Oracle Cloud Infrastructure Developer Professional - 1z0-1084-26 Free Exam Questions [2026]

QUESTION NO: 1
Which statement is NOT valid regarding OCI Identity and Access Management (IAM) policies written for OKE Workload Identity?

A. The policy condition must explicitly define request.principal.type with the value set to workload.

B. The policy condition must specify the Kubernetes namespace, service account name, and OKE cluster OCID.

C. The policy subject must be specified as any-user rather than a specific IAM group or dynamic group name.

D. The policy statement must be scoped strictly at the tenancy level and cannot be written to restrict access to a specific compartment.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).

QUESTION NO: 2
You are setting up OCI Application Performance Monitoring (APM) to trace transactions in a Spring Boot application. Which installer command should you execute to provision the APM Java Agent with its target application service name, destination directory, and credentials obtained from your APM domain?

A. java -jar apm-java-agent-installer.jar provision-agent -destination=/opt/apm -service-name=springboot- app -private-data-key=KeyA123 -data-upload-endpoint=https://endpoint.com

B. java -jar apm-java-agent-installer.jar register-agent -destination=/opt/apm -app-name=springboot-app - private-data-key=KeyA123 -data-upload-endpoint=https://endpoint.com

C. java -jar apm-java-agent-installer.jar install-agent -path=/opt/apm -service-name=springboot-app - upload-key=KeyA123 -upload-endpoint=https://endpoint.com

D. java -jar apm-java-agent-installer.jar configure-agent -destination=/opt/apm -service-name=springboot- app -public-data-key=KeyA123 -data-upload-endpoint=https://endpoint.com

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).

QUESTION NO: 3
Which kubectl command syntax is valid for implementing a rolling update deployment strategy in Kubernetes? (Choose the best answer.)

A. kubectl rolling-update < deployment-name > --image=image:v2

B. kubectl upgrade -c < container > --image=image:v2

C. kubectl update < deployment-name > --image=image:v2

D. kubectl update -c < container > --iniage=image: v2

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).

QUESTION NO: 4
Kubernetes includes various elements such as compute, network, and storage. Compute is essentially CPU (units) and memory (bytes). Within an OKE cluster, what is considered to be the smallest unit of deployment with respect to compute?

A. Container

B. Pod

C. Deployment resource

D. Namespace

E. Service

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).

QUESTION NO: 5
You developed a microservices-based application that runs in an Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) cluster. Your security team wants to use SSL termination for this application.
What should you do to create a secure SSL termination for this application using the fewest steps possible?

A. Generate a self-signed certificate using Let ' s Encrypt. Use that certificate on OCI Load Balancer.Create the Kubernetes service using this load balancer.

B. Create a self-signed certificate and its corresponding key. Create a Kubernetes secret using the certificate and the key. Then add these annotations to the Kubernetes service: annotations: service.beta.
kubernetes.io/oci-load-balancer-ssl-ports: " 443 " service.beta.kubernetes.io/oci-load-balancer-tls- secret: ssl certificate-secret

C. Add these annotations to the kubernetes service: annotations: service.beta.kubernetes.io/oci-load- balancer-ssl-ports: " 443 " service.beta.kubernetes.io/oci-load-balancer-ssl-secret-key: ssl secret-key

D. Create a self-signed certificate and its corresponding key. Create a Kubernetes secret using the certificate and the key. Then add these annotations to the Kubernetes service: annotations: service.beta.
kubernetes.io/oci-load-balancer-ssl-ports: " 443 " service.beta.kubernetes.io/oci-load-balancer-security- list management-mode: " Frontend "

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).

QUESTION NO: 6
You are building a container image and pushing it to Oracle Cloud Infrastructure Registry (OCIR). You need to ensure that these images never get deleted from the repository. Which action should you take?

A. Edit the tenancy global retention policy.

B. Create a group and assign a policy to perform lifecycle operations on images.

C. Write a policy to limit access to the specific repository in your compartment.

D. Set global policy of image retention to " Retain All Images " .

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).

QUESTION NO: 7
You are configuring a deployment script running in an OCI Compute Instance that needs to retrieve database credentials stored in OCI Vault. Which OCI CLI command should your script execute to retrieve the secret bundle containing the credentials?

A. oci kms secret retrieve --secret-id < secret_id >

B. oci vault secret-bundle retrieve --secret-id < secret_id >

C. oci secrets secret-bundle get --secret-id < secret_id >

D. oci vault secret get --secret-id < secret_id >

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).

QUESTION NO: 8
You have just finished building and compiling the software required to implement the API microservice component. You need to rebuild the API docker image, and plan to tag it as: ocIdevops/api:latest Which docker command would re-create the API docker image?

A. docker build -t OCIdevops/api:latest

B. docker create -t OCIdevops/api:latest

C. docker compile -t OCI devops/api:latest

D. docker image -t OCIdevops/api:latest

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).

QUESTION NO: 9
You are deploying a containerized database application on a host using the standard Docker engine. To prevent data loss when the container instance is destroyed or updated, you must configure a storage mechanism that isolates application data from the volatile container layer and guarantees persistence. Which TWO statements or approaches correctly describe Docker storage components that satisfy this requirement?

A. Rely on the Docker image layer cache, which commits all runtime transactional database updates back to the read-only parent image.

B. Configure the temporary filesystem mount, which persists database writes directly into the host memory even if the container is terminated.

C. Use Docker bind mounts, which map a specific arbitrary path from the host filesystem directly into the container storage namespace.

D. Use Docker volumes, which are stored in a host directory fully managed by the Docker engine and protected from external host process modification.

E. Utilize the default container writable layer, which automatically persists database writes to the host root disk after the container is removed.

Discussion 0

Correct Answer: C,D Vote an answer

Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).

QUESTION NO: 10
Which TWO are required to access the Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) cluster from the kubectl CLI? (Choose two.)

A. An SSH key pair with the public key added to the cluster worker nodes.

B. A configured OCI API signing key pair.

C. OCI Identity and Access Management (IAM) Auth Token.

D. Install and configure the OCI CLI.

E. Tiller enabled on the OKE cluster.

Discussion 0

Correct Answer: B,D Vote an answer

Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).

QUESTION NO: 11
Which statement is NOT valid regarding testing methodologies for cloud native applications?

A. API mocking allows developers to validate a service ' s logic by simulating the behavior of dependent microservices that are offline.

B. Integration testing is conducted exclusively on isolated local workstations and does not validate network-based communications.

C. Performance testing evaluates system responsiveness under concurrent workloads to identify potential resource bottlenecks.

D. Unit testing focuses on validating individual blocks of code in complete isolation from database and external API dependencies.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).

QUESTION NO: 12
Which matching behavior occurs when an Oracle Cloud Infrastructure (OCI) Events rule condition defines an attribute value containing only a single asterisk (*) wildcard?

A. It matches all non-null values for the associated attribute name.

B. It matches the literal asterisk character for the associated attribute name.

C. It matches all values, including null, for the associated attribute name.

D. It matches only empty string values for the associated attribute name.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).

QUALITY AND VALUE

Tested and Approved

Easy to Pass

Try Before Buy

RECENT DISCUSSIONS

Useful Links

Contact Us