OCP Security and Auditing Flashcards

Which Oracle feature enables row-level security by dynamically appending a WHERE clause to queries on a table?

Answer: Virtual Private Database (VPD)

Virtual Private Database (VPD) enforces row-level security by attaching policy functions that add a WHERE clause to queries transparently.

Which system privilege must be granted to a user to allow them to establish a connection to an Oracle database?

Answer: CREATE SESSION

CREATE SESSION is the system privilege required for a user to open a session and connect to an Oracle database.

What does the AUDIT_TRAIL initialization parameter control in Oracle?

Answer: Destination where audit records are written

AUDIT_TRAIL determines where Oracle writes audit records, such as to the database (DB), operating system files (OS), or XML files.

Which Oracle security feature encrypts tablespaces and data files at the storage level without requiring application changes?

Answer: Transparent Data Encryption (TDE)

Transparent Data Encryption (TDE) encrypts data at rest in tablespaces and data files, remaining invisible to the application.

What is the effect of granting a system privilege WITH ADMIN OPTION to a user?

Answer: The user can grant that system privilege to other users

WITH ADMIN OPTION allows the grantee to further grant the same system privilege to other users or roles.

Which data dictionary view displays all system privileges granted to users and roles in Oracle?

Answer: DBA_SYS_PRIVS

DBA_SYS_PRIVS lists all system privileges granted to every user and role in the database.