Oracle Oracle Certifications 1Z0-574 Questions & Answers

• Question 31:

  Which statement most accurately describes the purpose of the Process view of User Interaction?

  A. The Process view describes the sequence of activities In the development to deployment life cycle of the UI application.

  B. The Process view describes the workflow of the user Interaction with the application from screen to screen.

  C. The Process view describes the computer processes incorporated into the architecture and illustrates the interactions between the various components in the architecture.

  D. The Process view describes the business processes that are implemented In the UI applications.

  Correct Answer: C

  Explanation:

  The Process View describes the computer processes incorporated into the architecture and illustrates the

  interactions between the various components in the architecture.

  References:

• Question 32:

  Which statements are correct for service versioning within Service-Oriented Integration?

  A. Only one production version of each SOA Service should be allowed. Multiple versions cause service sprawl.

  B. Service consumers should be allowed to migrate to new versions of SOA Services over time as part of regular maintenance.

  C. Service consumers should be automatically migrated to new versions of SOA Services by using the mediation layer to perform any necessary translations or transformations.

  D. At most two versions of an SOA Service are allowed in production, one current and one that's deprecated.

  E. The architecture must support multiple, concurrent production versions of SOA Services.

  Correct Answer: BE

  Explanation:

  B (not C): Service consumers are able to migrate to a newer version of a SOA Service gracefully. Service

  consumers should migrate to a new version of a SOA Service as part of a normal maintenance process.

  The

  coordinated deployment of service consumers and service providers should not be necessary.

  Implications:

  *

  A service migration strategy needs to be established.

  *

  The architecture must support graceful service migration.

  E(not A, not D):There may be multiple versions of a SOA Service in production concurrently. Invariably a SOA Service will require modifications to support new consumers or to expand functionality. Supporting concurrent versions of a SOA Service is essential for a sound service versioning approach. Implications:

  *

  A service versioning strategy needs to be established.

  *

  The architecture must support multiple, concurrent versions of a SOA Service.

  References:

• Question 33:

  What does the Java EE Management Specification (JSR 77) provide?

  A. a general mechanism for monitoring and managing Java resources

  B. an internet-standard protocol for managing devices on IP networks

  C. a standard model for managing a J2EE Platform; it describes a standard data model for monitoring and managing the runtime state of any Java EE Web application server and Its resources

  D. a structured approach to monitor diverse and heterogeneous shared systems

  Correct Answer: C

  Explanation:

  The Java EE Management specification (JSR 77) provides a standard model for managing a J2EE

  Platform and describes a standard data model for monitoring and managing the runtime state of any Java

  EE Web application server and its resources.

  Note: The J2EE Management specification includes standard mappings of the model to the Common

  Information Model (CIM), to an SNMP Management Information Base (MIB), and to the Java object model

  through a server-resident Enterprise JavaBeans (EJB) component, known as the J2EE Management EJB

  Component (MEJB). The MEJB provides interoperable remote access to the model from any standard

  J2EE application.

  References:

• Question 34:

  ORA defines the concept of Data Grid. Which of the following is the most accurate definition of Data Grid?

  A. A Data Grid is a cluster of databases providing scalability and high availability.

  B. A Data Grid is a system composed of multiple servers that work together to manage Information and related operations such as computations in a distributed environment.

  C. A Data Grid is used for data mirroring and data replication.

  D. A Data Grid is a tool used to perform ETL (Extract-Transform-Load).

  Correct Answer: B

  Explanation:

  A Data Grid is a system composed of multiple servers that work together to manage information and

  related operations such as computations in a distributed environment.

  Note: An In-Memory Data Grid is a Data Grid that stores the information in memory to achieve very high

  performance, and uses redundancy by keeping copies of that information synchronized across multiple

  servers to ensure the resiliency of the system and the availability of the data in the event of server failure.

  References:

• Question 35:

  When two or more technology perspectives are combined, which statement best describes how the Oracle Reference Architecture (ORA) applies to the combination?

  A. One of the layersin ORAis the Business Services layer that contains the SOA Services. It is these SOA Services that provide the connection between different technology perspectives; therefore the Business Services layer is the interlock between two or more technology perspectives.

  B. Each technology perspective adds to the core ORA capabilities. The core ORA capabilities support

  each of the technology perspectives by providing a common foundation.

  C. The vertical layersin ORA (Enterprise Development, Enterprise Security. Enterprise Management) provide the capabilities needed to combine two or more technology perspectives.

  D. Each technology perspective is a separate reference architecture that leverages ORA as the common foundation for each of the individual reference architectures.

  E. The vertical layers of ORA are identical for each technology perspective. Each technology perspective adds capabilities to the horizontal layers of ORA, especially the business Processes, Business Services, and Information Assets layers.

  Correct Answer: A

  Explanation: The reference architecture is designed to support an expanding list of technology strategies. It is also important that the various technology perspectives can be easily combined since they are very much complementary. Documenting how each technology perspective relates and combines with all the other technology perspectives would be onerous and unwieldy. This is the reason that ORA embraces service orientation at the core so that services provide a consistent mechanism to expose and combine various technologies and the capabilities.

