1z1-116 100% Pass Guaranteed Download Oracle Database Security Exam PDF Q&A
1z1-116 Practice Test Dumps with 100% Passing Guarantee
Who should take the Oracle Database Security Administration Exam Number: 1Z0-116
Oracle Database Security Administration Exam Number: 1Z0-116 has is ideal for:
- DB designers and analysts
- Development DBAs
- Production Database Security experts (DBAs)
- DB Architects
NEW QUESTION 34
Which statement can be used to force password complexity in the password file?
- A. orapwd file=orapwORCL format=12 force-yes
- B. orapwd file=orapwORCL force=yes format=legacy
- C. orapwd file=orapwOPCL forcaat=12
- D. orapwd file=orapwOBCL forroat=12.2
Answer: D
NEW QUESTION 35
You connect to the database Instance over a network to change the password of user scott.
Which two methods avoid the new password for user scott from being compromised by network sniffing?
- A. Use ALTER USER SCOTT PASSWORD EXPIRE.
- B. Use ALTER USER SCOTT IDENTIFIED BY VALUES '<value>*.
- C. Set the server side sqlnet.ora parameter SQLNET.CRYPTO_CHECKSUM_SERVER-REQUESTED.
- D. Use the SQL"PIus command password SCOTT.
- E. Set the server side sqlnet.ora parameter SQLNET.ENCRYPTION_SERVER=REQUESTED.
- F. Use ALTER USER SCOTT IDENTIFIED BY <password>.
Answer: B,C
NEW QUESTION 36
Examine this statement and its result:
You issue this statement and then restart the database instance:
Which Is true about generated audit records?
- A. They are now written to XML files as well as the database.
- B. Information is now populated in auds .commentstext.
- C. They now Include all application context attribute values.
- D. They now Include SQL statements and any bind variables.
Answer: C
NEW QUESTION 37
Examine these statements which execute successfully:
Which are the two reasons that no rows Are returned from the query?
- A. Enterprise User Security is not configured and used for the user.
- B. The application context is global.
- C. An administrator issues the ALTER SYSTEM FLUSH global context statement.
- D. Only DBA users can query SESSION_CONTEXT view contents.
- E. The set_empno_crx_proc procedure must be in a package.
Answer: A,B
NEW QUESTION 38
Using Unified Audit, you must determine who performed an pkan backup ot recovery operations on a database.
You are connected as sysdba.
Which statement(s) achieve this?
A)
B)
C)
D)
E)
- A. Option A
- B. Option E
- C. Option D
- D. Option B
- E. Option C
Answer: A
NEW QUESTION 39
Examine this command that Is executed:
What is the result?
- A. The salary column is fine grain audited.
- B. The salary column is nullified when queried by the database users.
- C. The salary column is redacted when queried by database users.
- D. The salary column is encrypted using TDE column encryption.
- E. The bind variables for the salary column are masked In trace files and vS views.
Answer: C
NEW QUESTION 40
When querying the database view, VSECRYPTION_WALLET, the status Is OPEN_NO_MASTER _KEY. What does this mean?
- A. The master key has not been created.
- B. The key store is not open.
- C. The master key has been corrupted.
- D. This is expected behavior for this view.
- E. You do not have select privileges on this database view.
Answer: B
NEW QUESTION 41
Which two statements are true about running the Oracle Database Security Assessment Tool (DBSAT) Collector?
- A. It runs only on Windows systems.
- B. It must connect to the database using a SYSDBA connection.
- C. It must be run by an OS user with read permissions on files and directories under ORACLE_HOME.
- D. It must be run on the server that contains the database.
- E. It runs only on UNIX/Linux systems.
Answer: A,C
NEW QUESTION 42
You check the Risk Matrix of the latest Critical Patch Update (CPU).
One of the " Common Vulnerability and Exposure'' reports (CVEs) has Base Score that is above 9 in the Risk Matrix.
Which one is not a supported method to address this CVE?
- A. Request a one off patch exception from Oracle Support.
- B. Install a new Release Update Revision.
- C. Implement a workaround recommended by Oracle Support.
- D. Install a new Release Update.
- E. Upgrade to a new Release.
Answer: A
NEW QUESTION 43
If a column is not specified in a Data Redaction Policy, to which column(s) is it applied?
- A. columns with any type of constraint
- B. foreign key columns only
- C. none of the columns
- D. the primary key column only
- E. the primary and foreign key columns
Answer: E
NEW QUESTION 44
Database Vault Is configured and enabled In the Oracle database.
Three users are granted the dba, dv_omneb, and dv_acctmgb roles.
There is a requirement to create a user who can:
1. Connect to the database Instance
2. Select from dictionary views
Which users can complete the operation to meet the requirement?
- A. users granted DBA and DV_OWNER roles
- B. users granted DV_OWNER role
- C. users granted DV_ACCTMGR and DV_OWNER roles
- D. users granted DV_ACCTMGR and DBA roles
Answer: D
NEW QUESTION 45
Examine the statement:
CREATE BOLE hr_admin IDENTIFIED USING pac_mgr.hr_admin_rola_ch9ck;
Which three are true about the sec_mgr. hr_admin_role_check procedure?
