Free Oracle 1Z1-479 Exam Dumps Questions & Answers

Your customer has deployed an employee portal that you have protected with Oracle Access Manager
(OAM). The customer now wants a new portlet added to the home page to display the employee's salary
details. The portlet will obtain the information through a call to an internally exposed web service.
Your customer has defined the following security requirements for the new portlet:
1 . Employee must be authenticated through risk-based authentication before they can access the portal.
2 . The web service must be secured form unauthenticated calls.
3 . All security logic for the web service must be external to the web service.
4 . The web service should return salary details only if the user's authentication risk source is below 500.
Which four steps must you perform to meet the requirements for the new portlet?

• A.  Configure an OWSM policy to protect the web service, consume the security token, and evaluate the
  risk score.
• B.  Configure OWSM to call OAAM to obtain the risk score.
• C.  Configure Oracle Web Services Manager (OWSM) on the portal container to generate a security token.
• D.  Enable Identity Assertion propagation in the OAM policy.
• E.  Deploy Oracle Adaptive Access Manager (OAAM) and integrate with OAM, setting OAAM as the
  authentication scheme.
• F.  Configure a cookie response in OAM to set the risk score into a cookie called HTTP_RISK_SCORE.

What is the role of a user data store in Oracle Identity Federation (OIF) 11G When it is configured as an
Identity Provider (IdP)?

• A.  Oracle Identity Federation uses the repository to verify user Identities and to build protocol assertions.
• B.  When creating a new federation, Oracle Identity Federation uses the repository to identify a user and
  link the new federation to that user's account.
• C.  Oracle Identity Federation uses the repository to map the information in received assertions to user
  identities at the destination.
• D.  Oracle Identity Federation uses the repository to authorize users for access to protected.

Which statement is true about the interaction between a UMS component in the SOA Suite and OAAM?

• A.  OAAM sends the OTP to a customer directly and UMS validates the OTP to a customer.
• B.  OAAM communicates with the UMS, which generates and submits the OTP to a customer.
• C.  OAAM generates and sends the OTP o UMS, which submits to a customer.
• D.  OAAM generates and sends the One Time Pin (OTP) directly to a user.
• E.  UMS generates and sends the OTP directly to a user.

In Security Token Service, what is a prerequisite when managing a Token Issuance Template?

• A.  Confirm whether the desire LDAP Identity Store is registered with and configured as the Default Store.
• B.  SAML tokens must be present in the SOAP header.
• C.  The WSS Validation Template must be configured to accept only X.509 certificates.
• D.  A WebGate must be registered with Oracle Identity Federation.

Identify the mandatory attribute that is used when creating an application profile for a mobile application in
Single Sign-On with Oracle Access Management Mobile and Social services.

• A.  Mobile.clientRegHandle.baseSecret
• B.  sharedSecret.4BasicAuth
• C.  baseSecret4BasicAuth
• D.  userId4BasicAuth