Oracle 1Z0-574 Online Practice Questions and Exam Preparation

Oracle 1Z0-574 Online Questions & Answers

• Question 161:

  Which statement best describes the relationship between the Logical View and the Development view of the Service-Oriented Integration architecture?

  A. The two architectural views are Independent and there is no relationship between them.
  B. The Logical View defines the rationale for layers within the architecture. The Development View specifies the developer tools used for each layer.
  C. The Logical View defines the layers of the architecture and the capabilities within each layer. The Development View describes how aspects of the architecture impact developers following the architecture.
  D. The Logical View defines the layers of the architecture and the capabilities within each layer. The Development View specifies the developer tools that provide the capabilities for each layer.
  E. The Logical View specifies the developer tools required by each layer in the architecture. The Development View describes the developer impact of the tools specified.
  C. The Logical View defines the layers of the architecture and the capabilities within each layer. The Development View describes how aspects of the architecture impact developers following the architecture.

  ---

  * The Logical View of the architecture describes the various layers in the architecture. Each layer encapsulates specific capabilities for the overall architecture. Upper layers in the architecture leverage the capabilities provided by the lower layers.

  *The Development View of the architecture describes aspects of the architecture that are of interest to developers building assets that conform to and leverage the architecture. In a service-oriented integration architecture the primary developer artifacts are the SOA Services that are created to expose data and functionality contained in source systems.

• Question 162:

  Which of the following standards states that every reusable asset must contain a minimum of one manifest file and at least one artifact to be considered a valid reusable asset?

  A. OMG Reusable Asset Specification (RAS)
  B. OMG Meta Object Facility (MOF)
  C. OMG XML Metadata Interchange (XMI)
  D. OMG Systems Modeling Language (SysML)
  A. OMG Reusable Asset Specification (RAS)

  ---

  A: The OMG RAS specification is a set of guidelines and recommendations about the structure, content, and descriptions of reusable software assets. It identifies some categories, or rather types or profiles and provides general guidelines on these profiles. RAS addresses the engineering elements of reuse. It attempts to reduce the friction associated with reuse transactions through consistent, standard packaging.

• Question 163:

  Which statement is true with respect to Metadata Repository and Asset Repository?

  A. Metadata Repository manages the data about the assets, and Asset Repository stores the payload of the assets.
  B. Asset Repository manages the data about the assets, and Metadata Repository stores the payload of the assets.
  C. Metadata Repository stores everything related to the assets. Including metadata and payload.
  D. Asset Repository stores everything related to the assets, including metadata and payload.
  A. Metadata Repository manages the data about the assets, and Asset Repository stores the payload of the assets.

  ---

  Asset repository refers to the tools or technologies that store the physical assets or payload, as opposed to the metadata that is stored in the Metadata Repository.

• Question 164:

  Architecturally speaking, why might an organization deploy a SAML-based Web SSO solution if they already have a cookie-based Web SSO in place and working?

  A. SAML generally performs better and requires less network overhead.
  B. SAML supports federation across cookie domains.
  C. SAML is required for Web Service security, which makesit a natural replacement for cookie based SSO solutions.
  D. SAML isimmune to man-in-the-middle attacks.
  B. SAML supports federation across cookie domains.

  ---

  SSO solutions deployed for a localized domain often exchange state information in a browser cookie. These implementations are limited to the scope of the DNS domain as cookies are not visible across domains. SAML offers alternatives solutions that do not have this limitation.

• Question 165:

  Which three primary types of materials form an Enterprise Technology Strategy?

  A. ORA Technology Perspective
  B. ORA Industry Perspective
  C. Practitioner Guides
  D. Maturity Model
  E. Business Processes
  F. Data Entities
  A. ORA Technology Perspective
  C. Practitioner Guides
  D. Maturity Model

  ---

  There are three primary types of collateral provided for each ETS:

  *

  ORA Technology Perspective

  *

  Practitioner Guides

  *

  Maturity Model

• Question 166:

  Which caching mode does every write to the cache cause a synchronous write to the back-end store?

