Deploying and Managing Generative AI on OCI →hardMultiple ChoiceObjective-mapped

1Z0-1127-25 Deploying and Managing Generative AI on OCI Practice Question

Exhibit

Refer to the exhibit.

```
{
  "statements": [
    "ALLOW GROUP GenerativeAIAdmins TO USE generative-ai-family IN TENANCY",
    "ALLOW GROUP GenerativeAIUsers TO USE generative-ai-dedicated-ai-clusters IN COMPARTMENT MyCompartment",
    "ALLOW GROUP GenerativeAIUsers TO USE generative-ai-models IN COMPARTMENT MyCompartment"
  ]
}
```

A security administrator wrote the above IAM policy for a compartment named MyCompartment. Users in the GenerativeAIUsers group can successfully list dedicated AI clusters and models in MyCompartment, but when they try to create an inference endpoint using a model from a different compartment (SharedModels), they get an authorization error. What is the most likely missing policy statement?

⚠ Common exam trap

Oracle often tests the distinction between 'read' and 'use' permissions, where candidates mistakenly think listing models (read) is sufficient to use them in another resource creation, but OCI requires the 'use' verb for referencing a resource across compartments.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

ALLOW GROUP GenerativeAIUsers TO USE generative-ai-models IN COMPARTMENT SharedModels

The error occurs because the user has permission to list models in MyCompartment but not to use a model from SharedModels when creating an inference endpoint. The missing policy must grant the USE permission on generative-ai-models in the SharedModels compartment, as creating an endpoint requires the ability to reference and use the model resource from that compartment. Option D correctly provides this permission.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
ALLOW GROUP GenerativeAIUsers TO MANAGE generative-ai-models IN COMPARTMENT SharedModels
Why it's wrong here
They only need to use the model, not manage.
✗
ALLOW GROUP GenerativeAIUsers TO USE generative-ai-family IN TENANCY
Why it's wrong here
Too broad; they already have specific permissions.
✗
ALLOW GROUP GenerativeAIUsers TO USE generative-ai-dedicated-ai-clusters IN COMPARTMENT SharedModels
Why it's wrong here
The cluster is in MyCompartment, not SharedModels.
✓
ALLOW GROUP GenerativeAIUsers TO USE generative-ai-models IN COMPARTMENT SharedModels
Why this is correct
This allows them to use models from SharedModels compartment.

Go deeper

1Z0-1127-25 Deploying and Managing Generative AI on OCI Practice Question

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question