1Z0-006 Security Management 2 — Questions and Answers
Question 1: Which Oracle feature allows you to restrict the rows a user can see in a table based on a policy function?
- Virtual Private Database (VPD) (Correct answer)
- Oracle Label Security
- Database Vault
- Fine-Grained Auditing
Correct answer: Virtual Private Database (VPD)
Virtual Private Database (VPD) attaches security policies to tables so that queries are automatically modified to filter rows based on the policy function's return value.
Question 2: What is the purpose of the Oracle AUDIT statement?
- To encrypt sensitive columns in a table
- To track and record database activity for security analysis (Correct answer)
- To restrict user access to specific schemas
- To enforce password complexity requirements
Correct answer: To track and record database activity for security analysis
The AUDIT statement enables auditing of specific SQL statements, schema objects, or privileges so the database records who did what and when.
Question 3: Which data dictionary view lists all database users and their account status?
- DBA_OBJECTS
- DBA_USERS (Correct answer)
- ALL_TABLES
- V$SESSION
Correct answer: DBA_USERS
DBA_USERS contains one row per database user and includes columns such as USERNAME, ACCOUNT_STATUS, and EXPIRY_DATE.
Question 4: A user needs to read data from a table in another schema but should not be able to modify it. Which privilege should be granted?
- INSERT on the table
- SELECT on the table (Correct answer)
- UPDATE on the table
- EXECUTE on the table
Correct answer: SELECT on the table
Granting SELECT on a table allows the user to query rows without the ability to insert, update, or delete data.
Question 5: What happens to a user's session when their account is LOCKED?
- Existing sessions continue but new logins are denied (Correct answer)
- All current and future sessions are immediately terminated
- The user is redirected to a password reset page
- The account is automatically unlocked after 24 hours
Correct answer: Existing sessions continue but new logins are denied
Locking an account prevents new logins but does not kill already-connected sessions; those sessions remain active until they disconnect.
Question 6: Which SQL command removes a specific privilege that was previously granted to a user?
- DELETE PRIVILEGE
- REVOKE (Correct answer)
- DROP GRANT
- REMOVE ACCESS
Correct answer: REVOKE
The REVOKE statement is used to take back object or system privileges that were previously granted to a user or role.
Question 7: Oracle Database stores user passwords using which security technique to prevent plain-text storage?
- Base64 encoding
- Symmetric encryption with AES
- One-way cryptographic hashing (Correct answer)
- RSA public-key encryption
Correct answer: One-way cryptographic hashing
Oracle hashes passwords using a one-way algorithm so that even DBAs cannot retrieve the original password from the stored value.
1Z0-006 Security Management 2
Which Oracle feature allows you to restrict the rows a user can see in a table based on a policy function?