1z0-116 Oracle Database Security Administration Questions and Answers

Which two commands can a user with the syskm privilege execute?

Which type of attack attempts to find data by repeatedly trying similar SQL with a modified predicate?

You are connected to an Oracle database Instance as a user with privileges to query the hr.employees table.

You are not exempt from any reduction policies.

Examine this query and result:

You implement this Data Redaction policy:

You re-execute the select statement.

What is the result?

A)

B)

C)

D)

E)

Which two tasks should you perform initially to Implement native network encryption without disrupting client applications?

Examine this command:

Which two statements are true?

Which two does the master key encrypt with Transparent Data Encryption?

What Is the first step when analyzing security within a database?

To avoid hard coding passwords in scripts, you have elected to create an external password store-Examine this list of steps:

1. Set the external password store wallet location.

ALTER SYSTEM SET EXTERNAL_KEYSTORE_CREDENTIAL_LOCATION = "/•tc/ORACLE/WALLETS/orcl/external_Btore" SCOPE c SPFILE;

2. Log in as a user who has syskm privileges.

3. Create an auto-logln keystore that contains the keystore password including the add secret clause.

ADMINISTER KEY MANAGEMENT ADD SECRET 'password'

FOR CLIENT 'TDE_WALLET'

TO LOCAL AUTO_LOGIH KEYSTORE '/etc/0RACLE/WALLETS/orcl/extemal_store';

4. Restart the database instance as sysdba.

SHUTDOWN IMMEDIATE STARTUP

5. Create an auto-logln keystore that contains the keystore password.

ADMINISTER KEY MANAGEMENT

FOR CLIENT 'TDE_WALLET'

TO LOCAL AUTO_L0GIN KEYSTORE ' /etc/ORACLE/WALLETS/orcl/external_store' ;

6. Set an Encryption Key.

ADMINISTER KEY MANAGEMENT SET ENCRYPTION KEY IDENTIFIED BY keystore_password WITH BACKUP

Identify the minimum number of steps in the correct order that must be performed to create the external password store.

Database Vault Is configured and enabled In the Oracle database.

Three users are granted the dba, dv_omneb, and dv_acctmgb roles.

There is a requirement to create a user who can:

1. Connect to the database Instance

2. Select from dictionary views

Which users can complete the operation to meet the requirement?

You are Implementing a security policy that makes use of the USERENV namespace.

Which USERRENV value does not change for the duration of a session?