1Z0-1127-25 Deploying and Managing Generative AI on OCI Practice Question
An organization is fine-tuning a large language model on OCI Data Science. They must ensure that the training data remains within a specific geographic region and is encrypted at rest. Which combination of resources should they use?
⚠ Common exam trap
A common mix-up: candidates confuse encryption at rest with data residency enforcement, assuming any encrypted storage (like Block Volume or File Storage) automatically guarantees geographic containment, but only Object Storage provides bucket-level policies to explicitly restrict data movement across regions.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
OCI Object Storage bucket with a bucket policy and default encryption, created in the required region.
OCI Object Storage with default encryption ensures data is encrypted at rest using AES-256, and a bucket policy can enforce that data remains within a specific geographic region by restricting cross-region replication or access. This combination directly meets the requirements of regional data residency and encryption at rest for training data used in OCI Data Science.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
OCI Object Storage bucket with a bucket policy and default encryption, created in the required region.
Why this is correct
Bucket policy controls access, encryption secures data at rest, and region selection ensures data residency.
- ✗
OCI Database with Transparent Data Encryption, storing the training data in tables.
Why it's wrong here
Databases are not optimized for large text corpora used in LLM training.
- ✗
OCI File Storage with export options and encryption, mounted to the Data Science session.
Why it's wrong here
File Storage is not as commonly used for large training datasets and does not inherently enforce data residency.
- ✗
OCI Block Volume with encryption, attached to the Data Science notebook session.
Why it's wrong here
Block volumes are ephemeral and not designed for long-term data residency compliance.
Quick reference
Symmetric Encryption Algorithm Comparison
| Algorithm | Key Size | Block Size | Status | Notes |
|---|---|---|---|---|
| AES-128 | 128-bit | 128-bit | Current standard | NIST approved; WPA3, TLS |
| AES-256 | 256-bit | 128-bit | Current standard | Preferred for sensitive / govt data |
| 3DES | 112-bit effective | 64-bit | Deprecated (2023) | Replaced by AES |
| DES | 56-bit | 64-bit | Broken | Cracked in < 24 h; never deploy |
| ChaCha20 | 256-bit | Stream cipher | Current | TLS 1.3, WireGuard |
Go deeper
Related to this question
About these practice questions
This 1Z0-1127-25 question is part of Courseiva's 768-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 1Z0-1127-25 practice question is part of Courseiva's free Oracle certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 1Z0-1127-25 exam.