[2022] 1z1-116 by Oracle Database Security Actual Free Exam Practice Test [Q20-Q35]

Rate this post

[2022] 1z1-116 by Oracle Database Security Actual Free Exam Practice Test

Free Oracle Database Security 1z1-116 Exam Question

Understanding functional and technical aspects of Oracle Database Security Administration Exam Number: 1Z0-116

The following will be discussed in the ORACLE 1Z0-116 exam dumps:

Oversee Network ACLs corresponding to microservice organizations
Design and use Listener Valid-Node Checking
Comprehend and use USERENV factors
Design ACLs to get to passwords in a wallet
Use setting data with Secure Application Roles
Design Network Service Profiles

Understanding functional and technical aspects of Oracle Database Security Administration Exam Number: 1Z0-116

The following will be discussed in the ORACLE 1Z0-116 exam dumps:

Oversee Centrally Managed Users
Regulate Kerberos Authentication
Distinguish Inactive records

Q20. Which two authorization rights does a Database Vault realm owner have that a realm participant does not have?

Add or remove realm-protected objects to or from the reaim.

Grant or revoke privileges on realm-protected objects to or from other users.

Add or remove realm-secured database roles to or from the realm.

Grant or revoke system privileges to access objects protected by the realm.

Add or remove participants to or from the realm.

Add or remove owners to or from the realm.

Grant or revoke realm-secured database roles.

Q21. Data Masking uses a combination of data patterns to discover sensitive dat a. Which three items are used?

column names

encrypted masks

column privileges

table privileges

column comments

column data

user-defined functions

Q22. Which three are true concerning command rules?

System privileges override command rules.

If a command rule’s associated rule set evaluation results In an error, the command is not allowed to execute.

A command can have only one command rule that applies to it.

For DML statement command rules, you can specify a wildcard for the object owner.

If a command rule’s associated rule set Is disabled, then the rule set evaluates to true.

For DML statement command rules, you can specify a wildcard for the object name.

Object privileges override command rules.

Q23. Which two statements are true about column-level transparent data encryption?

It can bo used for tables in encrypted tablcspaces.

encrypted columns cannot have an Index.

All encrypted columns of a table use the same encryption key.

Column level encrypted data remains encrypted in the buffer cache.

Column-level encryption keys are not encrypted by the master key.

Q24. You grant user JANE the SYSDBA administrative privilege. Which two are true?

User JANE must always connect as SYSDBA to the database instance.

User JANE can grant SYSDBA privilege to roles.

User JANE must use operating system authentication.

User JANE can create objects In sys schema only when connected as SYSDBA.

User JANE acquires the DBA role by default.

User JANE can backup and recover the database.

Q25. Examine this list:
1. You must monitor access to email column or salary column In the employees table.
2. If any activity is detected, the action must be audited and a notification sent out by email.
3. The database has Unified Auditing enabled.
4. You have created and successfully tested the email sending procedure, sysadmin_fga.emaii._ai.ert.
You create the audit policy:

A user with select privilege on hr.employees executes this :
SELECT email FROM HR.EMPLOYEES;
What will be the result?

The query will be executed, an entry will be created in the unified audit trail, and the mail will be sent.

The query will be executed, an entry will be created In FGA_LOG$ table, and the mall will be sent.

The query will be executed, but no audit entry will be created nor any mail sent.

The query will be executed, no audit entry will be created but the mall will be sent.

Q26. As the SYSKM user you must create the password-based keystore, which will be used for TDE. Examine this list:

Identify the sequence that Oracle uses to search for the keystore and its location.

3,5,2,4,1

1,4,5,2

1,2,5,4

1,2,3,5

Q27. Examine these commands that execute successfully:

What must be done to allow the index to be used?

Use tublespace encryption instead of column encryption.

Add the first_name column to the ix_employee Index to Improve its selectivity.

Create a SQL baseline to preserve the execution plan from before the encryption.

Enable encryption hardware acceleration on the CPUs of the machine.

Q28. Which statement can be used to force password complexity in the password file?

orapwd file=orapwORCL format=12 force-yes

orapwd file=orapwORCL force=yes format=legacy

orapwd file=orapwOPCL forcaat=12

orapwd file=orapwOBCL forroat=12.2

Q29. Examine this command that Is executed:

What is the result?

The salary column is fine grain audited.

The salary column is nullified when queried by the database users.

The bind variables for the salary column are masked In trace files and vS views.

The salary column is encrypted using TDE column encryption.

The salary column is redacted when queried by database users.

Q30. Oracle Database Vault is enabled In the database. You have these requirements:
1. Database administrator dbai must export and import data from and to a non-protected schema.
2. Database administrator dba2 must export and Import data from and to a protected schema.
Which three options together satisfy these requirements?

Grant become user to dbai.

Grant sysoper to both users.

Run d3ms_macadm.authorize_datapump_user procedure granting dbai privileges to impdp and expdp utilities.

Grant imp_full_database and exp_full_database to dbai and dba2.

Run dbms_macadm.authobize_datapump_useb procedure granting dba2 privileges to impdp and expdp utilities.

Grant become user to dba2.

Grant sysdba to both users.

Q31. What is true about the client identifier?

The client Identifier is automatically included In the audit trail.

The client Identifier is automatically set by the SQL-Net layer.

A session can have multiple client Identifier values set simultaneously.

The client Identifier cannot be changed during the session.

Q32. Which two does the master key encrypt with Transparent Data Encryption?

encrypted columns

encryption wallet

temporary segments

encrypted tablespace keys

encrypted tablespaces

encrypted column keys

Q33. You must redact the salary column of the HR.EMPLOYEES table to display only the number o. Examine this syntax:

Which function type must be Inserted at the end of line #7?

DBMS_BEDACT.NONE

DBMS_REDACT.PARTIAL

DBMS_REDACT.FUI,I.

DBMS REDACT.REGEXP

DBMS_RE DACT.RANDOM

Q34. Which statement is true about Network ACLs?

They ate used to control access by users to external network services and resources from the database through PL/SQL.

They are used to provide access to database packages.

They are used to control the usage of UTL_TCP, ITL_HTTP, and UTL_INADDR.

They are used to configure proxy for PL/SQL network utility packages.

The NETWORK_ACL_ADMIN package provides the interface to administer the network access control lists (ACL). ACLs are used to control access by users to external network services and resources from the database through PL/SQL network utility packages including UTL_TCP, UTL_HTTP, UTL_SMTP andUTL_INADDR.
https://docs.oracle.com/database/121/ARPLS/d_networkacl_adm.htm#ARPLS74568

Q35. Examine this query:

Why is this account in this status?