Oracle Oracle Certifications 1Z0-479 Questions & Answers

• Question 21:

  You have configured a new pattern in Oracle Adaptive Access Manager (OAAM) to capture login times of devices. Your customer wants to ensure that devices that are used outside their normal times are blocked.

  After creating your pattern, which two additional steps must you perform to configure OAAM to meet this requirement?

  A. Create a transaction definition for the pattern.

  B. Create a new rule in an existing policy that contains an appropriate condition to evaluate your new pattern.

  C. Linkyour chosen policy to the appropriate user groups.

  D. Configure a block action for your new rule.

  E. Restart the OAAM Managed Server for the pattern to take effect.

  Correct Answer: AE

• Question 22:

  Which statement is true about the interaction between a UMS component in the SOA Suite and OAAM?

  A. OAAM generates and sends the One Time Pin (OTP) directly to a user.

  B. OAAM generates and sends the OTP to UMS, which submits it to a customer.

  C. OAAM communicates with the UMS, which generates and submits the OTP to a customer.

  D. OAAM sends the OTP to a customer directly and UMS validates the PIN.

  E. UMS generates and sends the OTP direcly to a user.

  Correct Answer: A

• Question 23:

  Identify the mandatory attribute that is used when creating an application profile for a mobile application in Single Sign-On with Oracle Access Management Mobile and Social services. Select 1

  A. userIdBasicAuth

  B. Mobile.clientRegHandle.baseSecret

  C. sharedSecret4BasicAuth

  D. baseSecret4BasicAuth

  Correct Answer: B

• Question 24:

  From Oracle Access Manager 11g R1-PS1 (and R2) onward, resource definitions in the policy model have a field protection level that can be protected, unprotected, or excluded. What is the correct behavior for a request that has the excluded protection level?

  A. Authentication is always performed but session validation is not performed.

  B. Authentication is not performed but session validation is always performed.

  C. The WebGate/agent lets the request through without authentication and no validation is performed.

  D. TheOAM_REMOTE_USERheader is added to the request.

  Correct Answer: C

• Question 25:

  Identify two protocols that the Oracle Access Management Social module supports for Authentication and Authorization using Internet Identity services. (Choose two.)

  A. OpenID

  B. WebID

  C. BrowserID

  D. Windows Live ID

  E. OAuth

  Correct Answer: AE

• Question 26:

  Identify two functions of the heartbeat check performed by Oracle Access Manager Access Servers.

  A. It checks if an LDAP store can be accessed.

  B. It check if a WebGate can beaccessed.

  C. It check if a session cache store can be accessed.

  D. It check if a policy store can be accessed.

  E. It check if a database can be accessed.

  Correct Answer: AD

• Question 27:

  Which three statements are true about Oracle Entitlements Server?

  A. It enables you to externalize fine-grained authorization from applications.

  B. It uses a centralized Policy Decision Point (PDP) that all Policy Enforcement Points (PEPs) communicate with.

  C. It can use either a centralized PDP or a localized PDP.

  D. It has an out-of-the-box integration with Oracle Adaptive Access Manager.

  E. Auditing is not enabled by default within the security modules.

  Correct Answer: ABE

• Question 28:

  Identity two authentication engines that are available in Oracle Identity Federation (OIF) 11g.

  A. LDAP

  B. Flat File

  C. MongoDB

  D. JAAS

  E. Excel File

  Correct Answer: AD

• Question 29:

  How would you configure an authentication policy for federation in Oracle Access Management 11gR2?

  A. There are no authentication policies for federation.

  B. Authentication policies are defined in the Oracle Identity Federation (OIF) console.

  C. Authentication policies are definedin the Oracle Access Management console for each domain.

  D. Authentication policies are provided in assertions.

  Correct Answer: C

• Question 30:

  Identify three uses of the Knowledge-Based Authentication functionality provided by Oracle Adaptive Access Manager.

  A. first authentication for forgot password

  B. second factor authentication forchange password

  C. offline SMS PIN-based authentication

  D. high risk user authentication

  E. user authorization

  Correct Answer: ABC