Oracle 1Z0-574 Online Practice Questions and Exam Preparation

Oracle 1Z0-574 Online Questions & Answers

• Question 31:

  Service-Oriented Integration is based on creating a catalogue of SOA Services that expose existing capabilities from back-end systems. Which statement best describes how an SOA Service relates to the existing back-end systems?

  A. Each SOA Service exposes the functionality from only a single back-end system to ensure the decoupling of SOA Services.
  B. An SOA Service should expose the low-level interface of the back-end system to ensure that all back- end system capabilities are fully exposed.
  C. An SOA Service should expose higher-level business capabilities by encapsulating the lower level Interfaces of the back-end systems.
  D. Each SOA Service should expose only one isolated capability of the back-end systems to ensure isolation between SOA Service calls in composite applications.
  E. All access to a back end system should be through a single SOA Service to ensure the back-end system will net become overloaded by service requests.
  F. An SOA Service should connect to at least two back-end systems; otherwise the SOA Service is just duplicating the existing interface to the back-end system.
  C. An SOA Service should expose higher-level business capabilities by encapsulating the lower level Interfaces of the back-end systems.

  ---

  The primary purpose of the Business layer in the architecture is to define and automate the business processes external to, and independent of, the specific backend systems used in the organization. This isolates the business process from backend system changes, and conversely, isolates the backend systems from business process changes. De-coupling the business processes from the backend systems simplifies changes and maintenance for business processes and backend systems. The Business layer generally provides the greatest and most measurable business value.

• Question 32:

  Which of the following are primary parts of a SOA Service as defined by the Oracle Reference Architecture?

  A. Service Contract
  B. Usage Agreement
  C. Service Infrastructure
  D. Service Implementation
  E. Service Interface
  F. Web Services Description Language (WSDL)
  A. Service Contract
  D. Service Implementation
  E. Service Interface

  ---

  The three primary parts of a SOA Service as defined by ORA are contract, interface, and implementation.

  Note:

  A Service Contract describes the SOA Service in human-readable terms. The Service Implementation is the technical realization of the contract. I A Service Interface provides a means for the consumers of a SOA Service to access its

  functionality according to the Service Contract.

• Question 33:

  Which of the following statements describes the relationship between Cloud computing and Grid computing?

  A. Grid computing is the same as Cloud computing
  B. Grid architectures are likely to be used in building Clouds
  C. Grid computing is an evolution of the Cloud computing architecture
  D. Grid computing and Cloud computing are totally unrelated concepts
  B. Grid architectures are likely to be used in building Clouds

  ---

  The term utility computing is often used to describe the metered (or pay-per-use) IT services enabled by grid computing. Cloudcomputing (where dynamically scalable and often virtualized resources are provided as a service over the internet) is another term that describes how enterprises are using computing resources--on both private and public networks--over the internet. Because grid computing provides superior flexibility, it is the natural architectural foundation for both utility and cloud computing.

• Question 34:

  Which of the following are architecture principles that pertain to the management and monitoring framework?

  A. focus on individual resources
  B. service aware
  C. standards-based integration
  D. manual governance processes
  E. discoverable
  B. service aware
  C. standards-based integration
  E. discoverable

  ---

  The following list is a sample architecture principles that pertain to the management and monitoring framework.

  *

  Service Aware (B)

  Treat a Service as a super infrastructure component.

  As more and more enterprises utilize Services as a means to build and compose business solutions it has become critical that IT operations have a comprehensive approach to managing and monitoring these Services.

  *

  Standards-based Integration (C)

  Standards based approach to integration to interact with internal and external IT operational systems. Standards-based integration improves the ability to interoperate with existing but also future and unknown IT operational systems. This

  facilitates the ability to manage and monitor the IT environment holistically as well as minimizing the cost of maintaining the integrations.

  *Discoverable (E)

  Discovery of deployed services and infrastructure components. Services and infrastructure components have become more dependent on one another, with many of these interdependencies crossing corporate boundaries. Without access to

  information concerning these dynamic

  interdependencies diagnosing problems and correlating

  problems in a complex, distributed environment is a huge challenge. Identifying and understanding dependencies

  manually is cost prohibitive, and breaks down with rising complexity and a rapid rate of change.

  Note:

  Other architecture principles that apply here as well:

  *Compliant

  *

  Proactive

  *

  Externalize Management

  *

  Manage and Monitor as One

  *

  Extensible

• Question 35:

  Which statement best describes the relationship between a SOA Service and service Infrastructure?