  A. Refresh-Ahead Cache
  B. Write-Through Cache
  C. Write-Behind Cache
  D. Read-Through Cache
  B. Write-Through Cache

  ---

  In a write-through cache, every write to the cache causes a synchronous write to the backend store.

  In this approach, the data is updated in the

  backend data store, then the primary cache, all within the scope of the transaction. Then the backup cache is also updated to maintain consistency of data.

• Question 167:

  How do you enable risk profiling on the Authentication Service?

  A. Risk profiling is a feature of Oracle Identity Manager (OIM). It can be performed on any collection of users, groups, and/or roles. Risk profiling is an available option for OIM 11g. An administrator must install the license and configure the set of identities to profile.
  B. Risk profiling is a standard feature of Oracle Access Manager (OAM). It is enabled by default, but configured to only profile administrative Identities. The OAM administrator can configure additional identities individually, or by group, or enable profiling on all users.
  C. Risk profiling is a feature of Oracle Adaptive Access Manager (OAAM), OAAM works in conjunction with OAM to provide value-add authentication features. OAAM will assess anomalies based on configurable rules, behavior, and risk analysis and will challenge users when risks ore detected.
  D. Risk profiling is a feature of Oracle Advanced Security. This comprehensive suite provides value- odd authentication and authorization capabilities including multi-factor authentication and rule-based authorization. OAS is a separately installed product that integrates with OAM, OIM, and Oracle Entitlements Server (OES).
  E. Risk profiling is a feature of Oracle Virtual Directory (OVD). It will assess risk based on login attempts, login devices, login locations, and so on, and take action based on configurable rules. Possible actions include denying access, terminating sessions, and raising alerts. Sample rules are provided out of the box, and additional rules can be added via the IVD administrative console.
  C. Risk profiling is a feature of Oracle Adaptive Access Manager (OAAM), OAAM works in conjunction with OAM to provide value-add authentication features. OAAM will assess anomalies based on configurable rules, behavior, and risk analysis and will challenge users when risks ore detected.

  ---

  The Oracle Adaptive Access Manager (OAAM) is part of the Oracle Identity Management product suite that provides access control services to web and other online applications.

  The premise was simple in that the existing authentication technologies were unsatisfactory and easy to compromise. No authenticationtechnology can really provide its full and intended security benefits unless the computer and computer network are re-designed from the grounds up. Oracle Adaptive Access Manager has two components, the strong Authentication-agnostic security component and the application- agnostic Risk component. One simple example of the Strong Authentication component is that a User can choose a personalized keypad and use mouse clicks to enter password to prevent passwords being stolen with key loggers and being phished or pharmed. The Risk Component analyzes the authentication and transaction data for abnormalities and anomalies in real-time to prevent fraud and also in off-line mode to identify and detect internet fraud. Note: Oracle Access Manager (OAM) - OAM provides an identity management and access control system that is shared by all applications. It offers a centralized and automated single sign-on (SSO) solution for managing who has access to what information across IT infrastructure. Oracle Adaptive Access Manager (OAAM) - OAAM provides superior protection for businesses and their customers through strong yet easy-to-deploy multifactor authentication and proactive, real-time fraud prevention. Oracle Identity Manager (OIM) - OIM is a user provisioning and administration solution that automates the process of adding, updating, and deleting user accounts from applications and directories; and improves regulatory compliance by providing granular reports that attest to who has access to what resources Oracle Virtual Directory (OVD) - OVD virtually aggregates identity information from multiple sources and presents a real-time unified view without storing or copying the identity data itself.

• Question 168:

  Which of the following statements are true about the XACML standard and architecture?

