Courseiva
ComputehardMultiple SelectObjective-mapped

1Z0-1072-26 Compute Practice Question

Which THREE security best practices should be implemented when deploying and managing OCI Functions? (Choose three.)

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Using dynamic groups and IAM policies to grant functions least-privilege access to other OCI resources

Security best practices for functions include using dynamic groups and IAM policies for least-privilege resource access, storing sensitive strings in OCI Vault, and deploying functions in private subnets with VCN integration.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Using dynamic groups and IAM policies to grant functions least-privilege access to other OCI resources

    Why this is correct

    Dynamic groups and IAM policies provide secure resource principals for functions.

  • Attaching function applications to private subnets within a VCN when connecting to private backend services

    Why this is correct

    VCN integration keeps function traffic inside private subnets.

  • Storing database credentials and API keys in OCI Vault rather than hardcoding them in source code

    Why this is correct

    OCI Vault securely manages secrets and encryption keys.

  • Hardcoding tenancy administrator credentials in environment variables for easy access

    Why it's wrong here

    Hardcoding admin credentials is a severe security vulnerability.

  • Disabling authentication on API Gateways triggering functions to allow open public access

    Why it's wrong here

    Disabling authentication exposes endpoints to unauthorized public abuse.

Visual reference

192.168.1.0 /24 256 addresses (254 usable) 192.168.1.0 /25 Subnet A 128 addr (126 usable) 192.168.1.128 /25 Subnet B 128 addr (126 usable) Borrowing 1 bit from host portion creates 2 subnets (/25)

About these practice questions

Courseiva writes every 1Z0-1072-26 question from scratch — 524 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed August 2026 · checked against the official Oracle exam blueprint

This 1Z0-1072-26 practice question is part of Courseiva's free Oracle certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 1Z0-1072-26 exam.