1Z0-006 Database Administration and Security 4 — Questions and Answers
Question 1: Which Oracle security feature allows row-level access control based on security policies?
- Oracle Label Security / Virtual Private Database (VPD) (Correct answer)
- Database Vault
- Transparent Data Encryption (TDE)
- Oracle Advanced Security
Correct answer: Oracle Label Security / Virtual Private Database (VPD)
Virtual Private Database (VPD) / Oracle Label Security enables fine-grained access control by automatically appending WHERE clauses to queries based on security policies.
Question 2: What is Transparent Data Encryption (TDE) in Oracle used for?
- Encrypting network traffic between the client and server
- Encrypting data stored in data files and backups without application changes (Correct answer)
- Masking sensitive data displayed in query results
- Hashing user passwords stored in the database
Correct answer: Encrypting data stored in data files and backups without application changes
TDE encrypts data at rest in data files and tablespaces, protecting against physical theft of storage media without requiring any application changes.
Question 3: Which command would a DBA use to change a user's password in Oracle?
- MODIFY USER username PASSWORD new_password
- ALTER USER username IDENTIFIED BY new_password (Correct answer)
- UPDATE DBA_USERS SET PASSWORD = 'new_password'
- RESET PASSWORD FOR username
Correct answer: ALTER USER username IDENTIFIED BY new_password
The ALTER USER ... IDENTIFIED BY statement is the correct SQL syntax to change a user's password in Oracle.
Question 4: What is the purpose of an Oracle PROFILE?
- To define a set of resource limits and password policies assigned to database users (Correct answer)
- To store the execution plan for frequently run queries
- To capture a snapshot of database performance metrics
- To configure the network connection settings for a database
Correct answer: To define a set of resource limits and password policies assigned to database users
An Oracle PROFILE is a named set of limits on database resources (CPU, sessions, etc.) and password settings that can be assigned to users.
Question 5: In Oracle, what is the difference between a system privilege and an object privilege?
- System privileges apply to specific objects; object privileges apply to the whole database
- System privileges allow performing actions on the database; object privileges allow actions on specific schema objects (Correct answer)
- Object privileges can only be granted by the DBA; system privileges can be self-granted
- System privileges are temporary; object privileges are permanent
Correct answer: System privileges allow performing actions on the database; object privileges allow actions on specific schema objects
System privileges (like CREATE TABLE) allow a user to perform database-wide actions, while object privileges (like SELECT on a specific table) control access to individual schema objects.
Question 6: What does the Oracle parameter ARCHIVELOG mode enable?
- Automatic compression of all database backups
- Recording of all redo log files before they are overwritten, enabling point-in-time recovery (Correct answer)
- Encryption of all redo log files written to disk
- Real-time mirroring of the database to a standby server
Correct answer: Recording of all redo log files before they are overwritten, enabling point-in-time recovery
In ARCHIVELOG mode, Oracle saves (archives) filled redo log groups before reusing them, enabling complete media recovery and point-in-time recovery.
Question 7: Which Oracle utility is used for logical database backups and exports of database objects?
- RMAN (Recovery Manager)
- Data Pump (expdp/impdp) (Correct answer)
- SQL*Loader
- Database Configuration Assistant
Correct answer: Data Pump (expdp/impdp)
Oracle Data Pump (using expdp for export and impdp for import) performs high-speed logical backups and transfers of database objects and data.
1Z0-006 Database Administration and Security 4
Which Oracle security feature allows row-level access control based on security policies?