Best 1z0-1058-23 Exam Dumps for the Preparation of Latest 1z0-1058-23 Exam Questions

Download Latest & Valid Questions For Oracle 1z0-1058-23 exam

NEW QUESTION # 10
You are building a transaction model to identify invoices with USD amounts that are greater than the supplier's average invoice amount. The order of the filters is important.
1. Add an "Average" Function filter grouping by "Supplier ID" where "Invoice Amount" is greater than 0.
2. Add a standard filter where "Invoice Currency" equals "USD."
3. Add a standard filter where the delivered "Average Value" attribute is less than "Invoice Amount." What is the correct order of the filters for this transaction model?

• A. 3, 2, 1
• B. 2, 3, 1
• C. 1, 2, 3
• D. 1, 3, 2
• E. 2, 1, 3

Answer: C

Explanation:
To build a transaction model that identifies invoices with USD amounts greater than the supplier's average invoice amount, the filters must be arranged to first calculate the average invoice amount for each supplier, then select only those invoices in USD, and finally compare the invoice amounts to the average. Here's the correct order:
* Add an "Average" Function filter grouping by "Supplier ID" where "Invoice Amount" is greater than
0. This will calculate the average invoice amount for each supplier.
* Add a standard filter where "Invoice Currency" equals "USD." This will narrow down the invoices to those in USD currency.
* Add a standard filter where the delivered "Average Value" attribute is less than "Invoice Amount." This will identify the invoices that are greater than the average amount calculated for each supplier.
References:The arrangement of filters is based on the AND relationship processing order as described in the Oracle Risk Management documentation, which specifies that filters at one level are evaluated before those at the level below it1.

NEW QUESTION # 11
Which statement related to Advanced Access Controls is true?

• A. If helps perform risk analysis and evaluation.
• B. It analyzes transaction records.
• C. It documents risks and controls.
• D. If helps enforce segregation of duties.

Answer: D

Explanation:
Oracle Advanced Access Controls is designed to enforce segregation of duties within your applications. It identifies users with sensitive access and separation-of-duties conflicts by analyzing their assigned roles and privileges. When these authorizations, individually or in combination, create the potential for fraud or significant error, Oracle Advanced Access Controls flags them, helping to prevent such risks.
References:
* Overview of Oracle Advanced Controls1.
* Oracle Advanced Access Controls identifies users with sensitive-access and separation-of-duties conflicts2.

NEW QUESTION # 12
You are remediating access incidents in Advanced Access Controls (AAC), and have just completed the remediation of a segregation of duties conflict for users in Fusion Security by removing the conflicting access from the users.
What status do you set for the incident in AAC?

• A. Remediation
• B. Resolved
• C. Remedy
• D. Authorized
• E. Accepted

Answer: B

Explanation:
Once the remediation of a segregation of duties conflict is completed in Fusion Security by removing the conflicting access from the users, the status of the incident in Advanced Access Controls (AAC) should be set to "Resolved". This indicates that the necessary actions have been taken to address the incident and no further immediate action is required. The "Resolved" status is used to signify that the incident has been dealt with and the conflict has been eliminated.
References:The information is verified and aligned with the Oracle Risk Management documentation, which details the incident statuses and states within the AAC1.

NEW QUESTION # 13
You are gathering requirements on how your client performs control assessments. Which three tasks should you complete to set up assessments in Financial Reporting Compliance? (Choose three.)

• A. Determine the main objectives of deploying the control.
• B. Understand the sample size for each audit test.
• C. Determine if control assessments are planned ahead of time or are run impromptu.
• D. Determine whether assessments templates, plans, and completed assessments need to go through a review and approve workflow.
• E. Identify the type of assessments included in each assessment cycle.

Answer: C,D,E

Explanation:
When setting up assessments in Financial Reporting Compliance, the following tasks should be completed:
* Identify the type of assessments included in each assessment cycle: This involves understanding the different assessment activities that will be conducted and ensuring they align with the objectives of the assessment cycle1.
* Determine if control assessments are planned ahead of time or are run impromptu: This task involves deciding whether the assessments will be scheduled as part of a batch (planned) or initiated on an individual basis (impromptu) as the need arises1.
* Determine whether assessments templates, plans, and completed assessments need to go through a review and approve workflow: This includes establishing a process for reviewing and approving the assessment templates, plans, and the assessments themselves to ensure they meet the required standards and objectives1.
References:
* The Oracle documentation on Financial Reporting Compliance provides detailed information on the overview of assessments, including the creation and management of assessment templates and plans, as well as the initiation of assessment batches or impromptu assessments1.
* Additional resources from Oracle outline the processes for setting up and completing assessments, emphasizing the importance of planning, scheduling, and reviewing assessments to ensure compliance and effective risk management234.

NEW QUESTION # 14
When you view or edit a transaction incident, you may see extra columns that are not present in the business objects used in the control.
What three kinds of control logic or conditions can cause this? (Choose three.)

• A. Average Function
• B. Equals (when the same attribute is used on both sides of the condition)
• C. Not in
• D. Similar
• E. Between (when using a date attribute)

Answer: C,D,E

Explanation:
* Not in: This condition can cause extra columns to appear because it filters out certain values, which may require additional columns for context.
* Similar: The 'Similar' condition can introduce extra columns as it attempts to find transactions that are alike but not exactly the same, necessitating more data for comparison.
* Between (when using a date attribute): Using the 'Between' condition with date attributes can add extra columns to display the range of dates that the transactions fall into.
References:The information provided here is based on Oracle's documentation on viewing or editing an incident within the Risk Management and Compliance module1. For a detailed understanding of how these conditions affect the transaction incident data, refer to the official Oracle documentation.

NEW QUESTION # 15
You are gathering requirements on how your client performs control assessments. Which three tasks should you complete to set up assessments in Financial Reporting Compliance? (Choose three.)

• A. Determine the main objectives of deploying the control.
• B. Understand the sample size for each audit test.
• C. Determine if control assessments are planned ahead of time or are run impromptu.
• D. Determine whether assessments templates, plans, and completed assessments need to go through a review and approve workflow.
• E. Identify the type of assessments included in each assessment cycle.

Answer: C,D,E

Explanation:
When setting up assessments in Financial Reporting Compliance, the following tasks should be completed:
* Identify the type of assessments included in each assessment cycle: This involves understanding the different assessment activities that will be conducted and ensuring they align with the objectives of the assessment cycle1.
* Determine if control assessments are planned ahead of time or are run impromptu: This task involves deciding whether the assessments will be scheduled as part of a batch (planned) or initiated on an individual basis (impromptu) as the need arises1.
* Determine whether assessments templates, plans, and completed assessments need to go through a review and approve workflow: This includes establishing a process for reviewing and approving the assessment templates, plans, and the assessments themselves to ensure they meet the required standards and objectives1.
References:
* The Oracle documentation on Financial Reporting Compliance provides detailed information on the overview of assessments, including the creation and management of assessment templates and plans, as well as the initiation of assessment batches or impromptu assessments1.
* Additional resources from Oracle outline the processes for setting up and completing assessments, emphasizing the importance of planning, scheduling, and reviewing assessments to ensure compliance and effective risk management234.

NEW QUESTION # 16
Which filter can be used to identify expense reports that contain suspicious expense type combinations, such as, a report for a single trip that contains taxi, car rental, and mileage expenses?

• A. Inclusive function filter grouped by the "Expense Report Information" object's "Person" where the
  "Expense Type" has an "In" condition for values that include taxi, car, mileage.
• B. Inclusive function filter grouped by the "Expense Report Information" object's "Person" where the
  "Expense Type" has an "In" condition for values that include taxi, car, mileage.
• C. Inclusive function filter grouped by the "Expense Report Information" object's "Report Number" where the "Expense Type" has an "In" condition for values that include taxi, car, mileage.
• D. Inclusive function filter grouped by the "Expense Report Information" object's "Report Number" where the "Expense Type" has an "Equals" condition for values that include taxi, car, mileage.
• E. Inclusive function filter grouped by the "Expense Report Information" object's "Report Number" where the "Expense Type" has an "In" condition for values that include taxi, car, mileage.

