[2023年07月] 合格 Oracle 1Z0-116 テストエンジンpdf – 完全版無料問題集 [Q22-Q43]

5/5 - (1 vote)

[2023年07月] 合格させるOracle 1Z0-116テストエンジンPDFで完全版無料問題集

Oracle Database Security Administration練習テスト2023年最新の1Z0-116ストレスなしで合格！

新問題 22
You connect to the database Instance over a network to change the password of user scott.
Which two methods avoid the new password for user scott from being compromised by network sniffing?

Set the server side sqlnet.ora parameter SQLNET.CRYPTO_CHECKSUM_SERVER-REQUESTED.

Use ALTER USER SCOTT PASSWORD EXPIRE.

Set the server side sqlnet.ora parameter SQLNET.ENCRYPTION_SERVER=REQUESTED.

Use ALTER USER SCOTT IDENTIFIED BY VALUES ‘<value>*.

Use ALTER USER SCOTT IDENTIFIED BY <password>.

Use the SQL”PIus command password SCOTT.

新問題 23
Which type of masking directly masks and subsets data In a nonproduction database with minimal or no Impact on production environments?

conditional format

heterogeneous

in-database

deterministic

In-export

新問題 24
Which two configurations can be used to protect sensitive data In a database?

setting the SQL92_SECURITy initialization parameter to false

enabling salt tor an encrypted column

creating a procedure that defines the VPD restrictions in a VPD policy

collecting sensitive data Information with Database Security Assessment Tool (DBSAT)

enforcing row-level security at the table level

enforcing row-level security at the database level

新問題 25
You configured Kerberos authentication for databases running on servers A and B.
However a database link connecting the database on server A to the database on server B fails with ORA-12638 Credential retrieval failed.
Where must you make a change to sqlnet.ora to allow the database link to use its stored credentials Instead of trying to use Kerberos?

on client side of server B

on client side of server A

on server side of server B

on server side of server A

新問題 26
Examine these commands that execute successfully:

What must be done to allow the index to be used?

Use tublespace encryption instead of column encryption.

Add the first_name column to the ix_employee Index to Improve its selectivity.

Create a SQL baseline to preserve the execution plan from before the encryption.

Enable encryption hardware acceleration on the CPUs of the machine.

新問題 27
Database Vault is configured and enabled in the database. You create a rule set to enforce security on the hr. employees table.
Examine these requirements:
1. Users working In hr department are allowed to view all rows In HR.EMPLOYEES.
2. hr managers are allowed to view, update, and delete data in In HR.EMPLOYEES.
3. Audit records are to be collected for every evaluation of the rule set.
Which two options are true when creating the rule set?

One rule set contains two rules OR’ed together.

The rule set parameter audit_options must be set to dbms_macutl.g_ruleset_audtt_fail.

The rule set must be defined as is_static.

The rule set parameter eval_options must be set to dbms_macutl.g_ruleset_eval_all.

The rule set parameter audit_options must be set to dbms_macutl.g_buleset_audit_fail + DBMS MACUTL.G RULESET AUDIT SUCCESS.

新問題 28
A policy predicate function Is associated with an enabled Virtual Private Database (VPD) policy for a table.
Which two arguments are passed to the function?

the table name

the schema owning the table

the policy type

the policy name

the policy group to which the policy belongs

新問題 29
As the SYSKM user you must create the password-based keystore, which will be used for TDE. Examine this list:

Identify the sequence that Oracle uses to search for the keystore and its location.

3,5,2,4,1

1,4,5,2

1,2,5,4

1,2,3,5

新問題 30
If a column is not specified in a Data Redaction Policy, to which column(s) is it applied?

none of the columns

foreign key columns only

the primary and foreign key columns

columns with any type of constraint

the primary key column only

新問題 31
Examine this statement and its result:

You issue this statement and then restart the database instance:

Which Is true about generated audit records?

They now Include all application context attribute values.

They are now written to XML files as well as the database.

They now Include SQL statements and any bind variables.

Information is now populated in auds .commentstext.

新問題 32
You grant user JANE the SYSDBA administrative privilege. Which two are true?

