Oracle Oracle Certifications 1Z0-574 Questions & Answers

• Question 11:

  Which of the following is the most correct definition of Grid computing?

  A. Grid computing refers to the ability to run computers off a power grid.

  B. Grid computing refers to the aggregation of multiple, distributed computing resources, making them function as a single computing resource with respect to a particular computational task.

  C. Grid computing refers to the vertical scaling of resources to add more capacity to the Infrastructure.

  D. Grid computing allows computing resources to be operated and managed independently, creating a distributed architecture.

  Correct Answer: D

  Explanation:

  Grid computing is a technology architecture that virtualizes and pools IT resources, such as compute

  power, storage, and network capacity into a set of shared services that can be distributed and redistributed as needed. Grid computing involves server virtualization, clustering, and dynamic provisioning.

  Note: With Grid computing, groups of independent, modular hardware and software components can be

  pooled and provisioned on demand to meet the changing needs of businesses. Grid computing is really a

  form of distributed computing and it aims to deliver flexible and dynamic infrastructures using tiered

  optimization. It uses virtualization at various levels of the middleware and database layer to achieve it.

  References:

• Question 12:

  Which statement is true with respect to Metadata Repository and Asset Repository?

  A. Metadata Repository manages the data about the assets, and Asset Repository stores the payload of the assets.

  B. Asset Repository manages the data about the assets, and Metadata Repository stores the payload of the assets.

  C. Metadata Repository stores everything related to the assets. Including metadata and payload.

  D. Asset Repository stores everything related to the assets, including metadata and payload.

  Correct Answer: A

  Explanation:

  Asset repository refers to the tools or technologies that store the physical assets or payload, as opposed to

  the metadata that is stored in the Metadata Repository.

  References:

• Question 13:

  Much as in modular programming, there are two ways that federation applies to user interface design:

  as either consumer or producer of federated Interface elements.

  Which statement is true?

  A. As a consumer, the end user is responsible for incorporating existing Interface elements into the user interface.

  B. As a consumer, the device is responsible for incorporating existing Interface elements into the user interface.

  C. As a consumer, the developer is responsible for incorporating existing Interface elements into the user interface.

  D. As a producer, the developer is responsible for building separate and independent interface elements that can be incorporated into another user interface.

  E. As a producer, the developer is responsible for incorporating existing interface elements into the user interface.

  Correct Answer: C

  Explanation:

  As a consumer the developer is responsible for incorporating existing interface elements into the user

  interface.

  References:

• Question 14:

  Which of the following is not a part of the Oracle Reference Architecture Monitoring and Management framework?

  A. Integration

  B. Services

  C. Management

  D. User Interaction

  E. Monitoring

  Correct Answer: B

  Explanation:

  To define a framework that meets both the management and monitoring requirements and the architecture

  principles, one might consider the framework to be comprised of four major parts (User Interaction,

  Management, Monitoring, and Integration) that complement other ORA components (ORA Engineering,

  ORA Security). The framework utilizes a management repository for storage of all current and historical

  data and metadata.

  References:

• Question 15:

  Architecturally speaking, why might an organization deploy a SAML-based Web SSO solution if they already have a cookie-based Web SSO in place and working?

  A. SAML generally performs better and requires less network overhead.

  B. SAML supports federation across cookie domains.

  C. SAML is required for Web Service security, which makesit a natural replacement for cookie based SSO solutions.

  D. SAML isimmune to man-in-the-middle attacks.

  Correct Answer: B

  Explanation:

  SSO solutions deployed for a localized domain often exchange state information in a browser cookie.

  These implementations are limited to the scope of the DNS domain as cookies are not visible across

  domains. SAML offers alternatives solutions that do not have this limitation.

  References:

• Question 16:

  The Product Mapping view of the Service-Oriented Integration architecture shows some of the Oracle products mapped onto two or more layers in the architecture. For example, Oracle WebLogic Suite (OWLS) is mapped to the Business Service Layer, the Data Normalization Layer, and the Connectivity Layer. Which statement best describes why OWLS is mapped to these three layers in the OSI architecture?

  A. OWLSis the only product that provides all the capabilities required by the three layers in the OSI architecture.

  B. When OWLSis used to implement the OSI architecture, the three layers need to be combined Into a single architectural layer.

  C. OWLS can be used to host assets delivering the capabilities in any or all of the three layers. Assets hosted on OWLS should still adhere to the layering of the architect.

  D. OWLS plus the other Oracle products that are mapped to the three layers are required to deliver the capabilities for the three layers in the architecture.

  E. The other Oracle product mapped to the three layers all have OWLS embedded in the product. Thus, OWLS is required for the products mapped into three layers.

  Correct Answer: E

  Explanation:

  OPSS is incorporated into OWLS which ties the entire Service Tier into the enterprise security architecture.

  The OWC provides the majority of the capabilities required for a modern user interface. OWC provides

  some higher-level Connectivity capabilities (e.g. connectivity to content management systems, WSRP).

  OWLS provides the base Connectivity (e.g.

  JDBC, JCA) to connect to the Resource Tier.

  Note: Oracle WebLogic Suite (OWLS) - fully implements the latest Java EE standards, provides industry

  leading reliability and performance, and includes comprehensive management capabilities. OWLS can be

  used to host the Oracle WebCenter products.

  References:

• Question 17:

  The WebShipAnywhere company currently has a manual Order-to-Ship process. The company is implementing Service-Oriented Integration architecture and, as part of that initiative, they are automating the Order-to-Ship process.

  Whenever an order ships, the Warehouse Management System (WMS) is manually updated to reflect that the order has been shipped. If the Inventory for any product that was part of the order drops below a threshold value, the WMS alerts the user via a pop-up screen indicating that the product inventory is low. When this happens, the user logs in to the Purchasing System (PS) and enters the need to order more of the product. Both the WMS and PS are thick-client, two-tier applications that use an Oracle database. As part of automating the Order-to-Ship process, the company would like to remove this manual step.

  What integration pattern(s) should be used to automate this manual step?

  A. The WMS should be modified to create a "low-inventory" event and publish the event to a topic queue following the publish-and-subscribe pattern. An event handler registered for the "low-inventory" event then receives the event and updates the PS.

  B. The polling integration pattern should be used to detect that the inventory for a product is low in the WMS. If a product inventory is low, the polling component uses a reliable-one-way message to call an SOA Service that updates the PS.

  C. It is not possible to integrate thick-client, two-tier applications (such as VMS and PS) by using a SOI architecture. Only applications with service interfaces can be included in an SOI architecture

  D. The polling integration pattern should be used to detect that the inventory for a product is low in the VMS. If a product inventory is low, a "low-inventory" event should be created and published to a topic queue following the publish-and-subscribe pattern. An event handler registered for the "low inventory" event then receives the event and updates the PS.

  E. Because both the WMS and the PS use Oracle database, the WMS should be modified to use a trigger to update the PS database whenever a low inventory is detected.

  Correct Answer: B

  Explanation:

  Polling, using a reliable-one-way message, and using a SOA Service is a good solution.

  References:

• Question 18:

  Which of the following is least effective at deterring man-in-the-middle attacks?

  A. encrypting network traffic

  B. issuing single-use access tokens

  C. mutual authentication

  D. biometric authentication

  E. using time stamps or transaction IDs to detect and discard replay attempts

  Correct Answer: C

  Explanation:

  In order to avoid man-in-the-middle attacks a security framework must have capabilities such as:

  *

  Logging in users without the need to type passwords or PINs (not D)

  *

  Dynamically challenging the user for different information, e.g., asking a random question for which only the user will know the answer

  *

  Encrypting and signing transmissions from the client to the back end server (not A)

  *

  Detecting replays using embedded transaction ids or timestamps (not E)

  *

  Presenting proof to the user that the site they are visiting is authentic

  Propagating a single proof object, or assertion, can be susceptible to man-in-the-middle attacks and replay attacks. If a rogue entity observes an assertion, it could reuse that assertion for illegitimate requests. Possible solutions include:

  *

  (notB) Invalidate the assertion after every request. In the case of chained SOA Services, service providers must verify each assertion they receives with the authority. The authority can invalidate assertions in its internal cache. Any future verifications with the same assertion would fail. SOA Service providers would need to obtain a new assertion in order to make subsequent service requests. This solves both types of problems mentioned above.

