1Z0-1072-26 Identity And Access Management Practice Question
Your security team requires that developers can only terminate Compute instances if the request originates from a specific corporate CIDR block (192.168.100.0/24). How can you implement this requirement using OCI IAM policies?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Allow group Developers to use instance-family in tenancy where request.ip in ('192.168.100.0/24')
OCI IAM policies support conditional access using the 'request.ip' variable in combination with logical operators like 'in'.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Allow group Developers to terminate instances in tenancy where client.subnet = '192.168.100.0/24'
Why it's wrong here
client.subnet is not a valid policy variable; request.ip is the correct variable for evaluating source IP addresses.
- ✓
Allow group Developers to use instance-family in tenancy where request.ip in ('192.168.100.0/24')
Why this is correct
The 'in' operator with request.ip correctly evaluates whether the client IP falls within the specified CIDR block for policy enforcement.
- ✗
Allow group Developers to inspect instances in tenancy where request.ip = '192.168.100.0/24'
Why it's wrong here
This restricts inspection, not termination, and uses an exact string match rather than a CIDR range inclusion operator.
- ✗
Allow group Developers to manage instance-family in tenancy where request.ip = '192.168.100.0/24'
Why it's wrong here
An exact match operator '=' does not correctly evaluate network CIDR subnet blocks for request.ip.
Visual reference
About these practice questions
Courseiva writes every 1Z0-1072-26 question from scratch — 521 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Oracle exam blueprint
This 1Z0-1072-26 practice question is part of Courseiva's free Oracle certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 1Z0-1072-26 exam.