1Z0-1072-26 Identity And Access Management Practice Test 6 — 15 Questions

Question 1

Which THREE factors should you consider when designing a compartment hierarchy for an enterprise OCI tenancy? (Choose three.)

Accepted Answer

Compartments can be used to set granular budget limits and cost tracking.. Compartment design should reflect organizational structure, policy inheritance, and quota management.

Answer

Compartments automatically replicate resources across OCI regions for high availability.

Answer

Compartments isolate network traffic between VCNs automatically without security lists.

Question 2

Which TWO statements are true regarding OCI IAM policy evaluation behavior? (Choose two.)

Accepted Answer

There are no explicit 'Deny' rules in OCI IAM policy grammar.. OCI IAM policies evaluate additively across compartments, and there are no explicit denies.

Answer

Tenancy root policies always override and cancel compartment-level policies.

Answer

Explicit deny statements take precedence over all allow statements.

Answer

Policy evaluation stops immediately upon encountering the first matching statement.

Question 3

Which THREE permissions are granted when a group is given 'manage' access to a resource family? (Choose three.)

Accepted Answer

Read configuration metadata of resources. The 'manage' verb encompasses all permissions: inspect, read, use, and full creation/deletion capabilities.

Answer

Modify tenancy-level IAM administrator passwords for other users

Answer

Automatically bypass all VCN security lists

Question 4

Which THREE administrative tasks require membership in the tenancy Administrators group or equivalent high-level IAM privileges? (Choose three.)

Accepted Answer

Writing and modifying policies in the tenancy root compartment. High-level administrative tasks include creating identity providers, managing root-level policies, and setting tenancy limits.

Answer

Uploading a personal SSH public key to a standard user profile

Answer

Launching a basic compute instance in a developer compartment

Question 5

Which THREE services integrate directly with OCI IAM for access control and governance? (Choose three.)

Accepted Answer

Object Storage. OCI services such as Object Storage, Compute, and Database integrate with IAM for authorization and security.

Answer

Client web browsers

Answer

On-premise physical power generators

Question 6

Which TWO statements are true about OCI IAM compartments? (Choose two.)

Accepted Answer

Compartments can span multiple OCI regions globally.. Compartments are logical isolation constructs and help organize resources for billing and access control.

Answer

Compartments can only contain Virtual Cloud Networks, nothing else.

Answer

Compartments are physical data center buildings.

Answer

Compartments replace IAM policies entirely.

Question 7

Which THREE actions can an administrator perform to secure user accounts in OCI IAM? (Choose three.)

Accepted Answer

Enforce Multi-Factor Authentication (MFA) via security rules. Securing user accounts includes enforcing MFA, managing API signing key lifecycles, and setting strong password policies.

Answer

Disable all audit logging to hide administrative actions

Answer

Assign root compartment administrator privileges to all temporary contractors

Question 8

Which TWO pieces of information are required when configuring an OCI IAM Identity Provider for SAML federation? (Choose two.)

Accepted Answer

The SAML 2.0 metadata XML file provided by the external Identity Provider. Configuring a SAML 2.0 IdP requires the IdP metadata XML file (or metadata URL) and a name for the IdP in OCI.

Answer

The physical rack serial number in the data center

Answer

The root compartment database sysadmin password

Answer

The local VCN CIDR block

Question 9

Which TWO actions can an OCI administrator perform on user accounts? (Choose two.)

Accepted Answer

Manage group memberships for the user. Administrators can deactivate user accounts, force password resets, and manage group memberships.

Answer

Modify the physical hardware serial number of the user's laptop

Answer

Configure the user's home Wi-Fi router security settings

Answer

Directly access the user's corporate email inbox

Question 10

Which TWO statements are true regarding OCI Identity Domains? (Choose two.)

Accepted Answer

Identity Domains support advanced features like OAuth, SAML integration, and passwordless authentication.. Identity Domains provide advanced governance features, user management, and can be configured as free or paid tiers depending on features required.

Answer

Identity Domains replace Virtual Cloud Networks entirely.

Answer

Every tenancy is restricted to having exactly one Identity Domain that cannot be changed.

Answer

Identity Domains store compute instance virtual disk images.

Question 11

Which TWO statements are true regarding the behavior of dynamic groups and instance principals? (Choose two.)

Accepted Answer

Instance principals allow compute instances to make API calls to OCI services securely without storing credentials on the instance.. Instance principals allow compute instances to make API calls securely without managing credentials, authorized via dynamic groups and policies.

Answer

Instance principals only function when connected to an on-premise Active Directory domain controller.

Answer

Dynamic groups require human users to manually approve every API call made by the instance.

Answer

Compute instances must have static username and password credentials configured in their environment variables.

Question 12

Which THREE tools or methods can be used to write and apply OCI IAM policies? (Choose three.)

Accepted Answer

OCI Console (Web UI). IAM policies can be managed via the OCI Console, OCI CLI, SDKs, and Infrastructure as Code tools like Terraform (Resource Manager).

Answer

Editing local /etc/passwd files on compute instances

Answer

Direct SQL queries against the tenancy root database

Question 13

Which THREE resource types are associated with networking and can be managed via OCI IAM policies? (Choose three.)

Accepted Answer

virtual-network-family. Networking resource types include virtual-network-family, subnets, route-tables, and security-lists.

Answer

autonomous-databases

Answer

object-storage-buckets

Question 14

An administrator needs to create a new root compartment under the tenancy to separate billing and administrative resources for a newly acquired subsidiary. Where must the administrator perform this action in the Oracle Cloud Infrastructure Console?

Accepted Answer

Identity & Security -> Compartments. Compartments can only be created within the root tenancy or inside an existing parent compartment. You navigate to Identity & Security, select Compartments, and choose the parent compartment.

Answer

Billing & Cost Management -> Compartment Management

Answer

Networking -> Virtual Cloud Networks -> Compartment Association

Answer

Governance & Administration -> Tenancy Explorer

Question 15

Which TWO statements are true regarding OCI IAM policy syntax scoping rules? (Choose two.)

Accepted Answer

Policies defined in a child compartment cannot grant permissions on resources in parent compartments.. Policies must specify a valid scope (compartment or tenancy) and correctly reference subjects and resources.

Answer

Compartment names in policy statements are case-insensitive and can be replaced by user OCIDs.

Answer

Policies are attached directly to individual users rather than groups.

Answer

Policies can grant permissions across completely unrelated tenancies without any endorsement or commitment.