Question 1

Which two are benefits of distributed systems?

Options :

A : Privacy

B : Security

C : Ease of testing

D : Scalability

E : Resiliency

Answer: A,D

Question 2

Your organization uses a federated identity provider to login to your Oracle Cloud Infrastructure (OCI) environment. As a developer, you are writing a script to automate some operation and want to use OCI CLI to do that. Your security team doesn't allow storing private keys on local machines. How can you authenticate with OCI CLI?

Options :

A : Run oci setup keys and provide your credentials

B : Run oci session refresh —profile < profile_name >

C : Run oci session authenticate and provide your credentials

D : Run oci setup oci-cli-rc —file path/to/target/file

Answer: C

Question 3

You are developing a serverless application with Oracle Functions and Oracle Cloud Infrastructure ObjectStorage- Your function needs to read a JSON file object from an Object Storage bucket named"input-bucket"in compartment "qa-compartment". Your corporate security standards mandate the use of Resource Principalsfor this use case.Which two statements are needed to implement this use case

Options :

A : Set up a policy with the following statement to grant read access to the bucket:allow dynamic-group read-file-dg to read objects in compartment qa-compartment where target .bucket.name=' input-bucket *

B : Set up the following dynamic group for your function-s OCID: Name: read-file-dgRule: resource. id = ' ocid1. f nf unc. ocl -phx. aaaaaaaakeaobctakezj z5i4uj j 7g25q7sx5mvr55pms6f4da !

C : Set up a policy to grant all functions read access to the bucket:allow all functions in compartment qa-compartment to read objects in target.bucket.name='input-bucket'

D : Set up a policy to grant your user account read access to the bucket:allow user XYZ to read objects in compartment qa-compartment where target .bucket,name-'input-bucket'

E : No policies are needed. By default, every function has read access to Object Storage buckets in the tenancy

Answer: A,B

Question 4

A leading insurancefirm is hosting its customer portal in Oracle Cloud Infrastructure (OCI) Container Enginefor Kubernetes with an OCI AutonomousDatabase. Their support team discovered a lot of SQL injection attempts and cross-site scripting attacks to theportal, which isstarting to affect the production environment.What should they implement to mitigate this attack?

Options :

A : Network Security Lists

B : Network Security Groups

C : Network Security Firewall

D : Web Application Firewall

Answer: D

Question 5

Your organization has deployed their e-commerce application on Oracle Container Engine for Kubernetes (OKE) and they are using the Oracle Cloud Infrastructure Registry (OCIR) service as their Docker image repository. They have deployed the OKE cluster using the 'custom create' option, and their Virtual Cloud Network (VCN) has three public subnets with associated Route Tables, Security Lists, and Internet Gateway. However, their application containers are failing to deploy. On investigation, they discover that the images are not being pulled from the designated OCIR repository, even though the YAML configuration has the correct path to the images. What is a valid concern here that needs to be further investigated?

Options :

A : Security List rule for TCP port 22 needs to be added to connect to the OCIR service.

B : VCN hosting the OKE cluster worker nodes needs to have a NAT gateway to access OCIR repositories.

C : Identity and Access Management (IAM) credentials need to be added for each user that deploys applications to the OKE cluster

D : OKE cluster needs to have a secret with the credentials of their OCIR repository and use that secret in the Kubernetes deployment manifest.

Answer: D