  A. The Policy Enforcement Point (PEP) is where permit / deny access decisions are made.
  B. The Policy Information Point (PIP) provides information such as user attributes or environmental data that may be used to make access control decisions.
  C. XACML defines an XML schema used to represent rules for access control.
  D. XACML defines a TCP protocol used to communicate messages between Policy Enforcement Points.
  E. SAML assertions can be used to carry XACML authorization decisions.
  A. The Policy Enforcement Point (PEP) is where permit / deny access decisions are made.
  B. The Policy Information Point (PIP) provides information such as user attributes or environmental data that may be used to make access control decisions.
  C. XACML defines an XML schema used to represent rules for access control.
  E. SAML assertions can be used to carry XACML authorization decisions.

  ---

  A: PEP - Policy Enforcement Point, where permit/deny access decisions are enforced.

  B: PIP - Policy Information Point, where information can be retrieved to evaluate policy conditions. For example, a user's role or time of day may be needed by the PDP to make a policy decision.

  C: eXtensible Access Control Markup Language (XACML) provides a standard way to represent access control policy information using XML. XAMCL defines access control policies in terms of rules, which in turn are defined to include a target, an effect, and a set of conditions. XACML defines an XML schema used to represent rule

  E: The SAML 2.0 profile of XACML 2.0 defines SAML assertions used to carry policies, policy queries and responses, authorization decisions, authorization query decisions and responses, and attribute assertions. In this way SAML authentication, attribute, and authorization assertions are incorporated into the security framework to complement XACML.

• Question 169:

  Which principle should be applied when considering display devices?

  A. The architecture must provide distinct tooling for the unique development of every available device.
  B. The architecture must support translation of standard browser code to all possible variations of display devices, allowing the developer to focus on functionality for the end user.
  C. The architecture must provide for the development of user Interfaces for a variety of display devices.
  D. Only display devices that support a full-featured user interaction are allowed with this architecture.
  C. The architecture must provide for the development of user Interfaces for a variety of display devices.

  ---

  The architecture must support multiple different display devices.

  An architecture that supports only a single display device is prohibitively limiting in today's connected world. Even if only a single display device (e.g. personal computer) is the initial focus for a business solution, the architecture must be designed to readily support additional display devices; otherwise the cost of supporting another display device constrains the future flexibility of the solution.

• Question 170:

  The Oracle Reference Architecture (ORA) includes the central layers as well as Technology Perspectives and Industry perspectives. Which statements best describe how these are related within ORA?

  A. The Technology Perspectives are reference architectures incorporating specific technologies, products, and standards.
  B. The Technology Perspectives provide a view of ORA focused on specific technologies, product and standards.
  C. The Industry Perspectives are reference architectures for specificindustries, for example, Telco, Pharma.
  D. The Industry Perspectives extend the central layers of ORA toincludeindustry-specific capabilities, components, and so on.
  E. ORA is a collection of reference architectures, some based on technology (Technology Perspectives), and some based on industry verticals (Industry Perspectives).
  B. The Technology Perspectives provide a view of ORA focused on specific technologies, product and standards.
  D. The Industry Perspectives extend the central layers of ORA toincludeindustry-specific capabilities, components, and so on.

  ---

  The core ORA material is extended via architecture perspectives. There are two types of perspectives:

  Technology and Industry(not E).

  B:Technology perspectives extend the core material by adding the unique capabilities, components, standards, and approaches that a specific technology strategy offers. SOA, BPM, EPM/BI, and EDA are examples of perspectives for ORA.

  Each technology strategy presents unique requirements to architecture that includes specific capabilities, principles, components, technologies, standards, etc. Rather than create another reference architecture for each strategy, ORA was

  designed to be extensible to incorporate new computing strategies as they emerge in the industry In order to present the reference architecture in the most effective manner, each new technology strategy adds a perspective to ORA. This

  enables the reference architecture to evolve holistically. New computing strategies extend the core material, providing further insight and detail as needed.

  A perspective extends the ORA core collateral by providing views, principles, patterns, and guidelines that are significant to that technology domain yet cohesive with the overall ORA. Industry perspectives extend the core material by adding

  the business functions, business processes, data entities, software capabilities and components that an industry vertical requires. Retail, Financial, Telco, and Pharma are examples of industry perspectives for ORA.