1Z0-006 Security Management 5 — Questions and Answers
Question 1: Which statement correctly describes the difference between system privileges and object privileges in Oracle?
- System privileges apply to one specific object; object privileges apply database-wide
- System privileges allow actions on any object of a type; object privileges apply to a specific object (Correct answer)
- System privileges can only be granted to roles; object privileges can only be granted to users
- System privileges expire after 30 days; object privileges do not expire
Correct answer: System privileges allow actions on any object of a type; object privileges apply to a specific object
System privileges (e.g., CREATE TABLE) allow performing an action on any applicable object, while object privileges (e.g., SELECT on HR.EMPLOYEES) apply only to a named object.
Question 2: Which Oracle view shows object privileges granted on objects owned by the current user?
- USER_SYS_PRIVS
- USER_TAB_PRIVS_MADE (Correct answer)
- USER_ROLE_PRIVS
- ALL_OBJECTS
Correct answer: USER_TAB_PRIVS_MADE
USER_TAB_PRIVS_MADE lists all grants the current user has made on their own objects, showing the grantee and the privilege granted.
Question 3: What is a 'secure application role' in Oracle Database?
- A role that can only be enabled through a PL/SQL procedure that verifies context conditions (Correct answer)
- A role that encrypts all data accessed by the user
- A role automatically assigned to all application users
- A role that cannot be revoked once granted
Correct answer: A role that can only be enabled through a PL/SQL procedure that verifies context conditions
A secure application role can only be activated by calling a specific PL/SQL procedure, which can verify application context, IP address, or other conditions before enabling the role.
Question 4: Which password profile parameter prevents a user from reusing a password within a specified number of days?
- PASSWORD_REUSE_MAX
- PASSWORD_REUSE_TIME (Correct answer)
- PASSWORD_LOCK_TIME
- PASSWORD_LIFE_TIME
Correct answer: PASSWORD_REUSE_TIME
PASSWORD_REUSE_TIME specifies the number of days a user must wait before they can reuse a previously used password.
Question 5: Fine-Grained Auditing (FGA) in Oracle differs from standard auditing primarily because it:
- Audits only DDL statements, not DML
- Can trigger auditing based on specific column values accessed in a query (Correct answer)
- Stores audit records in the OS filesystem only
- Requires the SYSDBA privilege to configure
Correct answer: Can trigger auditing based on specific column values accessed in a query
FGA allows policies that fire only when specific columns are referenced in a query or when the data returned matches defined conditions, providing much more precise auditing than standard auditing.
Question 6: Which predefined Oracle role grants the privileges needed to perform all database administration tasks except those requiring SYSDBA?
- CONNECT
- RESOURCE
- DBA (Correct answer)
- SELECT_CATALOG_ROLE
Correct answer: DBA
The DBA role contains a broad set of system and object privileges that cover typical database administration tasks, though STARTUP/SHUTDOWN still requires SYSDBA.
Question 7: When a user is created without specifying a PROFILE, which profile does Oracle assign by default?
- SECURE_PROFILE
- DEFAULT (Correct answer)
- SYSTEM
- PUBLIC
Correct answer: DEFAULT
Oracle assigns the DEFAULT profile to any new user when no profile is explicitly specified in the CREATE USER statement.
1Z0-006 Security Management 5
Which statement correctly describes the difference between system privileges and object privileges in Oracle?