Oracle 1Z0-574 Online Practice Questions and Exam Preparation

Oracle 1Z0-574 Online Questions & Answers

• Question 1:

  Which of the following statements is true with respect to virtualization?

  A. Visualization creates a layer of abstraction that allows the underlying resources to be managed independently of the applications that run on them.
  B. Virtualization is a hardware appliance that allows the applications to run faster.
  C. Virtualization is a technology used for creating clusters to support scalability of the infrastructure.
  D. Visualization may lead to server sprawl and decrease the overall data center utilization.
  A. Visualization creates a layer of abstraction that allows the underlying resources to be managed independently of the applications that run on them.
  C. Virtualization is a technology used for creating clusters to support scalability of the infrastructure.

  ---

  A: Computer hardware virtualization (or hardware virtualisation) is the virtualization of computers or operating systems. It hides the physical characteristics of a computing platform from users, instead showing another abstract computing platform.

  C: Computer clusters have historically run on separate physical computers with the same operating system. With the advent of virtualization, the cluster nodes may run on separate physical computers with different operating systems which are painted above with a virtual layer to look similar. The cluster may also be virtualized on various configurations as maintenance takes place.

• Question 2:

  What one the three primary concerns that developers following this architecture should strive to conform to?

  A. Personalization
  B. Modular development
  C. Internationalization
  D. Localization
  E. The Model View-Controller (MVC) pattern
  F. Federation
  B. Modular development
  E. The Model View-Controller (MVC) pattern
  F. Federation

  ---

  The Development View of the architecture describes aspects of the architecture that are of interest to developers building assets that conform to and leverage the architecture. There are three primary concerns that developers following this architecture should strive to conform with: the model-view- controller (MVC) pattern, modular development, and federation.

• Question 3:

  Oracle Entitlements Server (OES) provides fine grained authorization capabilities that, along with Oracle Access Manager (OAM), comprise the XACML based Authorization Service. What factors should be considered when choosing how to specify and deploy OES policy decision points (PDPs)?

  A. If a policy enforcement point exists in the DMZ, then a remote PDP should be deployed behind the inner firewall.
  B. If both OAM and OES are used, then OES should be configured to use the PDP embeddedin OAM.
  C. OES includes a security provider for Oracle WebLogic Server that will handle policy decisions locally.
  D. Oracle Advanced Security includes a universal stand-alone PDP that provides access for Java, NET, and SOAP clients.
  E. It is best to use a local PDP whenever possible to avoid network calls between the PEP and PDP. A remote PDP ran be used when a local PDP is not available for the client technology, or for other various exceptional cases.
  A. If a policy enforcement point exists in the DMZ, then a remote PDP should be deployed behind the inner firewall.
  C. OES includes a security provider for Oracle WebLogic Server that will handle policy decisions locally.
  E. It is best to use a local PDP whenever possible to avoid network calls between the PEP and PDP. A remote PDP ran be used when a local PDP is not available for the client technology, or for other various exceptional cases.

  ---

  A, E:Policy decision points (PDPs) for computingnodes located outside the secure environment. For example, web servers located in theDMZ might leverage a central PDP, deployed behind a firewall.

  Policy enforcement is

  still local to the web servers but decisions are made remotely.

  C: OES integrates with OPSS (and other security platforms) to enable the use of local PEPs and PDPs. OPSS is a standards-based Java framework of plug-in security services and APIs. It provides the platform security for Oracle WebLogic Server.

  Note: OES is a fine-grained authorization engine that simplifies the management of complex entitlement policies. The authorization engine includes both local and centralized PDPs. OES integrates with OPSS (and other security platforms) to enable the use of local PEPs and PDPs. Policy administration is centralized, providing a broad perspective of access privileges, yet delegated, enabling multiple stakeholders to maintain the policies that affect them.

  Note 2: PDP - Policy Decision Point, where policy is evaluated and a decision is made. PDPs may be distributed throughout the IT environment and physically co-located with PEPs to avoid network latency. Note 3: PEP - Policy Enforcement Point, where permit/deny access decisions are enforced. This is generally included in SOA Service or application infrastructure, such as J2EE containers that manage security. It may also be represented as custom code within a SOA Service or application, providing fine grained entitlements evaluation.

• Question 4:

  Which of the following is NOT defined as a primary ORA computing foundation component?

  A. Distributed Computing
  B. Utility Computing
  C. Grid Computing
  D. Caching
  D. Caching

  ---

  Primary ORA computing foundation components: Distributed Computing On-Demand Computing Utility Computing Grid Computing Cloud Computing Elastic Computing Virtualization

• Question 5:

  Which one of the following statements best describes authentication as a service?

