1Z0-997-26 Cloud Native Architecture Practice Question
When configuring an OCI API Gateway deployment to protect and route traffic to backend services, which THREE authentication or authorization mechanisms are natively supported?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Custom authenticator functions written and deployed as OCI Functions
OCI API Gateway natively supports HTTP Basic authentication, custom authentication functions (Lambda-style auth via OCI Functions), and JWT validation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Custom authenticator functions written and deployed as OCI Functions
Why this is correct
Correct. API Gateway supports custom authentication using OCI Functions to validate credentials.
- ✓
JSON Web Token (JWT) validation against an identity provider
Why this is correct
Correct. API Gateway natively validates JWT tokens.
- ✓
HTTP Basic Authentication
Why this is correct
Correct. API Gateway supports HTTP Basic auth validation.
- ✗
SSH Public Key fingerprint authorization
Why it's wrong here
Incorrect. API Gateway is an HTTP/REST gateway, not an SSH server.
- ✗
Direct integration with Active Directory domain controller LDAP sockets over the public internet
Why it's wrong here
Incorrect. API Gateway does not connect directly to raw LDAP sockets over the internet for auth.
Quick reference
Cloud Service Model Comparison
| Model | You Manage | Provider Manages | Examples |
|---|---|---|---|
| IaaS | OS, runtime, apps, data | Hardware, hypervisor, networking | EC2, Azure VMs, GCP Compute Engine |
| PaaS | Apps and data | OS, runtime, middleware, hardware | Elastic Beanstalk, Azure App Service |
| SaaS | Data and settings only | Everything else | Microsoft 365, Salesforce, Workday |
| FaaS / Serverless | Function code only | Infra, scaling, runtime | Lambda, Azure Functions, Cloud Run |
| CaaS | Containers and apps | Kubernetes, OS, hardware | EKS, AKS, GKE |
About these practice questions
This 1Z0-997-26 question is part of Courseiva's 344-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Oracle exam blueprint
This 1Z0-997-26 practice question is part of Courseiva's free Oracle certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 1Z0-997-26 exam.