1Z0-997-25 Question 2
Select 2Your development team is creating a new microservices application that will run on containers in Oracle Cloud Infrastructure (OCI). You must ensure a secure and efficient deployment process, including container image storage, continuous deployment, and seamless updates. Which two recommended steps should you include in your architecture for a cloud-native OCI solution using Oracle Container Engine for Kubernetes (OKE)?
- A
Push container images to the OCI Container Registry (OCIR) for secure storage and automated vulnerability scanning.
- B
Store container images on a single Compute instance in OCI by manually syncing local Docker images to the instance.
- C
Leverage OCI DevOps Pipelines to continuously build and deploy container images from your source repository to OKE.
- D
Enable persistent storage for transient containers by mounting ephemeral local storage on host nodes.
Show answer and explanation
Correct answers: A, C
Explanation
Cloud-native applications on OCI typically leverage OCI Container Registry for secure and efficient image management, and OCI DevOps Pipelines for fully managed CI/CD workflows. These services are designed to integrate directly with Oracle Container Engine for Kubernetes. Storing container images on a single Compute instance introduces manual overhead and security risks, and using ephemeral local node storage is not suitable for persistent data. Refer to the official Oracle documentation on OCI Container Registry, OCI DevOps, and OKE for detailed best practices.
- A. Correct.
Option 1: Correct. Using OCI Container Registry (OCIR) is a best practice for storing, versioning, and scanning container images. It integrates seamlessly with OKE, improving security and simplifying deployment flows.
- B. Incorrect.
Option 2: Incorrect. Storing container images on a single Compute instance and manually syncing is neither scalable nor aligned with cloud-native best practices. OCIR provides secure, centralized storage.
- C. Correct.
Option 3: Correct. OCI DevOps Pipelines offer a managed CI/CD service that integrates with OKE. This automates build, test, and deploy stages, streamlining the continuous delivery process.
- D. Incorrect.
Option 4: Incorrect. Ephemeral local storage is lost when containers exit or nodes are replaced. For persistent data, OCI provides persistent volumes or block storage. It's not recommended to rely on ephemeral local storage for data retention in production.