  A. Authentication is a service offered by the local computing platform to the application it is hosting. The application uses this service to authenticate users with a local LDAP.
  B. Authentication is a service offered by the enterprise security framework. Applications access it directly, bypassing local platform security. The authentication service provides a level of abstraction between applications and the various instances of infrastructure (LDAPs, databases) that can be used to verify credentials.
  C. Authentication is a service offered by both the local computing platform and the enterprise security framework. The local platform can be configured to direct requests to local LDAPs or common enterprise services, depending on the operating environment (dev/test/production). Meanwhile, the enterprise security framework services can virtualize several shared credential stores into a single shared service.
  D. Authentication is not a valid example of a security service.
  C. Authentication is a service offered by both the local computing platform and the enterprise security framework. The local platform can be configured to direct requests to local LDAPs or common enterprise services, depending on the operating environment (dev/test/production). Meanwhile, the enterprise security framework services can virtualize several shared credential stores into a single shared service.

  ---

  ORA Security is one of the series of documents that comprise Oracle Reference Architecture. ORA Security describes important aspects of the enterprise security layer including identity, role, and entitlement management, authentication, authorization, and auditing (AAA), and transport, message, and data security.

  A desktop SSO solution is one that lives on the user's personal computer and handles authentication challenges on behalf of the user. The user logs into his desktop environment, which in turn works on his behalf to authenticate to the applications he accesses. The user is no longer prompted for credentials - they are provided automatically by a process running on the desktop.

• Question 6:

  Identify the true statements in the following list.

  A. The core components of the ORA UI Logical view are grouped into the client tier and the server tier.
  B. The components of the ORA UI Logical view are model, view, and controller.
  C. The core components of the ORA UI Logical view are grouped into thedisplaytier and theresourcestier.
  D. In addition to the core components, the Logical view also includes security, communication protocols, and development tools.
  A. The core components of the ORA UI Logical view are grouped into the client tier and the server tier.
  D. In addition to the core components, the Logical view also includes security, communication protocols, and development tools.

  ---

  The Logical View of the architecture describes the various layers in the architecture. Each layer encapsulates specific capabilities for the overall architecture. Upper layers in the architecture leverage the capabilities provided by the lower

  layers.

  The Client Tier is hosted on the display device.

  The Service Tier hosts the capabilities that satisfy the requirements of the end user.

  

• Question 7:

  Which of the following interactions does not occur as part of a web-based single sign-on scenario?

  A. A gateway, deployed In the Web Server, intercepts requests destined for protected resource
  B. The user is prompted for login credentials when a protected resource is accessed and the user has not (recently) logged In.
  C. Credentials are passed to the application for validation.
  D. Authorization checks are optionally performed before the user is permitted access to the application.
  E. A cookie is returned, which is used to permit access to other protected resources in that domain
  C. Credentials are passed to the application for validation.

  ---

  The application does not handle the validation.

• Question 8:

  Which of the following statements best describes how the deployment supports closed-loop governance?

  A. The Metadata Repository is integrated with the operational systems to link operational metrics to the assets to ensure that the assets perform asintended.
  B. The Metadata Repositories deployed in each environment are chained to share asset usage information.
  C. A closed-loop governance framework is deployed on a clustered server to monitor the governance activities.
  D. Production systems are integrated to the developer desktops to validate the requirements against the implemented code.
  B. The Metadata Repositories deployed in each environment are chained to share asset usage information.
  C. A closed-loop governance framework is deployed on a clustered server to monitor the governance activities.

  ---

  SOA Software's Policy Manager and Service Manager combine to form a comprehensive closed-loop SOA Governance solution.

  Closed loop means:

  *

  Defining and managing actionable policies in a governance solution at design-time

  *

  Enforcing these policies via deep integration with a management solution at run-time

  *

  Auditing that these policies are being enforced

  *

  Using industry standards (WS-Policy, WS-MEX) where appropriate for information exchange Closed loop infrastructure enables demand and Value Management

  *

  Collect performance, usage and exception statistics at run-time

  *

  Track these statistics via the governance solution

  *

  Use live, audited information to drive value-based decisions about the effectiveness of different services and organizations

  *

  Provide developers with up to the minute information about a service in runtime to inform their decisions about which services to use

  *

  Manage supply and demand to ensure maximum efficiency and benefit from SOA

  The products share a common registry and metadata repository to ensure seamless integration and offer active governance. Closed-loop governance will:

  *

  Ensure defined policies are enforced ** When you define a policy for a service you have to KNOW categorically that it is being enforced ** Generate audit trails for run-time and design-time policy compliance

  *

  Measure the real-world value of SOA ** Not just theoretical value ** How many applications are using each service, and how much are they using it ** NOT how many applications have asked to use a certain capacity of each service

  *

  Manage, monitor and control relationships between consumers and providers ** Enforced contracts ** Capacity planning Change management

  The diagram below shows the relationships between SOA governance, security and management, demonstrating how SOA Policy Management forms a closed loop of policy, metrics, and audit.

