Oracle Database Security Administration (1z1-116) Free Practice Test

Question 1

Which two statements are true about the Secure External Password Store (SEPS)?

A. The database does not need to authenticate the connection because the password credentials are stored in a wallet.

B. Password credentials are stored on the database server.

C. Bypassing database authentication adds significant performance benefits to middle-tier applications.

D. Password rotation policies can be enforced without changing application code.

E. Wallet usage secures deployments that rely on password credentials for connecting to databases Instances.

Correct Answer: B,E

Question 2

Database Vault is configured and enabled in the database. You create a rule set to enforce security on the hr. employees table.
Examine these requirements:
1. Users working In hr department are allowed to view all rows In HR.EMPLOYEES.
2. hr managers are allowed to view, update, and delete data in In HR.EMPLOYEES.
3. Audit records are to be collected for every evaluation of the rule set.
Which two options are true when creating the rule set?

A. The rule set parameter audit_options must be set to dbms_macutl.g_buleset_audit_fail + DBMS MACUTL.G RULESET AUDIT SUCCESS.

B. The rule set must be defined as is_static.

C. One rule set contains two rules OR'ed together.

D. The rule set parameter eval_options must be set to dbms_macutl.g_ruleset_eval_all.

E. The rule set parameter audit_options must be set to dbms_macutl.g_ruleset_audtt_fail.

Correct Answer: B,D

Question 3

Which statement is true about Network ACLs?

A. They ate used to control access by users to external network services and resources from the database through PL/SQL.

B. They are used to provide access to database packages.

C. They are used to control the usage of UTL_TCP, ITL_HTTP, and UTL_INADDR.

D. They are used to configure proxy for PL/SQL network utility packages.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

You grant user JANE the SYSDBA administrative privilege. Which two are true?

A. User JANE can create objects In sys schema only when connected as SYSDBA.

B. User JANE acquires the DBA role by default.

C. User JANE can grant SYSDBA privilege to roles.

D. User JANE must use operating system authentication.

E. User JANE must always connect as SYSDBA to the database instance.

F. User JANE can backup and recover the database.

Correct Answer: A

Question 5

You must rekey encrypted sensitive credential data In your database.
You run the command alter database dictionary rekey credentials.
Which three options ate true about the bkkey process?

A. Both sys. links and sys . SCHEDULER_CREDENTIAL tables are rekeyed.

B. The rekey process only applies to the SYS.SCHEDULES$ credential table.

C. The rekey process only applies to the sys.ltnks CREDENTUIALS table.

D. Credential Data Is automatically encrypted using aes2S6.

E. The credential data encryption process does not de-obfuscate the obfuscated passwords before re-encrypts begin.

F. The process of rekeylng does not automatically open the keystore.

G. The rekey process prompts the user to provide a new key algorithm If needed.

Correct Answer: B,C,E

Question 6

Which three are true concerning command rules?

A. A command can have only one command rule that applies to it.

B. If a command rule's associated rule set evaluation results In an error, the command is not allowed to execute.

C. Object privileges override command rules.

D. For DML statement command rules, you can specify a wildcard for the object name.

E. System privileges override command rules.

F. For DML statement command rules, you can specify a wildcard for the object owner.

G. If a command rule's associated rule set Is disabled, then the rule set evaluates to true.

Correct Answer: D,E,F

Question 7

Examine these statements which execute successfully:

Which are the two reasons that no rows Are returned from the query?

A. The set_empno_crx_proc procedure must be in a package.

B. Enterprise User Security is not configured and used for the user.

C. An administrator issues the ALTER SYSTEM FLUSH global context statement.

D. Only DBA users can query SESSION_CONTEXT view contents.

E. The application context is global.

Correct Answer: B,E

Question 8

You are the Service Consumer In the Cloud Shared Responsibility Model.
Which three are your responsibility when using the Infrastructure as a Service (IaaS)?

A. application

B. database

C. data

D. virtualization

E. physical

F. guest OS

G. network

H. host Infrastructure

Correct Answer: D,F,H

Question 9

What Is the first step when analyzing security within a database?

A. Deploy Oracle Key Vault

B. Configure and enable Database Vault

C. Create a Data Redaction Policy for your most sensitive tables

D. Execute Database Security Assessment Tool (DBSAT)

E. Mask nonproduction data using Data Masking & Subsetting

F. Encrypt tablespaces using Transparent Data Encryption

Correct Answer: F

Question 10

Examine these commands and the output used to configure Real Application Security:

What does this output mean?

A. You created a policy that references a non-existent access control list.

B. You treated an access control list that references a non-existent policy.

C. You created a realm that references a non-existent policy.

D. You created a realm and an access control list that reference a non-existent policy.

E. You created an access control list that references a non-existent realm.

F. You created a policy that references a non-existent realm.

Correct Answer: C

Welcome to TestSimulate

Oracle Database Security Administration (1z1-116) Free Practice Test