Free Oracle 1Z0-1084-25 Exam Questions

Become Oracle Certified with updated 1Z0-1084-25 exam questions and correct answers

Page: 1 / 30

Total 148 Questions | Updated On: Dec 06, 2025

Add To Cart

Question 1

As a Cloud Native developer, you develop two services in Node.js and deploy them to two different Container Engine for Kubernetes (OKE) clusters that use the same Virtual Cloud Network (VCN). Your security team wants to analyze the network communication between them. How can this requirement be met in the most cost-effective way?

A : Rewrite the application and send the application logs to an outside log aggregator.

B : Deploy a third-party logging service and aggregate the network flow logs.

C : Use the OCI Logging service and enable VCN flow logs.

D : Deploy Wireshark and intercept the packets.

Answer: C

Question 2

You have been asked to update an OKE cluster to a network configuration that has the least attack surface while the deployed applications are still directly available for access from the Internet. Which is a valid OKE cluster network configuration that meets this requirement? (Choose the best answer.)

A : Private subnets for nodes, the Kubemetes API endpoint, and load balancers

B : Private subnets for nodes; public subnets for the Kubemetes API endpoint and load balancers

C : Private subnets for nodes and the Kubemetes API endpoint; public subnets for load balancers

D : Private subnet for the Kubemetes API endpoint; public subnets for nodes and load balancers

Answer: C

Question 3

Your organization uses a federated identity provider to login to your Oracle Cloud Infrastructure (OCI) environment. As a developer, you are writing a script to automate some operation and want to use OCI CLI to do that. Your security team doesn't allow storing private keys on local machines. How can you authenticate with OCI CLI?

A : Run oci setup keys and provide your credentials

B : Run oci session refresh —profile < profile_name >

C : Run oci session authenticate and provide your credentials

D : Run oci setup oci-cli-rc —file path/to/target/file

Answer: C

Question 4

You have a containerized application that requires access to an Autonomous Transaction Processing (ATP) Database. Which option is NOT valid when the container is deployed in an OKE cluster? (Choose the best answer.)

A : Use Kubernetes secrets to configure environment variables on the container with ATP instance OCID, and OCI API credentials. Then use the CreateConnection API endpoint from the service runtime.

B : Install the Oracle Cloud Infrastructure Service Broker on the Kubernetes cluster and deploy ServiceInstance and ServiceBinding resources for ATP. Then use the specified binding name as a volume in the application deployment manifest

C : Create a Kubernetes secret with contents from the instance Wallet files. Use this secret to create a volume mounted to the appropriate path in the application deployment manifest.

D : Enable Oracle REST Data Services for the required schemas and connect via HTTPS.

Answer: B

Question 5

Which header is NOT required when signing GET requests to Oracle Cloud Infrastructure APIs?

A : date or x-date

B : (request-target)

C : content-type

D : host

Answer: C

Page: 1 / 30

Total 148 Questions | Updated On: Dec 06, 2025

Add To Cart