[2022] 1Z0-116 by Oracle Database Security Actual Free Exam Practice Test [Q21-Q39]

4.3/5 - (3 votes)

[2022] 1Z0-116 by Oracle Database Security Actual Free Exam Practice Test

Free Oracle Database Security 1Z0-116 Exam Question

NO.21 You are Implementing a security policy that makes use of the USERENV namespace.
Which USERRENV value does not change for the duration of a session?

SESSION_CSER

CURRENT_OSER

CURRENT SCHEMA

CLIENT_INFO

NO.22 Which two configurations can be used to protect sensitive data In a database?

setting the SQL92_SECURITy initialization parameter to false

enabling salt tor an encrypted column

creating a procedure that defines the VPD restrictions in a VPD policy

collecting sensitive data Information with Database Security Assessment Tool (DBSAT)

enforcing row-level security at the table level

enforcing row-level security at the database level

NO.23 When creating labels using Oracle Label Security, which is required?

level and group

level, compartment, and group

compartment

group

level

compartment and group

level and compartment

NO.24 Examine this configuration and requirement:
1. The hr user created a private database link in the pdb2 pluggable database linking to the hr schema In the PDBl pluggable database.
2. Other users in pdb2 must query the remote HR.EMPLOYEES table In PDBI using this database link.
Which two operations together ensure that the database link provides access only to the HR.EMPLOYEES table in the PDBI pluggable database?

Only grant other users access to the HR.EMPLOYEES table In the pdb2 pluggable database.

Grant other users access to the database link in the PDBI pluggable database.

Grant access to the view of the remote HR.EMPLOYEES table In the PDB2 pluggable database.

Grant other users access to the database link In the PDB2 pluggable database.

Create a view In the HR schema for the remote hr. employees table of the pdb2 pluggable database .

NO.25 Which statement is true about Network ACLs?

They ate used to control access by users to external network services and resources from the database through PL/SQL.

They are used to provide access to database packages.

They are used to control the usage of UTL_TCP, ITL_HTTP, and UTL_INADDR.

They are used to configure proxy for PL/SQL network utility packages.

The NETWORK_ACL_ADMIN package provides the interface to administer the network access control lists (ACL). ACLs are used to control access by users to external network services and resources from the database through PL/SQL network utility packages including UTL_TCP, UTL_HTTP, UTL_SMTP andUTL_INADDR.
https://docs.oracle.com/database/121/ARPLS/d_networkacl_adm.htm#ARPLS74568

NO.26 Which two are true about auditing in an Oracle Database?

SYS logon operations are always audited In unified auditing.

All SYS operations are audited by default in unified auditing.

No SYS operations are audited by default In unified auditing.

SYS logon operations are always audited in mixed mode auditing.

No SYS operations are audited if audit_sys_operations is set on false in unified auditing.

No SYS operations are audited if audit_sys_operations is set on false in mixed mode auditing.

NO.27 When querying the database view, VSECRYPTION_WALLET, the status Is OPEN_NO_MASTER _KEY. What does this mean?

You do not have select privileges on this database view.

The master key has been corrupted.

The key store is not open.

The master key has not been created.

This is expected behavior for this view.

NO.28 The utl_http package is used to invoke REST API’s to manage Oracle GoldenGate Microservlces Architecture components on host1.
You must use dbms__network_acl_admin to specify a range of ports to be used when connecting to host01.
What three requirements must you consider?

The lower_port may be null but the upper_port must specify a value.

The port range must not overlap with any other port ranges for host01.

upper_port must be greater than or equal to lower_port.

The port range may not include values larger than or equal to 1024.

Both lower_port and upper_port must not be NULL

The upper_port may be null but the lower_port must specify a value.

NO.29 You export and Import a table’s data using Data Pump connected as a user who Is assigned DBA role with default privileges.
There is a data redaction policy on the table.
Which two statements are true about the redaction policy?

The actual data in the tables is copied to the Data Pump target system with the redaction policy applied.

The policy Is not Included In export and Import operation.

The actual data in the tables is copied to the Data Pump target system without being redacted.

The policy Is Included In the export and Import operation but is not applied by default to the objects In the target system.

The policy is included in the export and import operation and applied by default to the objects in the target system.

NO.30 Examine this security parameter and Its value:
SEC_USER_ONAUTHORIZED_ACCESS_BANNER=/opt/oracla/admin/data/unauthwarninq.txt In which file must you include this parameter?

init. era

listener.ora

aqlnet.ora

tnsnaroes.ora

names.ora

server.xml

NO.31 Examine this parameter In sqinet.ora:
SQLNET.ADTHENTICATION_SEBVICES=(NONE)
For which two cases do you need a password file?

to authenticate externally Identified users locally

to authenticate nonprivllegcd database users locally

to authenticate administrative privileged users remotely

to authenticate externally Identified users remotely

to authenticate nonprivileged database users remotely

to authenticate administrative privileged users locally

NO.32 If a column is not specified in a Data Redaction Policy, to which column(s) is it applied?

none of the columns

foreign key columns only

the primary and foreign key columns

columns with any type of constraint

the primary key column only

NO.33 You grant user JANE the SYSDBA administrative privilege. Which two are true?

User JANE must always connect as SYSDBA to the database instance.

User JANE can grant SYSDBA privilege to roles.

User JANE must use operating system authentication.

User JANE can create objects In sys schema only when connected as SYSDBA.

User JANE acquires the DBA role by default.

User JANE can backup and recover the database.

NO.34 A policy predicate function Is associated with an enabled Virtual Private Database (VPD) policy for a table.
Which two arguments are passed to the function?

the table name

the schema owning the table

the policy type

the policy name

the policy group to which the policy belongs

NO.35 Examine this command that Is executed:

What is the result?

The salary column is fine grain audited.

The salary column is nullified when queried by the database users.

The bind variables for the salary column are masked In trace files and vS views.

The salary column is encrypted using TDE column encryption.

The salary column is redacted when queried by database users.

NO.36 While upgrading your Oracle database server from 10g to 19c, you want to ensure that the users can still connect with their current passwords after the upgrade.
What do you need to set explicitly for this purpose?

SQLNET.ALLOWED_LOGON_VERSION_SERVER = 12a in the sqlnet.ora of the new database home

Client net. allowed_lLOGON_VERSION_client must be set to a lower value than the server SQLNET.ALLOWED LOGON. VEBSION .SERVER.

SQLNET.ALLOWED_LOGON_VERSION_client = 8 in the sqlnec.ora file of the client application.

SQLNET.ALLOWED_LOGON_VERSION_sebveb = 8 In the aqlnec.ora of the new database homo.

NO.37 Which two privileges can be restricted at the column level?

SELECT

INSERT

REVOKE

UPDATE

GRANT

DELETE

NO.38 For which two are Oracle Label Security policies not applied?

partitioned tables

direct path exports

users with the SYSDA privilege other than sys

objects in the SYS schema

conventional path exports

NO.39 You configured Kerberos authentication for databases running on servers A and B.
However a database link connecting the database on server A to the database on server B fails with ORA-12638 Credential retrieval failed.
Where must you make a change to sqlnet.ora to allow the database link to use its stored credentials Instead of trying to use Kerberos?

on client side of server B

on client side of server A

on server side of server B

on server side of server A

Loading …