Oracle Oracle Certifications 1Z0-574 Questions & Answers

• Question 101:

  Which statement best describes the reason why the Oracle Reference Architecture defines both a Service Contract and a Usage Agreement?

  A. The Usage Agreement is a reusable portion of the Service Contract that can be shared by other Service Contracts.

  B. The Usage Agreement defines how to use the SOA Service. The Service Contract defines the functionality provided by the SOA Service.

  C. The Service Contract is the reusable portion of the Usage Agreement that can be shared by other Usage Agreements.

  D. Defining both Usage Agreement and Service Contract provides a decoupling between service consumers and service providers.

  E. The Service Contract defines the technical specifics of the SOA Service. The Usage Agreement defines the business aspects of the SOA Service.

  Correct Answer: D

  Explanation:

  The usage agreement is not part of the Service; rather it defines what a particular service consumer is

  entitled to consume from the Service.

  Having both a usage agreement and a service contract provides a decoupling between the service

  provider and service consumer. This not only facilitates reuse but also provides a separation of concerns.

  The service contract defines the totality of what the Service guarantees to provide, and can be written and

  validated independent of any knowledge of specific service consumers. The usage agreement is service

  consumer specific and defines what capabilities of the Service each consumer is allowed to consume.

  References:

• Question 102:

  There are a number of ways to classify applications in order to assess business risks and assign appropriate security policies. Which of the following is not described as a primary means to classify an application?

  A. by the user community it serves, such as HR, finance, all employees, general public, and so on

  B. by the information it handles, such as classified information, personal information, publicly availableinformation, and so on

  C. by business criticality, such as revenue-generating applications versus informational applications

  D. by technology and/or vendor, such as .NET versus Java, and so on

  E. by the applicability of existing laws and regulations pertaining to privacy, auditing, and access control

  Correct Answer: D

  Explanation:

  Applications can be classified in a number of ways, such as:

  *

  By the user community it serves, such as HR, Finance, company executives, all employees, all persons working on behalf of the company (includes contractors and temporary workers), general public, etc. (not A)

  *

  Based on information confidentiality. Some applications process personal information while others do not. Likewise, in military terms, an application might be targeted towards individuals with a specific level of clearance. (not B)

  *

  Based on business criticality. Some applications may have a direct and severe contribution or impact to revenue. Examples include order processing, credit card processing, call processing, securities trading, and travel reservations. Others may have little or no impact. (not C)

  *

  Based on the applicability of existing laws and regulations. For example, HIPPA puts more security emphasis on patient records than would otherwise exist. (not E)

  *

  Based on network exposure. Levels might include: locked down (no network access), secure production environment access, general organization-wide intranet access, partner access, Internet access limited to a specific user community, and Internet access open to the public.

  References:

• Question 103:

  Conceptually, management and monitoring capabilities consist of which of the following?

  A. consolidating administration tasks for a variety of infrastructure components

  B. homogeneous support for IT management environments

  C. skilled architects to perform root-cause analysis

  D. allowing enterprises to define, model, capture, and consolidate monitoringinformation into a single framework

  Correct Answer: AD

  Explanation:

• Question 104:

  Because each back-end system is running in a separate process, any integration architecture is required to cross multiple process boundaries. A Service-Oriented Integration (SOI) architecture also introduces SOA Services that run in their own process, thus adding more process boundaries to be crossed. What approaches can be employed to reduce the performance impact of crossing multiple process boundaries?

  A. There is nothing that can be done because process boundaries are just part of any integration architecture.

  B. The SOA Services should expose larger-granularity operations to reduce the number of s-calls, which reduces the number of times process boundaries are crossed.

  C. Service composition should be used to reduce the number of SOA Services that are exposed to the clients

  D. The SOA Services should use XML-based request-and-response messages because XML is a platform- (and hence process-) neutral format.

  E. The SOA Services can encapsulate multiple layers of theSOI architecture to reducenumber of service calls, which reduces the number of process boundaries being crossed.

  Correct Answer: BE

  Explanation: Each time a process boundary is crossed there are performance impacts from the network and message marshalling and de-marshalling. This is a primary reason why SOA Services should expose relatively course-grained interfaces (B). This is also a reason why a service implementation might span multiple layers in the architecture .(E)

  References:

• Question 105:

  A customer with an existing WebCenter portal wants to expand his client device list to include a variety of mobile devices beyond basic browser support. What Oracle products are available to enable this expansion?

  A. OWC, OHS, ADF Mobile, and Java ME

  B. OWCA, ADF Mobile, OPSS, and Java ME

  C. OWC, OHS, and ADF Mobile

  D. OWCIC, ADF Mobile, and Java ME

  Correct Answer: A

  Explanation:

  Oracle HTTP Server (OHS) - provides a HTTP listener for Oracle WebLogic Server and the framework for

  hosting static content, dynamic content, and applications over the Web.

  Java Platform, Micro Edition (Java ME)(not C):meets the needs of developers creating applications for the

  consumer and embedded markets. No other technology provides such robust applications across so many

  types of size-constrained wireless and wireline devices, from mobile phones and PDAs to set-top boxes

  and vehicle telematics.c

  References:

• Question 106:

  Audit logging is a form of what type of access control mechanism?

