Security Management Flashcards

Which Oracle feature allows you to restrict the rows a user can see in a table based on a policy function?

Answer: Virtual Private Database (VPD)

Virtual Private Database (VPD) attaches security policies to tables so that queries are automatically modified to filter rows based on the policy function's return value.

What is the purpose of the Oracle AUDIT statement?

Answer: To track and record database activity for security analysis

The AUDIT statement enables auditing of specific SQL statements, schema objects, or privileges so the database records who did what and when.

Which data dictionary view lists all database users and their account status?

Answer: DBA_USERS

DBA_USERS contains one row per database user and includes columns such as USERNAME, ACCOUNT_STATUS, and EXPIRY_DATE.

A user needs to read data from a table in another schema but should not be able to modify it. Which privilege should be granted?

Answer: SELECT on the table

Granting SELECT on a table allows the user to query rows without the ability to insert, update, or delete data.

What happens to a user's session when their account is LOCKED?

Answer: Existing sessions continue but new logins are denied

Locking an account prevents new logins but does not kill already-connected sessions; those sessions remain active until they disconnect.

Which SQL command removes a specific privilege that was previously granted to a user?

Answer: REVOKE

The REVOKE statement is used to take back object or system privileges that were previously granted to a user or role.

Oracle Database stores user passwords using which security technique to prevent plain-text storage?

Answer: One-way cryptographic hashing

Oracle hashes passwords using a one-way algorithm so that even DBAs cannot retrieve the original password from the stored value.