1Z0-1072-26 Compute Practice Question
Which THREE security best practices should be implemented when deploying and managing OCI Functions? (Choose three.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Using dynamic groups and IAM policies to grant functions least-privilege access to other OCI resources
Security best practices for functions include using dynamic groups and IAM policies for least-privilege resource access, storing sensitive strings in OCI Vault, and deploying functions in private subnets with VCN integration.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Using dynamic groups and IAM policies to grant functions least-privilege access to other OCI resources
Why this is correct
Dynamic groups and IAM policies provide secure resource principals for functions.
- ✓
Attaching function applications to private subnets within a VCN when connecting to private backend services
Why this is correct
VCN integration keeps function traffic inside private subnets.
- ✓
Storing database credentials and API keys in OCI Vault rather than hardcoding them in source code
Why this is correct
OCI Vault securely manages secrets and encryption keys.
- ✗
Hardcoding tenancy administrator credentials in environment variables for easy access
Why it's wrong here
Hardcoding admin credentials is a severe security vulnerability.
- ✗
Disabling authentication on API Gateways triggering functions to allow open public access
Why it's wrong here
Disabling authentication exposes endpoints to unauthorized public abuse.
Visual reference
About these practice questions
Courseiva writes every 1Z0-1072-26 question from scratch — 524 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Oracle exam blueprint
This 1Z0-1072-26 practice question is part of Courseiva's free Oracle certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 1Z0-1072-26 exam.