A planning-department repository in OCIR must be pullable only by callers with IAM permission or a logged-in Docker session. Which repository setting matches that requirement?
Select an answer to reveal the explanation.
Short Explanation
Private needs IAM or a logged-in pull. Public can be pulled by anyone who knows the URL—and making a repo public is a privileged manage operation, not “OCIR has no auth.”
Full Explanation
Private OCIR repositories require IAM permission or an authenticated pull to read. Public repositories can be pulled by anyone who knows the URL. Creating or changing a repository to public is privileged (Administrators or REPOSITORY_MANAGE). Public is a deliberate product choice, not evidence that authentication does not exist on OCIR.