1Z0-1070-20 Online Practice Questions and Answers

Which industry-standard benchmark engine needs to be configured with Oracle Configuration and Compliance Cloud Service?

A. General Data Protection Regulation (GDPR)

B. Secure Technical Implementation Guides (STIGs)

C. Open Vulnerability and Assessment Language (OVAL)

D. Security Content Automation Protocol (SCAP)

Which three security services are provided in the Identity SOC framework? (Choose three.)

A. Oracle Application Performance Monitoring Cloud Service

B. Oracle Orchestration Cloud Service

C. Oracle Configuration and Compliance Cloud Service

D. Oracle Log Analytics Cloud Service

E. Oracle CASB Cloud Service

How can you synchronize users and groups between Microsoft Active Directory and Oracle Identity Cloud Service?

A. Use the import utility

B. Configure the Bridge

C. Configure Delegated Authentication

D. Use a flat file

Which does Oracle CASB Cloud Service NOT support when you add an administrator?

A. Allowing that administrator to view only policy alerts

B. Allowing that administrator to access all Oracle CASB Cloud Service functionality

C. Allowing that administrator to access only specified application instances

D. Allowing that administrator to access only limited Risk Events features

How do you configure Oracle Identity Cloud Service so that user accounts will never be locked because of consecutive, unsuccessful login attempts?

A. Change the value of the Max unsuccessful MFA attempts field to 0.

B. Change the time of the lockout duration interval to 0 seconds.

C. Change the value of the Account Lock Threshold field to 0.

D. Modify a rule of the default sign-on policy.

You want a user to perform the following administrative tasks in Oracle Identity Cloud Service:

customizing the interface, default settings, notifications, and the password policy;

configuring Multi- Factor Authentication (MFA);

and managing bridges, identity providers, and trusted partner certificates.

To which administrator role do you assign this user?

A. Application administrator

B. Audit administrator

C. User administrator

D. Security administrator

Which two features describe the monitoring capabilities of Oracle Security Monitoring and Analytics (SMA) Cloud Service? (Choose two.)

A. Monitor application performance comprehensively

B. Detect security threats

C. Proactively monitor, alert, and notify across all infrastructure tiers

D. Dashboard for infrastructure-related metrics like CPU utilization

A customer use case requires the second Factor Email during Oracle Identity Cloud Service Authentication process for a group of users only. The security administrator, signed in Oracle Identity Cloud Service console, enabled the email factor, edited the default sign-on policy and added a new sign-on rule. The new sign-on rule included the group name in the member of these groups conditions and prompt for additional factor every time. The administrator saved both the rule and the policy.

After executing this configuration, why does the email factor NOT appear to users from that group?

A. The default Sign-on Policy can't be changed.

B. The security administrator needs to specify the list of users instead of the group name.

C. The Passcode Length and Validity Duration of the email factor don't have a default value.

D. The security administrator didn't change the order of the sign-on rules.

Which four are the main pillars of the Oracle Identity Security Operations Center (SOC) solution? (Choose four.)

A. Threat Intelligence

B. Cloud Access Security Broker (CASB)

C. Security information and event management (SIEM)

D. IT Orchestration

E. Application Performance

F. User Entity Behavior and Analytics (UEBA)

From the Oracle Management Cloud Security Monitoring and Analytics dashboard, you noticed a threat of key transfer and suspicious SMB communication activity by a user.

Which two remedial actions will be taken automatically to mitigate some risk? (Choose two.)

A. User added to suspicious data access watchlist

B. Multi-factor Authentication (MFA) is imposed

C. Host anti-virus (AV) update enforced

D. Targets added to file change watchlist