Free 1z0-1084-25: Oracle Cloud Infrastructure 2025 Developer Professional Exam Questions and Answers

A developer writes a Python function that reads objects from an Object Storage bucket in the Dev compartment. The function is deployed to an application in OCI Functions. The developer does not want to store any user credentials or keys with the function. What should the developer do?

• AA. Create a dynamic group that matches the function, add a policy for that group, and use the resource principal in the code
• BB. Create an auth token for the function's owner and read it from func.yaml when the function is invoked
• CC. Configure instance principal authentication in the code and add the Functions application's subnet to a dynamic group
• DD. Generate an API signing key pair for a service user and store the private key in the function's configuration parameters

An API deployment in OCI API Gateway is created inside which resource?

• AA. A Functions application
• BB. An API gateway
• CC. A service gateway
• DD. An OKE cluster

A team deploys the following to an OKE cluster. Exhibit: Deployment (excerpt) spec: replicas: 3 selector: matchLabels: app: inventory-api template: metadata: labels: app: inventory-api spec: containers: - name: inventory ports: - containerPort: 8080 Service inventory-svc (excerpt) spec: type: ClusterIP selector: app: inventory ports: - port: 80 targetPort: 8080 $ kubectl get pods NAME READY STATUS RESTARTS AGE inventory-7c9d5b6f4-2xk8p 1/1 Running 0 6m inventory-7c9d5b6f4-9fqzt 1/1 Running 0 6m inventory-7c9d5b6f4-m4wlc 1/1 Running 0 6m $ kubectl get endpoints inventory-svc NAME ENDPOINTS AGE inventory-svc <none> 6m Requests sent to inventory-svc time out. What is the cause?

• AA. The Service selector app: inventory does not match the pod label app: inventory-api
• BB. The Service type is ClusterIP, which cannot select pods that are managed by a Deployment
• CC. The readiness probe in the pod template is failing, so the pods are removed from the Service endpoints
• DD. The targetPort of 8080 does not match the port value of 80 defined on the Service

An API gateway in the Dev compartment has an API deployment with a route to a function in the Dev compartment. An administrator can invoke the function with the Fn CLI, but calls through the gateway fail with an authorization error. Which policy statement allows the gateway to invoke the function?

• AA. Allow any-user to use functions-family in compartment Dev where ALL {request.principal.type = 'ApiGateway', request.resource.compartment.id = '<dev-compartment-OCID>'}
• BB. Allow any-user to use functions-family in compartment Dev where ALL {request.principal.type = 'fnfunc', request.resource.compartment.id = '<dev-compartment-OCID>'}
• CC. Allow group Developers to use functions-family in compartment Dev where request.principal.type = 'ApiGateway'
• DD. Allow any-user to inspect functions-family in compartment Dev where ALL {request.principal.type = 'ApiGateway', request.resource.compartment.id = '<dev-compartment-OCID>'}

Which OCI Service Mesh resource represents a specific version of a service and maps to the running workload, such as a Kubernetes deployment?

• AA. Virtual deployment
• BB. Virtual service
• CC. Ingress gateway
• DD. Access policy

A container image named orders-api:1.2 runs a web server that listens on port 8080 inside the container. The service must be reachable on port 9090 of the Docker host. Which command starts the container?

• AA. docker run -d -p 8080:9090 orders-api:1.2
• BB. docker run -d -p 9090:8080 orders-api:1.2
• CC. docker run -d -p 8080 orders-api:1.2
• DD. docker run -d --expose 9090 orders-api:1.2

A browser application served from https://shop.example.com calls an API deployment in OCI API Gateway. The API owner must limit each client IP address to 10 requests per second and must allow browser calls only from that origin. Which two configurations meet these requirements? (Choose two.)

Select 2 answers.

• AA. Add a rate limiting request policy that applies a limit of 10 requests per second by client IP address
• BB. Add a stock response backend that returns HTTP 429 when a client exceeds the allowed request count
• CC. Add a CORS request policy that lists https://shop.example.com as an allowed origin
• DD. Add an authentication request policy that validates a JWT issued to each client

The payments Deployment in an OKE cluster must run between 2 and 8 pods and scale automatically when average CPU utilization passes 70%. Which command configures this?

• AA. kubectl autoscale deployment payments --min=2 --max=8 --memory-percent=70
• BB. kubectl scale deployment payments --replicas=8 --cpu-percent=70
• CC. kubectl scale deployment payments --min=2 --max=8 --cpu-percent=70
• DD. kubectl autoscale deployment payments --min=2 --max=8 --cpu-percent=70

A developer applies a Service of type LoadBalancer to an OKE cluster. After several minutes, kubectl get svc still shows <pending> for EXTERNAL-IP. Which two conditions could prevent the OCI load balancer from being provisioned? (Choose two.)

Select 2 answers.

• AA. The Service selector does not match the labels of any pod in the namespace
• BB. A Service annotation specifies a load balancer subnet OCID that belongs to a different VCN than the cluster
• CC. The pods behind the Service are in ImagePullBackOff because the OCIR image tag is wrong
• DD. The tenancy has reached its service limit for load balancers in the region

In OCI Logging, which resource must exist in a compartment before you can enable a service log for an API Gateway deployment?

• AA. A Notifications topic
• BB. A Log Analytics namespace
• CC. A Service Connector
• DD. A log group