1Z0-1072-26 Identity And Access Management Practice Question
Your organization requires that all IAM policies created in the tenancy must be reviewed and approved. To facilitate auditing, you need to write a policy allowing the 'ComplianceTeam' group to read IAM policies and read tenancy metadata. Which policy statement correctly implements this?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Allow group ComplianceTeam to read policies, tenancy in tenancy
Reading IAM policies requires the 'policies' resource type, and tenancy metadata requires the 'tenancy' resource type.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Allow group ComplianceTeam to use security-audits in compartment root
Why it's wrong here
'security-audits' is not a valid OCI resource type.
- ✓
Allow group ComplianceTeam to read policies, tenancy in tenancy
Why this is correct
Multiple resource types can be combined in a single policy statement separated by commas, allowing read access to both policies and tenancy details.
- ✗
Allow group ComplianceTeam to inspect all-resources in tenancy
Why it's wrong here
'inspect' on all-resources gives broad visibility but 'read policies, tenancy' is more precise and adheres to least privilege.
- ✗
Allow group ComplianceTeam to manage iam-configs in tenancy
Why it's wrong here
'manage' grants write permissions, which violates the requirement for read-only audit access.
About these practice questions
Courseiva writes every 1Z0-1072-26 question from scratch — 521 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Oracle exam blueprint
This 1Z0-1072-26 practice question is part of Courseiva's free Oracle certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 1Z0-1072-26 exam.