1Z0-997-25 Question 20
Select 2You have deployed an Oracle Functions-based serverless application to process incoming data. You now need to expose this function securely to external clients using Oracle API Gateway, ensuring efficient traffic management and controlled access. Which two actions should you take to meet these requirements?
- A
A. Create an API deployment that references your function's invoke endpoint, attach a usage plan to the deployment, and enable authentication as needed.
- B
B. Configure a Service Gateway to allow external traffic to directly invoke the function without going through any public internet routing.
- C
C. Enable API Gateway caching on the function's events by modifying the function code to store persistent state in memory between requests.
- D
D. Add rate-limiting and cross-origin resource sharing (CORS) configurations within the API Gateway deployment settings.
Show answer and explanation
Correct answers: A, D
Explanation
When exposing an Oracle Functions-based service to external clients, you should configure an API deployment on Oracle API Gateway that references your function� invoke endpoint. This deployment setup allows you to add security mechanisms, such as authentication or authorization, and apply usage plans for rate-limiting. Enabling CORS for web-based applications avoids cross-origin issues, and usage plans or rate-limits help ensure efficient and secure API usage. For more details, refer to the official Oracle Cloud Infrastructure documentation on Functions and API Gateway.
- A. Correct.
A. CORRECT. When you want to expose a serverless function to external users in OCI, you typically create an API deployment on Oracle API Gateway. This deployment includes at least one route pointing to your function invocation endpoint. Further, you can attach usage plans (with quotas or rate-limits) and apply authentication/authorization to securely manage traffic.
- B. Incorrect.
B. INCORRECT. A Service Gateway in Oracle Cloud Infrastructure is commonly used for private access to OCI services without routing traffic over the public internet. It does not provide a direct path for external users on the public internet and is not a suitable way to expose your function publicly.
- C. Incorrect.
C. INCORRECT. Caching in Oracle API Gateway does not involve modifying the function code to store persistent state in memory. Moreover, storing persistent state directly in function-level memory is not a supported best practice. Functions are stateless, and data should be stored or cached using external services like Object Storage or a database.
- D. Correct.
D. CORRECT. By configuring CORS, you allow browsers to safely call your function from different domains. You can also apply rate-limiting in the API Gateway to control the volume of requests, which helps maintain efficient traffic management and reliability.