Free Oracle 1Z1-1058 Exam Dumps Questions & Answers

You have created a risk definition R100 and have created a new control C100 for this risk. No user has been assigned the Risk or Control reviewer and approver roles. What will be the state of R100 and C100 after submitting?

• A.Both R100 and C100 will be in the "Awaiting Approval" state.
• B.Both R100 and C100 will be in the "New" state.
• C.Both R100 and C100 will be in the "Approved" state.
• D.Both R100 and C100 will be in the "In Review" state.

You have created security roles for the Procure-to-Pay (P2P) Control Manager for the EMEA region in your client's organization. But, there are two problems with his or her security configuration.
Problem 1: This person should not receive notifications to complete control assessments, but currently he or she does.
Problem 2: Also, although he or she has access to controls associated with EMEA, he or she is unable to access controls created for individual regions within EMEA.
You have given him or her the following job role:
* EMEA P2P Control Manager Job Role
* Seeded Control Manager Duty Composite
* Seeded Control Certification Assessor Duty Composite
* EMEA P2P Control Manager Data Security Policy
* Seeded Control Manager Data Security Policy
* Perspective filter where Region Perspective "equals" EMEA
* Perspective filter where Process Perspective "equals" P2P
Which two actions need to be taken to correct the problems? (Choose two.)

• A.Create EMEA P2P Control Certification Assessor Data Security Policy striped by both EMEA and P2P perspectives and assign to the job role.
• B.While defining data security policy, set the perspective value to EMEA including all child nodes of the EMEA region.
• C.Remove Control Certification Assessor Composite from the EMEA P2P Control Manager job role.
• D.Add to the EMEA P2P Control Manager Data Security Policy the seeded Control Certification Assessor Data Security Policy.

You have defined an initial Perspective Hierarchy for your client in the Advanced Controls module. After refining their business requirements, your client wants to expand the existing hierarchy to include 150 perspective items in various levels. For efficient processing, you decide to use the GRC data migration feature to import the new items.
Which three are valid processing steps required to define the export file? (Choose three.)

• A.Navigate to Manage Module Perspectives.
• B.Navigate to Risk Management Tools > Setup and Administration > Data Migration, and select Advanced Controls.
• C.Generate Template as Without Data.
• D.Generate Template as Without Data - Perspectives Only.
• E.Click the Create Import Template button.

The internal auditor advised the Control Owner of North America to perform assessment for two P2P controls.
Which three steps can the Control Owner perform to kick-off assessments for only those two controls?
(Choose three.)

• A.Initiate a planned assessment and include the two controls as part of the same assessment.
• B.Enable impromptu assessments during configuration of module objects.
• C.Initiate a planned assessment that includes all controls assigned to perspective P2P.
• D.Perform impromptu assessments for the two controls.
• E.Initiate two planned assessments, one for each control.

Which two options can be assigned to a duty role? (Choose two.)

• A.Abstract Role
• B.Data Security Policy
• C.Job Role
• D.Functional Security Policy