Online Access Free 1z1-459 Practice Test

You are defining a segregation of duty (SOD) policy at the role level in Oracle Identity Analytics (OIA). Which two statements are true? (Choose two.)

• A.Role SOD definitions can be configured on the "Exclusion Roles" tab. By default, this tab is hidden.
• B.A maximum of two conflicting roles can be defined for each audit policy.
• C.The DefaultSODApproval workflow must be attached only at the request level.
• D.SOD policy changes must be approved by both the policy owner and the policy remediator.
• E.Role SOD definitions can be configured as an audit policy.

You are configuring User Messaging Service (UMS) for notifications. You have Oracle Identity Manager and UMS in different WebLogic domains.
What task is required when you integrate UMS with OIM for notifications? (Choose the best answer.)

• A.RemoveDemoTruststore references from theoracle.wsm.securitymap.
• B.Remove the followingweblogic.security.SSL.trustedCAKeyStoreproperty set inJAVA_OPTIONS
  DOMAIN_HOME/bin/setDomainEnv.sh:
  JAVA_OPTIONS="-
  Dweblogic.security.SSL.trustedCAKeyStore="{MW_HOME}/server/server/lib/cacerts"${JAVA_OPT
  IONS}"
• C.Import the UMS public key into an Oracle Identity Manager domain's keystore, and import the
  Oracle Identity Manager domain's public key into the UMS keystore.
• D.RemoveDemoTruststore references from the SOA environment.
• E.Change the value of the disabled property fromtruetofalsein
  SOAEmailNotificationProviderMBean.

Which set of tasks must be performed on Oracle Privileged Account Manager (OPAM) when integrating OPAM with Oracle Identity Manager (OIM)? (Choose the best answer.)

• A.Use a specific OPAM account on an OPAM target, assign one or more UNIX groups to the OPAM account, and use OIM to add and remove users in the UNIX group.
• B.Use a specific OPAM group on an OPAM target, assign one or more LDAP accounts to the OPAM group, and use OIM to add and remove users in the LDAP account.
• C.Use a specific OPAM account on an OPAM target, assign one or more database roles to the OPAM account, and use OIM to add and remove users in the database roles group.
• D.Use a specific OPAM group on an OPAM target, assign one or more database accounts to the OPAM group, and use OIM to add and remove users in the database account.
• E.Use a specific OPAM account on an OPAM target, assign one or more LDAP groups to the OPAM account, and use OIM to add and remove users in the LDAP group.

What happens when the reconciliation engine fails to identify a unique match for a User or Account entity? (Choose the best answer.)

• A.All matches are displayed on the Event Details page for manual linking.
• B.The first match is automatically linked.
• C.Reconciliation fails, and an error is flagged to the administrator.
• D.The best match is automatically linked.

Which two reviewer responsibilities support the process of configuring certifications? (Choose two.)

• A.The reviewer can be a role owner who is responsible for attesting to which users have access to the business role.
• B.The reviewer can be a data owner who is responsiblefor attesting to which users have access to the dataset.
• C.The reviewer can be an HR manager who is responsible for attesting to whether users are employees or contractors.
• D.The reviewer can be the user's employee who is responsible for attesting to which entitlements their superiors have access to.
• E.The reviewer must be an internal auditor who is responsible for checking SOD.