Deck 12: Security Management

Question 1

SYSTEM can grant any system privilege to any other user.

Answer 1

True

Question 2

As a user,your activity in the database is stopped if you reach a limit on a resource set in your profile.

Answer 2

True

Question 3

It is advisable to store temporary segments in the SYSTEM tablespace.

Answer 3

False

Question 4

Exporting is a form of backup that can be used to back up specific tables or schemas,or to back up the entire database.

Question 5

You should log on as the SYS user for only the very highest level of tasks,and not for other,more routine tasks.

Question 6

Each user can be assigned one or more profiles at a time.

Question 7

You need the BACKUP ANY TABLE privilege to perform an operating system backup of Oracle files.

Question 8

You need DBA privileges to recover a user password from the database.

Question 9

When a new database instance is created,at least three users are created.

Question 10

The default quota on all tablespaces for a user is zero unless you grant the RESOURCE role or the UNLIMITED TABLESPACE system privilege to the user.

Question 11

The DBA user does not usually have to be assigned object privileges.

Question 12

Oracle10g allows a quota allocation on the TEMP tablespace;Oracle 9i did not.

Question 13

The advantage of global users is that they do not require Oracle users that have been created within the database.

Question 14

It is recommended that you assign the SYSTEM or SYSAUX tablespaces as the default tablespace for new users.

Question 15

The SYSTEM user can perform the highest-level tasks,such as starting up and shutting down a database instance,as well as performing backup and recovery tasks.

Question 16

System privileges are more pinpointed than object privileges.

Question 17

You can change a user's name using the ALTER USER statement.

Question 18

If a user has created other users,those users are not dropped when the creating user is dropped.

Question 19

One of the user naming restrictions in Oracle is that a user name cannot be identical to a keyword,such as TABLE or INDEX.

Question 20

You can modify the DEFAULT profile in the same way you modify profiles that you create,but you cannot drop the DEFAULT profile.

Question 21

USER_TAB_PRIVS_MADE lists privileges for tables but not other types of objects.

Question 22

Oracle recommends that you create your own roles instead of using the CONNECT,RESOURCE,an DBA roles,because these three roles will be dropped in a future release.

Question 23

Users identified externally do not have to supply their user names or passwords to log on;they simply type a(n)____ in place of user name and password.

A) *
B) -
C) /
D) \

Question 24

The ____ user is given the DBA role,which allows it to perform routine database administration tasks such as creating new users,monitoring database activities,and regulating database resources

A) SYS
B) SYSTEM
C) MDSYS
D) DBA

Question 25

The CONNECT role in past versions of Oracle had many powerful privileges granted to it.

Question 26

Oracle 10g allows a user whose user name matches his operating system logon name combined with a prefix such as ____ (the default).

A) OS$
B) SYS%
C) OP$
D) OPS$

Question 27

You can grant a privilege and add WITH ADMIN OPTION or WITH GRANT OPTION when granting to a role.

Question 28

Locking a user with the ____ clause (of the CREATE USER or ALTER USER commands)completely locks this user out of the database.

A) LOCK
B) ACCOUNT LOCK
C) BLOCK
D) ACCOUNT BLOCK

Question 29

The CREATE ANY INDEX privilege allows you to create indexes on a table in your own schema.

Question 30

There is no command to alter a grant that has been given,so you must reissue the grant.

Question 31

Removing users requires the ____ system privilege,which the SYSTEM user has.

A) DROP USER
B) DROP
C) REMOVE
D) DBA

Question 32

Roles are similar to system privileges in that a role granted by a user is not revoked if the granting user loses the role.

Question 33

The ____ user owns most of the tables needed to run the database,as well as the data dictionary views.

A) SYS
B) SYSTEM
C) MDSYS
D) DBA

Question 34

Dropping a role revokes it from all users and roles,except those who are currently logged on and have the role enabled.

Question 35

A user name must be no more than ____ characters long.

A) 8
B) 15
C) 30
D) 50

Question 36

The ____ user is created to own functions,packages,views,and objects related to Oracle Spatial.

A) SYS
B) SYSTEM
C) MDSYS
D) DBA

Question 37

When a role switches to requiring a password,users currently logged on who are granted the role are unaffected until they log off and back on again.

Question 38

After a user has a role,you cannot add more privileges to the role.

Question 39

A user's identity can be validated in ____ ways.

A) two
B) three
C) four
D) five

Question 40

Auditing commands are accepted but have no effect unless the AUDIT_TRAIL parameter is set to a value other than "NONE."

Question 41

There are ____ resources you can limit with a profile.

A) six
B) seven
C) eight
D) nine

Question 42

A(n)____ is a single task sent to the database,such as parsing a new SQL statement or executing a query.

A) call
B) command
C) execution
D) event

Question 43

There are ____ types of privileges that you can assign in the Oracle 10g database.

A) two
B) three
C) four
D) five

Question 44

There are ____ password settings that you can set within a profile.

A) five
B) six
C) seven
D) eight

Question 45

To drop a user named TREVOR,who owns no tables or other database objects,type the following command: ____.

