Building LLM Applications with RAG and Vector Search →mediumMultiple ChoiceObjective-mapped

1Z0-1127-25 Practice Question: Building LLM Applications with RAG and Vector Search

An enterprise RAG system must ensure that retrieved data comes only from authorized sources. Which OCI feature should be used to enforce this?

⚠ Common exam trap

It's easy for candidates to confuse network-level controls (NSGs) with identity-based access controls (IAM), mistakenly thinking that restricting network traffic is sufficient to enforce data source authorization in a RAG pipeline.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

OCI IAM policies for the vector database

OCI IAM policies allow you to define granular access controls on the vector database, ensuring that only authorized principals (users, groups, or service principals) can read or write data. This directly enforces that retrieved data comes only from authorized sources, which is a core requirement for enterprise RAG systems.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
Data encryption at rest
Why it's wrong here
Encryption protects data at rest but does not control access.
✓
OCI IAM policies for the vector database
Why this is correct
IAM policies control who can access the vector database and its data.
✗
Network security groups
Why it's wrong here
Network security groups control network traffic, not data-level access.
✗
Resource quotas
Why it's wrong here
Resource quotas limit usage but do not enforce authorized sources.

Go deeper

1Z0-1127-25 Practice Question: Building LLM Applications with RAG and Vector Search

Why each option matters

Option-by-option breakdown

Related to this question