Oracle Risk Management Cloud 2023 Implementation Professional Sample Questions:

1. Which two would need to happen in order for Advanced Access Controls (AAC) to automatically assign a status of "Closed" to an access incident? (Choose two.)

A) A global condition was added that resolves the conflict and a subsequent evaluation of controls finds that the incident no longer exists.
B) The incident is resolved in Fusion Cloud and a subsequent evaluation of controls finds that the incident no longer exists.
C) A user sets the Status of the incident to "Resolved".
D) A user sets the State of the incident to "Remediate".
E) The incident is resolved using simulation in AAC and a subsequent evaluation of controls finds that the incident no longer exists.

2. Your client has subscribed to Financial Reporting Compliance and would like to address risks using treatment plans.
Which option shows the settings that will help in achieving this configuration?

A) Configure Module Objects > Edit Risk Object Configuration > Treatment = Hide and Default
B) Configure Module Objects > Edit Control Object Configuration > Result = Show
C) Configure Module Objects > Edit Risk Object Configuration > Result = Show
D) Configure Module Objects > Edit Risk Object Configuration > Treatment = Show
E) Configure Module Perspectives > Edit Financial Reporting Compliance > Risk-Organization mapping set to required, active.

3. Which two steps are required to set up two levels of approval for new controls, which are added after the initial import? (Choose two.)

A) Identify the other roles to be provided for control managers.
B) Identify the organizations or business units for which users will perform review or approval.
C) Identify users who will perform control review and approval.
D) On the Controls tab of the Import template, set the control state to NEW for each control record.

4. You have created security roles for the Procure-to-Pay (P2P) Control Manager for the EMEA region in your client's organization. But, there are two problems with his or her security configuration.
Problem 1: This person should not receive notifications to complete control assessments, but currently he or she does.
Problem 2: Also, although he or she has access to controls associated with EMEA, he or she is unable to access controls created for individual regions within EMEA.
You have given him or her the following job role:
* EMEA P2P Control Manager Job Role
* Seeded Control Manager Duty Composite
* Seeded Control Certification Assessor Duty Composite
* EMEA P2P Control Manager Data Security Policy
* Seeded Control Manager Data Security Policy
* Perspective filter where Region Perspective "equals" EMEA
* Perspective filter where Process Perspective "equals" P2P
Which two actions need to be taken to correct the problems? (Choose two.)

A) Add to the EMEA P2P Control Manager Data Security Policy the seeded Control Certification Assessor Data Security Policy.
B) While defining data security policy, set the perspective value to EMEA including all child nodes of the EMEA region.
C) Create EMEA P2P Control Certification Assessor Data Security Policy striped by both EMEA and P2P perspectives and assign to the job role.
D) Remove Control Certification Assessor Composite from the EMEA P2P Control Manager job role.

5. A Control Manager has changed the status of an issue to "In Remediation" and has submitted it.
What will be the state of the Issue if there is no issue validator, reviewer, or approver configured?

A) In Edit
B) Reported
C) Approved
D) Active
E) In Review

Solutions: