1Z0-1127-25 Deploying and Managing Generative AI on OCI Practice Question
A company has multiple teams sharing an OCI Generative AI Dedicated AI Cluster. They need to ensure that each team can only access their own fine-tuned models and cannot see or invoke models from other teams. What is the best approach?
⚠ Common exam trap
It's easy for candidates to assume network-level isolation (security lists) or encryption keys are sufficient for multi-tenant model access control, but OCI requires IAM resource-level policies to enforce which principals can invoke specific models.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use OCI compartments and IAM policies with resource-level permissions for models
OCI compartments and IAM policies with resource-level permissions allow you to grant granular access to specific models within a Dedicated AI Cluster. By placing each team's fine-tuned models in separate compartments and writing policies that restrict access to those compartments, you ensure teams can only see and invoke their own models. This approach leverages OCI's native identity and access management without requiring separate clusters or network-level isolation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Use OCI compartments and IAM policies with resource-level permissions for models
Why this is correct
Compartments and IAM policies can restrict access to specific models.
- ✗
Train separate models for each team
Why it's wrong here
This does not enforce access control; teams could still access each other's models.
- ✗
Encrypt model artifacts with different keys for each team
Why it's wrong here
Encryption protects data at rest, but does not prevent authorized users from accessing the data.
- ✗
Use network security lists to isolate traffic
Why it's wrong here
Network security lists control traffic at the network level, not API-level access to models.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 1Z0-1127-25 question from scratch — 768 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 1Z0-1127-25 practice question is part of Courseiva's free Oracle certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 1Z0-1127-25 exam.