1Z0-574 Online Practice Questions and Answers

Correct Answer: AB

Explanation:

The broad categories that define ORA Engineering are:

*

Integrated development

This covers a wide range of engineering capabilities required to model, design and build solutions. These

capabilities go beyond simple editing and include advanced capabilities to support round-trip engineering,

integrated testing, deployment, and asset management.

*

Asset Management

Asset Management deals with the visibility, management and governance of assets and asset metadata. It

covers the capabilities required to effectively manage enterprise assets.

*

Quality Management

Quality Management capabilities ensure that the developed solution meets the enterprise standards and

pass the exit criteria. Quality Management covers testing, defect management, and continuous integration.

*

Deployment Management

Deployment Management deals with building, packaging, migration, and deployment of assets.

References:

Correct Answer: D

Explanation:

You use the Web Services Manager Control Console to define Oracle Web Services Manager components

such as server agents. The server agent acts as an enforcement point for security policies.

Point your browser to the Web Services Manager Control Console and log in using your single sign-on

user name and password.

The Web Services Manager Control Console is accessed with a URL of the form:

http://:port_number/ccore

Correct Answer: D

Explanation: Primary ORA computing foundation components: Distributed Computing On-Demand Computing Utility Computing Grid Computing Cloud Computing Elastic Computing Virtualization

References:

Correct Answer: D

Explanation:

In Memory - a term used here to describe data that is currently being processed and therefore exposed to

any program, diagnostic tool, operating system command, virus, etc. that is able to access memory.

References:

Correct Answer: A

Explanation: Given the potentially large number of users of a system, access privileges are generally not assigned at the user level. Instead, users are assigned to groups (mimicking the organizational structure of a company), or roles (defined based on job functions that users perform), or some combination of the two. Access privileges are then assigned to groups and/or roles. The most natural case is that they are assigned to roles, since roles align more closely with operations users naturally perform to accomplish their job. The industry term for this is Role-Based Access Control (RBAC). RBAC is more flexible than defining access rights based on usernames or static groups and enables an organization to be more versatile when allocating resources. With RBAC the system must determine if the subject (user or client) is associated with a role that has been granted access to a resource. This process of user to role ascertainment is called role mapping.

Incorrect answers

B: Rule-based access control is very similar to fine-grained access control, where access is controlled by rules defined in policies. The twist is that rules might refer to each other. For instance, access may be granted to resource/function A as long as it is not also granted to resource/function B. This form of control can be used to ensure that a group or individual is not given privileges that create a conflict of interest or inappropriate level of authority. For instance, the approver of expenses or purchases cannot be the same as the requestor.

C: Role is better here.

D: There are times when access should be based on characteristics the user has rather than the organization or roles to which the user belongs. For instance, a customer with premium status might be granted access to exclusive offers, and a sales representative that has achieved his target sales revenue might have access to certain perks. Such levels of status vary over time, making it difficult to manage access based on relatively static group or role assignments. Attribute-based access control offers a more dynamic method of evaluation. Decisions are based on attributes assigned to users, which are free to change as business events unfold. Access policies define the attributes and values a user must have, and access decisions are evaluated against the current values assigned to the user. Attributes can be used to support both course-grained and fine-grained authorization.

E: No such thing as rank-based classification

References:

Correct Answer: B

Explanation: The term utility computing is often used to describe the metered (or pay-per-use) IT services enabled by grid computing. Cloudcomputing (where dynamically scalable and often virtualized resources are provided as a service over the internet) is another term that describes how enterprises are using computing resources--on both private and public networks--over the internet. Because grid computing provides superior flexibility, it is the natural architectural foundation for both utility and cloud computing.

References:

Correct Answer: BD

Explanation:

The core ORA material is extended via architecture perspectives. There are two types of perspectives:

Technology and Industry(not E).

B:Technology perspectives extend the core material by adding the unique capabilities, components,

standards, and approaches that a specific technology strategy offers. SOA, BPM, EPM/BI, and EDA are

examples of perspectives for ORA. Each technology strategy presents unique requirements to architecture

that includes specific capabilities, principles, components, technologies, standards, etc. Rather than create

another reference architecture for each strategy, ORA was designed to be extensible to incorporate new

computing strategies as they emerge in the industry In order to present the reference architecture in the

most effective manner, each new technology strategy adds a perspective to ORA. This enables the

reference architecture to evolve holistically. New computing strategies extend the core material, providing

further insight and detail as needed.

A perspective extends the ORA core collateral by providing views, principles, patterns, and guidelines that

are significant to that technology domain yet cohesive with the overall ORA.

Industry perspectives extend the core material by adding the business functions, business processes, data entities, software capabilities and components that an industry vertical requires. Retail, Financial, Telco, and Pharma are examples of industry perspectives for ORA.

References:

Correct Answer: B

Explanation: Three-tier architecture allows the data tier and middle tier to scale independently. It also allows multiple clients to share the business logic running in the middle tier. This makes distribution of the application a lot easier. Since security, transactions management, and connection management are handled in the middle tier, it gives better control of the resources. Three-tier architecture is more scalable than the simple client-server model and requires less powerful client side machines. Due to these characteristics this architecture is suitable for small to medium enterprise deployments.

Note: Distributed programming typically falls into one of several basic architectures or categories such as Client-server, three-tier architecture, and N-tier architecture. In the three tier architecture, business logic is handled in the middle tier, presentation rendering is handled on the client and data management is handled in the backend. This architecture allows multiple clients to access centrally deployed business logic components. This allows centralized distribution and management of resources.

References:

Correct Answer: C

Explanation: Application ownership can have an effect on application security. Ownership, in this sense, refers to the person, department, or organization that has authority over the security protections and processes that are followed. Owners have a role in expressing policy. They may choose to set strict policies and follow best practices and reference architectures. Or, they may choose to be lax on security and/or set their own standards. Ideally, an enterprise-class security architecture and processes are developed by pooling industry best practices and ideas, and all applications follow a common strategy without being compromised by ownership issues.

References:

Correct Answer: AC

Explanation: OPSSworks in conjunction with OWSM and the WebLogic container. It provides the plug-in security framework.OPSS enables OWSM to perform credential mapping and identity assertion, which is necessary in order to propagate and assert identity from client to service. It also handles authentication and authorization of service requests as needed.

A credential mapping service intercepts the outbound service request, maps the current user identity to the target credentials, and embeds the credentials within the outbound request. The receiver then extracts the credentials and authenticates the user. Mapping may be performed by an intermediary in order to avoid embedding such security concerns within the requestor or target resource.

Note: OWSMis a run-time framework for security policy creation, management, and governance. Policies are created, attached to services, and enforced at various points in the messaging life cycle. OWSM includes a policy manager and Web Service security agents. Both the policy manager and agents run on Oracle WebLogic Server (OWLS). Agents can be on the service requester side (client) and/or the service provider side(A and C). Agents are installed in the OWLS Web Service interceptors. A request made to a Web Service is intercepted by an OWSM agent that enforces security policies defined in the OWSM policy manager. Since OWSM and Oracle Service Bus (OSB) both run on Oracle WebLogic Server, OWSM agents can be used to secure OSB proxy and business services. This provides a common, universal policy and enforcement model for WSS. OWSM is also integrated with Oracle JDeveloper to provide declarative policy attachment at development time.

References: