1Z0-1058-26 practice question 3 of 10

You are implementing Advanced Access Controls and there is a requirement for a control to monitor user access to specific, client-defined access points which give users the ability to both initiate a purchase order and approve payments on that purchase order. Which is a valid option to implement the control?

Answer options

A: From the “Access Entitlements” page create two entitlements containing the respective client- defined access points. Create an access model from the “Models” tab of Advanced Controls, based on the entitlements you created.

B: Select Actions > Create Access Control from the “Controls” tab of Advanced Controls.

C: Create an access model from the “Models” tab of Advanced Controls, and then define an access point filter for each individual client-defined access point.

D: From the “Access Entitlements” page create two entitlements containing the respective client- defined access points. Create an access model from the “Models” tab of Advanced Controls, based on the entitlements you created. Finally, deploy an access control in the “Controls” tab of Advanced Controls, and select the access model you created. Correct answer

E: Create an access entitlement from the “Access Entitlements” page, then select Actions > Create Access Control from the “Controls” tab of Advanced Controls, and select the entitlement you created.

Correct Answer:

D. From the “Access Entitlements” page create two entitlements containing the respective client- defined access points. Create an access model from the “Models” tab of Advanced Controls, based on the entitlements you created. Finally, deploy an access control in the “Controls” tab of Advanced Controls, and select the access model you created.

Explanation

Implementing an access control to monitor for a separation-of-duties (SoD) violation involves a multi-step process. First, the specific user access points (privileges) that create the conflict must be defined within separate entitlements. Second, an access model must be created to define the toxic combination by including these entitlements. Finally, a control must be created and deployed, using the newly created model as its basis. This control will then run to identify users who have access to both conflicting entitlements. Option D correctly outlines this complete, required sequence of steps.

Why Incorrect

A. This option is incomplete. It correctly describes creating entitlements and a model but omits the final, essential step of creating and deploying the control that uses the model.
B. This option is incorrect because it skips the prerequisite steps of defining entitlements and the access model, which are necessary to define the logic the control will enforce.
C. This option is incomplete and uses imprecise terminology. While a model is needed, the process starts with entitlements, and the final step of deploying a control is missing.
E. This option incorrectly attempts to create a control directly from an entitlement, skipping the crucial access model step where the SoD conflict logic is defined.

References

1. Oracle Fusion Cloud Risk Management and Compliance, Implementing Risk Management Cloud, Release 24B, F91422-03, Chapter 5: Advanced Access Controls, Section: "Create an Access Model," Page 5-10. (Describes creating models from entitlements).

2. Oracle Fusion Cloud Risk Management and Compliance, Implementing Risk Management Cloud, Release 24B, F91422-03, Chapter 5: Advanced Access Controls, Section: "Create a Control," Page 5-14. (Describes creating a control and selecting a model).

3. Oracle Fusion Cloud Risk Management and Compliance, Using Risk Management, Release 24B, F91423-03, Chapter 4: Advanced Access Controls, Section: "Access Models," Page 4-5. (Explains that models "define sets of entitlements that present conflicts of interest").

Keep practicing

Take the free 1Z0-1058-26 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test