  A. Service infrastructure is a primary part of an SOA Service.
  B. Service Infrastructure exposes the Service Interface and may satisfy some capabilities of the Service Implementation.
  C. Service infrastructure fulfills the Service Contract.
  D. A SOA Service depends on the service infrastructure to satisfy some required capabilities.
  E. A SOA Service uses the service infrastructure to generate the Service Interface.
  B. Service Infrastructure exposes the Service Interface and may satisfy some capabilities of the Service Implementation.

  ---

  The Service Infrastructure side typically provides the Service enablement capabilities for the implementation. These capabilities may include, exposing the interface as a Web Service, handling SLA enforcement, security, data formatting, and others. Service infrastructure should be utilized when possible, as it reduces the burden on Service providers, from an implementation standpoint.

• Question 36:

  Which one of the following user classification schemes best reflects what function or function performs?

  A. role-based classification
  B. rule-based classification
  C. group-based classification
  D. attribute-based classification
  E. rank-based classification
  A. role-based classification

  ---

  Given the potentially large number of users of a system, access privileges are generally not assigned at the user level. Instead, users are assigned to groups (mimicking the organizational structure of a company), or roles (defined based on job functions that users perform), or some combination of the two. Access privileges are then assigned to groups and/or roles. The most natural case is that they are assigned to roles, since roles align more closely with operations users naturally perform to accomplish their job. The industry term for this is Role-Based Access Control (RBAC). RBAC is more flexible than defining access rights based on usernames or static groups and enables an organization to be more

  versatile when allocating resources. With RBAC the system must determine if the subject (user or client) is associated with a role that has been granted access to a resource. This process of user to role ascertainment is called role mapping.

  Incorrect answers

  B: Rule-based access control is very similar to fine-grained access control, where access is controlled by rules defined in policies. The twist is that rules might refer to each other. For instance, access may be granted to resource/function A as long as it is not also granted to resource/function B. This form of control can be used to ensure that a group or individual is not given privileges that create a conflict of interest or inappropriate level of authority. For instance, the approver of expenses or purchases cannot be the same as the requestor.

  C: Role is better here.

  D: There are times when access should be based on characteristics the user has rather than the organization or roles to which the user belongs. For instance, a customer with premium status might be granted access to exclusive offers, and a sales representative that has achieved his target sales revenue might have access to certain perks. Such levels of status vary over time, making it difficult to manage access based on relatively static group or role assignments. Attribute-based access control offers a more dynamic method of evaluation. Decisions are based on attributes assigned to users, which are free to change as business events unfold. Access policies define the attributes and values a user must have, and access decisions are evaluated against the current values assigned to the user. Attributes can be used to support both course-grained and fine-grained authorization.

  E: No such thing as rank-based classification

• Question 37:

  Which one of the following security strategies protects data in motion but does not address data at rest or in memory?

  A. end to end security
  B. defense In depth
  C. per (motor security
  D. cloud security
  E. point to point security
  E. point to point security

  ---

  A lesser alternative to end to end security is point to point security. This is used to protect messages in transit. It assumes that other means of security are used to protect messages during processing and persistence.

• Question 38:

  Where are the components of the client tier of the ORA UI logical architecture hosted?

  A. on the transcoding engine
  B. on the web server
  C. on the display device
  D. some components on the web server and some on the display device
  C. on the display device

  ---

  The Client Tier is hosted on the display device, this may be a browser or an thick client specific to the display device

  

• Question 39:

  Which of the following is NOT a container capability?

  A. Scalability
  B. High Availability
  C. Management and Monitoring
  D. Applications
  B. High Availability

• Question 40:

  Service composition is the creating of a new SOA Service by aggregating existing SOA Services. Which statements are correct concerning the use of service composition within the Service-Oriented Integration architecture?

  A. The SOI architecture is a layered architecture; therefore service composition is not allowed.
  B. Service composition is allowed, even encouraged, by the SOI architecture.
  C. Service composition within the SOI architecture is allowed only when the aggregation is over SOA Services from lower layers in the architecture.
  D. Service composition should be avoided because service aggregation is provided by the Mediation Layer.
  E. Service composition is allowed, but is discouraged because service composition leads to complex dependencies.
  C. Service composition within the SOI architecture is allowed only when the aggregation is over SOA Services from lower layers in the architecture.

  ---

  Service composition is the ability to leverage lower-level services to create a higher-level service When doing composition, the developer should respect the layering of the architecture. Thus, a Business Service could leverage existing Connectivity Services or Data Services and a Data Service could leverage existing Connectivity Services. But, a Data Service should not call a Business Service and a Connectivity Service should not call a Data Service or a Business Service