1Z0-1127-25 Deploying and Managing Generative AI on OCI Practice Question
A user wants to invoke an OCI Generative AI endpoint from a cloud function. What is the required authentication method?
⚠ Common exam trap
Oracle often tests the misconception that OCI always uses session tokens or OAuth2 for service-to-service calls, but for Generative AI and most OCI REST APIs, the required method is API signing key authentication, not token-based or certificate-based methods.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
API signing key
OCI Generative AI endpoints require API signing keys for authentication because they are REST APIs that use the Signature Version 1 algorithm (based on HMAC-SHA256) to sign requests. Cloud Functions must include a signed HTTP header using a user's or service principal's OCI API signing key pair (private key for signing, public key uploaded to OCI) to prove identity and authorization. This is the standard method for programmatic access to OCI services, including Generative AI, and is enforced by the OCI Identity and Access Management (IAM) policy layer.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
API signing key
Why this is correct
API signing key is required for OCI API authentication.
- ✗
User name and password
Why it's wrong here
Username/password cannot be used for OCI API calls.
- ✗
Session token
Why it's wrong here
Session tokens are used in web console, not for API signing.
- ✗
OCI certificate
Why it's wrong here
Certificates are not used for direct API authentication.
Quick reference
Cloud Service Model Comparison
| Model | You Manage | Provider Manages | Examples |
|---|---|---|---|
| IaaS | OS, runtime, apps, data | Hardware, hypervisor, networking | EC2, Azure VMs, GCP Compute Engine |
| PaaS | Apps and data | OS, runtime, middleware, hardware | Elastic Beanstalk, Azure App Service |
| SaaS | Data and settings only | Everything else | Microsoft 365, Salesforce, Workday |
| FaaS / Serverless | Function code only | Infra, scaling, runtime | Lambda, Azure Functions, Cloud Run |
| CaaS | Containers and apps | Kubernetes, OS, hardware | EKS, AKS, GKE |
Go deeper
Related to this question
About these practice questions
Courseiva writes every 1Z0-1127-25 question from scratch — 768 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 1Z0-1127-25 practice question is part of Courseiva's free Oracle certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 1Z0-1127-25 exam.