20+ practice questions focused on Identity And Access Management — one of the most tested topics on the Oracle Cloud Infrastructure 2026 Architect Associate (1Z0-1072-26) (1Z0-1072-26) exam. Each question includes a detailed explanation so you learn why the right answer is correct.
Start Identity And Access Management PracticeYou are writing a dynamic group matching rule for compute instances that need access to Object Storage. The instances must be members of the dynamic group if their OCID matches a specific value or if they are tagged with a specific freeform tag. Which syntax is valid for matching either condition using any/all operators?
Explanation: Oracle Cloud Infrastructure dynamic group matching rules use the ANY keyword to specify that a resource qualifies if it matches at least one of the listed conditions. The syntax ANY {instance.id = 'ocid1.instance...', tag.Project.Value = 'Alpha'} is valid: it uses the correct equality operator (=), the proper tag variable format (tag.<namespace>.<key>.Value), and comma-separated conditions inside braces. This allows an instance to be a member if its OCID matches OR if it has the freeform tag Project with value Alpha.
An administrator created a compartment hierarchy where compartment 'ProjectA' is a child of 'DepartmentX'. You need to allow the group 'Auditors' to inspect all resources in 'ProjectA' without giving them any visibility into other child compartments under 'DepartmentX'. Where should the policy be created?
Explanation: OCI policies can be created in any compartment, and a policy created in 'ProjectA' applies to that compartment and its descendants. Writing 'Allow group Auditors to inspect all-resources in compartment ProjectA' grants the group inspect access only within ProjectA, without exposing sibling compartments under DepartmentX. This is the correct least-privilege placement and syntax.
Your security team requires that developers can only terminate Compute instances if the request originates from a specific corporate CIDR block (192.168.100.0/24). How can you implement this requirement using OCI IAM policies?
Explanation: OCI IAM policies support a request.ip condition that restricts access based on the source IP address or CIDR block of the request. The correct syntax uses 'use instance-family' (the verb needed to terminate instances) with 'where request.ip in ('192.168.100.0/24')' to limit the permission to that corporate CIDR. This precisely implements the requirement that developers can only terminate instances from the specified network range.
You need to write a policy allowing a dynamic group named 'AppInstances' to read objects in an Object Storage bucket, but ONLY if the bucket is tagged with a defined tag namespace 'Operations' and key 'Environment' set to 'Production'. What policy syntax achieves this?
Explanation: The correct syntax uses 'target.tag.Operations.Environment' with the value 'Production' and scopes the policy to the tenancy (or compartment) where the bucket resides. In OCI policy language, 'target.tag' refers to the resource being accessed (the bucket), and the tag namespace and key must match exactly. The value must be the tag value 'Production', not a boolean.
What is the maximum number of compartments you can nest within a single parent compartment in OCI?
Explanation: OCI supports nesting compartments up to 6 levels deep beneath the root compartment (tenancy).
+15 more Identity And Access Management questions available
Practice all Identity And Access Management questions1. Baseline your knowledge
Start with 10 questions to gauge your current understanding of Identity And Access Management. This tells you whether you need a concept refresher or just practice.
2. Review every explanation
For each question — right or wrong — read the full explanation. Understanding why an answer is correct is more valuable than knowing the answer itself.
3. Focus on exam traps
Identity And Access Management questions on the 1Z0-1072-26 frequently use trap wording. Look for subtle differences in answers that test your precision, not just general knowledge.
4. Reach 80% consistently
Do repeated sessions until you score 80%+ three times in a row. Then move to mixed-mode practice to test cross-topic recall under realistic conditions.
The exact number varies per candidate. Identity And Access Management is tested as part of the Oracle Cloud Infrastructure 2026 Architect Associate (1Z0-1072-26) (1Z0-1072-26) blueprint. Practicing with targeted Identity And Access Management questions ensures you can handle any format or difficulty that appears.
Yes. Courseiva provides free 1Z0-1072-26 practice questions across all exam topics and domains. The platform includes topic-based practice, mock exams, missed-question review, bookmarked questions, and readiness tracking — no account required.
Difficulty is subjective, but Identity And Access Management is a high-priority exam concept tested in multiple ways — direct recall, scenario analysis, and command-output interpretation. Consistent practice is the best way to build confidence.
Launch a full Identity And Access Management practice session with instant scoring and detailed explanations.
Start Identity And Access Management Practice →