Jamonero Blanco
Quiz by , created more than 1 year ago

OCA OCA Quiz on OCA-13-Implementing Security and Auditing, created by Jamonero Blanco on 30/01/2017.

196
2
0
Jamonero Blanco
Created by Jamonero Blanco almost 8 years ago
Close

OCA-13-Implementing Security and Auditing

Question 1 of 20

1

1. Which of the following statements create an Oracle account but let the operating
system authenticate logons? (Choose two.)

Select one or more of the following:

  • A. create user ops$admin identified by os;

  • B. create user ops$admin identified externally;

  • C. create user ops$admin nopassword;

  • D. create user ops$admin authenticated by os;

Explanation

Question 2 of 20

1

2. If you want to capture the SQL statement and bind variables when performing a standard
statement audit, which value should the AUDIT_TRAIL parameter have?

Select one or more of the following:

  • A. NONE

  • B. DB

  • C. DB,EXTENDED

  • D. OS

  • E. OS,EXTENDED

Explanation

Question 3 of 20

1

3. Which of the following statements give user desmond the ability to alter table
gl.accounts ?

Select one or more of the following:

  • A. grant alter on gl.accounts to desmond;

  • B. grant alter to desmond on gl.accounts;

  • C. grant alter table to desmond;

  • D. allow desmond to alter table gl.accounts;

Explanation

Question 4 of 20

1

4. Which of the following statements has the correct syntax and gives the ability to grant
the privilege to other users?

Select one or more of the following:

  • A. grant alter any table with grant option to desmond;

  • B. grant alter on gl.accounts to desmond with admin option;

  • C. grant alter any table to desmond with grant option;

  • D. grant alter any table to desmond with admin option;

Explanation

Question 5 of 20

1

5. Examine the CREATE USER statement and choose which of the following options
best applies.
CREATE USER JOHN IDENTIFIED BY JOHNNY
DEFAULT TABLESPACE INDEX01
PASSWORD EXPIRE
QUOTA UNLIMITED ON DATA01
QUOTA UNLIMITED ON INDEX01;
GRANT CONNECT TO JOHN;

Select one or more of the following:

  • A. JOHN will not be able to log in to the database using SQL*Plus until the DBA
    changes his password.

  • B. JOHN is authenticated by the database.

  • C. When tables are being created, if JOHN did not specify the TABLESPACE clause, the
    table will be created on the DATA01 tablespace.

  • D. Specifying unlimited space quota on INDEX01 is a redundant step because INDEX01
    is JOHN ’s default tablespace.

Explanation

Question 6 of 20

1

6. User system granted the SELECT privilege on sh.products to user ian using WITH
GRANT OPTION . Ian then granted SELECT on sh.products to user stuart . Ian has left
the company, and his account has been dropped. What happens to Stuart’s privileges
on sh.products ?

Select one or more of the following:

  • A. Stuart loses his SELECT privilege on sh.products .

  • B. Stuart retains his SELECT privilege on sh.products .

  • C. Stuart loses his SELECT privilege if Ian was dropped with the CASCADE REVOKE option.

  • D. Stuart retains his SELECT privilege if Ian was dropped with the NOCASCADE
    REVOKE option.

Explanation

Question 7 of 20

1

7. User system granted the SELECT ANY TABLE privilege to user ian using WITH ADMIN
OPTION . Ian then granted SELECT ANY TABLE to user stuart . Ian has left the company,
and his account has been dropped. What happens to Stuart’s privileges?

Select one or more of the following:

  • A. Stuart loses his privileges.

  • B. Stuart retains his privileges.

  • C. Stuart loses his privileges if Ian was dropped with the CASCADE REVOKE option.

  • D. Stuart retains his privileges if Ian was dropped with the NOCASCADE REVOKE option.

Explanation

Question 8 of 20

1

8. Which of the following system privileges should be granted judiciously because they
can allow the grantee to masquerade as another user?

Select one or more of the following:

  • A. CREATE ANY JOB

  • B. ALTER USER

  • C. CREATE ANY PROCEDURE

  • D. All of the above

Explanation

Question 9 of 20

1

9. Which of the following statements enables the role user_admin in the current session?

Select one or more of the following:

  • A. alter session enable role user_admin;

  • B. alter session set role user_admin;

  • C. alter role user_admin enable;

  • D. set role user_admin;

Explanation

Question 10 of 20

1

10. Which of the following SQL statements allows user augustin to use the privileges asso-
ciated with the password-protected role info_czar that has been granted to him?

Select one or more of the following:

  • A. set role all;

  • B. alter user augustin default role all;

  • C. alter session enable role info_czar;

  • D. alter session enable info_czar identified by brozo;

Explanation

Question 11 of 20

1

11. By default, how much space can any account use for a new table?

Select one or more of the following:

  • A. None

  • B. Up to the current free space in the tablespace

  • C. Unlimited space, including autoextends

  • D. Up to the default quota established at tablespace creation time

Explanation

Question 12 of 20

1

12. Which of the following SQL statements disconnects a session after it has been idle for
30 minutes?

Select one or more of the following:

  • A. alter session set idle_timeout=30;

  • B. alter session set idle_timeout=1800;

  • C. alter profile default limit idle_time 30;

  • D. alter profile default set idle_timeout 30;

Explanation

Question 13 of 20

1

13. Which of the following options prevents a user from reusing a password when they
change their password?

Select one or more of the following:

  • A. Setting the initialization parameter NO_PASSWORD_REUSE to TRUE

  • B. Altering that user’s profile to UNLIMITED for PASSWORD_REUSE_TIME and 1 for
    PASSWORD_REUSE_MAX

  • C. Altering that user’s profile to UNLIMITED for both PASSWORD_REUSE_TIME and
    PASSWORD_REUSE_MAX

  • D. Using a password verify function to record the new password and comparing the
    new passwords to those recorded previously

Explanation

Question 14 of 20

1

4. Examine the code, and choose the option that best describes the reason for error.
CREATE USER JOHN IDENTIFIED BY JOHN1;
CREATE ROLE HR_QUERY;
GRANT CONNECT, OEQUERY, SELECT ANY TABLE TO HR_QUERY;
ALTER USER JOHN DEFAULT ROLE ALL EXCEPT HR_QUERY;
GRANT HR_QUERY TO JOHN;
CONNECT JOHN/JOHN1
SELECT COUNT(*) FROM HR.EMPLOYEES;
Error: ORA-01031: insufficient privileges

Select one or more of the following:

  • A. John needs the SELECT_CATALOG_ROLE privilege.

  • B. HR_QUERY is not a default role for John.

  • C. The SELECT privilege on the HR.EMPLOYEES table is not granted to JOHN or HR_QUERY .

  • D. John should enable the role using the SET ROLE statement and a password.

Explanation

Question 15 of 20

1

15. You created a database user using the following statement. Which option will connect
the user successfully to the database?

CREATE USER JOHN IDENTIFIED BY John1;
GRANT CONNECT TO JOHN;

Select one or more of the following:

  • A. CONNECT JOHN/JOHN1

  • B. CONNECT JOHN/john1

  • C. CONNECT john/John1

  • D. All of the above

Explanation

Question 16 of 20

1

16. Which of the following SQL statements limits attempts to guess passwords by locking
an account after three failed logon attempts?

Select one or more of the following:

  • A. alter profile default limit failed_login_attempts 3;

  • B. alter system set max_logon_failures = 3 scope=both;

  • C. alter user set failed_login_attempts = 3;

  • D. alter system set failed_login_attempts = 3 scope=both;

Explanation

Question 17 of 20

1

17. User JAMES has a table named JOBS created on the tablespace USERS . When you issue
the following statement, what effect will it have on the JOBS table?
ALTER USER JAMES QUOTA 0 ON USERS;

Select one or more of the following:

  • A. No more rows can be added to the JOBS table.

  • B. No new blocks can be allocated to the JOBS table.

  • C. No new extents can be allocated to the JOBS table.

  • D. The table JOBS cannot be accessed.

  • E. The table is truncated.

Explanation

Question 18 of 20

1

18. How do you manage fine-grained auditing?

Select one or more of the following:

  • A. With the AUDIT and NOAUDIT statements

  • B. With the DBMS_FGA package

  • C. With the GRANT and REVOKE statements

  • D. With the DBMS_AUDIT_MGMT package and CREATE_POLICY procedure

Explanation

Question 19 of 20

1

19. Of the following privileges, which is the least privilege required to create and manage
Unified Auditing in a database, including purging of audit trail?

Select one or more of the following:

  • A. SYSDBA

  • B. DBA

  • C. AUDIT_ADMIN

  • D. AUDIT ANY

Explanation

Question 20 of 20

1

20. Which statement regarding Unified Auditing is true?

Select one or more of the following:

  • A. Unified Auditing is enabled by setting the parameter AUDIT_TRAIL=UNIFIED .

  • B. Unified Auditing writes audit records to the table owned by user AUDSYS .

  • C. You have to log in as SYSDBA to purge the unified audit-trail records.

  • D. Audit records for RMAN and Datapump are written to audit tables in SYS schema.

Explanation

Previous
Next