Teradata Teradata Administration 2 — Questions and Answers
Question 1: Which Teradata privilege allows a user to pass their granted privileges on to other users?
- GRANT OPTION
- WITH GRANT OPTION (Correct answer)
- PASS PRIVILEGE
- CASCADE GRANT
Correct answer: WITH GRANT OPTION
The WITH GRANT OPTION clause on a GRANT statement enables the receiving user to subsequently grant that same privilege to other users or roles.
Question 2: What is a Teradata role used for in security management?
- Grouping tables into logical schemas
- Bundling a set of privileges that can be assigned to multiple users (Correct answer)
- Defining CPU resource limits for users
- Creating virtual users for batch processes
Correct answer: Bundling a set of privileges that can be assigned to multiple users
A Teradata role is a named collection of privileges that simplifies security administration by allowing one role to be granted to many users instead of granting individual privileges repeatedly.
Question 3: Which DBC system view lists all privileges granted to users and roles in Teradata?
- DBC.Users
- DBC.RoleMembers
- DBC.AllRights
- DBC.AccessRights (Correct answer)
Correct answer: DBC.AccessRights
DBC.AccessRights displays all access rights (privileges) granted to users and roles, including the database object they apply to and whether WITH GRANT OPTION is set.
Question 4: What does the REVOKE statement do in Teradata?
- Removes a user from the system
- Removes previously granted privileges from a user or role (Correct answer)
- Drops a database object
- Disables a user account temporarily
Correct answer: Removes previously granted privileges from a user or role
REVOKE removes one or more previously granted privileges from a specified user or role, complementing the GRANT statement in Teradata's privilege management system.
Question 5: Which Teradata feature provides row-level security by filtering which rows a user can see in a table?
- Column-Level Security (CLS)
- Row-Level Security (RLS) via security constraints (Correct answer)
- Table Access Control (TAC)
- Dynamic Data Masking (DDM)
Correct answer: Row-Level Security (RLS) via security constraints
Teradata's Row-Level Security (RLS) uses security constraint columns and policies to automatically filter result sets so users only see rows they are authorized to access.
Question 6: What is the purpose of the GRANT LOGON statement in Teradata?
- Creates a new user login account
- Authorizes a specific host or network client to log on to Teradata (Correct answer)
- Resets a user's password
- Enables multi-factor authentication for a user
Correct answer: Authorizes a specific host or network client to log on to Teradata
GRANT LOGON controls which network clients (identified by host ID) are permitted to establish sessions with the Teradata system, providing network-level access control.
Question 7: Which Teradata profile attribute controls the maximum number of concurrent sessions a user is allowed to open?
- MAXLOGONATTEMPTS
- SESSIONS (Correct answer)
- CONCURRENT_SESSIONS
- MAX_SESSIONS
Correct answer: SESSIONS
The SESSIONS attribute in a Teradata profile or user definition specifies the maximum number of simultaneous sessions that user is allowed to maintain.
Teradata Teradata Administration 2
Which Teradata privilege allows a user to pass their granted privileges on to other users?