1Z0-574 Online Practice Questions and Answers

Correct Answer: ABD

Explanation:

Note E: BPM processes and sub-processes can (but are not required) themselves be exposed as SOA Services. This enables processes to be composed of SOA Services that are implemented as processes. It can be beneficial in two ways. First, it improves reuse of lower level system-centric processes (i.e. service orchestrations), and second, it offers a standard interface mechanism with which to invoke all types of business processes.

Note: BPM and SOA are often used together, as they both support a closer alignment between business and IT, and they both promote agility. BPM targets alignment and agility at the process level, while SOA applies more at the activity level. Hence, business processes and SOA Services can represent business constructs, providing a mapping between the things business does and the way IT helps get it done. The convergence of BPM and SOA generally happens via process decomposition. That is when business processes are modeled as, (i.e. decomposed into), activities. All automated activities must be backed by some form of executable code or function call. These functions, if they are deemed worthy, can be engineered as SOA Services following service-oriented design principles. Agility at the process level is attained by changing the process model. Agility at the service level is achieved by deploying services that are loosely coupled and independently managed.

Correct Answer: BC

Explanation:

The Attribute Service(AS) retrieves user information from an attribute store. The AS retrieves user

information associated with a user from variety of authoritative identity stores including, but not limited to,

LDAP and database stores.

Correct Answer: BDE

Explanation:

B: Separation of duties is a classic security principle that restricts the amount of power held by any one individual in order to prevent conflict of interest, the appearance of conflict of interest, fraud, and errors. Separation of duties is one of the fundamental principles of many regulatory mandates such as Sarbanes-Oxley (SOX) and the Gramm-Leach-Bliley Act (GLBA), and as a result IT organizations are placing greater emphasis on separation of duties across all IT functions, especially database administration.

D: Vacation, Job Rotation, and Transfer are policy considerations.. Once way to detect and deter misuse of systems is to have a new person perform the duties of an existing worker. The new person might notice irregularities or questionable circumstances and be able to report it. The new worker might be there temporarily, i.e. filling in for someone on vacation, or might be a replacement as a result of periodic job rotations and transfers. In addition, workers that expect periodic rotations are less likely to misuse systems as they know others following behind them will eventually discover it and report them. E:Each user should have only those privileges appropriate to the tasks she needs to do, an idea termed the principle of least privilege. Least privilege mitigates risk by limiting privileges, so that it remains easy to do what is needed while concurrently reducing the ability to do inappropriate things, either inadvertently or maliciously. Note: The principle of least privilege. Users are given the least amount of privileges necessary in order to carry out their job functions. This applies to interactions between systems as well as user interactions. This reduces the opportunity for unauthorized access to sensitive information. References:

Correct Answer: E

Explanation:

There are two categories of Oracle products that map into the service-oriented integration architecture,

Fusion Middleware products and the Application Integration Architecture (AIA) products.

References:

Correct Answer: E

Explanation:

The authentication service can detect when the user's password needs to be reset or changed and redirect

the user to a self-service management interface.

References:

Correct Answer: A

Explanation:

To overcome the limitations of conventional storage, Oracle Exadata Storage Servers use a massively

parallel architecture to dramatically increase data bandwidth between the database server and storage.

Innovative technologies such as Exadata Smart Scan, Exadata Smart Flash Cache, and Hybrid Columnar

Compression enable Exadata to deliver extreme performance for everything from data warehousing to

online transaction processing to mixed workloads.

Correct Answer: ACDG

Explanation:

C: AJAX is short for "Asynchronous JavaScript And XML", which essentially limits the term to the set of RIA (Rich Internet Application) solutions based on JavaScript.

D: The Advanced Research Projects Agency created ARPA-net. Internet was developed from ARPA- net.

Note: A Rich Internet Application (RIA) is a Web application that has many of the characteristics of desktop application software, typically delivered by way of a site-specific browser, a browser plug-in, an independent sandbox, extensive use of JavaScript, or a virtual machine. Adobe Flash, JavaFX, and Microsoft Silverlight are currently the three most common platforms, with desktop browser penetration rates around 96%, 76%, and 66% respectively (as of August 2011).

Correct Answer: ACE

Explanation:

A, E:Policy decision points (PDPs) for computingnodes located outside the secure environment. For

example, web servers located in theDMZ might leverage a central PDP, deployed behind a firewall.

Policy enforcement is

still local to the web servers but decisions are made remotely.

C: OES integrates with OPSS (and other security platforms) to enable the use of local PEPs and PDPs. OPSS is a standards-based Java framework of plug-in security services and APIs. It provides the platform security for Oracle WebLogic Server.