Answer: E

Explanation:
* Group the expense reports by "Report Number" to ensure each report is evaluated individually.
* Apply an inclusive filter to select reports where the "Expense Type" includes any of the specified suspicious combinations.
* The "In" condition allows the filter to match any of the listed expense types within a single report.
References For specific instructions and verified procedures, please refer to the Oracle Risk Management documentation available on the Oracle website or contact Oracle support directly for assistance.
Please note that the actual implementation details and available features may vary based on the version of the Oracle Risk Management system you are using and any customizations that have been applied. It's always best to consult the official documentation or a qualified Oracle consultant for the most accurate information.

NEW QUESTION # 17
You are implementing Advanced Access Controls and there is a requirement for a control to monitor user access to specific, client-defined access points which give users the ability to both initiate a purchase order and approve payments on that purchase order.
Which is a valid option to implement the control?

• A. From the "Access Entitlements" page create two entitlements containing the respective client-defined access points. Create an access model from the "Models" tab of Advanced Controls, based on the entitlements you created.
• B. Create an access entitlement from the "Access Entitlements" page, then select Actions > Create Access Control from the "Controls" tab of Advanced Controls, and select the entitlement you created.
• C. Create an access model from the "Models" tab of Advanced Controls, and then define an access point filter for each individual client-defined access point.
• D. Select Actions > Create Access Control from the "Controls" tab of Advanced Controls.
• E. From the "Access Entitlements" page create two entitlements containing the respective client-defined access points. Create an access model from the "Models" tab of Advanced Controls, based on the entitlements you created. Finally, deploy an access control in the "Controls" tab of Advanced Controls, and select the access model you created.

Answer: E

Explanation:
* Navigate to the "Access Entitlements" page within Oracle Advanced Access Controls.
* Create two separate entitlements that include the client-defined access points for initiating a purchase order and for approving payments on that purchase order.
* Go to the "Models" tab of Advanced Controls and create an access model. This model will be based on the entitlements you have just created.
* After creating the access model, proceed to the "Controls" tab of Advanced Controls.
* Deploy an access control and select the access model you previously created. This will enforce the control to monitor user access as per the requirement.
References:
* Oracle Advanced Access Controls documentation provides a comprehensive overview of the process for creating models and controls to monitor access assignments for separation-of-duties violations1.
* The Oracle Advanced Access Controls Cloud Data Sheet details the features relevant to monitoring access policies, including the creation and deployment of access controls2.
1: Overview of Oracle Advanced Controls 2: Oracle Advanced Access Controls Cloud Data Sheet

NEW QUESTION # 18
The GRC Business owner responsible for reviewing and investigating access incidents related to the "Order to Cash" perspective does not see any worklists for the generated results. You have validated that:
1. Other business owners are able to view their assigned worklists without any problem
2. Incidents have been generated for the controls related to Order to Cash
3. The business owner's assigned roles contain the correct functional privileges and data access to the correct perspective values What is the reason the business owner cannot see any worklists for the generated incidents?

• A. Worklist assignment does not include the business owner.
• B. The business owner was recently assigned the role and the worklist needs to be refreshed.
• C. The Result Management Perspective Assignment has not been linked.
• D. The underlying model is not linked to Order to Cash.
• E. The Control Perspectives are not linked to the control.

Answer: B

Explanation:
In Oracle Risk Management, when a business owner is assigned a new role, there may be a delay before the worklist reflects this change. This is because the system needs to refresh the data to include the new role assignments in the worklist generation process. If the business owner responsible for the "Order to Cash" perspective does not see any worklists for the generated incidents, despite having the correct functional privileges and data access, it is likely due to the recent assignment of the role. The system has not yet refreshed the worklists to include the business owner's new role, which is necessary for them to view the worklists related to the generated incidents.
References:
* Oracle Risk Management Cloud documentation on role assignments and worklist generation1.
* Oracle support documents detailing how to regenerate worklists after changes to GRC security components2.

NEW QUESTION # 19
Which three statements are true about the purpose of perspectives? (Choose three.)