  *

  (notE) Reduce and enforce the assertion's time to live attribute. This would narrow the window of opportunity to reuse an assertion. The assertion would have to be captured and reused in a short period of time (programmatically vs. manually). While this limits the potential for man-in-the-middle attacks, it's not as effective for replay attacks

  *

  Require the signature of a trusted service consumer (client application) in addition to the signed assertion. The caller's signature should cover the assertion to bind it to the message. If all service consumers are required to sign their request messages, then service providers can be shielded from rogue clients, thereby preventing man-in-the-middle attacks.

  This solution would need to be enhanced to solve replay attacks. One option is to include a unique request id, timestamp, or sequence number in the request. The target resource could maintain a cache of ids and refuse duplicate requests. A common request id service could be created to issue unique request ids and validate all requests that are received within the security domain

  References:

• Question 19:

  Which of the following are asset packaging best practices?

  A. Every reusable asset must contain at least one manifest file that self-describes the contents of the package.

  B. Any components that can be precompiled must be precompiled in the package.

  C. Non-runtime artifacts such as build and test artifacts must be included in the package.

  D. Packaging of components must be modular and all common components must be packaged as independent libraries that can beincluded in multiple packages.

  Correct Answer: ABD

  Explanation:

  Assets must be packaged using standards-based approaches with the goal of improving flexibility, reuse,

  and runtime performance.

  Applying packaging standards and best practices is a critical step in ensuring that the assets are deployed

  for the best quality and performance. It also accelerates the time-to-deployment.

  Implications:

  *

  Every reusable asset must contain at least one manifest file that self-describes the contents of the package.

  *

  Any components that can be precompiled must be precompiled in the package.

  *

  Non-runtime artifacts must not be included in the deployment package. (e.g. build and test artifacts) (not C)

  *

  Packaging of components must be modular and all common components must be packaged as independent libraries that can be included in multiple packages.

  Note: Further implications

  *

  Libraries provided by the platform should not be included in the package. (e.g. Application Server system

  libraries)

  *

  Libraries and components in a package must not be

  duplicated. The classloader hierarchy must be used to

  design the packages to avoid duplication.

  *

  Common libraries must be placed outside the package to be loaded by a higher level classloader (e.g.

  System

  classloader).

  *

  Packages must follow predefined industry or company

  standard naming conventions and structures.

  *

  Static content must not be included in the deployable package. They must be served separately in

  exploded

  format. References:

• Question 20:

  Which of the following are examples of the management and visibility gap between the traditionally monitored IT Infrastructure resources and the Services?

  A. On-going Shift to Move to an Agile Shared Service Computing Environment

  B. On-going Shift to Manage IT from an End-User Experience Perspective

  C. Loosening of Corporate Policies and Regulations

  D. Increasing Number of Heterogeneous IT Infrastructure Components to Manage

  E. Complex Distributed Environments Requiring Access to Consolidated Information

  Correct Answer: ABDE

  Explanation:

  Examples of the management and visibility gap are listed below:

  *

  On-going Shift to Move to an Agile Shared Service Computing Environment

  *

  On-going Shift to Manage IT from an End User Experience Perspective

  *

  Increasing Need to Enforce Regulatory and Corporate Policies (not C)

  *

  Increasing Number of Heterogeneous IT Infrastructure Components to Manage

  *

  Complex Distributed Environments Require Access to Consolidated Information

  Note: Many companies today are deploying enterprise technology strategies (ETS) such as Service-Oriented Architectures (SOA), Business Process Management (BPM), and Cloud Computing, which are designed to make functions, processes, information, and computing resources more available. While these ETSs offer additional benefits and sophistication, they have created a management and visibility gap between the traditionally monitored IT infrastructure resources and the services that contribute to the overall experience encountered by the end user.

  References: