1z0-116

1z0-116 practice questions, page 2 of 3, with answer review and explanations.

Question 6

What is the first step when analyzing security within a database?

  1. Configure and enable Database Vault
  2. Mask non production data using Data Masking & Subsetting
  3. Execute Database Security Assessment Tool (DBSAT)
  4. Deploy Oracle Key Vault
  5. Create a Data Redaction Policy for your most sensitive tables
  6. Encrypt tablespaces using Transparent Data Encryption

Question 7

Examine this statement executed in a SQL*Plus session: ALTER SESSION SET EVENTS 'clientid_overwrite'; Which statement is true?

  1. A value set by DBMS_APPLICATION_INFO.SET_CLIENT_INFO will be copied to V$SESSION.CLIENT_IDENTIFIER.
  2. A value set by DBMS_SESSION.SET_IDENTIFIER will be copied to V$SESSION.CLIENT_INFO.
  3. Value set by DBMS_APPLICATION_INFO.SET_CLIENT_INFO will be ignored.
  4. A value set by DBMS_SESSION.SET_IDENTIFIER will be ignored.

Question 8

What is true about the client identifier?

  1. The client identifier is automatically included in the audit trail.
  2. A session can have multiple client identifier values set simultaneously.
  3. The client identifier cannot be changed during the session.
  4. The client identifier is automatically set by the SQL*Net layer.

Question 9

You have implemented Oracle Database Vault. Now DBAs report that they can no longer create users. What expected behavior implemented by Database Vault has caused this?

  1. enforced separation of duties by revoking the CREATE USER privilege from all users
  2. enforced separation of duties by revoking the CREATE USER privilege from the role DV_ACCTMGR
  3. enforced separation of job roles by dropping the role DBA
  4. enforced separation of duties by only revoking the CREATE USER privilege from the DBA role
  5. enforced separation of duties by revoking the CREATE USER privilege from all roles

Question 10

You perform sensitive data discovery using the Data Masking and Subsetting feature of Enterprise Manager. Which two statements are true? (Choose two.)

  1. Custom sensitive column types can be specified using regular expressions.
  2. Any column can be manually set to sensitive.
  3. All possible sensitive columns are detected.
  4. The discovery report only includes selected tables from the application data model.
  5. The discovery process overrides any previously identified sensitive columns.