User JANE must always connect as SYSDBA to the database instance.

User JANE can grant SYSDBA privilege to roles.

User JANE must use operating system authentication.

User JANE can create objects In sys schema only when connected as SYSDBA.

User JANE acquires the DBA role by default.

User JANE can backup and recover the database.

新問題 33
Which two authorization rights does a Database Vault realm owner have that a realm participant does not have?

Add or remove realm-protected objects to or from the reaim.

Grant or revoke privileges on realm-protected objects to or from other users.

Add or remove realm-secured database roles to or from the realm.

Grant or revoke system privileges to access objects protected by the realm.

Add or remove participants to or from the realm.

Add or remove owners to or from the realm.

Grant or revoke realm-secured database roles.

新問題 34
Which three are part of an access control list (ACL) when using Real Application Security?

privileges

schemas

data realms

column constraints

policies

data realm constraints

roles

新問題 35
Which three are true concerning command rules?

System privileges override command rules.

If a command rule’s associated rule set evaluation results In an error, the command is not allowed to execute.

A command can have only one command rule that applies to it.

For DML statement command rules, you can specify a wildcard for the object owner.

If a command rule’s associated rule set Is disabled, then the rule set evaluates to true.

For DML statement command rules, you can specify a wildcard for the object name.

Object privileges override command rules.

新問題 36
Which two commands can a user with the syskm privilege execute?

ALTER DATABASE DICTIONARY REKEY CREDENTIALS;

SELECT * FROM DBA_OBJECTS;

SELECT * FROM DBA_TABLESPACES WHERE ENCRYPTED = ‘YES*;

ADMINISTER KEY MANAGEMENT SET KFYSTOBF OPEN IDENTIFIED BY password:

ALTER SYSTEM FLUSH PASSWORDFILE_METADATA_CACHE;

ALTER TABLESPACE APPDATA ENCRYPTION OFFLINE ENCRYPT;

新問題 37
Examine this command:

Which two statements are true?

Opening the software keystore from remote computers is possible.

Opening the software keystore from the local computer Is possible.

Opening the software keystore from remote computers is not possible.

Opening the software keystore must always be done manually on the local computer.

Opening the software keystore from the local computer is not possible.

新問題 38
Database user SCOTT requires the privilege to select from all tables and you decide to configure this using a global role.
You have not yet configured the database with Enterprise User Security.
You plan to perform these steps:
1. create role GLOBAI._ROI.E identified globally;
2. grant select any table to GLODAL_COLE;
3. grant GLOBAL_ROLE to SCOTT;
What is the result?

All statements succeed even without Enterprise User Security configuration, but the role is not effective.

The third statement falls because global roles can be granted only by using a central authority.

The second statement falls because granting a global role can be completed only by using a central authority.

The first statement falls because the database Is not set up with Enterprise User Security.

新問題 39
Which two represent the set of users that are never affected by connect command rules?

SYS

users with the DV_ACCTMGR role

users with the DV_OWNER role

users with the DV_ADMIN role

SYSTEM

新問題 40
Examine this command that Is executed:

What is the result?

The salary column is fine grain audited.

The salary column is nullified when queried by the database users.

The bind variables for the salary column are masked In trace files and vS views.

The salary column is encrypted using TDE column encryption.

The salary column is redacted when queried by database users.

新問題 41
You Issue this statement as user SYS:
audit, context namespace kilimanjaro attributes a, b;
Which is true?

The statement will audit all users.

The statement will not audit any users.

The statement will only audit sys.

The statement must be updated to specify which users to audit.

新問題 42
Which two statements are true about the Secure External Password Store (SEPS)?

Password credentials are stored on the database server.

Bypassing database authentication adds significant performance benefits to middle-tier applications.

The database does not need to authenticate the connection because the password credentials are stored in a wallet.

Wallet usage secures deployments that rely on password credentials for connecting to databases Instances.

Password rotation policies can be enforced without changing application code.

新問題 43
Examine this code which executes successfully:

If the IN_OFFICE_ON_WEEKEND rule set returns true for an attempt to connect from Inside the office on weekends, which two are true about the effects of this configuration?