nerdexam
Oracle

1Z0-997-20 · Question #16

You work for a large bank where security and compliance are critical. As part of the security overview meeting, your company decided to minimize the installation of local tools on your laptop. You…

The correct answer is C. Work on OCI Cloud Shell to use built-in Ansible and kubectl to deploy the OKE cluster. Use E. Create a developer workstation on OCI. Install Ansible and kubectl on it. Use instance principal to. https://docs.cloud.oracle.com/en-us/iaas/tools/oci-cli/2.12.4/oci_cli_docs/oci.html

Design for Security

Question

You work for a large bank where security and compliance are critical. As part of the security overview meeting, your company decided to minimize the installation of local tools on your laptop. You have been running Ansible and kubectl to spin up Oracle Container Engine for Kubernetes (OKE) clusters and deployed your application. For authentication, you are using an Oracle Cloud Infrastructure (OCI) CLI config file that contains OCIDs, Fingerprint, and a locally stored PEM file. Your security team doesn't want you to store any local API key and certificate, or any other local tools. Which two actions should you perform to spin up the OKE cluster and interact with it? (Choose two.)

Options

  • ACreate a developer workstation on OCI. Install Ansible and kubectl on it. Use resource principal to
  • BDevelop your own code using OCI SDK to deploy the OKE cluster.
  • CWork on OCI Cloud Shell to use built-in Ansible and kubectl to deploy the OKE cluster. Use
  • DWork on OCI Cloud Shell to use built-in Ansible and kubectl to deploy the OKE cluster. Bring in
  • ECreate a developer workstation on OCI. Install Ansible and kubectl on it. Use instance principal to

How the community answered

(27 responses)
  • A
    7% (2)
  • B
    4% (1)
  • C
    81% (22)
  • D
    7% (2)

Explanation

https://docs.cloud.oracle.com/en-us/iaas/tools/oci-cli/2.12.4/oci_cli_docs/oci.html

Topics

#instance principals#Cloud Shell#OCI authentication#API key management

Community Discussion

No community discussion yet for this question.

Full 1Z0-997-20 Practice