Question 1

ABC Inc. is a software development firm that uses DevOps practices. They want to minimize the risk of security breaches by incorporating security into their development process from the start. To accomplish this, they are concentrating on incorporating DevSecOps best practices into their DevOps process. Which three are best practices that ABC Inc. should im-plement?

Options :

A : Follow established security guidelines, such as the OWASP DevSecOps guideline, during the development and testing process.

B : Perform regular scans for vulnerabilities and prioritize fixing them based on their se-verity

C : Manually execute DevOps security processes and tools to reduce the risk of errors and security incidents.

D : Implement role-based access control and define roles and responsibilities for everyone involved in the development process.

E : Have a flat network with no segmentation or isolation, where all devices and resources are interconnected and accessible to anyone on the network.

Answer: A,B,D

Question 2

As a DevOps engineer working on a CI/CD pipeline for your company's application, you have completed code analysis, image scanning, and automated testing. What is the next step to ensure a secure and reliable deployment?

Options :

A : Add an approval stage to pause the deployment for a specified duration for manual decision from the approver.

B : Review the code analysis and image scanning reports again using automated tools in the deployment pipeline.

C : Deploy the application to production without any further checks.

D : Conduct more automated testing to be sure.

Answer: A

Question 3

As a startup planning to set up your infrastructure on Oracle Cloud Infrastructure (OCI), you must understand the key concepts of OCI Resource Manager. Which best describes a stack in Resource Manager that will assist you to manage infrastructure using the infrastructure-as-code model?

Options :

A : It is a group of related resources used to create lightweight and reusable abstractions, so that you can describe your infrastructure in terms of its architecture.

B : It is the difference between the real-world state of your infrastructure and the last executed Terraform configuration.

C : It represents a request to take a Terraform action on a state. It performs the actions that are defined in the configuration file.

D : It represents a collection of OCI resources created in the Compartment and includes a collection of Terraform files that specify the resources you want to manage with the Resource Manager

Answer: D

Question 4

As a developer working on a software project to be deployed on OKE, you have created a Helm chart for your application. You want to deploy the chart using OCI DevOps service. Which statement is true about deploying a Helm Chart using OCI DevOps service?

Options :

A : The values.yaml file is a generic file located in the OCI Container Registry. You must create a reference to this file.

B : The Helm charts must be located in the OCI Container Registry repository for deployment.

C : You cannot package and push the Helm chart to the Container Registry from the build pipeline.

D : The Helm Upgrade options cannot be used to change the configuration of the Helm re-lease.

Answer: B

Question 5

As a DevOps engineer working on containerizing a microservices-based application to be hosted on OCI Cloud platforms, which step can help ensure that the container images have not been modified after being pushed to OCI Registry?

Options :

A : Deploying a manifest to the Kubernetes cluster that references the container image and its unique hash

B : Signing the image using the Container Registry CLI and creating an image signature that associates the image with the master encryption key and key version in the Vault service

C : Scanning the image upon ingestion and comparing the image size for changes

D : Enabling scanning of container images stored in OCI Registry

Answer: B

Free 1Z0-1109-25 Mock Exam – Practice Online Confidently

Buying Options: