1Z0-1070-20 by Oracle Valid Free Exam Practice Test

Question 1

You want to configure Oracle Identity Cloud Service so that any users who use an IP address that comes from a country where hacking is rampant are prevented from accessing Oracle Identity Cloud Service.
How would you accomplish this?

A. Define a network perimeter and assign it to a rule of a sign-on policy. B. Define a network perimeter, assign it to a rule of a sign-on policy, set the access for the rule to be denied, and define risk-related conditions in the rule associated with the user's location. C. Define a network perimeter. D. Define a network perimeter, assign it to a rule of a sign-on policy, and set the access for the rule to be denied.

Correct Answer: D

Question 2

Which service can help you to detect Separation of Duties (SOD) violations in your cloud applications?

A. Oracle Configuration and Compliance Service B. Oracle Log Analytics Cloud Service C. Oracle CASB Cloud Service D. Oracle Security Monitoring and Analytics Cloud Service

Correct Answer: C

Question 3

Which four are the main pillars of the Oracle Identity Security Operations Center (SOC) solution? (Choose four.)

A. Application Performance B. User Entity Behavior and Analytics (UEBA) C. Threat Intelligence D. IT Orchestration E. Cloud Access Security Broker (CASB) F. Security information and event management (SIEM)

Correct Answer: A,B,E,F

Question 4

To add an SSH credential to run custom and industry-standard assessments you need to configure the credential store first.
Which command-line utility would you use?

A. Oracle Compute CLI B. OMCLI C. cURL D. OPC CLI

Correct Answer: B

Question 5

Which Oracle Identity Security Operations Center (SOC) component detects SQL query anomalies for any database or application?

A. Oracle CASB Cloud Service B. Oracle Configuration and Compliance Cloud Service C. Oracle Identity Cloud Service D. Oracle Security Monitoring and Analytics Cloud Service

Correct Answer: D

Question 6

In your organization you want to do the security validation of development environments in the cloud.
Which two can be used along with Configuration and Compliance Cloud Service? (Choose two.)

A. Use the Secure Technical Implementation Guides (STIGs) industry-standard benchmarks. B. Use out-of-the-box, REST-based rules to check for the restriction of cloud provider's administrative port address to corporate IP addresses. C. Use the rules to check that auditing is turned on in the cloud. D. Use custom in-house rules along with Security Content Automation Protocol (SCAP) assessments

Correct Answer: A,B

Question 7

Which two steps are required to integrate Security Monitoring and Analytics Cloud Service with Identity Cloud Service? (Choose two.)

A. In Security Monitoring and Analytics Cloud Service under Security Admin Select Identity Context, click Create Identity Context Configuration and specify the grant type/Client ID/Client Secret/scope information collected from Identity Cloud Service. B. In Security Monitoring and Analytics Cloud Service under Security Admin Select Identity Cloud Service, click Create Identity Context Configuration and specify the grant type/Client ID/Client Secret/scope information collected from Identity Cloud Service. C. Create a trusted application in Identity Cloud Service and collect the grant type/Client ID/Client Secret/scope for the application created. D. Create a Security Monitoring and Analytics Cloud Service Application in Identity Cloud Service and collect the grant type/Client ID/Client Secret/scope for the application created.

Correct Answer: A,D

Oracle Cloud Platform Identity and Security Management 2020 Associate - 1Z0-1070-20 Exam Practice Test