1Z1-479 무료 덤프문제 온라인 액세스

Which three statements are true about OAM-OAAM advanced integration?

• A.In case of advanced integration using TAP, OAM acts as an asserter and not an authenticator.
• B.Advanced integration using Trusted Authentication Protocol (TAP) is available for OAAM 11.1.1.5.0
  and later only.
• C.Advanced integration with TAP works with both WebGate 10g and 11g, whereas advanced integration
  without TAP works with WebGate 10g only.
• D.Advanced integration with TAP works with WebGate 10g only, whereas advanced integration without
  TAP works with both WebGate 10g and 11g.
• E.Advanced integration without using TAP does not require the OAAM Managed Server, whereas
  advanced integration using TAP requires the OAAM Managed Server.

Your customer has deployed an employee portal that you have protected with Oracle Access Manager
(OAM). The customer now wants a new portlet added to the home page to display the employee's salary
details. The portlet will obtain the information through a call to an internally exposed web service.
Your customer has defined the following security requirements for the new portlet:
1 . Employee must be authenticated through risk-based authentication before they can access the portal.
2 . The web service must be secured form unauthenticated calls.
3 . All security logic for the web service must be external to the web service.
4 . The web service should return salary details only if the user's authentication risk source is below 500.
Which four steps must you perform to meet the requirements for the new portlet?

• A.Configure Oracle Web Services Manager (OWSM) on the portal container to generate a security token.
• B.Deploy Oracle Adaptive Access Manager (OAAM) and integrate with OAM, setting OAAM as the
  authentication scheme.
• C.Configure an OWSM policy to protect the web service, consume the security token, and evaluate the
  risk score.
• D.Configure OWSM to call OAAM to obtain the risk score.
• E.Enable Identity Assertion propagation in the OAM policy.
• F.Configure a cookie response in OAM to set the risk score into a cookie called HTTP_RISK_SCORE.

When managing Token Issuance conditions and rules in Security Token Service, who is granted access
to a requested resource through the Allow type rule?

• A.Only Relying Party Partners are granted access; everyone else is denied access to the resource.
• B.Only partners are granted access; everyone else is denied access to the resource.
• C.Users listed in a condition are granted access; everyone else is denied access to the resource.
• D.Only the partners and users listed in a condition are granted access; everyone else is denied access to
  the resource.

Identify two ways in which you can specify trusted Identity Provider (IdP) partners while configuring
Service Providers (SP) in Oracle Access Management Identity Federation.

• A.A request can be broadcast to all IdPs and the one that matches returns its configuration data is
  populated.
• B.Automatic discovery of an IdP populates the configuration data.
• C.Manually create a new IdP configuration and fill the form with all attributes.
• D.Import the metadata file generated from an IdP deployment to create a new Identity Provider
  configuration.
• E.A sample XML configuration file is provided, which needs to be modified, and the server needs to be
  restarted.

Which three statements are true about Oracle Entitlements Server?

• A.It can use either a centralized PDP or a localized PDP.
• B.It uses a centralized Policy Decision Point (PDP) that all Policy Enforcement Points (PEPs)
  Communicate with.
• C.Auditing is not enabled by default within the security modules.
• D.It has an out-of -the -boxintegration with Oracle Adaptive Access manager.
• E.It enables you o externalize fine-grained authorization from applications.