1Z0-1127-25 OCI Generative AI Service Practice Question
A security administrator needs to grant a group of data scientists the ability to use OCI Generative AI service resources in the compartment 'genai-dev'. They want to allow the group to create endpoints and run inference, but not to manage IAM policies. Which policy statement is correct?
⚠ Common exam trap
Watch out — candidates often confuse 'use' with 'manage' or 'read', assuming that creating endpoints requires 'manage' permissions, but OCI's 'use' verb is specifically designed for operational tasks like running inference and creating resources within a compartment without granting full administrative rights.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Allow group DataScientists to use generative-ai-family in compartment genai-dev
The 'use' verb in OCI IAM policies grants the ability to perform operational actions on resources without allowing management or administrative changes. For the OCI Generative AI service, 'use generative-ai-family' permits data scientists to create endpoints and run inference (the core actions needed), while explicitly preventing them from managing IAM policies or altering resource configurations. This aligns with the principle of least privilege required by the security administrator.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Allow group DataScientists to use generative-ai-family in compartment genai-dev
Why this is correct
'use' allows creating endpoints and running inference without granting policy management.
- ✗
Allow group DataScientists to manage generative-ai-family in compartment genai-dev
Why it's wrong here
'manage' provides full control, including permission to modify IAM policies, which is too broad.
- ✗
Allow group DataScientists to inspect generative-ai-family in compartment genai-dev
Why it's wrong here
'inspect' provides even less access than 'read', insufficient for the required tasks.
- ✗
Allow group DataScientists to read generative-ai-family in compartment genai-dev
Why it's wrong here
'read' only allows viewing resources, not creating endpoints or running inference.
Go deeper
Related to this question
About these practice questions
One of 768 original 1Z0-1127-25 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 1Z0-1127-25 practice question is part of Courseiva's free Oracle certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 1Z0-1127-25 exam.