Updated Oct 14, 2026 Verified 1z0-1084-26 dumps Q&As – 100% Pass [Q92-Q114]

October 14, 2026 admin 0

Rate this post

Updated Oct 14, 2026 Verified 1z0-1084-26 dumps Q&As – 100% Pass

New 2026 Latest Questions 1z0-1084-26 Dumps – Use Updated Oracle Exam

Oracle 1z0-1084-26 Exam Syllabus Topics:

Section	Weight	Objectives
Topic 1: Cloud Native Fundamentals	11%	– DevOps concepts and CI/CD workflows – Cloud-native principles and microservices architecture – OCI developer services and tools overview
Topic 2: Cloud Native Applications and Containerization	33%	– Building containerized applications with Docker – Deployment and management with Oracle Kubernetes Engine (OKE) – Oracle Container Registry (OCIR) usage
Topic 3: Monitoring & Troubleshooting Cloud Native Applications	10%	– Application performance monitoring and tracing – Centralized logging and metrics collection – Troubleshooting containerized and serverless workloads
Topic 4: Leveraging Serverless Technologies for Cloud Native Development	33%	– Event-driven architecture with OCI Events, Streaming, and Queue – Oracle Functions development and management – API-driven architectures using API Gateway
Topic 5: Testing and Securing Cloud Native Applications	13%	– Application security best practices – Testing strategies and secure deployment configurations – Secrets management with OCI Vault

QUESTION 92
Kubernetes includes various elements such as compute, network, and storage. Compute is essentially CPU (units) and memory (bytes). Within an OKE cluster, what is considered to be the smallest unit of deployment with respect to compute?

Container

Service

Pod

Namespace

Deployment resource

QUESTION 93
Which TWO are part of the Cloud Native Computing Foundation (CNCF) container runtime? (Choose two.)

rkt-o

runc

getcd

containerd

QUESTION 94
Which of these is NOT a valid authentication method for accessing an OCI API Gateway deployment?

HTTP Basic

API Key

OAuth

SAML Token

QUESTION 95
Which industry standard specification defines the structure and format of messages processed by the Oracle Cloud Infrastructure Events service?

CloudEvents

AsyncAPI

Webhooks v2

OpenMessage

QUESTION 96
You have two microservices, A and B running in production. Service A relies on APIs from service B. You want to test changes to service A without deploying all of its dependencies, which includes service B. Which approach should you take to test service A?

Test using a previous test version of service B.

Test using an API mock of service B.

Test using the current production version of service B.

This is not possible because service B is a dependency.

QUESTION 97
Your enterprise is migrating a synchronous order fulfillment system to a distributed microservices architecture on Oracle Cloud Infrastructure. The development team originally implemented a Two-Phase Commit protocol to handle transactions spanning multiple databases, but it caused severe performance bottlenecks due to extended resource locking periods. You must now design a decentralized transaction strategy that processes steps as a sequence of independent local transactions, publishes events to coordinate subsequent steps, and executes compensating actions if a step fails. Which transaction design pattern should you implement to meet these requirements?

Two-Phase Commit Pattern

Transactional Outbox Pattern

Saga Design Pattern

Event Aggregation Pattern

QUESTION 98
Your security operations team wants to analyze application diagnostic and access patterns across both service and custom logs. A new IAM user group named security-auditors has been formed, and members must run advanced ad-hoc queries using the OCI Logging Console Search page to parse through indexed logs in the tenancy. Your company security mandate dictates that they must only be granted the minimum required permissions necessary to successfully execute these search queries and view the results.
Which set of policy statements correctly implements this requirement?

Allow group security-auditors to manage log-groups in tenancyAllow group security-auditors to use log- content in tenancy

Allow group security-auditors to read log-groups in tenancyAllow group security-auditors to read log- content in tenancy

Allow group security-auditors to inspect log-groups in tenancyAllow group security-auditors to inspect log-content in tenancy

Allow group security-auditors to read log-groups in tenancyAllow group security-auditors to use log- content in tenancy

QUESTION 99
You have been asked to update an OKE cluster to a network configuration that has the least attack surface while the deployed applications are still directly available for access from the Internet. Which is a valid OKE cluster network configuration that meets this requirement? (Choose the best answer.)

Private subnets for nodes, the Kubemetes API endpoint, and load balancers

Private subnets for nodes; public subnets for the Kubemetes API endpoint and load balancers

Private subnets for nodes and the Kubemetes API endpoint; public subnets for load balancers

Private subnet for the Kubemetes API endpoint; public subnets for nodes and load balancers

QUESTION 100
Which key pillar of cloud native development should be utilized when a development team needs to automate build, test, and release cycles to achieve rapid and reliable software delivery?

Containerization

DevOps Principles

Microservices Architecture

Serverless Computing

QUESTION 101
Which statement is NOT valid regarding the OCI Vulnerability Scanning service (VSS) for container images stored in Oracle Cloud Infrastructure Registry (OCIR)?

A single container repository can be assigned to multiple scan targets in OCI Vulnerability Scanning to enforce different scan recipes.

When a container scan target is created, the service scans a specified initial number of images, one by default, in the target repositories.

Vulnerability reports for the scanned images are saved in the compartment containing the scan target, rather than the repository compartment.

To run container image scans, you must explicitly grant the OCI Vulnerability Scanning service IAM permission to pull images from the registry.

QUESTION 102
You have built a custom container image for your microservice and successfully pushed it to Oracle Cloud Infrastructure Registry (OCIR). Which OCI CLI command should you run to cryptographically sign the pushed image using a master encryption key managed in OCI Vault and upload the resulting signature?

oci container-registry image-signature sign-upload

oci artifacts container image-signature sign-upload

oci artifacts container image sign –upload-signature

oci container-engine image-signature upload-signed

QUESTION 103
Which annotation is required in a Kubernetes Service manifest of type LoadBalancer to provision a private load balancer rather than a public load balancer?

service.beta.kubernetes.io/oci-load-balancer-internal: ” true “

service.beta.kubernetes.io/oci-load-balancer-private: ” true “

service.beta.kubernetes.io/oci-load-balancer-scheme: ” internal “

service.beta.kubernetes.io/oci-load-balancer-type: ” private “

QUESTION 104
Your Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE) administrator has created an OKE cluster with one node pool in a public subnet. You have been asked to provide a log file from one of the nodes for troubleshooting purpose. Which step should you take to obtain the log file?

Use the username opc and password to login.

It is impossible because OKE is a managed Kubernetes service.

SSH into the nodes using the private key.

SSH into the node using the public key.

QUESTION 105
As a Cloud Native developer, you develop two services in Node.js and deploy them to two different Container Engine for Kubernetes (OKE) clusters that use the same Virtual Cloud Network (VCN). Your security team wants to analyze the network communication between them. How can this requirement be met in the most cost-effective way?

Rewrite the application and send the application logs to an outside log aggregator.

Deploy a third-party logging service and aggregate the network flow logs.

Use the OCI Logging service and enable VCN flow logs.

Deploy Wireshark and intercept the packets.

The best answer is: ” Use the OCI Logging service and enable VCN flow logs. ” To meet the requirement of analyzing network communication between two services deployed in different Container Engine for Kubernetes (OKE) clusters within the same Virtual Cloud Network (VCN) in a cost-effective way, you can use the OCI Logging service and enable VCN flow logs. The VCN flow logs feature in OCI allows you to capture and log network traffic information for your VCN resources. By enabling VCN flow logs, you can monitor and analyze the network communication between your services without the need for additional third- party logging services or tools. Enabling VCN flow logs provides visibility into the network traffic, including source and destination IP addresses, ports, protocols, and other relevant details. This information can be collected and stored in the OCI Logging service, where you can analyze and gain insights into the network communication patterns between your services. By leveraging the built-in capabilities of the OCI Logging service and enabling VCN flow logs, you can fulfill the security team ‘ s requirement for network communication analysis in a cost-effective manner. This eliminates the need for deploying additional third- party logging services or tools, reducing complexity and potential costs associated with their setup and maintenance. The other options mentioned are not the most cost-effective or suitable solutions for analyzing network communication in this scenario: Deploying a third-party logging service and aggregating the network flow logs would introduce additional costs and complexity, which may not be necessary considering the built- in capabilities provided by OCI. Rewriting the application to send logs to an outside log aggregator would not directly address the requirement of analyzing network communication between the services. It would focus more on application-level logs rather than network-level analysis. Deploying Wireshark and intercepting packets would require additional infrastructure setup and maintenance, which may not be the most cost- effective approach for network analysis in this scenario.

QUESTION 106
Which special column in the OCI Logging Query Language represents the raw text of the entire original log message?

logContent

messageBody

rawPayload

eventSource

QUESTION 107
What is the maximum allowable size for a secret bundle stored in the Oracle Cloud Infrastructure (OCI) Vault service?

10 KB

25 KB

50 KB

100 KB

QUESTION 108
You are setting up OCI Application Performance Monitoring (APM) to trace transactions in a Spring Boot application. Which installer command should you execute to provision the APM Java Agent with its target application service name, destination directory, and credentials obtained from your APM domain?

java -jar apm-java-agent-installer.jar register-agent -destination=/opt/apm -app-name=springboot-app – private-data-key=KeyA123 -data-upload-endpoint=https://endpoint.com

java -jar apm-java-agent-installer.jar install-agent -path=/opt/apm -service-name=springboot-app – upload-key=KeyA123 -upload-endpoint=https://endpoint.com

java -jar apm-java-agent-installer.jar configure-agent -destination=/opt/apm -service-name=springboot- app -public-data-key=KeyA123 -data-upload-endpoint=https://endpoint.com

java -jar apm-java-agent-installer.jar provision-agent -destination=/opt/apm -service-name=springboot- app -private-data-key=KeyA123 -data-upload-endpoint=https://endpoint.com

QUESTION 109
Which THREE are valid statements regarding the OCI Container Engine for Kubernetes (OKE) service?
(Choose three.)

You must have access to an Oracle Cloud Infrastructure tenancy. Your tenancy must have sufficient quota on different types of resources.

OKE cannot use existing network resources for the creation of a new cluster.

OKE automatically creates and configures new network resources for the new cluster.

There is a limit of three clusters within each region, but there is no limit on the number of nodes and pods you can create within each cluster.

QUESTION 110
How are cloud native application versions deployed to an OKE cluster when using a blue/green deployment strategy?

Current applications are slowly replaced with new application versions.

New application versions are deployed in minor increments to a select group of people.

Both old and new application versions are deployed to production at the same time.

QUESTION 111
Which kubectl command syntax is valid for implementing a rolling update deployment strategy in Kubernetes? (Choose the best answer.)

kubectl upgrade -c < container > –image=image:v2

kubectl update < deployment-name > –image=image:v2

kubectl rolling-update < deployment-name > –image=image:v2

kubectl update -c < container > –iniage=image: v2

QUESTION 112
Which statement is NOT valid regarding streaming data in Oracle Cloud Infrastructure (OCI)?

The maximum storage retention period that can be configured for messages within an Oracle Cloud Infrastructure stream is limited to 7 days.

Cursors created to consume messages from a specific partition automatically expire 5 minutes after they are retrieved.

A stream can be configured with a private endpoint within a Virtual Cloud Network to ensure that transit traffic avoids the public internet.

The message size limit for any single record published to an Oracle Cloud Infrastructure stream is initially restricted to 10 MB.

QUESTION 113
You are deploying a microservices-based application to an Oracle Cloud Infrastructure Container Engine for Kubernetes cluster running a modern Kubernetes release. You need to identify the underlying container runtime interface implementation that manages and runs your Open Container Initiative-compliant images within the worker nodes.
Which container runtime interface is utilized by the cluster for this purpose?

containerd

Docker Engine

rkt runtime

CRI-O

QUESTION 114
(CHK_4 > 2) Which TWO statements are NOT valid regarding the Oracle Cloud Infrastructure (OCI) Streaming service? (Choose two.)

OCI Streaming stores all data for 24 hours by default, but that can be extended up to 7 days.B

Although OCI Streaming automatically encrypts all data while in transit, it is the developer ‘ s responsibility to encrypt data at rest, if needed.

The throughput of a stream is defined by a partition. A partition provides 1 MB/sec data input and 2 MB
/sec data output.

A stream can be configured with either a public or a private endpoint with support for customer managed encryption keys.

OCI Streaming can support up to 2,000 requests per second to each partition.