1Z0-997-26 Cloud Native Architecture Practice Question
You are designing an OKE-based cloud-native microservices architecture and want to ensure high availability and robust security isolation. Which THREE architectural best practices should you implement?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable private Kubernetes API server endpoint access so the control plane is not exposed publicly.
Best practices for OKE include distributing worker nodes across multiple Availability Domains or Fault Domains, utilizing private subnets for nodes, and enabling control plane private endpoints.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Enable private Kubernetes API server endpoint access so the control plane is not exposed publicly.
Why this is correct
Correct. Private cluster endpoints secure access to the Kubernetes control plane.
- ✓
Deploy worker nodes in private subnets with no direct public IP addresses.
Why this is correct
Correct. Keeping worker nodes in private subnets enhances security against direct internet attacks.
- ✓
Distribute OKE worker node pools across multiple Fault Domains or Availability Domains within the region.
Why this is correct
Correct. Multi-Fault Domain/Availability Domain distribution prevents single points of hardware failure.
- ✗
Disable all Kubernetes RBAC authorization to allow unrestricted developer deployments.
Why it's wrong here
Incorrect. Disabling RBAC compromises cluster security.
- ✗
Run all Kubernetes system pods and application workloads in the 'default' namespace as root user.
Why it's wrong here
Incorrect. Running workloads as root in the default namespace is a severe security anti-pattern.
Visual reference
About these practice questions
This 1Z0-997-26 question is part of Courseiva's 344-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Oracle exam blueprint
This 1Z0-997-26 practice question is part of Courseiva's free Oracle certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 1Z0-997-26 exam.