Free 1Z0-134 Web TestEngine Demo

Q9 Single choice

You are configuring the principals needed to fulfill the security requirements of an application within a sandbox environment that uses the WebLogic Server-embedded LDAP server.

The given security requirements provided have outlined the following facts about some test principals:

One security requirement states that internal patient data can be viewed only by physicians who are employees.

What is an appropriate way to fulfill this security requirement from a principal perspective using the provided information?

A
Create an authorization policy that grants access if a user is a member of the physicians group and their employee attribute is true, bypassing the use of a role entirely.
B
Create an ACL that grants access if a user is a member of the physicians group and their employee attribute is true, bypassing the use of a role entirely.
C
Create authorization policies for individual users whose employee attribute is true creating a constraint-only model, bypassing the use of a role entirely.
D
Create an authorization policy that denies access if a user is a member of the physicians group and their employee attribute is false, bypassing the use of a role entirely.

1Z0-134 Web TestEngine demo