• A. Perspectives enable functional security in Financial Reporting Compliance.
• B. Perspectives can be used for categorizing Financial Reporting Compliance objects.
• C. Perspectives are used to enable data security on Financial Reporting Compliance objects.
• D. Perspectives can be used to represent regional hierarchies.
• E. Perspectives can be used to define user privileges.

Answer: B,C,D

Explanation:
* Validate New Lookup Values: Before importing data, it's crucial to ensure that any custom list of values, such as Control Frequency, has new lookup values created. This is necessary because the import process relies on these values to correctly map the imported data to the corresponding fields in the Oracle Risk Management system.
* Validate Worksheet IDs: It's important to check that there are no duplicate worksheet IDs within the same worksheet. Duplicate IDs can cause conflicts and errors during the import process, leading to data corruption or loss.
* Validate System ID Column: The System ID column must be populated correctly to maintain data integrity. This column typically contains unique identifiers for records, which are used to track and manage data throughout the import process.
References:
* For the validation of new lookup values and ensuring the correct population of the System ID column, refer to the best practices outlined in the Oracle documentation on import and export management1.
* The importance of unique worksheet IDs and their validation is discussed in the Oracle Risk Management User Guide, which provides instructions on preparing data for import2.

NEW QUESTION # 20
When running Synchronize Transaction from the Data Sources page of Application Configurations, which statement is true when you have two models using invoice and payment business objects?

• A. One job will run for the two objects and the Transaction Created As of Date has no impact on the data.
• B. One job will run for the two objects based on transactions dated before the Transaction Created As of Date.
• C. Two jobs will run for the two objects based on transactions dated after the Transaction Created As of Date.
• D. One job will run for the two objects based on transactions dated after the Transaction Created As of Date.

Answer: D

Explanation:
* When you synchronize transaction data, the system uploads new and modified records from your Oracle Cloud data source for the business objects used by all current transaction models and controls1.
* The synchronization job updates all business objects used by all current transaction models and controls, and it does so based on the transactions dated after the Transaction Created As of Date1.
* This ensures that the transaction models (and controls) evaluate current data, which is crucial for maintaining the accuracy and relevance of the controls1.
References:
* For more information on the synchronization process and its impact on transaction models, you can refer to the Oracle documentation on Synchronizing Transaction Data1.
* Additional details regarding the scheduling and running of data synchronization jobs can be found in the Oracle documentation on Scheduling or Running Data Synchronization2.
* The Oracle Fusion Cloud Risk Management 23D What's New document provides insights into the necessity of running the Transaction Data Source Synchronization job when there are new attributes or attribute changes in business objects3.

NEW QUESTION # 21
Which controls can user A access and manage for the following Control Manager role configuration? See details of perspective trees and control-perspective association below.

• A. None
• B. All controls
• C. Only Control 1
• D. Controls 1, 2, and 3
• E. Controls 2 and 3

Answer: C

Explanation:
Based on the Control Manager role configuration for User A, the user can access and manage:
* Control 1: This is because the role configuration and perspective trees indicate that User A has the
* necessary permissions and associations to access and manage Control 1.
* Controls 2 and 3: These controls are not accessible to User A due to the lack of association within the perspective trees and control-perspective association for User A's role configuration.
References:The answer is derived from the Oracle Risk Management documentation, which outlines the role configurations and access permissions for users within the system1234. The documentation provides guidelines on how to set up and manage user roles and their access to different controls within Oracle Risk Management.

NEW QUESTION # 22
You have created security roles for the Procure-to-Pay (P2P) Control Manager for the EMEA region in your client's organization. But, there are two problems with his or her security configuration.
Problem 1: This person should not receive notifications to complete control assessments, but currently he or she does.
Problem 2: Also, although he or she has access to controls associated with EMEA, he or she is unable to access controls created for individual regions within EMEA.
You have given him or her the following job role:
* EMEA P2P Control Manager Job Role
* Seeded Control Manager Duty Composite
* Seeded Control Certification Assessor Duty Composite
* EMEA P2P Control Manager Data Security Policy
* Seeded Control Manager Data Security Policy
* Perspective filter where Region Perspective "equals" EMEA
* Perspective filter where Process Perspective "equals" P2P
Which two actions need to be taken to correct the problems? (Choose two.)

• A. While defining data security policy, set the perspective value to EMEA including all child nodes of the EMEA region.
• B. Remove Control Certification Assessor Composite from the EMEA P2P Control Manager job role.
• C. Create EMEA P2P Control Certification Assessor Data Security Policy striped by both EMEA and P2P perspectives and assign to the job role.
• D. Add to the EMEA P2P Control Manager Data Security Policy the seeded Control Certification Assessor Data Security Policy.

Answer: A,B

Explanation:
* Remove Control Certification Assessor Composite: This action will address Problem 1 by removing the duty composite that is likely causing the user to receive notifications for control assessments1.
* Set Perspective Value to EMEA Including All Child Nodes: Adjusting the data security policy to include all child nodes of the EMEA region will solve Problem 2, granting the user access to controls created for individual regions within EMEA1.
References: For the official and verified answer, please refer to the Oracle Risk Management documentation on their website, specifically the sections discussing role configuration and data security policies123.

NEW QUESTION # 23
You are implementing Advanced Financial Controls and you want to identify suspect transactions where the payment amount is less than $20 USD. However, you only want the results returned to be temporary.
What will you build in order to accomplish your objective?

• A. Model
• B. Filter
• C. Business object
• D. Template
• E. Control

Answer: A

Explanation:
In Oracle Risk Management, a transaction model includes filters that define aspects of risk, then select transactions exhibiting the defined risk. These models, known as "transaction models" in Oracle Advanced Financial Controls, return temporary results. The suspect records identified by a model are replaced each time the model is evaluated. This feature is particularly useful for testing a risk-logic definition before applying it in a control or for auditors assessing the risk inherent in a system at a given moment.
References:
* Overview of Oracle Advanced Controls1.

NEW QUESTION # 24
Which controls can user A manage for the following Control Manager role Configuration? See details of perspective trees and control-perspective association below.

• A. Controls 1 and 2
• B. None
• C. Controls 2 and 4
• D. Controls 1, 2, and 4
• E. All controls

Answer: A

Explanation:
* Access the Oracle Risk Management application.
* Navigate to the Security Console.
* Review the role configuration for 'Control Manager' to understand the permissions and controls associated with the role.
* Identify the controls that are associated with the perspectives that User A has access to.
* Determine which controls User A can manage based on their role configuration and the control-perspective association.
References:
* Oracle Risk Management and Compliance documentation1.
* Oracle documentation on creating Risk Management roles in the Security Console2.
* Oracle University's course materials on Oracle Risk Management Cloud3.

NEW QUESTION # 25
Which three risk assessment activity types are available in Financial Reporting Compliance? (Choose three.)

• A. Qualitative Analysis
• B. Audit
• C. Design Review
• D. Quantitative Analysis
• E. Certify
• F. Assess Risk

Answer: B,C,E

Explanation:
* Design Review - This activity type is used to determine if a control or process is designed effectively and meets its guidelines.
* Certify - This activity type is for the assessment of whether the information in an assessment of an object (process, risk, control) is accurate and complete.
* Audit - The audit test activity type checks if a risk, control, or process meets audit guidelines.
References:The information is verified and compiled from the Oracle Risk Management documentation, specifically from the section on Assessment Activity Types1.
Please note that while 'Assess Risk' is a valid activity type, it is not among the three options to choose from for this specific question according to the Oracle documentation.

NEW QUESTION # 26
You have imported risks in Financial Reporting Compliance using data migration. Your client is asking if you can add controls for these risks.
Which two statements are true? (Choose two.)

• A. You can manually add control definitions and relate them to the risks in Financial Reporting Compliance.
• B. To relate controls, risks must be assigned to the same perspective that is assigned to the control you want to map it to.
• C. To relate controls to risks, the risks must be in "approved" state.
• D. You can use the Data Migration tool to add control records for the existing risks.
• E. You cannot use the Data Migration tool to add control records to map to existing risks.

Answer: A,C

Explanation:
* In Oracle Risk Management Cloud, risks need to be in an "approved" state before you can associate controls with them. This ensures that only vetted and acknowledged risks are managed with corresponding controls.
* While the Data Migration tool is typically used for importing data from external sources, it is not designed for mapping controls to risks. Instead, controls are usually added manually within the system.
* After controls are defined, they can be related to the approved risks manually, ensuring that each risk is paired with appropriate control measures.

NEW QUESTION # 27
You have defined an initial Perspective Hierarchy for your client in the Advanced Controls module. After refining their business requirements, your client wants to expand the existing hierarchy to include 150 perspective items in various levels. For efficient processing, you decide to use the GRC data migration feature to import the new items.
Which three are valid processing steps required to define the export file? (Choose three.)

• A. Generate Template as Without Data - Perspectives Only.
• B. Navigate to Manage Module Perspectives.
• C. Generate Template as Without Data.
• D. Click the Create Import Template button.V
• E. Navigate to Risk Management Tools > Setup and Administration > Data Migration, and select Advanced Controls.

Answer: A,D,E

Explanation:
* Navigate to Risk Management Tools > Setup and Administration > Data Migration, and select Advanced Controls: This step initiates the process by accessing the Data Migration tool within the
* Advanced Controls module.
* Generate Template as Without Data - Perspectives Only: This step involves generating a template that is specifically tailored for perspective data without including any pre-existing data. This is suitable when the data to be uploaded has no relationships to data already existing in the target environment.
* Click the Create Import Template button: This final step creates the import template which can then be updated with the new perspective items before running the import process.
References:The information has been verified and is based on the Oracle Risk Management documentation, which provides detailed instructions on using the Data Migration tool12.

NEW QUESTION # 28
The control manager needs to associate an existing test plan to an additional assessment type, Audit Test. The existing test plan is associated only with the Design Review assessment type.
How can this be accomplished?

• A. The control's test plan should be updated to Audit Test as the assessment type.
• B. The control manager should create a new test plan with Audit Test and Design Review as assessment types.
• C. The control's test plan should be updated to include both Audit Test and Design Review as assessment types.
• D. The control manager does not need to update the control because any initiated assessment will include all control test plans.

Answer: C

Explanation:
* In the Controls page, open the record of the control in either view-only or edit mode.
* Click the control's name, or select the record and choose the Edit option.
* In the record of the control, navigate to the Test Plans tab.
* A page displays a panel for each of the control assessment activities your organization has activated.
* Expand any panel to view the assessment plan for its activity.
* Define or modify a plan for an activity.
* If in edit mode, click the Create or Edit button (labeled with a pencil icon) in the panel for that activity.
* If in view-only mode, first select Actions > Edit Definition, then select the Create or Edit button for an activity.
* Update the test plan to include both Audit Test and Design Review as assessment types.
References:
* Oracle documentation on adding details and steps to a test plan1.
* Oracle documentation on creating or editing a test plan2.

NEW QUESTION # 29
Which two options can be assigned to a duty role? (Choose two.)

• A. Job Role
• B. Abstract Role
• C. Functional Security Policy
• D. Data Security Policy

Answer: C,D

Explanation:
* Functional Security Policy: This selects a set of functional privileges, each permitting the use of a field or other user-interface feature. It defines a policy for a duty role, selecting functional privileges to be inherited by other roles the duty role belongs to1.
* Data Security Policy: These policies apply to Oracle Cloud applications and can be assigned to duty roles. They grant access to work areas, dashboards, task flows, application pages, reports, batch programs, etc2.
References: For the official and verified answer, please refer to the Oracle Risk Management documentation on their website, specifically the sections discussing the creation of roles and the assignment of function security policies and data security policies to duty roles132.

NEW QUESTION # 30
Identify the four statuses and states in which you can edit an issue's description, assuming you have the necessary privileges to edit the issue. (Choose four.)

• A. Status: Closed; State: Final Close
• B. Status: Closed; State: Closed - Awaiting Approval
• C. Status: On-Hold; State: Reported
• D. Status: Open; State: New
• E. Status: Open; State: Approved
• F. Status: On Hold; State: Awaiting Approval
• G. Status: On Hold; State: In Review
• H. Status: Open; State: In Edit

Answer: C,D,G,H

Explanation:
* Status: Open; State: In Edit - When an issue is in the 'Open' status, it indicates that the issue is active and being worked on. The 'In Edit' state signifies that the issue has been updated and saved, but the update hasn't been submitted yet.
* Status: Open; State: New - An issue with the 'New' state has been created and saved but not submitted. It is still open for editing.
* Status: On Hold; State: In Review - An issue can be put 'On Hold' if it is not currently being worked on, but it is still under review, which means it can be edited.
* Status: On-Hold; State: Reported - When an issue is reported and put on hold, it is awaiting further action but can still be edited.
References:
* Oracle documentation on the state and status of records in Financial Reporting Compliance provides detailed information on how records move from one state and status to another and how these are connected to security and user permissions1.
* The Oracle guide on creating or editing an issue outlines the process and conditions under which an issue can be edited, including the different statuses and states2.
* Additional information on incident status and state can be found in the Oracle documentation, which explains the implications of various statuses and states on the ability to edit an issue3.

NEW QUESTION # 31
You have two segregation of duties requirements:
1) a user can access either the supplier creation pages or the invoice pages, but not both.
2) a user can access either the invoice creation pages or the payment creation pages, but not both.
How must these requirements be met in Advanced Access Controls?

• A. Construct one model with three condition filters where the Function Name Equals "Create Supplier",
  "Create Invoice" and "Create Payment"
• B. Construct one model: "Create Supplier & Create Invoice & Create Payment"
• C. Construct two models, and create controls based on the models: "Create Supplier & Create Invoice",
  "Create Invoice & Create Payment"
• D. Construct three controls, and create controls based on the models: "Create Supplier & Create Invoice",
  "Create Invoice & Create Payment", "Create Supplier & Create Payment"
• E. Construct one entitlement: "Create Supplier & Create Invoice & Create Payment"

Answer: C

Explanation:
To meet the segregation of duties requirements in Oracle Advanced Access Controls, you would:
* Construct two separate models to represent the two segregation of duties requirements.
* For the first requirement, create a model with condition filters that identify users who have access to both supplier creation pages and invoice pages. This model will help ensure that a user can access either one of these functions but not both.
* For the second requirement, create another model with condition filters that identify users who have access to both invoice creation pages and payment creation pages. Similarly, this model will enforce that a user can access either one of these functions but not both.
* Deploy controls based on these models to continuously monitor for and prevent violations of the segregation of duties as defined.
By creating two models and corresponding controls, you can effectively enforce the segregation of duties requirements, ensuring that users have access to only one of the critical functions in each pair, thereby mitigating the risk of fraud or error.
References:The approach for enforcing segregation of duties using Oracle Advanced Access Controls is supported by Oracle documentation, which outlines the creation and use of models and controls to regulate user access and prevent conflicts123.

NEW QUESTION # 32
You are designing data for data import. The customer decided that they want to secure controls based on their company organization.
Which three worksheets of the import template are required to accomplish this requirement? (Choose three.)

• A. Perspective Items
• B. Controls
• C. Control Test Plans
• D. Perspective-Control

Answer: A,B,D

Explanation:
To secure controls based on the company organization using the Oracle Risk Management import template, the following worksheets are essential:
* Perspective Items: This worksheet is used to define values for all perspectives. Each value must have a type code that matches the type code for the perspective it belongs to, which is set in the Perspective worksheet1.
* Controls: The Controls worksheet supplies data that defines the controls themselves. This is crucial for establishing the specific controls that will be secured1.
* Perspective-Control: This worksheet defines how perspective values relate to controls. It is necessary to associate specific controls with the relevant organizational perspectives1.
References:The information is based on the Oracle Risk Management documentation, which details the use of the Data Migration template and its worksheets for importing various types of data, including object data, transaction data, and association data1.

NEW QUESTION # 33
......

Exam Materials for You to Prepare & Pass 1z0-1058-23 Exam: https://examtorrent.vce4dumps.com/1z0-1058-23-latest-dumps.html