1Z0-958 Online Practice Questions and Answers

Which two would need to happen in order for Advanced Access Controls (AAC) to automatically assign a status of "Closed" to an access incident? (Choose two.)

A. The incident is resolved in Fusion Cloud and a subsequent evaluation of controls finds that the incident no longer exists.

B. A global condition was added that resolves the conflict and a subsequent evaluation of controls finds that the incident no longer exists.

C. A user sets the State of the incident to "Remediate".

D. The incident is resolved using simulation in AAC and a subsequent evaluation of controls finds that the incident no longer exists.

E. A user sets the Status of the incident to "Resolved".

You have imported risks in Financial Reporting Compliance using data migration. Your client is asking if

you can add controls for these risks.

Which two statements are true? (Choose two.)

A. To relate controls to risks, the risks must be in "approved" state.

B. You cannot use the Data Migration tool to add control records to map to existing risks.

C. You can use the Data Migration tool to add control records for the existing risks.

D. To relate controls, risks must be assigned to the same perspective that is assigned to the control you want to map it to.

E. You can manually add control definitions and relate them to the risks in Financial Reporting Compliance.

Identify the four statuses and states in which you can edit an issue's description, assuming you have the necessary privileges to edit the issue. (Choose four.)

A. Status: On Hold; State: In Review

B. Status: Closed; State: Final Close

C. Status: Open; State: Approved

D. Status: Closed; State: Closed ?Awaiting Approval

E. Status: Open; State: In Edit

F. Status: On Hold; State: Awaiting Approval

G. Status: Open; State: New

H. Status: On-Hold; State: Reported

You build an access model with two entitlements. Each entitlement has four access points. The

entitlements do not have any access points in common.

How many access point combinations will be analyzed?

A. 20

B. 16

C. 8

D. 4

E. 25

You are configuring security and you do not want the risks to go through the review and approve process each time they are updated. How will you meet this requirement?

A. Add the Risk Reviewer Composite duty role to the person who creates the risks so he or she would be able to review them before saving the record.

B. Use only the Risk Approver Composite duty role in the configurations so the risks will not go through the review process.

C. Ensure that only the upper management is given the Risk Reviewer Composite duty role so they could review the risks that they want to review.

D. Ensure that no user has been assigned a job role that includes the Risk Reviewer Composite or Risk Approver Composite Duty Role.

You completed the data migration successfully. You created 100 controls, an Organization Perspective,

and relationship of controls to the Organization Perspective. All controls are related to one perspective

item. The Control Manager logs in to the application to view the new controls, yet there are none available

for his or her review.

Identify three reasons for this. (Choose three.)

A. The Control Manager was not given the correct data security policy to access the controls.

B. The Perspective Hierarchy was not associated to the Control Object.

C. There was no Control Type associated with the controls.

D. The Perspective Hierarchy is not in the Approved state.

E. No risks were mapped to the imported controls.

Your client needs to perform Design Review and Certification assessment for all their controls. Identify two options that show how this requirement can be met. (Choose two.)

A. B. C. D. E.

The GRC Business owner responsible for reviewing and investigating access incidents related to the "Order to Cash" perspective does not see any worklists for the generated results. You have validated that:

1.

Other business owners are able to view their assigned worklists without any problem

2.

Incidents have been generated for the controls related to Order to Cash

3.

The business owner's assigned roles contain the correct functional privileges and data access to the correct perspective values

What is the reason the business owner cannot see any worklists for the generated incidents?

A. The Result Management Perspective Assignment has not been linked.

B. The underlying model is not linked to Order to Cash.

C. The business owner was recently assigned the role and the worklist needs to be refreshed.

D. Worklist assignment does not include the business owner.

E. The Control Perspectives are not linked to the control.

You have scheduled quarterly assessments for a Control object at the beginning of the year with future dates. However, the test plans associated with the Control object were updated before the assessment could be started. Which statement is true about this scenario?

A. The user will have the option to select the older or newer versions of the test plans during the assessment process.

B. The scheduled assessment process will end in error.

C. The assessment will be associated with the version of the test plans from the time of assessment initiation.

D. The updated test plans will become available during the assessment.

Which three objects can be related to issues when creating an issue on the Manage Issues page? (Choose three.)

A. Test Plans

B. Assessments

C. Processes

D. Perspectives

E. Risks

F. Controls