10/222 questions · Unlock full access
Q1

A financial services company is implementing a blue-green deployment strategy for a critical, stateful microservice running on an OKE cluster. The deployment pipeline must ensure zero downtime and provide an immediate rollback capability if post-deployment health checks fail. The current process involves manually updating a Kubernetes service selector to switch traffic. Which OCI DevOps Deployment Pipeline stage configuration is the most effective and automated way to manage the traffic shift between the blue and green environments?

Q2Multiple answers

A DevOps team is managing a large-scale microservices application on OKE. They are experiencing intermittent latency issues and need to trace requests as they propagate across multiple services. To achieve this, they decide to implement a service mesh. Which of the following are primary benefits of integrating OCI Service Mesh into their OKE cluster? (Select TWO)

Q3

A DevOps engineer is configuring an OCI build pipeline that requires access to a private Maven repository hosted on-premises. The on-premises network is connected to the OCI VCN via FastConnect. To ensure the build process can resolve dependencies securely without traversing the public internet, what is the recommended approach for the build runner?

Q4

During a security audit, it was discovered that a development team is storing database credentials as plain text in their `build_spec.yaml` file. This is a major security violation. You are tasked with resolving this issue by using the most secure and recommended OCI practice. What is the correct approach?

Q5

True or False: When using OCI Resource Manager to provision an OKE cluster, you can use the drift detection feature to identify differences between the live cluster's configuration and the state defined in your Terraform configuration, but you must manually apply the changes to resolve the drift.

Q6

A developer is writing a Dockerfile for a new Python microservice. To minimize the final image size and reduce the attack surface, they want to use a multi-stage build. The first stage will build the application dependencies, and the final stage will copy only the necessary artifacts into a minimal base image. Which Dockerfile command is essential for transferring the built artifacts from the builder stage to the final production stage?

Q7

An organization is deploying a multi-tier application on an OKE cluster with public-facing web servers and private backend services. For security reasons, network traffic between the web and backend pods must be strictly controlled, allowing only specific ingress traffic on port 8080. Which Kubernetes resource should be implemented to enforce this policy?

Q8

A DevOps team needs to automate notifications for their OCI deployment pipeline. They want to send a message to a Slack channel whenever a deployment to the production environment fails. Which combination of OCI services should they use to build this automation?

Q9

An e-commerce company experiences significant traffic spikes during holiday seasons. Their application runs on an OKE cluster, and they need to ensure the application can scale automatically to handle the load. The application pods' CPU utilization is a reliable indicator of load. Which Kubernetes controller is designed to automatically adjust the number of running pods in a deployment based on observed CPU utilization?

Q10

A team is adopting Infrastructure as Code using Terraform to manage their OCI resources. They need to provision a VCN, multiple subnets, and a compute instance. To ensure the compute instance is only created *after* the subnets are available, what Terraform mechanism should be used?