1Z0-1127-25 Deploying and Managing Generative AI on OCI Practice Question
An administrator needs to ensure that only specific users in the finance department can invoke a generative AI model deployed on OCI. Which IAM policy should be used?
⚠ Common exam trap
Oracle often tests the distinction between 'use' and 'manage' verbs, where candidates mistakenly choose 'manage' thinking it includes 'use', but 'manage' grants excessive permissions that violate least privilege requirements.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
allow group finance_group to use generative-ai-model in compartment finance
The 'use' verb in an OCI IAM policy grants the minimum required permissions to invoke a generative AI model without allowing management actions like creating or deleting models. The policy scopes access to the 'finance_group' group and the 'finance' compartment, ensuring only specific users in the finance department can invoke the model.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
allow group admins to use generative-ai-model in compartment finance
Why it's wrong here
This allows admins, not finance group.
- ✗
allow group finance_group to manage generative-ai-model in compartment finance
Why it's wrong here
Manage includes create/delete, which is excessive for invocation only.
- ✓
allow group finance_group to use generative-ai-model in compartment finance
Why this is correct
This correctly restricts to the finance group.
- ✗
allow any-user to use generative-ai-model in compartment finance
Why it's wrong here
This allows all users, not just finance.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 1Z0-1127-25 question from scratch — 768 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on 1Z0-1127-25
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A company needs to ensure that only authorized users can invoke an endpoint for a generative AI model. Which OCI feature should be used to control access?
easy- A.Network security groups (NSGs)
- B.VCN flow logs
- C.OCI Web Application Firewall (WAF)
- ✓ D.OCI Identity and Access Management (IAM) policies
Why D: OCI Identity and Access Management (IAM) policies are the correct choice because they define who (users, groups, or service principals) can invoke which OCI resources, including generative AI model endpoints. IAM policies use resource-type and verb-based statements (e.g., 'allow group A to manage ai-service-family in compartment X') to enforce authorization at the API level, ensuring only authorized principals can call the model's inference endpoint.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 1Z0-1127-25 practice question is part of Courseiva's free Oracle certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 1Z0-1127-25 exam.