Oracle IdentityGovernance Suite 11g PS3 Implementation Essentials v7.0 (1z0-339)

Page:    1 / 6   
Total 81 questions

You are running an upgrade from Oracle Identity Manager PS2 to PS3. As part of the deployment of the workow orchestration service, you must set up two components from the system administration console.
Select the two system values to be changed (Choose two.)

  • A. set SOA Workflow Enabled as TRUE
  • B. set SOA Workflow Policies Enabled as TRUE
  • C. set Workflow Disabled as FALSE
  • D. set Workflow Policies Disabled as FALSE
  • E. set Workflow Enabled as TRUE
  • F. set Workflow Policies Enabled as TRUE


Answer : B,E

Customer has upgraded their Oracle Identity Manager deployment from PS2 to PS3.
What must be ensured from the approval workflow perspective during this upgrade process?

  • A. Approval workflows replace the older approval policies structure. In an upgraded environment, you need to enable the use of newer approval workflow through the System Administration console.
  • B. Approval Policies replace the older approval workflows structure. In an upgradedenvironment, you need to enable the use of newer approval policies through the System Administration console.
  • C. Approval workflows work in tandem with the approval policies structure. In an upgraded environment, you need to enable the use of newer approval workflow through the System Administration console.
  • D. Approval workflows work in tandem with the approval policies structure. In an upgraded environment you need to enable the use of newer approval policies through the System Administration console.


Answer : A

What minimum level is required for attestation of form data for user profile auditing?

  • A. None
  • B. Resource
  • C. Resource Form
  • D. Core
  • E. Process Task


Answer : C

Explanation: References:

Which two methods can be used to seed Identity Analytics warehouse? (Choose two.)

  • A. using the Identity Audit Console
  • B. importing Identity feeds through federation standards
  • C. using seamless integration with Oracle Mobile and Social
  • D. using seamless integration with Oracle Identity Manager
  • E. importing Identity and Entitlements feeds by using ETL processing


Answer : B,E

You are trying to set up session recording within Oracle Privileged Account Manager
(OPAM) to record Windows sessions. You have deployed all of the correct components to the Windows server. However, when you try to test the target from the administrative console, you get the following error:
ConnectionFailedException: Unable to get the Directory Entry
You have confirmed that the credentials in the target configuration are correct. What is the problem?

  • A. The Connector Server is not running on the target.
  • B. A firewall is blocking the connection from the OPAM server to the target.
  • C. The Windows server is a domain controlleror joined to an Active Directory domain.
  • D. The administrator does not have permissions within OPAM to create a new target.


Answer : A

Identify the schema that must be installed during the upgrade process of Oracle Identity manager in addition to the existing schemas that are already installed.

  • A. ORASDPM schema
  • B. Business Intelligence Platform Schema
  • C. Metadata Services Schema
  • D. Oracle Platform Security Services Schema


Answer : A

Explanation: References:

Your customer requests you to update a reconciliation profile to match new attributes from their authoritative source. You run those changes through the design console and test the reconciliation process. However, the results are not shown.
What is the reason?

  • A. You must run a full reconciliation task to ensure that all the new attributes are captured.
  • B. If a reconciliation profile is modified by using the Design Console, the profile must be regenerated by clicking the Create Reconciliation Profile button in the object Reconciliation tab of the Design Console.
  • C. Reconciliation profiles can't bemodified by using the Design Console; you must delete and create a new profile.
  • D. Change the value of thechangeTypeattribute in the profile toNEW<profile xmlns="http: //www.oracle.com/oracle/iam/reconciliation/config/"changeType="NEW" batchSize="500"resourceType="Organization" name="Xellerate Organization">.


Answer : B

Your customer requires a secure connectors communication Channel between Oracle
Identity Manager and IT Resources using SSL. You analyzed the entire configuration process but the target system is still not able to reach Identity Manager. You reviewed the logs and found the following error message: java.net.SocketException: Default SSL context init failed: null.
How should you handle this exception?

