Oracle Database Security 1Z0-116完全版問題集には無料PDF問題で合格させる [Q53-Q67]

Rate this post

Oracle Database Security 1Z0-116完全版問題集には無料PDF問題で合格させる

100%更新されたのはOracle 1Z0-116限定版PDF問題集

53、Which two tasks should you perform initially to Implement native network encryption without disrupting client applications?

Upgrade all OCI-basod clients to match the database version.

Set the server side sqinet.oia parameter sqlnet.encryption_server = requested.

Configure the listener with an endpoint for protocol TCPS.

Verify which clients have encrypted connections using the view vSsession_CONNECT_INFO.

Set the client side sqinec.ora parameter SQLNET.ENCRYPTION _client = required.

Set the server side sqinot.ora parameter SQLNET.CRYPTO_CHECKSOM_SERVER – accepted.

Modify all JDBC Thin based clients to include network encryption parameters in Java.

54、Examine this security parameter and Its value:
SEC_USER_ONAUTHORIZED_ACCESS_BANNER=/opt/oracla/admin/data/unauthwarninq.txt In which file must you include this parameter?

init. era

listener.ora

aqlnet.ora

tnsnaroes.ora

names.ora

server.xml

55、Which two statements are true about the Secure External Password Store (SEPS)?

Password credentials are stored on the database server.

Bypassing database authentication adds significant performance benefits to middle-tier applications.

The database does not need to authenticate the connection because the password credentials are stored in a wallet.

Wallet usage secures deployments that rely on password credentials for connecting to databases Instances.

Password rotation policies can be enforced without changing application code.

56、Which three authentication methods are available with Centrally Managed Users (CMU)?

remote Access Services authentication

smart key authentication

public key Infrastructure (PKT) authentication

kerberos authentication

username/password authentication

SSH authentication

57、Examine this output:

Which three are true?

John must connect as system to perform backup and recovery operations.

John can query dba tables.

John can perform backup and recovery operations by using SQL.

John can perform backup and recovery operations by using RMAN.

John must connect as sys to perform backup and recovery operations.

John Is not able to perform startup and shutdown operations.

John can query other user’s data.

58、Examine these commands that execute successfully:

What must be done to allow the index to be used?

Use tublespace encryption instead of column encryption.

Add the first_name column to the ix_employee Index to Improve its selectivity.

Create a SQL baseline to preserve the execution plan from before the encryption.

Enable encryption hardware acceleration on the CPUs of the machine.

59、Examine these commands and responses:

User Karen is an enterprise user.
Which two commands are used to allow this login?

GRANT CREATE SESSION TO karan;

CREATE USER guest IDENTIFIED BY karen;

CREATE USER karen IDENTIFIED BY guest;

CREATE USER guest IDENTIFIED GLOBALLY as ”;

GRANT CREATE SESSION TO guest;

60、Which two statements are true about Database Vault factors?

A factor can reference a function In another schema to compute its value, provided execute privilege Is granted to the sys user.

Changing a factor type can change how factors are evaluated.

You can configure a factor to be evaluated only once per session.

You get an error at the time of factor creation If the retrieval method function you have specified does not exist.

You can use a factor to enforce conditions for a command rule.

61、Which two statements are true about Database Vault rules and rule sets?

You must create a rule set for a rule, before creating the rule.

You con reference Oracle-supplied rules In rule sets that you create.

If a rule set Is disabled. It Is evaluated to true without having Its rules evaluated.

A given rule can be added to only one rule set.

Deleting a rule set also deletes all the rules that have been added to It.

62、You are required to remove embedded passwords from scripts that connect to database instances. Which tool can be used to implement this requirement?

orapki

netca

dbca

netmgr

mkstore

owm

63、Examine this query:

Why is this account in this status?

The account uses a global authentication.

The user exceeded the value of FAILED_LOGIN _ATTEMPTS and its password has not been reset yet.

The account has the SYSDBA privilege granted.

The user exceeded the value of PASSWORD_LIFE_TIME and Its password has not been reset yet

The ACCOUNTS_ STATUS column is not updated until the user attempts to log in.

64、While upgrading your Oracle database server from 10g to 19c, you want to ensure that the users can still connect with their current passwords after the upgrade.
What do you need to set explicitly for this purpose?

SQLNET.ALLOWED_LOGON_VERSION_SERVER = 12a in the sqlnet.ora of the new database home

Client net. allowed_lLOGON_VERSION_client must be set to a lower value than the server SQLNET.ALLOWED LOGON. VEBSION .SERVER.

SQLNET.ALLOWED_LOGON_VERSION_client = 8 in the sqlnec.ora file of the client application.

SQLNET.ALLOWED_LOGON_VERSION_sebveb = 8 In the aqlnec.ora of the new database homo.

65、Which type of attack attempts to find data by repeatedly trying similar SQL with a modified predicate?

timing attack

Inference attack

data remanence attack

cache attack

side-channel attack

known-plaintext attack

66、Examine these commands and responses:

Which object privilege must be granted to allow execution of the stored procedure?

grant EXECUTE ON MARY.PBOC2 Co U1;

grant INHERIT PRIVILEGES ON USER U1 TO MARY;

grant INHERIT PRIVILEGES ON USER MARY TO Ul ;

grant EXECUTE ON Ul.PROC2 TO MARY;

67、Users and applications must be able to access a web server of type https using database package UTL_HTTP.
Which three are part of the configuration to make this possible?

Configure liscener.oia with an endpolnt for tcps

Configure sqinet.ora with parameter sq.lnet.encrypt70N_server

Download the root certificate from the Certificate Authority In Base64 format

Configure sqlnet. ora with parameter tcp . invited_nodes

Download the trusted certificate of the web server in Base64 format a

Configure an Oracle wallet using mkstore or Wallet Manager

Configure access control lists using DBMS_NETWORK_ACL._ADMIN

Loading …