  A. detective control

  B. preventive control

  C. deterrent control

  D. corrective control

  E. compensating control

  F. recovery control

  Correct Answer: A

  Explanation:

  There are many different forms of access control, which in turn can be classified into one or more

  categories.

  Detective - Detective controls are meant to record all activities. They are passive systems that are aware of

  events but are not designed to prevent them from happening. Audit logging is a form of detective access

  control.

  References:

• Question 107:

  Which of the following statements is true with respect to virtualization?

  A. Visualization creates a layer of abstraction that allows the underlying resources to be managed independently of the applications that run on them.

  B. Virtualization is a hardware appliance that allows the applications to run faster.

  C. Virtualization is a technology used for creating clusters to support scalability of the infrastructure.

  D. Visualization may lead to server sprawl and decrease the overall data center utilization.

  Correct Answer: AC

  Explanation:

  A: Computer hardware virtualization (or hardware virtualisation) is the virtualization of computers or operating systems. It hides the physical characteristics of a computing platform from users, instead showing another abstract computing platform.

  C: Computer clusters have historically run on separate physical computers with the same operating system. With the advent of virtualization, the cluster nodes may run on separate physical computers with different operating systems which are painted above with a virtual layer to look similar. The cluster may also be virtualized on various configurations as maintenance takes place.

  References:

• Question 108:

  Identify the true statements in the following list.

  A. The origins of http and the World Wide Web are attributed to Tim Berners-Lee while he was working on a European physics project.

  B. The Internet was invented by AlGore.

  C. AJAX is the primary standard enabling today's Rich Internet Applications.

  D. The Internet was invented in the US by the Advanced Research Projects Agency.

  E. ORA UI architecture is based on Apache struts.

  F. Today's RIA standards are provided primarily by W3C, IETF, JCP and OASIS.

  G. Today's RIA standards are provided by the wide variety of industry-standards group including W3C, IEEE, TMF, ISO, and so on.

  Correct Answer: ACDG

  Explanation:

  C: AJAX is short for "Asynchronous JavaScript And XML", which essentially limits the term to the set of RIA (Rich Internet Application) solutions based on JavaScript.

  D: The Advanced Research Projects Agency created ARPA-net. Internet was developed from ARPA- net.

  Note: A Rich Internet Application (RIA) is a Web application that has many of the characteristics of desktop application software, typically delivered by way of a site-specific browser, a browser plug-in, an independent sandbox, extensive use of JavaScript, or a virtual machine. Adobe Flash, JavaFX, and Microsoft Silverlight are currently the three most common platforms, with desktop browser penetration rates around 96%, 76%, and 66% respectively (as of August 2011).

• Question 109:

  You are designing a mission-critical application that requires high performance. Your analysis concludes that Oracle Exadata would enable you to meet the performance goals. What characteristics of Oracle Exadata make it possible to provide such superior performance?

  A. Oracle Exadata uses massively parallel architecture to speed up Oracle data warehouses by offloading data-intensive query processing from the databases.

  B. By pushing SQL processing to the Oracle Exadata Storage Server, all the disks can operate in parallel, reducing database server CPU consumption while consuming much less bandwidth to move data between storage and database servers.

  C. The Oracle Exadata Storage Server returns a query result set rather than entire tables, eliminates network bottlenecks, and frees up database server resources.

  D. Oracle Exadata uses direct data placement to ensure very low CPU overhead by directly moving data from the wire to database buffers with no extra data copies being made.

  Correct Answer: A

  Explanation:

  To overcome the limitations of conventional storage, Oracle Exadata Storage Servers use a massively

  parallel architecture to dramatically increase data bandwidth between the database server and storage.

  Innovative technologies such as Exadata Smart Scan, Exadata Smart Flash Cache, and Hybrid Columnar

  Compression enable Exadata to deliver extreme performance for everything from data warehousing to

  online transaction processing to mixed workloads.

• Question 110:

  Which of the following statements pertaining to role-based and group-based user classifications are true?

  A. A role is a subset of a group where all users share a commonidentity.

  B. Users can belong to one and only one role.

  C. A role can have any number of users.

  D. A group is a collection of users that perform the same function. A role is a collection of groups.

  E. Access privileges can be assigned to roles or groups.

  Correct Answer: CE

  Explanation:

  A group is a set of users, classified by common trait. A role is an abstract name for the permission to

  access a particular set of resources in an application.

  Multiple users can be mapped to a role.

  Users can be mapped to multiple roles.

  Incorrect answers

  A, B: Just wrong.

  D: A group is a collection of users, but a role does not need to be a collection of groups.

  Note: Given the potentially large number of users of a system, access privileges are generally not assigned at the user level. Instead, users are assigned to groups (mimicking the organizational structure of a company), or roles (defined based on job functions that users perform), or some combination of the two. Access privileges are then assigned to groups and/or roles. The most natural case is that they are assigned to roles, since roles align more closely with operations users naturally perform to accomplish their job. The industry term for this is Role-Based Access Control (RBAC). RBAC is more flexible than defining access rights based on usernames or static groups and enables an organization to be more versatile when allocating resources. With RBAC the system must determine if the subject (user or client) is associated with a role that has been granted access to a resource. This process of user to role ascertainment is called role mapping.