  

  http://www.soa.com/images/img_closed_loop.gif

• Question 9:

  As part of a company-wide IT Initiative to simplify and rationalize the technology and products used you have been tasked with defining an Enterprise Architecture. The Enterprise Architecture will be used to communicate the desired future state where redundant, deprecated, and undesired technology and products have been eliminated. Oracle products will be included. In the Enterprise Architecture, it will be products from other vendors, including products that directly compete with Oracle products.

  Which option best describes how IT Strategies from Oracle (ITSO) material can be used while creating the Enterprise Architecture?

  A. The ITSO material cannot be used because ITSO applies to Oracle products only.
  B. The ITSO material can be used without modification because it has no Oracle product dependencies.
  C. The ITSO material can be used as reference material but will require customization to reflect specific products selected by the company.
  D. The Oracle Reference Architecture component of ITSO can be readily applied, but the Rest of ITSO cannot, because of product dependencies.
  E. The Oracle Reference Architecture component of ITSO cannot be applied due to pre dependencies, but the rest of ITSO can be applied.
  F. The ITSO material is not applicable to rationalization of IT asset
  C. The ITSO material can be used as reference material but will require customization to reflect specific products selected by the company.

  ---

  IT Strategies from Oracle (ITSO) is a series of documentation and supporting collateral designed to enable organizations to develop an architecture-centric approach to enterprise-class IT initiatives. ITSO presents successful technology strategies and solution designs by defining universally adopted architecture concepts, principles, guidelines, standards, and patterns.

  ITSO is made up of three primary elements:

  *

  Oracle Reference Architecture (ORA) defines a detailed and consistent architecture for developing and integrating solutions based on Oracle technologies. The reference architecture offers architecture principles and guidance based on recommendations from technical experts across Oracle. It covers a broad spectrum of concerns pertaining to technology architecture, including middleware, database, hardware, processes, and services.

  *

  Enterprise Technology Strategies (ETS) offer valuable guidance on the adoption of horizontal technologies for the enterprise.They explain how to successfully execute on a strategy by addressing concerns pertaining to architecture, technology, engineering, strategy, and governance. An organization can use this material to measure their maturity, develop their strategy, and achieve greater levels of success and adoption. In addition, each ETS extends the Oracle Reference Architecture by adding the unique capabilities and components provided by that particular technology. It offers a horizontal technology-based perspective of ORA.

  *

  Enterprise Solution Designs (ESD) are industry specific solution perspectives based on ORA. They define the high level business processes and functions, and the software capabilities in an underlying technology infrastructure that are required to build enterprise-wide industry solutions. ESDs also map the relevant application and technology products against solutions to illustrate how capabilities in Oracle's complete integrated stack can best meet the business, technical and quality of service requirements within a particular industry.

• Question 10:

  Which of the following statements about asset-centric engineering is true?

  A. Project assets are maintained at each individual project level in an asset-centric engineering.
  B. Asset-centric engineering promotes an integrated asset management approach in which assets are shared across the enterprise.
  C. Asset-centric engineering uses multiple enterprise repositories to store and maintain the assets.
  D. Asset-centric engineering requires that everything related to the assets,including metadata and payload, should be stored in the same repository.
  D. Asset-centric engineering requires that everything related to the assets,including metadata and payload, should be stored in the same repository.

  ---

  The underlying core principle of ORA Engineering is asset sharing and enterprise development through an integrated asset management approach. Most organizations use a Software Configuration Management (SCM) or Version Control System (VCS) for managing the code and configuration assets. These tools are great for managing the versioning of assets produced but they don't maintain the metadata of the assets. Without metadata assets are not organized in context and it is hard to discover them. ORA recommends an asset-centric engineering process, where an Asset Manager is used to address the challenges posed by the traditional approaches. The Asset Manager is typically an enterprise-scoped Metadata Repository working in concert with SCMs and other types of asset repositories.