You are implementing Advanced Access Controls and there is a requirement for a control to monitor user access to specific, client-defined access…

Implementing an access control to monitor for a separation-of-duties (SoD) violation involves a multi-step process. First, the specific user access points (privileges) that create the conflict must be defined within separate entitlements. Second, an access model must be created to define the toxic combination by including these entitlements. Finally, a control must be created and deployed, using the newly created model as its basis. This control will then run to identify users who have access to both conflicting entitlements. Option D correctly outlines this complete, required sequence of steps.

A. This option is incomplete. It correctly describes creating entitlements and a model but omits the final, essential step of creating and deploying the control that uses the model.

B. This option is incorrect because it skips the prerequisite steps of defining entitlements and the access model, which are necessary to define the logic the control will enforce.

C. This option is incomplete and uses imprecise terminology. While a model is needed, the process starts with entitlements, and the final step of deploying a control is missing.

E. This option incorrectly attempts to create a control directly from an entitlement, skipping the crucial access model step where the SoD conflict logic is defined.

1. Oracle Fusion Cloud Risk Management and Compliance, Implementing Risk Management Cloud, Release 24B, F91422-03, Chapter 5: Advanced Access Controls, Section: "Create an Access Model," Page 5-10. (Describes creating models from entitlements).

2. Oracle Fusion Cloud Risk Management and Compliance, Implementing Risk Management Cloud, Release 24B, F91422-03, Chapter 5: Advanced Access Controls, Section: "Create a Control," Page 5-14. (Describes creating a control and selecting a model).

3. Oracle Fusion Cloud Risk Management and Compliance, Using Risk Management, Release 24B, F91423-03, Chapter 4: Advanced Access Controls, Section: "Access Models," Page 4-5. (Explains that models "define sets of entitlements that present conflicts of interest").