  • A. Nonstandard certificate authorities must be imported to the standard$ (JAVA_HOME)/1ib/security/cacerts directory.
  • B. This means that the connectoronly supports TLS V1.1 and later. New keys must be generated using the following command:keytool -genkey -alias keyconnserv -keyalg dsa keystore <yourKeystore.jks> -storepass <yourPassword> -validity 360.
  • C. This means that the path to keystore is incorrect and that you must provide the full/absolute path:./connectorserver.sh /run "-J- Djavax.net.ssl.keyStore=/path/mykeystore.jks" "-J- Djavax.net.ssl.keyStorePassword=password".
  • D. A key has not been imported into Weblogic. You must run the following command:keycool - import -trustcacerts -alias icfkey -file icfkey-public.cer - keystore<pathToYouKeystore>.


Answer : C

Which two parameters from the User profile audit data collection level must be set to none in order to disable auditing capabilities in Oracle Identity Manager? (Choose two.)

  • A. XL.UserProfile
  • B. XL.AuditDataCollection
  • C. XL.RoleAuditLevel
  • D. XL.UserProfileAuditDataCollection
  • E. XL.RoleAudit


Answer : C,D

Explanation: References:

Your customer is deploying Oracle Privileged Account Manager as part of their new security strategy. One of their requirements is to enable schema encryption.
Identify the script that needs to be executed to enable encryption in the OPAM schema.

  • A. opamxencrypt.sql in IAM_HOME/opam
  • B. opamxencrypt.sql in IAM_HOME /opam/sql
  • C. opamencrypt.sql in IAM_ HOME /opam/sql
  • D. opamencrypt.sql in IAM_ HOME /opam


Answer : B

Explanation: References:

You need to create a Custom Metadata Attribute for the Catalog which should accept a value from a predefined list of values.
Which are the three steps that need to be performed to configure this behavior? (Choose three.)

  • A. Add the custom attribute in the UI as a List of Values component.
  • B. Create a custom attribute of type Lookup. Configure the attribute as a Searchable List of Values.
  • C. Create a Lookup Code with the predefined List of values.
  • D. Create a custom attribute of type Text.
  • E. Create a custom form and attach it to the Catalog.


Answer : A,B,C

A customer requests you to create a new set of roles. Each role should have a single title associated with it. You have successfully executed the Role Mining process. With the results of this process you must ensure that there is a 100% correlation between users and their job type before roles are created.
How can you achieve that goal?

  • A. After mining has been completed for business roles, create another mining task for entitlements and set "correlation" value on the setup page at 100%.
  • B. On the mining setup page, set the "role correlation" value at 100%.
  • C. On the mining result page, set the "cut-off" value at 100%.
  • D. On the mining setup page, select business and entitlements attributes to ensure 100% correlation.


Answer : C

You were requested to modify a Disconnected Application Instance and add a child form to it. After making the modifications and publishing your work, the child form doesn't appear in the request form.
What is causing this?

  • A. A Lookup Code for the new child form was not created.
  • B. The Regenerate View button was not clicked.
  • C. The custom child form was not saved.
  • D. The Catalog Synchronization Scheduled Jobwas not run.


Answer : B

Explanation: References:

You have been asked to configure OIM to detect Segregation of Duties (SoD) violations.
Which feature must you enable to achieve this?

  • A. Duty Violations
  • B. Identity Analytics
  • C. Identity Certification
  • D. Identity Audit


Answer : D

Explanation:
Referencehttps://docs.oracle.com/cd/E52734_01/oim/OMUSG/idaudit.htm#OMUSG5300

Identify a capability of role mining in Oracle Identity Governance.

  • A. identifies users within the same organization and having access to similar target systems
  • B. verifies Pre-Existing roles only in disconnected target systems
  • C. search for roles in platform audit logs
  • D. identifies users with similar access entitlements
  • E. verifies Pre-Existing roles only in connected application instances


Answer : A

Page:    1 / 6   
Total 81 questions