OCP Security and Auditing Flashcards

What is the primary purpose of an Oracle role in database security management?

Answer: To group multiple privileges for simplified assignment to users

Oracle roles are named collections of privileges that simplify security management by allowing sets of privileges to be granted in a single operation.

In Oracle Label Security, which component defines the hierarchical sensitivity ranking of data (e.g., SENSITIVE, HIGHLY_SENSITIVE)?

Answer: Level

In Oracle Label Security, a Level defines the sensitivity rank of data in the label hierarchy, from least to most sensitive.

What is Oracle Wallet (Keystore) used for in the context of Transparent Data Encryption?

Answer: Storing and managing TDE master encryption keys

Oracle Wallet (or Keystore in Oracle 12c+) securely stores the TDE master encryption key used to protect tablespace and column encryption keys.

Which audit policy type in Oracle captures access only when a query returns rows matching a specific condition?

Answer: Fine-Grained Auditing (FGA)

Fine-Grained Auditing (FGA) triggers audit records only when query results include rows that satisfy the FGA policy's condition.

What does granting a role WITH ADMIN OPTION allow the grantee to do?

Answer: Re-grant that role to other users

WITH ADMIN OPTION on a role grant allows the recipient to subsequently grant that same role to other users or roles.

Which Oracle system privilege allows a user to query data in any table in the database without being explicitly granted object-level SELECT privileges?

Answer: SELECT ANY TABLE

The SELECT ANY TABLE system privilege grants the ability to query any table or view in the database regardless of individual object grants.