Oracle 1Z0-958 問題集

質問 1：
You are implementing Advanced Access Controls and there is a requirement for a control to monitor user access to specific, client-defined access points which give users the ability to both initiate a purchase order and approve payments on that purchase order.
Which is a valid option to implement the control?
A. Create an access model from the "Models" tab of Advanced Controls, and then define an access point filter for each individual client-defined access point.
B. From the "Access Entitlements" page create two entitlements containing the respective client-defined access points. Create an access model from the "Models" tab of Advanced Controls, based on the entitlements you created. Finally, deploy an access control in the "Controls" tab of Advanced Controls, and select the access model you created.
C. From the "Access Entitlements" page create two entitlements containing the respective client-defined access points. Create an access model from the "Models" tab of Advanced Controls, based on the entitlements you created.
D. Select Actions > Create Access Control from the "Controls" tab of Advanced Controls.
E. Create an access entitlement from the "Access Entitlements" page, then select Actions > Create Access Control from the "Controls" tab of Advanced Controls, and select the entitlement you created.
正解：B

質問 2：
You are configuring security and you do not want the risks to go through the review and approve process each time they are updated. How will you meet this requirement?
A. Ensure that no user has been assigned a job role that includes the Risk Reviewer Composite or Risk Approver Composite Duty Role.
B. Use only the Risk Approver Composite duty role in the configurations so the risks will not go through the review process.
C. Add the Risk Reviewer Composite duty role to the person who creates the risks so he or she would be able to review them before saving the record.
D. Ensure that only the upper management is given the Risk Reviewer Composite duty role so they could review the risks that they want to review.
正解：B

質問 3：
How do you add values to a Risk Type list of values?
A. Add the lookup codes to the GRC_RISK_TYPE Lookup Type.
B. Use the default lookup codes because there is no way to update the existing ones.
C. Add the lookup codes to the GRCM_RISK_TYPE Lookup Type.
D. Because you cannot add new values, update one of the existing lookup codes to what the client wants it to be.
E. Populate the Import template with the new values in the Issue Severity column on the Controls tab.
正解：C

質問 4：
Which two steps are required to set up two levels of approval for new controls, which are added after the initial import? (Choose two.)
A. On the Controls tab of the Import template, set the control state to NEW for each control record.
B. Identify users who will perform control review and approval.
C. Identify the other roles to be provided for control managers.
D. Identify the organizations or business units for which users will perform review or approval.
正解：B,D

質問 5：
You have created security roles for the Procure-to-Pay (P2P) Control Manager for the EMEA region in your client's organization. But, there are two problems with his or her security configuration.
Problem 1: This person should not receive notifications to complete control assessments, but currently he or she does.
Problem 2: Also, although he or she has access to controls associated with EMEA, he or she is unable to access controls created for individual regions within EMEA.
You have given him or her the following job role:
* EMEA P2P Control Manager Job Role
* Seeded Control Manager Duty Composite
* Seeded Control Certification Assessor Duty Composite
* EMEA P2P Control Manager Data Security Policy
* Seeded Control Manager Data Security Policy
* Perspective filter where Region Perspective "equals" EMEA
* Perspective filter where Process Perspective "equals" P2P
Which two actions need to be taken to correct the problems? (Choose two.)
A. Remove Control Certification Assessor Composite from the EMEA P2P Control Manager job role.
B. Add to the EMEA P2P Control Manager Data Security Policy the seeded Control Certification Assessor Data Security Policy.
C. Create EMEA P2P Control Certification Assessor Data Security Policy striped by both EMEA and P2P perspectives and assign to the job role.
D. While defining data security policy, set the perspective value to EMEA including all child nodes of the EMEA region.
正解：B,D

質問 6：
The internal auditor advised the Control Owner of North America to perform assessment for two P2P controls.
Which three steps can the Control Owner perform to kick-off assessments for only those two controls?
(Choose three.)
A. Initiate two planned assessments, one for each control.
B. Perform impromptu assessments for the two controls.
C. Initiate a planned assessment that includes all controls assigned to perspective P2P.
D. Enable impromptu assessments during configuration of module objects.
E. Initiate a planned assessment and include the two controls as part of the same assessment.
正解：A,C,D

質問 7：
Which two should you determine to ensure that your client can successfully maintain and administer Perspectives post go-live? (Choose two.)
A. Identify users who will be responsible for creating and maintaining perspectives, both for security as well as reporting.
B. Identify lookup values that need to be created for Control, Risk, and Issue Type fields.
C. Identify if your client wants to review and/or approve new perspectives or changes made to existing perspectives.
D. Identify users who will be responsible for creating and maintaining controls and/or risks.
正解：B,C

質問 8：
Select three fields that are required to create an impromptu assessment. (Choose three.)
A. Activity
B. Name
C. Reviewer
D. Perspectives
E. Template
F. Due Date
正解：B,E,F