Oracle 1z0-1070-21 問題集

質問 1：
A customer has a Java application deployed to an on-premises WebLogic server. The application uses WebLogicauthentication mechanism. The customer has access to the source code of this application so it can be built and redeployed if necessary.
Which is NOT an option to integrate with Oracle Identity Cloud Service?
A. Use Secure Form Fill to automatically log the user in the application using credentials stored in Oracle Identity Cloud Service repository.
B. Use WebLogic provider to validate user credentials inOracle Identity Cloud Service repository.
C. Use WebLogic's federation mechanism to delegate authentication to Oracle Identity Cloud Service.
D. Use Oracle Identity Cloud Service's Java SDK.
正解：B

質問 2：
From the Oracle Management Cloud dashboard, you noticed a threat or suspicious browsing activity by a user to execute a brute force attack against an application.
Which two remedial actions will happen implicitly to mitigate some risk? (Choose two.)
A. User added to suspicious data access watchlist
B. Host AV update enforced
C. Multi-factor Authentication (MFA) is imposed
D. Application policy gets created
正解：A,C

質問 3：
Which three represent the different types of Identity SOC architectural models? (Choose three.)
A. Fusion SOC
B. Dedicated SOC
C. Shared SOC
D. Virtual SOC
E. Privileged SOC
正解：B,C,D

質問 4：
Which data CANNOT be captured by running out-of-the box operational or historical reports in Oracle Identity Cloud Service?
A. Users who either have signed in to Oracle Identity Cloud Service or who couldn't sign in to Oracle Identity Cloud Service
B. Users who have been assigned to and removed from Oracle Identity Cloud Service administrator roles
C. Users who use rogue accounts to sign in to Oracle Identity Cloud Service
D. How many times user signed in to Oracle Identity Cloud Service
正解：B

質問 5：
Which omcli command is used to return the status of the agent?
A. agent property
B. agent status
C. status agent
D. status
正解：D

質問 6：
To add an SSH credential to run custom and industry-standard assessments you need to configure the credentialstore first.
Which command-line utility would you use?
A. Oracle Compute CLI
B. OMCLI
C. OPC CLI
D. cURL
正解：B

質問 7：
In your organization you want to do the security validation of development environments in the cloud.
Which two can be used along with Configuration and Compliance Cloud Service? (Choose two.)
A. Use out-of-the-box, REST-based rules to check for the restriction of cloud provider's administrative port address to corporate IP addresses.
B. Use the Secure Technical Implementation Guides (STIGs) industry-standard benchmarks.
C. Use custom in-house rules along with Security Content Automation Protocol (SCAP) assessments
D. Use the rules to check that auditing is turned on in the cloud.
正解：A,B