Exam Title: Oracle Access Management Suite Plus 11g Essentials
Exam Number: 1Z0-479
Exam Price: $245.00 More on exam pricing
Format: Multiple Choice
Duration: 120 minutes
Number of Questions: 70
Passing Score: 60%
Validated Against: This exam has been validated against 11g Release 2.

Take Recommended Training Courses

Complete one of the courses below to prepare for your exam (optional):
Oracle Access Manager 11g R2: Administration Essentials
Oracle Identity Federation: Overview – Self-Study Course
Oracle Adaptive Access Manager 11g: Administration
Oracle Entitlements Server 11g R2: Develop Secure Applications

Additional Preparation and Information

A combination of Oracle training and hands-on experience (attained via labs and/or field experience) provides the best preparation for passing the exam.

Exam Study Guide (available to partners only)

Oracle Access Management Suite Plus fundamentals
Describe challenges faced by customers in the area of Access Management
Describe key features of Oracle Access Management Suite Plus
Describe product components of Oracle Access Management Suite Plus
Describe Oracle Access Management Suite Plus architecture

Oracle Access Management Access Manager
Configure and administer Access Manager settings
Configure and manage Data Stores
Configure and manage Agents
Configure policies and manage authentication to protect applications and resources
Configure Detached Credential Collector

Oracle Access Management Identity Federation
Configure Identity Provider
Configure Service Provider
Configure Authentication Engine as Directory
Configure Authentication Scheme to a resource
Configure Federation DataStore

Identity Context
Describe Identity Context
Configure Identity Context Service components

Oracle Entitlements Server
Describe Authorizations, Oracle Entitlements Server overview and architecture
Describe Policy modeling
Configure Policy administration and management
Manage Security Module and system configurations
Configure and Manage Lifecycle Management for Applications and Policies

Oracle Access Management Access Manager
Describe overall and runtime architecture for Access Manager
Describe the Single Sign-on and Logout process
Describe Session Management for Access Manager
Describe Policy Model, Application Domain, Host Identifier and Resources
Configure Authentication Methods (Basic Authorizations, x.509, LDAP, Kerberos)

Oracle Access Management Security Token Service
Identify Propagation, Concepts and Usecases
Configure templates, endpoint, and policies
Configure partners and profiles

Oracle Access Management Mobile and Social
Enable Mobile and Social interfaces in Access Management and configure them to access Oracle Adaptive Access Manager via WebLogic
Configure applications for mobile single sign-on and enable Oracle Adaptive Access Manager security handler
Configure user profile service provider
Configure social login with social providers like Google
Configure OAM domain to use mobile and social logins

Oracle Adaptive Access Manager
Describe Oracle Adaptive Access Manager, its business case and capabilities
Configure Policies – Static, Patterns and Predictive analysis
Configure application transactions
Configure basic integration with Access Manager
Configure advanced integration with Access Manager using Trusted Authentication Protocol (TAP)
Configure Knowledge Based Authentication (KBA) and One Time Password (OTP)
Configure security handler for mobile application single sign-on

Deployment
Describe troubleshooting approaches
Configure and set up High Availability
Configure Test to Production (T 2P)
Setup Enterprise Deployment
Describe Tuning and Capacity Planning
Migrate from Oracle Access Manager 10g, Oracle OpenSSO and Oracle SSO

---

QUESTION: No: 1
Which statement is true about a single sign-on operation initiated from a Service Provider using SMAl_2.0
In Oracle Identity Federation (OIF)?

A. Oracle Access Manager is required as a Service Provider integration module.
B. An Oracle Access Manager WebGate is needed to protect the target web resource and redirect requests to OIF.
C. HTTP post binding is only supported.
D. Any HTTP request hitting the target resource is redirected to the Service Provider’s OIF instance.

Answer: C

---

QUESTION: No: 2
What would you need to configure to use Oracle Adaptive Access Manager (OAAM) along with Mobile
Single Sign-On, by using Oracle Access Management Mobile services?

A. An appropriate security handler plug-in name needs to be configured for the Mobile Service domain to use OAAM.
B. An authentication scheme needs to be configured forthe Mobile Service domain to refilect OAAM use.
C. A separate application profile needs to be created for OAAM.
D. The Mobile Service domain needs to specify a configuration for OAAM.

Answer: A

---

QUESTION: No: 3
You have configured a new pattern in Oracle Adaptive Access Manager (OAAM) to capture login times of
devices, Your customer wants to ensure that devices that are used outside their normal times are blocked.
After creating your pattern, which two additional steps must you perform to configure OAAM to meet this
requirement?

A. Create a transaction definition for the pattern.
B. Create a new rule in an existing policy that contains an appropriate condition to evaluate your new pattern.
C. Link your chosen policy to the appropriate user groups.
D. Configure a block action for your new rule.
E. Restart the OAAM Managed Server forthe pattern to take effect.

Answer: D

---

QUESTION: No: 4
Identify two Oracle products that have a certified out-of-the-box integration with Oracle Entitlemets Server 11g.

A. Oracle API Gateway
B. Oracle Virtual Private Database
C. Oracle Service Bus
D. Oracle Service Registry
E. Oracle NoSQL Database

Answer: A,D

---

QUESTION: No: 5
How would you configure an authentication policy for federation in Oracle Access Management 11gR2?

A. There are no authentication policies for federation.
B. Authentication policies are defined in the Oracle Identity Federation (OIF) console.
C. Authentication policies are defined in the Oracle Access Management console for each domain.
D. Authentication policies are provided in assertions.

Answer: C