  References:

• Question 36:

  Which one of the following security strategies protects data in motion but does not address data at rest or in memory?

  A. end to end security

  B. defense In depth

  C. per (motor security

  D. cloud security

  E. point to point security

  Correct Answer: E

  Explanation:

  A lesser alternative to end to end security is point to point security. This is used to protect messages in

  transit. It assumes that other means of security are used to protect messages during processing and

  persistence.

  References:

• Question 37:

  Which of the following statements are true about point to point security?

  A. It is often implemented using transport security protocols such as SSL/TLS.

  B. It is designed to transport sensitive data over unprotected networks.

  C. After data reaches an endpoint, it offers no further protection.

  D. It can be combined with other forms of security such as perimeter security and defensein depth

  E. SSL/TLS is used sparingly because it is difficult to set up.

  Correct Answer: ABCE

  Explanation:

  A: The downside to TLS is that it only protects data in transit, or "point-to-point". Once data is received, it is

  no longer protected.

  B: Point to point security is often used as a

  default or minimal security option in order to protect messages over insecure networks.

  C:A lesser alternative to end to end security is point to point security. This is used to protect messages in

  transit. It assumes that other means of security are used to protect messages during processing and

  persistence.

  Generally, less effort is made to protect data behind the corporate firewall. This opens up a number of

  vulnerabilities and risks to an organization.

  E: SSL/TLS is not so hard to set up. It is popular.

  References:

• Question 38:

  Why is it necessary to have Integration of Metadata Repository to the Source Code Management (SCM) server?

  A. The SCM needs to access the asset metadata for reporting purposes.

  B. The Metadata Repository links the asset metadata to the asset payload, which may be archived in the SCM.

  C. The Metadata Repository promotes the assets to the SCM.

  D. The Metadata Repository stores the asset metadata in the SCM.

  Correct Answer: B

  Explanation: SCM server manages the code base and configuration. It uses file store or database for maintaining the asset payload and to manage the versioning of the assets. Note: The metadata repository is primarily a human interface for asset capture and presentment. It has integration with the service registry to promote the service interfaces and with the security framework for repository security like authentication and access control. It also has integration with other enterprise asset sources like Source Code Management (SCM) tools and file servers. Source Code Management (SCM) is the management of changes to documents, programs, and other information artifacts.

  References:

• Question 39:

  Which statement best describes the role of the Data Movement Layer within the logical view of the Service-Oriented Integration (SOI) architecture?

  A. The Data Movement Layer provides access to persistent data storage for the architecture.

  B. All write operations on persistent data are performed via the Data Movement Layer.

  C. All read operations on persistent data are performed via the Data Movement Layer.

  D. All create, read, update, and delete operations on persistent data are performed via the Data Movement Layer.

  E. The Data Movement Layer provides batch and bulk data operations for the architecture.

  Correct Answer: E

  Explanation: The Data Movement Layer provides the batch and bulk data handling for the architecture. This layer exists primarily to offload bulk data movement from the upper layers in the architecture. Bulk data movement is a necessary evil in many enterprises, and therefore, the architecture must provide a mechanism to provide this capability in an efficient, controlled manner. Without this layer, the other layers in the architecture might be misused to move large blocks of data, a task for which the other layers are ill suited.

  References:

• Question 40:

  Credential mapping is done in order to create the proper credential for a user in order to issue a request to another system. In a scenario where one Oracle WebLogic Server makes a Web Service request to another Oracle WebLogic Server, where might credential mapping be performed?

  A. In the WLS platform (OPSS / OWSM agent) making the Web Service request

  B. In the service bus, if one is being used

  C. In the WLS platform (OPSS / OWSM agent) responding to the request

  D. In a Security Token Service, if WS-Trust is being used

  E. In the credential store

  F. In the identity management server

  Correct Answer: AC

  Explanation: OPSSworks in conjunction with OWSM and the WebLogic container. It provides the plug-in security framework.OPSS enables OWSM to perform credential mapping and identity assertion, which is necessary in order to propagate and assert identity from client to service. It also handles authentication and authorization of service requests as needed.

  A credential mapping service intercepts the outbound service request, maps the current user identity to the target credentials, and embeds the credentials within the outbound request. The receiver then extracts the credentials and authenticates the user. Mapping may be performed by an intermediary in order to avoid embedding such security concerns within the requestor or target resource.

  Note: OWSMis a run-time framework for security policy creation, management, and governance. Policies are created, attached to services, and enforced at various points in the messaging life cycle. OWSM includes a policy manager and Web Service security agents. Both the policy manager and agents run on Oracle WebLogic Server (OWLS). Agents can be on the service requester side (client) and/or the service provider side(A and C). Agents are installed in the OWLS Web Service interceptors. A request made to a Web Service is intercepted by an OWSM agent that enforces security policies defined in the OWSM policy manager. Since OWSM and Oracle Service Bus (OSB) both run on Oracle WebLogic Server, OWSM agents can be used to secure OSB proxy and business services. This provides a common, universal policy and enforcement model for WSS. OWSM is also integrated with Oracle JDeveloper to provide declarative policy attachment at development time.

  References: