Oracle 1z0-1058-23 Value Pack (Frequently Bought Together)

Your customer has a requirement to define an IT Compliance Manager job role with privileges to manage risks and controls, and the issues related to the risks and controls.
What are the duty roles that must be included in this job role to achieve this requirement?

• A. Seeded Risk Manager Composite, Control Manager Composite, and Issue Manager Composite
• B. Seeded Issue Manager Composite and Issue Validator Composite
• C. Seeded Issue Manager Composite
• D. Seeded Risk Issue Manager and Control Issue Manager

You have created a risk definition R100 and have created a new control C100 for this risk. No user has been assigned the Risk or Control reviewer and approver roles. What will be the state of R100 and C100 after submitting?

• A. Both R100 and C100 will be in the "Approved" state.
• B. Both R100 and C100 will be in the "New" state.
• C. Both R100 and C100 will be in the "Awaiting Approval" state.
• D. Both R100 and C100 will be in the "In Review" state.

You have created security roles for the Procure-to-Pay (P2P) Control Manager for the EMEA region in your client's organization. But, there are two problems with his or her security configuration.
Problem 1: This person should not receive notifications to complete control assessments, but currently he or she does.
Problem 2: Also, although he or she has access to controls associated with EMEA, he or she is unable to access controls created for individual regions within EMEA.
You have given him or her the following job role:
* EMEA P2P Control Manager Job Role
* Seeded Control Manager Duty Composite
* Seeded Control Certification Assessor Duty Composite
* EMEA P2P Control Manager Data Security Policy
* Seeded Control Manager Data Security Policy
* Perspective filter where Region Perspective "equals" EMEA
* Perspective filter where Process Perspective "equals" P2P
Which two actions need to be taken to correct the problems? (Choose two.)

• A. While defining data security policy, set the perspective value to EMEA including all child nodes of the EMEA region.
• B. Remove Control Certification Assessor Composite from the EMEA P2P Control Manager job role.
• C. Create EMEA P2P Control Certification Assessor Data Security Policy striped by both EMEA and P2P perspectives and assign to the job role.
• D. Add to the EMEA P2P Control Manager Data Security Policy the seeded Control Certification Assessor Data Security Policy.

The control manager needs to associate an existing test plan to an additional assessment type, Audit Test. The existing test plan is associated only with the Design Review assessment type.
How can this be accomplished?

• A. The control manager does not need to update the control because any initiated assessment will include all control test plans.
• B. The control's test plan should be updated to Audit Test as the assessment type.
• C. The control's test plan should be updated to include both Audit Test and Design Review as assessment types.
• D. The control manager should create a new test plan with Audit Test and Design Review as assessment types.

You have imported risks in Financial Reporting Compliance using data migration. Your client is asking if you can add controls for these risks.
Which two statements are true? (Choose two.)

• A. You cannot use the Data Migration tool to add control records to map to existing risks.
• B. You can use the Data Migration tool to add control records for the existing risks.
• C. You can manually add control definitions and relate them to the risks in Financial Reporting Compliance.
• D. To relate controls, risks must be assigned to the same perspective that is assigned to the control you want to map it to.
• E. To relate controls to risks, the risks must be in "approved" state.