1Z0-1072-26 Storage Practice Question
An organization requires that all data uploaded to an Object Storage bucket must be automatically encrypted using a master encryption key managed by them in OCI Key Management (KMS), rather than Oracle-managed keys. How can this be enforced?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure the bucket during creation to use a Customer-Managed Key from OCI KMS.
When creating a bucket, you can select 'Use Customer-Managed Keys' and choose your vault and master encryption key from OCI KMS.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Apply an IAM policy stating that all PutObject API calls must pass customer secret keys in the header.
Why it's wrong here
IAM policies govern authorization, not cryptographic key management selections.
- ✓
Configure the bucket during creation to use a Customer-Managed Key from OCI KMS.
Why this is correct
Customer-managed keys in OCI KMS can be assigned at the bucket level to encrypt all stored data.
- ✗
Enable SSE-C (Server-Side Encryption with Customer-Provided Keys) on every individual file upload via CLI.
Why it's wrong here
While SSE-C is supported, assigning a customer-managed key at the bucket level provides automated enforcement without requiring client-supplied keys per upload.
- ✗
Write a custom OCI Functions script triggered by Object Storage events to re-encrypt objects using KMS.
Why it's wrong here
Object Storage supports native KMS customer-managed keys without requiring custom event-driven functions.
About these practice questions
One of 521 original 1Z0-1072-26 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Oracle exam blueprint
This 1Z0-1072-26 practice question is part of Courseiva's free Oracle certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 1Z0-1072-26 exam.