question 4

You are deploying an API via Oracle Cloud Infrastructure (OCI) API Gateway and you want to implement request policies to control access Which is NOT available in OCI API Gateway?

A : Limiting the number of requests sent to backend services

B : Enabling CORS (Cross-Origin Resource Sharing) support

C : Providing authentication and authorization

D : Controlling access to OCI resources

Answer: D

Question 5

Per CAP theorem, in which scenario do you NOTneed to make any trade-off between the guarantees?

A : when there are no network partitions

B : when the system is running in the cloud

C : when the system is running on-premise

D : when you are using load balancers

Answer: A

Page: 1 / 30

Total 148 Questions | Updated On: Jan 28, 2026

Add To Cart