Oracle Identity Governance Suite 11g Essentials Sample Questions:

1. Which statement is true about the check-in and check-out capabilities in Oracle Privileged Account Manager (OPAM)? (Choose the best answer.)

A) Authorized and non-authorized users can check out an account before using it; they can then check in the account when they are finished with it.
B) Authorized users can check out an account before using it; they can then check in the account when they are finished with it.
C) Authorized and non-authorized users can check in an account, which provisions it; they can then check out the account, which de-provisions it.
D) Authorized users can check out an account before using it, but administrators must check in the account.
E) Authorized users can check out an account, which provisions it; they can then check in the account, which de-provisions it.

2. You want to set up a "firecall' account (sometimes referred to as "break-the-glass access) to a privileged account in Oracle Privileged Account Manager (OPAM). Which statement is true? (Choose the best answer.)

A) The OPAM administrator cannot override the access policy because this would initiate a security alert.
B) The OPAM administrator can override the access policy by changing it for firecall requests, or the administrator can give direct access to the user.
C) Users can grant access to themselves even if an access policy is violated.
D) The OPAM administrator cannot override the access policy because this would initiate a Segregation of Duties (SoD) violation.
E) The OPAM administrator can submit a request to Oracle Identity Manager for approval.

3. Which statement is true about assigning privileged accounts to end users by using Oracle Privileged Account Manager? (Choose the best answer.)

A) Privileged accounts can be directly assigned to only one unique end user.
B) Privileged accounts can be directly assigned to end users and to groups.
C) Privileged accounts can be directly assigned to groups but not to specific end users.
D) Privileged accounts must be directly assigned to more than one end user.
E) Privileged accounts can be directly assigned to end users but not to groups.

4. You organization has configured Oracle Identity Manager 11g R2. You are responsible for catalog administration in addition to the administration of application instances and organizations.
What admin role(s) do you need to be granted (following the principle of "least-privilege") so that you can perform the required job functions? (Choose the best answer.)

A) Both System Administrator and Catalog Administrator
B) Application Instance Administrator, Catalog Administrator, and Organization Administrator
C) Catalog Administrator only
D) System Administrator only
E) Both Catalog Administrator and Organization Administrator

5. You developed a new scheduled task with all the procedures stored in the task.xml file. You must deploy this file across a clustered environment, but you want to avoid copying the file in each system.
Which statement correctly describes what you should do with the scheduled task XML file? (Choose the best answer.)

A) Import it into SOA by using the SOA Composite import utility.
B) Import it into MDS by using an Oracle WebLogic Server import utility.
C) Import it into Oracle Identity Manager by using the Scheduled Task import utility.
D) Import it into Oracle Identity Manager by using the SOA Composite import utility.
E) Import it into MDS by using an Oracle WebLogic Scheduled Task import utility.

Solutions: