1z0-933: Oracle Cloud Platform Identity and Security Management 2018 Associate

How can you prevent a user from signing in to Oracle Identity Cloud Service if they are using a device that Oracle Identity Cloud Service does NOT recognize?

Configure Adaptive Security
Configure identity provider policies
Configure Multi-Factor Authentication
Configure the bridge

Correct answer: B

Explanation:

Reference: https://docs.oracle.com/en/cloud/paas/identity-cloud/idcwn/index.html#IDCWN-GUID-BC1C3C92-B422-4088-BFDF-BD0A3FEF326E

You want to configure Oracle Identity Cloud Service so that any users who use an IP address that comes from a country where hacking is rampant are prevented from accessing Oracle Identity Cloud Service.

How would you accomplish this?

Define a network perimeter, assign it to a rule of a sign-on policy, and set the access for the rule to be denied.
Define a network perimeter, assign it to a rule of a sign-on policy, set the access for the rule to be denied, and define risk-related conditions in the rule associated with the user’s location.
Define a network perimeter and assign it to a rule of a sign-on policy.
Define a network perimeter.

Correct answer: A

Explanation:

Reference: https://docs.oracle.com/en/cloud/paas/identity-cloud/uaids/understanding-network-perimeters.html

In your organization, security operations complains about the shortage of resources to handle the number of alerts generated from the security products deployed.

You want to automate the process of handling and remediating the alerts and also want to add contextual awareness to adapt to the threats in real time.

Which would provide the required solution?

Oracle Integration Cloud Service
Oracle Identity Security Operations Center (SOC)
Oracle Configuration and Compliance Cloud Service
Oracle Log Analytics Cloud Service

Correct answer: B

How does a threat progression get identified in Identity SOC?

Oracle CASB Cloud Service receives the threat intel from various data sources including Oracle Identity Cloud Service, and based on user behavior creates a threat in the Oracle CASB Cloud Service Threat Dashboard.
Configuration and Compliance Cloud Service identifies the Configuration drift and forwards it to Oracle CASB Cloud Service, and based on user behavior identified from Oracle Identity Cloud Service creates the threat based on the risk score in Oracle CASB Cloud Service Threat dashboard.
Oracle Security Monitoring and Analytics Cloud Service receives the threat intel from various data sources including Oracle Identity Cloud Service and Oracle CASB Cloud Service, and based on user behavior creates a threat based on the risk score in Oracle Security Monitoring and Analytics Cloud Service Threat dashboard.
Oracle Orchestration Cloud Service receives the threat information from Oracle Security Monitoring Cloud Service and Oracle Identity Cloud Service, and various sources based on the information received from other sources creates a threat in Oracle CASB Cloud Service Threat dashboard.

Correct answer: A

Which data CANNOT be captured by running out-of-the box operational or historical reports in Oracle Identity Cloud Service?

How many times user signed in to Oracle Identity Cloud Service
Users who either have signed in to Oracle Identity Cloud Service or who couldn’t sign in to Oracle Identity Cloud Service
Users who use rogue accounts to sign in to Oracle Identity Cloud Service
Users who have been assigned to and removed from Oracle Identity Cloud Service administrator roles

Correct answer: D

One of the required tasks for setting up Oracle Security Monitoring and Analytics is “Add Log Analytics entities”. After updating a file that contains the entity definition that you want to add, which omcli command needs to be run?

<AGENT_BASE_DIR>/agent_inst/bin/omcli setproperty agent FILENAME
<AGENT_BASE_DIR>/agent_inst/bin/omcli register agent FILENAME
<AGENT_BASE_DIR>/omcli setproperty agent FILENAME
<AGENT_BASE_DIR>/agent_inst/bin/omcli add_entity agent FILENAME

Correct answer: D

Explanation:

Reference: https://docs.oracle.com/en/cloud/paas/management-cloud/gfadg/working-oracle-management-cloud.pdf

Which two users should run Security Content Automation Protocol (SCAP) assessments? (Choose two.)

opc
root
privileged sudo user
oracle

Correct answer: BC

Explanation:

Reference: https://docs.oracle.com/en/cloud/paas/management-cloud/comcs/assessing-compliance-industry-standards.html#GUID-72D97C34-A944-4EC9-B387-1F2529A3D491

Which is a top challenge for a Security Operations Center (SOC) Manager?

to keep all systems in compliance within 30 days of new security regulations
to ensure network and systems uptime to meet organization and customer SLAs
to identify threats proactively while maintaining organization and customer SLAs
to design and implement a software development life cycle program

Correct answer: C

Explanation:

Reference: https://www.dflabs.com/the-top-5-challenges-faced-by-security-operations-center/

Your company is in the banking industry and offers financial services to the public online. You just became aware of a Phishing attack on your customers. This attack prompts your clients to log into fake websites with their password. As the system administrator, what can you turn on with Oracle Security Monitoring and Analytics Cloud Service that could help protect your clients?

Lock all user accounts
Send out notifications to clients to change their password.
Turn on multi factor authentication
Disable online access

Correct answer: B

Which key feature must be part of a modern Security Operations Center (SOC)?

System access life cycle management
Mobile Device Management along with adaptive access management
Integration with the business through dashboards and reports by the implementation of Big Data and Machine Learning Techniques
Automation and incident response orchestration

Correct answer: C

Vendor:	Oracle
Exam Code:	1z0-933
Exam Name:	Oracle Cloud Platform Identity and Security Management 2018 Associate
Date:	May 31, 2019
File Size:	261 KB

Download Oracle Cloud Platform Identity and Security Management 2018 Associate.1z0-933.CertKiller.2019-05-31.33q.vcex

How to open VCEX files?

Demo Questions

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

ProfExam at a 20% markdown