1Z0-997-25 Question 9
Single answerYour company is migrating a monolithic e-commerce application to Oracle Cloud Infrastructure (OCI) and wants to adopt a microservices architecture, containerization, and DevOps best practices. The solution must provide an easily scalable container platform, an automated CI/CD pipeline for quick code changes, and secure communication among microservices. Which approach best meets these requirements in OCI?
- A
Deploy microservices on standalone Compute instances with manually managed Docker containers, store images in an external Docker Hub, and secure communication using Security Lists only.
- B
Use Oracle Container Engine for Kubernetes (OKE) for orchestrating containers, store container images in Oracle Cloud Infrastructure Registry (OCIR), and configure an OCI DevOps Build and Deployment pipeline with mutual TLS between microservices.
- C
Leverage Oracle Functions for every service, store container images in OCI Block Storage, and automate code updates with scheduled manual pushes from developers� local machines.
- D
Deploy microservices on Oracle VM Database Systems equipped with Docker, store container images in OCI Object Storage, and use a third-party CI/CD system without integrating OCI security features.
Show answer and explanation
Correct answer: B
Explanation
Based on Oracle� recommended best practices, microservices solutions on OCI typically use Oracle Container Engine for Kubernetes (OKE) for orchestration, Oracle Cloud Infrastructure Registry (OCIR) for secure container image storage, and the OCI DevOps Build and Deployment pipeline for continuous integration and delivery. Mutual TLS or a service mesh provides secured inter-service communication. Refer to the official Oracle Cloud Infrastructure documentation for guidelines on deploying containerized microservices, managing container images in OCIR, and setting up DevOps pipelines for automated CI/CD.
- A. Incorrect.
Option 1 is incorrect because manually managing Docker containers on standalone Compute instances without a container orchestration platform complicates scalability and CI/CD integration. Storing images in an external registry also introduces additional security and network considerations that OCI can handle internally with OCIR.
- B. Correct.
Option 2 is correct. Oracle Container Engine for Kubernetes (OKE) provides a managed Kubernetes environment, which is ideal for scaling microservices. OCI DevOps Build and Deployment pipeline automates code integration and deployment. Using OCIR for storing container images ensures security and performance within the OCI environment, and mutual TLS enables secure inter-service communication.
- C. Incorrect.
Option 3 is incorrect because Oracle Functions is serverless and is best suited for event-driven, short-running tasks rather than a full microservices e-commerce platform. Also, using OCI Block Storage for container images is less efficient compared to a dedicated container registry like OCIR. Manual pushes do not align with DevOps automation best practices.
- D. Incorrect.
Option 4 is incorrect because running microservices on a database system equipped with Docker containers is not a recommended design. It couples compute and database resources, reducing flexibility. Storing container images in Object Storage and using third-party CI/CD without OCI integration overlooks OCI� secure and scalable DevOps capabilities.