1Z0-1127-25 Deploying and Managing Generative AI on OCI Practice Question
A developer wants to call the OCI Generative AI service from a Python application running on an OCI Compute instance. Which method is the most secure for authenticating the API calls?
⚠ Common exam trap
Many candidates confuse resource principals (used for serverless functions) with instance principals (used for Compute instances), or they assume that storing credentials in a config file is acceptable because it is a common practice in non-OCI environments.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use instance principals with a dynamic group and policy
Instance principals allow the Compute instance to authenticate to OCI services without storing any credentials on the instance. By assigning a dynamic group and policy, the instance obtains a temporary security token from the OCI metadata service, which is the most secure method for programmatic access from within OCI.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use a resource principal
Why it's wrong here
Resource principals are for OCI Functions, not Compute instances.
- ✗
Use the OCI CLI with a config file containing credentials
Why it's wrong here
Config files contain credentials that could be exposed.
- ✓
Use instance principals with a dynamic group and policy
Why this is correct
Instance principals allow secure authentication without storing secrets.
- ✗
Use an API signing key stored on the instance
Why it's wrong here
Storing keys on the instance is less secure.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 1Z0-1127-25 question from scratch — 768 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 1Z0-1127-25 practice question is part of Courseiva's free Oracle certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 1Z0-1127-25 exam.