- A. It must contain a SET ROLE statement or a DBMS_SESSION.SET_ROLE call.
- B. It must use the deflner's rights to enable the role.
- C. It must use only one security check to validate the user.
- D. It can Include one or more security checks to validate the user.
- E. Its owner SEC_MGR must be granted the execute any procedure role.
- F. It can use only the DBMS_SESSION. SET_ROLE procedure.
- G. It must use the invokcr's rights to enable the role,
Answer: B,E,F
NEW QUESTION 46
As the SYSKM user you must create the password-based keystore, which will be used for TDE. Examine this list:
Identify the sequence that Oracle uses to search for the keystore and its location.
- A. 1,2,3,5
- B. 3,5,2,4,1
- C. 1,2,5,4
- D. 1,4,5,2
Answer: C
NEW QUESTION 47
Examine these commands and responses:
User Karen is an enterprise user.
Which two commands are used to allow this login?
- A. GRANT CREATE SESSION TO karan;
- B. GRANT CREATE SESSION TO guest;
- C. CREATE USER guest IDENTIFIED GLOBALLY as '';
- D. CREATE USER karen IDENTIFIED BY guest;
- E. CREATE USER guest IDENTIFIED BY karen;
Answer: C
NEW QUESTION 48
You are Implementing a security policy that makes use of the USERENV namespace.
Which USERRENV value does not change for the duration of a session?
- A. SESSION_CSER
- B. CLIENT_INFO
- C. CURRENT_OSER
- D. CURRENT SCHEMA
Answer: A
NEW QUESTION 49
Examine this list:
1. You must monitor access to email column or salary column In the employees table.
2. If any activity is detected, the action must be audited and a notification sent out by email.
3. The database has Unified Auditing enabled.
4. You have created and successfully tested the email sending procedure, sysadmin_fga.emaii._ai.ert.
You create the audit policy:
A user with select privilege on hr.employees executes this :
SELECT email FROM HR.EMPLOYEES;
What will be the result?
- A. The query will be executed, but no audit entry will be created nor any mail sent.
- B. The query will be executed, an entry will be created In FGA_LOG$ table, and the mall will be sent.
- C. The query will be executed, no audit entry will be created but the mall will be sent.
- D. The query will be executed, an entry will be created in the unified audit trail, and the mail will be sent.
Answer: A
NEW QUESTION 50
Examine this command:
What masking definitions does it list?
- A. All with the name credit and the commands to deploy them on all databases with names starting with test.
- B. All with names starting with credit and created on databases with names starting with test.
- C. All with names starting with credit and created on any database.
- D. All with the name credit and the commands to deploy them on a database with the name test.
- E. All with the name credit and created on databases with name starting with teat.
Answer: E
NEW QUESTION 51
Which two statements are true about Database Vault factors?
- A. Changing a factor type can change how factors are evaluated.
- B. A factor can reference a function In another schema to compute its value, provided execute privilege Is granted to the sys user.
- C. You can use a factor to enforce conditions for a command rule.
- D. You can configure a factor to be evaluated only once per session.
- E. You get an error at the time of factor creation If the retrieval method function you have specified does not exist.
Answer: B,D
NEW QUESTION 52
Examine these steps:
1. Run the DBSAT Collector
2. Run the DBSAT Discoverer
3. Run the DBSAT Reporter
Identify the minimum required steps for producing a report of schemas with sensitive data.
- A. 0
- B. 1,2
- C. 1,2,3
- D. 2,3
Answer: C
NEW QUESTION 53
Which type of masking directly masks and subsets data In a nonproduction database with minimal or no Impact on production environments?
- A. deterministic
- B. in-database
- C. heterogeneous
- D. In-export
- E. conditional format
Answer: B
Explanation:
In-Database
In-Database mode directly masks and subsets the data within a non-production database with minimal or no impact on production environments. Since the In-Database masking and subsetting mode permanently changes the data in a database, it is strongly recommended to use this mode for non-production environments such as staging, test, and development databases rather than using it on production databases.
https://docs.oracle.com/database/121/DMKSB/intro.htm#DMKSB-GUID-F949A83E-3C01-45B5-9BAF-9940BB140AA0
NEW QUESTION 54
For which two reasons would you define Network ACLs?
- A. for configuring fine-grained access control for users and roles that need to access external network services from the database
- B. to create auditing policies regarding the usage of network services from the database
- C. to Improve the performance of the database applications that require access to remote network services
- D. for configuring fine-grained access control to Oracle wallets to make HTTP requests that require password or client-certificate authentication
- E. to block network attacks or denial of service attacks directed at the database
Answer: A,E
NEW QUESTION 55
......
1z1-116 PDF Dumps Are Helpful To produce Your Dreams Correct QA's: https://www.dumpsvalid.com/1z1-116-still-valid-exam.html