Free Oracle 1Z0-1109-25 Exam Dumps Questions & Answers

You are a DevOps project administrator. You are creating Oracle Cloud Infrastructure (OCI) Identity and Access Management (IAM) policies that will be used in a DevOps CI/CD pipeline for deployment to an Oracle Container Engine for Kubernetes (OKE) environment.
Which OCI IAM policy can be used?

• A.Allow group <build pipeline> to manage all-resources in compartment <compartment name>
• B.Allow group <deployment pipeline> to manage devops-family in compartment <compartment name>
• C.Allow dynamic-group <code repository> to manage devops-family in compartment <compartment name>
• D.Allow dynamic-group <deployment pipeline> to manage all-resources in compartment <compartment name>

You host your application on a stack in Oracle Cloud Infrastructure (OCI) Resource Manager. Because of recent growth in your user base, you decide to add a CIDR block to your VCN, add a subnet, and provision a compute instance in it.
Which statement is true?

• A.You can make the changes to the Terraform code, run an Apply job, and Resource Manager will provision the new resources.
• B.You need to provision a new stack because Terraform uses immutable infrastructure.
• C.You need to provision the new resources in the OCI console first, then add them later to the Terraform configuration and state.
• D.You can make the changes to the Terraform code, run a Drift Detection job, and Resource Manager will provision the new resources.

Which two are prerequisites for creating a secret in Oracle Cloud Infrastructure Vault service? (Choose two.)

• A.You must first create a hash digest of the secret value.
• B.You must have a Vault managed key to encrypt the secret.
• C.The user must create a compute instance to run the secret service.
• D.You must have an auth token to encrypt the secret.
• E.You must have the required permissions to create and manage secrets in the Vault service.

How can system administrators ensure that only signed images from Oracle Cloud Infrastructure Registry are deployed to a Container Engine for Kubernetes cluster?

• A.By configuring an image verification policy for the cluster
• B.By encrypting the images using a custom encryption algorithm
• C.By disabling access to the Container Engine for Kubernetes cluster
• D.By manually inspecting each image before deployment

You're using Oracle Cloud Infrastructure (OCI) DevOps to deploy your application on an Oracle Container Engine for Kubernetes (OKE) environment. You push your code to the OCI Code Repository, add all the required stage and configure the build and deployment pipeline. When you run the build, you see "unable to clone the repository" error.
What could the configuration error be?

• A.The Docker image used in the pipeline is incompatible with the OKE environment.
• B.CA bundle for Transport Layer Security (TLS) verification to download the build source during the build run is missing.
• C.Dynamic Groups and OCI IAM policies to access the code repository are missing.
• D.The OKE cluster is not configured to allow external access to the code repository.