Note: OES is a fine-grained authorization engine that simplifies the management of complex entitlement policies. The authorization engine includes both local and centralized PDPs. OES integrates with OPSS (and other security platforms) to enable the use of local PEPs and PDPs. Policy administration is centralized, providing a broad perspective of access privileges, yet delegated, enabling multiple stakeholders to maintain the policies that affect them.

Note 2: PDP - Policy Decision Point, where policy is evaluated and a decision is made. PDPs may be distributed throughout the IT environment and physically co-located with PEPs to avoid network latency.

Note 3: PEP - Policy Enforcement Point, where permit/deny access decisions are enforced. This is generally included in SOA Service or application infrastructure, such as J2EE containers that manage security. It may also be represented as custom code within a SOA Service or application, providing fine grained entitlements evaluation.

References:

Correct Answer: B

Explanation: Symmetrickey cryptography uses the same key to encrypt and decrypt data. Therefore the sender and receiver must each have a copy of the key. It is important that no other entity gains access to the key otherwise they would be able to decrypt the data as well. Common key algorithms include the Data Encryption Standard (DES), Triple DES (3DES), and Advanced Encryption Standard (AES).

References:

Correct Answer: BD

Explanation:

The core ORA material is extended via architecture perspectives. There are two types of perspectives:

Technology and Industry(not E).

B:Technology perspectives extend the core material by adding the unique capabilities, components,

standards, and approaches that a specific technology strategy offers. SOA, BPM, EPM/BI, and EDA are

examples of perspectives for ORA. Each technology strategy presents unique requirements to architecture

that includes specific capabilities, principles, components, technologies, standards, etc. Rather than create

another reference architecture for each strategy, ORA was designed to be extensible to incorporate new

computing strategies as they emerge in the industry In order to present the reference architecture in the

most effective manner, each new technology strategy adds a perspective to ORA. This enables the

reference architecture to evolve holistically. New computing strategies extend the core material, providing

further insight and detail as needed.

A perspective extends the ORA core collateral by providing views, principles, patterns, and guidelines that

are significant to that technology domain yet cohesive with the overall ORA.

Industry perspectives extend the core material by adding the business functions, business processes, data entities, software capabilities and components that an industry vertical requires. Retail, Financial, Telco, and Pharma are examples of industry perspectives for ORA.

References:

Correct Answer: AC

Explanation: The primary focus of the Metadata Repository (aka Enterprise Metadata Repository or Enterprise Repository) is design-time, and it usually has no role in the runtime environment of most SOA deployments. The metadata repository is primarily a human interface for asset capture and presentment. It has integration with the service registry to promote the service interfaces and with the security framework for repository security like authentication and access control.

Core capabilities of the metadata repository include:

*

Asset Management

*

Asset Lifecycle Management

*

Usage Tracking

*

Service Discovery

*

Version Management (C)

*

Service Taxonomy

*

Dependency Analysis (A)

*

Portfolio Management

References:

Correct Answer: D

Explanation:

The Reusable Asset Specification (RAS) provides the following guidelines with respect to asset packaging.

*

Every reusable asset must contain at a minimum one manifest file and at least one artifact, to be considered a valid reusable asset.

*

An asset package is the collection of artifact files plus a manifest. There are several asset packaging scenarios including:

*

Bundled As Single Archive File (not A)

*

Unbundled with artifacts in original location (not B)

*

Unbundled with artifacts moved to new location (not C)

References:

Correct Answer: AC

Explanation:

Web Services are a natural fit for building distributed computing platforms.

*

WSDL, SOAP, and XML promote language and platform independence and interoperability.

*

UDDI allows services deployed in a distributed infrastructure to be discovered and consumed.

*

Simple Object Access Protocol (SOAP) enables service binding and invocation using standards based protocols such as HTTP and JMS.

*

The platform for SOA should support the WS-* standards

Note: Openness is the property of distributed systems such that each subsystem is continually open to interaction with other systems. Web services protocols are standards which enable distributed systems to be extended and scaled. In general, an open system that scales has an advantage over a perfectly closed and self-contained system.

References:

Correct Answer: ABDE

Explanation:

Examples of the management and visibility gap are listed below:

*

On-going Shift to Move to an Agile Shared Service Computing Environment

*

On-going Shift to Manage IT from an End User Experience Perspective

*

Increasing Need to Enforce Regulatory and Corporate Policies (not C)

*

Increasing Number of Heterogeneous IT Infrastructure Components to Manage

*

Complex Distributed Environments Require Access to Consolidated Information

Note: Many companies today are deploying enterprise technology strategies (ETS) such as Service-Oriented Architectures (SOA), Business Process Management (BPM), and Cloud Computing, which are designed to make functions, processes, information, and computing resources more available. While these ETSs offer additional benefits and sophistication, they have created a management and visibility gap between the traditionally monitored IT infrastructure resources and the services that contribute to the overall experience encountered by the end user.

References:

Correct Answer: C

Explanation: