Fundamentals of Large Language Models →easyMultiple ChoiceObjective-mapped

1Z0-1127-25 Fundamentals of Large Language Models Practice Question

Exhibit

{
  "compartmentId": "ocid1.compartment.oc1..example",
  "definedTags": {},
  "description": "Allow group GenAIUsers to call generative-ai-family in compartment",
  "freeformTags": {},
  "id": "ocid1.policy.oc1..example",
  "name": "genai-policy",
  "state": "ACTIVE",
  "statements": [
    "Allow group GenAIUsers to use generative-ai-family in compartment ExampleCompartment"
  ]
}

Refer to the exhibit. A user in group GenAIUsers reports that they cannot call the OCI Generative AI API. What is the most likely issue?

⚠ Common exam trap

Oracle often tests the misconception that a user's group membership is the sole factor for policy applicability, ignoring that the compartment scope in the policy statement must match the user's compartment or resource compartment for the policy to take effect.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The compartment ID in the policy does not match the user's compartment.

The policy is scoped to a specific compartment ID, but the user's compartment does not match that ID. For OCI IAM policies to grant access to resources like the Generative AI API, the policy must be written for the compartment where the resource resides or where the user operates. Since the user is in a different compartment, the policy does not apply, causing the API call to fail.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
The policy statement is missing the 'inspect' verb.
Why it's wrong here
The 'use' verb includes permissions needed for generative-ai-family operations; 'inspect' is for read-only list operations but not required for API calls.
✗
The policy is in INACTIVE state.
Why it's wrong here
The policy state is explicitly shown as ACTIVE, so this is not the cause.
✓
The compartment ID in the policy does not match the user's compartment.
Why this is correct
The policy applies to 'ExampleCompartment' by name, but the user may be in a different compartment. The compartment OCID in the policy header does not match the compartment name in the statement, indicating a mismatch.
✗
The user is not in the group GenAIUsers.
Why it's wrong here
The scenario states the user is in the group, so this is unlikely.

Go deeper

1Z0-1127-25 Fundamentals of Large Language Models Practice Question

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question