Oracle 1Z0-1070-20 Online Practice Questions and Exam Preparation

Oracle 1Z0-1070-20 Online Questions & Answers

• Question 1:

  Which industry-standard benchmark engine needs to be configured with Oracle Configuration and Compliance Cloud Service?

  A. General Data Protection Regulation (GDPR)
  B. Secure Technical Implementation Guides (STIGs)
  C. Open Vulnerability and Assessment Language (OVAL)
  D. Security Content Automation Protocol (SCAP)
  D. Security Content Automation Protocol (SCAP)

• Question 2:

  Which two are the main differentiators of Oracle Identity Cloud Service NOT supported by first- generation Identity-as-a-Service (IDaaS) vendors? (Choose two.)

  A. It implements OAuth by default for easy integration with Oracle CASB Cloud Service and Oracle Security Monitoring and Analytics Cloud Service.
  B. It provides the ability to manage the life cycle of identities on hybrid environments.
  C. It provides support for multiple Software-as-a-Service (SaaS) vendors.
  D. It provides support for Open Standard.
  A. It implements OAuth by default for easy integration with Oracle CASB Cloud Service and Oracle Security Monitoring and Analytics Cloud Service.
  D. It provides support for Open Standard.

• Question 3:

  You want to configure Oracle Identity Cloud Service so that any users who use an IP address that comes from a country where hacking is rampant are prevented from accessing Oracle Identity Cloud Service. How would you accomplish this?

  A. Define a network perimeter, assign it to a rule of a sign-on policy, and set the access for the rule to be denied.
  B. Define a network perimeter, assign it to a rule of a sign-on policy, set the access for the rule to be denied, and define risk-related conditions in the rule associated with the user's location.
  C. Define a network perimeter and assign it to a rule of a sign-on policy.
  D. Define a network perimeter.
  A. Define a network perimeter, assign it to a rule of a sign-on policy, and set the access for the rule to be denied.

• Question 4:

  In your organization you want to do the security validation of development environments in the cloud. Which two can be used along with Configuration and Compliance Cloud Service? (Choose two.)

  A. Use the Secure Technical Implementation Guides (STIGs) industry-standard benchmarks.
  B. Use out-of-the-box, REST-based rules to check for the restriction of cloud provider's administrative port address to corporate IP addresses.
  C. Use the rules to check that auditing is turned on in the cloud.
  D. Use custom in-house rules along with Security Content Automation Protocol (SCAP) assessments
  A. Use the Secure Technical Implementation Guides (STIGs) industry-standard benchmarks.
  B. Use out-of-the-box, REST-based rules to check for the restriction of cloud provider's administrative port address to corporate IP addresses.

• Question 5:

  Which is a top challenge for a Security Operations Center (SOC) Manager?

  A. to keep all systems in compliance within 30 days of new security regulations
  B. to ensure network and systems uptime to meet organization and customer SLAs
  C. to identify threats proactively while maintaining organization and customer SLAs
  D. to design and implement a software development life cycle program
  C. to identify threats proactively while maintaining organization and customer SLAs

• Question 6:

  What does Oracle CASB Cloud Service Access Map within Dashboard Summary show?

  A. suspicious activity and threats that have transpired within Oracle CASB and across different geographical regions or the world
  B. up to five Application Instances, including API calls showing the geographical regions where the instance was first implemented
  C. mobile devices users who are actively using Oracle Identity Cloud Services in a manner that is against Oracle Corporate Usage Policy
  D. a geography of login attempts within Oracle Identity Cloud Service and Oracle Enterprise Resource Planning Cloud, specifically the successful logins
  A. suspicious activity and threats that have transpired within Oracle CASB and across different geographical regions or the world

• Question 7:

  You want a user to perform the following administrative tasks in Oracle Identity Cloud Service:

  customizing the interface, default settings, notifications, and the password policy;

  configuring Multi- Factor Authentication (MFA);

  and managing bridges, identity providers, and trusted partner certificates.

  To which administrator role do you assign this user?

  A. Application administrator
  B. Audit administrator
  C. User administrator
  D. Security administrator
  D. Security administrator

• Question 8:

  Which Identity SOC service could be deployed on Oracle Cloud at customer?

  A. Oracle CASB Cloud service
  B. Oracle Orchestration Cloud Service
  C. Oracle Identity Cloud service
  D. Oracle Security Monitoring and Analytics Cloud service
  C. Oracle Identity Cloud service

• Question 9:

  Which two features does Oracle CASB Cloud Service support? (Choose two.)

  A. automatically resolves suspicious events that occur
  B. security controls for custom applications running on AWS
  C. prevents unauthorized access to cloud application files
  D. security controls for Oracle ERP Cloud Service
  B. security controls for custom applications running on AWS
  C. prevents unauthorized access to cloud application files

• Question 10:

  Which two are advantages of using Oracle Configuration and Compliance Cloud Service? (Choose two.)

  A. It provides insights with highest severity and frequency to prioritize remediation.
  B. It scores only for benchmark assessments without attaching SLA to the rule-sets.
  C. It only uses Security Technical Implementation Guides (STIGs) for out-of-the-box automation for 100% compliance of finance systems.
  D. It scores the benchmark assessment and attaches SLAs to rule-sets, and also uses the STIG.
  B. It scores only for benchmark assessments without attaching SLA to the rule-sets.
  D. It scores the benchmark assessment and attaches SLAs to rule-sets, and also uses the STIG.