Oracle Identity Governance Suite 11g Essentials Sample Questions:

1. You want to set up a "firecall' account (sometimes referred to as "break-the-glass access) to a privileged account in Oracle Privileged Account Manager (OPAM). Which statement is true? (Choose the best answer.)

A) The OPAM administrator cannot override the access policy because this would initiate a Segregation of Duties (SoD) violation.
B) Users can grant access to themselves even if an access policy is violated.
C) The OPAM administrator can override the access policy by changing it for firecall requests, or the administrator can give direct access to the user.
D) The OPAM administrator cannot override the access policy because this would initiate a security alert.
E) The OPAM administrator can submit a request to Oracle Identity Manager for approval.

2. Which statement is true about the check-in and check-out capabilities in Oracle Privileged Account Manager (OPAM)? (Choose the best answer.)

A) Authorized and non-authorized users can check out an account before using it; they can then check in the account when they are finished with it.
B) Authorized users can check out an account, which provisions it; they can then check in the account, which de-provisions it.
C) Authorized users can check out an account before using it, but administrators must check in the account.
D) Authorized and non-authorized users can check in an account, which provisions it; they can then check out the account, which de-provisions it.
E) Authorized users can check out an account before using it; they can then check in the account when they are finished with it.

3. You organization has configured Oracle Identity Manager 11g R2. You are responsible for catalog administration in addition to the administration of application instances and organizations.
What admin role(s) do you need to be granted (following the principle of "least-privilege") so that you can perform the required job functions? (Choose the best answer.)

A) Both Catalog Administrator and Organization Administrator
B) System Administrator only
C) Catalog Administrator only
D) Both System Administrator and Catalog Administrator
E) Application Instance Administrator, Catalog Administrator, and Organization Administrator

4. Which three configurations must be made before Oracle Identity Manager (OIM) Bulk Load Post Processing Scheduled Task can provision a resource to a user (created by the Bulk Load utility)? (Choose three.)

A) Access Policy for resource to be provisioned
B) Process Definition
C) Reconciliation Matching Rule
D) Approval Policy for approvals
E) Role for created users
F) Role Membership Rule

5. View the Exhibit.

You have installed a connector, and you want to confirm that the connector library is loaded into the Oracle Identity Manager database. Identify the query that produces the results in the Exhibit. (Choose the best answer.)

A) select OJ_TYPE,OJ_NAME from OIMCONNECTOR_JARS;
B) select OJ_TYPE,OJ_NAME from OIMLIB_JARS;
C) select OJ_TYPE,OJ_NAME from OIMLIBRARY_JARS;
D) select OJ_TYPE,OJ_NAME from OIMHOME_JARS;
E) select OJ_TYPE,OJ_NAME from OIM_JARS;

Solutions: