Free Oracle 1D0-1058-25-D Exam Questions

Question 1

You have created security roles for the Procure-to-Pay (P2P) Control Manager for the EMEA region in your

client’s organization. But, there are two problems with his or her security configuration.

Problem 1: This person should not receive notifications to complete control assessments, but currently he or

she does.

Problem 2: Also, although he or she has access to controls associated with EMEA, he or she is unable to

access controls created for individual regions within EMEA.

You have given him or her the following job role:

EMEA P2P Control Manager Job Role

Seeded Control Manager Duty Composite

Seeded Control Certification Assessor Duty Composite

EMEA P2P Control Manager Data Security Policy

Seeded Control Manager Data Security Policy

Perspective filter where Region Perspective “equals” EMEA

Perspective filter where Process Perspective “equals” P2P

Which two actions need to be taken to correct the problems? (Choose two.)

A : Remove Control Certification Assessor Composite from the EMEA P2P Control Manager job role.

B : Create EMEA P2P Control Certification Assessor Data Security Policy striped by both EMEA and P2P perspectives and assign to the job role.

C : Add to the EMEA P2P Control Manager Data Security Policy the seeded Control Certification Assessor Data Security Policy.

D : While defining data security policy, set the perspective value to EMEA including all child nodes of the EMEA region.

Answer: C,D

Question 2

How do you add values to a Risk Type list of values?

A : Populate the Import template with the new values in the Issue Severity column on the Controls tab.

B : Add the lookup codes to the GRC_RISK_TYPE Lookup Type.

C : Because you cannot add new values, update one of the existing lookup codes to what the client wants it to be.

D : Add the lookup codes to the GRCM_RISK_TYPE Lookup Type.

E : Use the default lookup codes because there is no way to update the existing ones.

Answer: D

Question 3

You are implementing Advanced Access Controls and there is a requirement for a control to monitor user access to specific, client-defined access points which give users the ability to both initiate a purchase order and approve payments on that purchase order.

Which is a valid option to implement the control?

A : From the “Access Entitlements” page create two entitlements containing the respective client-defined access points. Create an access model from the “Models” tab of Advanced Controls, based on the entitlements you created

B : Select Actions > Create Access Control from the “Controls” tab of Advanced Controls.

C : Create an access model from the “Models” tab of Advanced Controls, and then define an access point filter for each individual client-defined access point.

D : From the “Access Entitlements” page create two entitlements containing the respective client-defined access points. Create an access model from the “Models” tab of Advanced Controls, based on the entitlements you created. Finally, deploy an access control in the “Controls” tab of Advanced Controls, and select the access model you created.

E : Create an access entitlement from the “Access Entitlements” page, then select Actions > Create Access Control from the “Controls” tab of Advanced Controls, and select the entitlement you created

Answer: D

Question 4

Which controls can user A manage for the following Control Manager role Configuration? See details of perspective trees and control-perspective association below.

A : All controls

B : Controls 2 and 4

C : Controls 1, 2, and 4

D : None

E : Controls 1 and 2

Answer: A

Question 5

The control manager needs to associate an existing test plan to an additional assessment type, Audit Test. The

existing test plan is associated only with the Design Review assessment type.

How can this be accomplished?

A : The control manager should create a new test plan with Audit Test and Design Review as assessment types

B : The control’s test plan should be updated to include both Audit Test and Design Review as assessment types.

C : The control manager does not need to update the control because any initiated assessment will include all control test plans.

D : The control’s test plan should be updated to Audit Test as the assessment type.

Answer: B