1Z0-006 Database Administration & Security — Questions and Answers

Question 1: Which privilege allows a user to create tables in their own schema?

CREATE TABLE (Correct answer)
ALTER ANY TABLE
CREATE SESSION
GRANT ANY PRIVILEGE

Correct answer: CREATE TABLE

The CREATE TABLE system privilege specifically grants a user the ability to define and create new tables within their own schema. Without this privilege, a user cannot store new relational tables in the database. This privilege is fundamental for users who need to manage their own data structures.

Question 2: A backup strategy that captures only data blocks changed since the last backup is called:

Cold backup
Incremental backup (Correct answer)
Full backup
Logical export

Correct answer: Incremental backup

An incremental backup strategy captures only the data blocks that have changed since the last backup, whether that was a full or another incremental backup. This method significantly reduces backup time and storage space by only backing up new or modified data. It is efficient for frequent backups between full backups.

Question 3: The process of applying archived redo logs to a standby database to keep it synchronized is known as:

Clustering
Snapshot refresh
Managed recovery (Correct answer)
Checkpointing

Correct answer: Managed recovery

Managed recovery is the process in Oracle Data Guard where archived redo logs are automatically applied to a physical standby database. This continuous application of redo logs keeps the standby database synchronized with the primary database, ensuring data consistency and readiness for failover or switchover operations.

Question 4: Which authentication method relies on the operating system to verify database users?

Password file
OS authentication (Correct answer)
Kerberos external authentication
LDAP directory

Correct answer: OS authentication

OS authentication allows database users to be authenticated directly by the operating system, rather than by the database itself. When a user connects, Oracle trusts the operating system's verification of the user's identity. This simplifies user management by leveraging existing OS user accounts and security policies.

Question 5: The principle of least privilege suggests that users should:

Have DBA role by default
Receive only necessary privileges (Correct answer)
Share accounts
Use SYSDBA connections

Correct answer: Receive only necessary privileges

The principle of least privilege dictates that users, programs, or processes should be granted only the minimum set of privileges necessary to perform their required tasks. This security best practice minimizes the potential damage if an account is compromised or misused, thereby enhancing overall system security.

Question 6: Transparent Data Encryption (TDE) primarily protects data:

In transit over networks
At rest in data files (Correct answer)
During memory processing
Inside redo logs only

Correct answer: At rest in data files

Transparent Data Encryption (TDE) in Oracle is designed to encrypt sensitive data stored in database data files, protecting it from unauthorized access at the storage level. TDE encrypts data before it is written to disk and decrypts it automatically when read, without requiring changes to applications. This ensures data security 'at rest'.

Question 7: A database alert log records:

Only user queries
Critical messages and errors from background processes (Correct answer)
All DML statements
Operating system patches

Correct answer: Critical messages and errors from background processes

The database alert log is a chronological record of critical messages, errors, and significant events generated by Oracle background processes. It provides vital information for diagnosing database issues, tracking startup/shutdown events, and monitoring internal operations, making it an essential diagnostic tool for DBAs.

Question 8: To revoke a role from a user, which statement is used?

DENY
REMOVE
REVOKE (Correct answer)
DROP

Correct answer: REVOKE

The REVOKE statement is used in SQL to remove previously granted privileges or roles from a user or another role. It is the counterpart to the GRANT statement, allowing database administrators to manage and restrict access permissions. For example, `REVOKE CONNECT FROM username;`.

Question 9: Which automatic feature in Oracle attempts to protect against SQL injection by verifying input types?

VPD
DBMS_ASSERT (Correct answer)
Audit Vault
Fine-Grained Auditing

Correct answer: DBMS_ASSERT

DBMS_ASSERT is an Oracle package designed to help prevent SQL injection attacks by asserting the expected type or format of input values. It provides functions to verify if an input string is a valid name, number, or other specific type, thereby ensuring that only safe values are used in dynamic SQL. This helps validate input before execution.

1Z0-006 Database Administration & Security

Which privilege allows a user to create tables in their own schema?