OCP OCP Security and Auditing 1 — Questions and Answers
Question 1: Which Oracle feature enables row-level security by dynamically appending a WHERE clause to queries on a table?
- Virtual Private Database (VPD) (Correct answer)
- Oracle Label Security
- Oracle Database Vault
- Transparent Data Encryption
Correct answer: Virtual Private Database (VPD)
Virtual Private Database (VPD) enforces row-level security by attaching policy functions that add a WHERE clause to queries transparently.
Question 2: Which system privilege must be granted to a user to allow them to establish a connection to an Oracle database?
- CONNECT
- CREATE SESSION (Correct answer)
- DATABASE ACCESS
- LOGIN
Correct answer: CREATE SESSION
CREATE SESSION is the system privilege required for a user to open a session and connect to an Oracle database.
Question 3: What does the AUDIT_TRAIL initialization parameter control in Oracle?
- Retention period of audit records
- Destination where audit records are written (Correct answer)
- Users exempt from auditing
- Maximum size of the audit trail
Correct answer: Destination where audit records are written
AUDIT_TRAIL determines where Oracle writes audit records, such as to the database (DB), operating system files (OS), or XML files.
Question 4: Which Oracle security feature encrypts tablespaces and data files at the storage level without requiring application changes?
- Oracle Data Redaction
- Transparent Data Encryption (TDE) (Correct answer)
- Oracle Data Masking
- Oracle Advanced Security Gateway
Correct answer: Transparent Data Encryption (TDE)
Transparent Data Encryption (TDE) encrypts data at rest in tablespaces and data files, remaining invisible to the application.
Question 5: What is the effect of granting a system privilege WITH ADMIN OPTION to a user?
- The user can grant that system privilege to other users (Correct answer)
- The privilege becomes permanent and cannot be revoked
- The privilege is restricted to administrative schemas only
- The user inherits all DBA-level privileges
Correct answer: The user can grant that system privilege to other users
WITH ADMIN OPTION allows the grantee to further grant the same system privilege to other users or roles.
Question 6: Which data dictionary view displays all system privileges granted to users and roles in Oracle?
- DBA_SYS_PRIVS (Correct answer)
- DBA_ROLE_PRIVS
- SESSION_PRIVS
- ALL_GRANTED_PRIVS
Correct answer: DBA_SYS_PRIVS
DBA_SYS_PRIVS lists all system privileges granted to every user and role in the database.
OCP OCP Security and Auditing 1
Which Oracle feature enables row-level security by dynamically appending a WHERE clause to queries on a table?