A) DROP TREVOR;
B) DROP USER TREVOR;
C) DROP TREVOR CASCADE;
D) DROP USER TREVOR CASCADE;

Question 46

A(n)____ privilege gives a user the ability to perform certain tasks on specific tables or other objects that are owned by a schema.

A) system
B) role
C) object
D) restricted

Question 47

There are over ____ system privileges in the Oracle 10g database.

A) 10
B) 100
C) 1000
D) 10000

Question 48

Composite limits require two steps.First,you set a(n)____ for the resources you want to include when Oracle 10g calculates service units.Second,you set the maximum service units in the profile.

A) minimum weight
B) relative weight
C) average weight
D) default weight

Question 49

The default profile,named ____,has no limits on resources or database use.

A) DEFPROF
B) PROFILE
C) USER
D) DEFAULT

Question 50

A(n)____ is a collection of settings that limits the use of system resources and the database.

A) privilege
B) group
C) profile
D) role

Question 51

The password and ____ are the only password properties that you can change specifically for a user by using the ALTER USER command.

A) password time limit
B) password history
C) password expiration
D) password complexity

Question 52

You should click on the ____ tab of a user's property sheet (available in the Security Management section of the Enterprise Manager console)to change the user's password,default tablespace,account status,and profile,without writing any code.

A) General
B) Role
C) System
D) Quota

Question 53

When you plan to adjust resource limits in any Oracle 10g database,you must first change the initialization parameter named ____.

A) RESOURCE_LIMITS
B) CPU_PER_CALL
C) PROFILE_LIMIT
D) COMPOSITE_LIMIT

Question 54

You should click on the ____ tab of a user's property sheet (available in the Security Management section of the Enterprise Manager console)to see a list of the quotas for each tablespace.

A) General
B) Role
C) System
D) Quota

Question 55

A ____ is a named group of privileges that can be assigned to a user as a set rather than individually.

A) profile
B) role
C) group
D) block

Question 56

To enforce password complexity you must use a combination of a function and a ____.

A) control file
B) profile
C) configuration file
D) default value

Question 57

You can use the ____ data dictionary view to view user profile,expiration date of password,and account status.

A) DBA_USERS
B) DBA_TS_QUOTAS
C) RESOURCE_COST
D) DBA_PROFILES

Question 58

To view the resource settings for the system,you should type and run this query: ____.

A) SELECT * FROM RESOURCES;
B) SELECT * FROM RESOURCE_SETTING;
C) SELECT * FROM RESOURCE_SETTINGS;
D) SELECT * FROM RESOURCE_COST;

Question 59

Resources can be set to zero using the ____ statement.

A) ALTER RESOURCE
B) ALTER RESOURCE VALUE
C) ALTER RESOURCE COST
D) ALTER RESOURCE DEFAULT

Question 60

The ____ privilege allows a user to log on to the database.

A) CREATE SESSION
B) LOGIN
C) SYSDBA
D) SYSOP

Question 61

The ____ predefined role provides extensive abilities to create objects,such as procedures,triggers,and object types,for users who need to create their own objects.

A) CONNECT
B) DBA
C) RESOURCE
D) OBJECT

Question 62

The act of revoking an object privilege ____.

A) does not cascade
B) cascades upwards
C) cascades downwards
D) cascades sideways

Question 63

Monitoring activity in a database is called ____.

A) auditing
B) monitoring
C) logging
D) managing

Question 64

____ auditing audits types of SQL commands.

A) Command
B) Statement
C) Privilege
D) Object

Question 65

The ____ data dictionary view contains all object privileges granted.

A) DBA_SYS_PRIVS
B) DBA_OBJ_PRIVS
C) DBA_OBJ_PRIVS_MADE
D) DBA_TAB_PRIVS

Question 66

When a new database instance is created,the SYS and ____________________ users are created.

Question 67

You can check the system privileges for the STUDENTA and STUDENTB users by typing and executing the following query:
SELECT * FROM DBA_SYS_PRIVS
WHERE GRANTEE LIKE ____;

A) 'STUDENT*'
B) 'STUDENT?'
C) 'STUDENT.'
D) 'STUDENT%'

Question 68

Oracle ____________________ is a feature for storing dimensional data in the database.

Question 69

You can grant the ____ to either a role or a user.This allows the user to grant that role to other users or roles.

A) WITH ADMIN OPTION
B) NOT IDENTIFIED
C) IDENTIFIED BY
D) GRANT

Question 70

The ____ object privilege allows you to call the function,procedure,or package while running an SQL query or other command.

A) FLASHBACK
B) SELECT
C) EXECUTE
D) RUN

Question 71

The approach to security with roles,and particularly the CONNECT role,is known as a policy of ____.

A) maximum privilege
B) most privilege
C) minimum privilege
D) least privilege

Question 72

A ____ is an object based on another object,for example an object type that is based on another object type.

A) derivated object
B) subobject
C) child object
D) template-based object

Question 73

____ privileges are needed to create tables in a database.

A) Role
B) Alias
C) Object
D) System

Question 74

The ____ object privilege allows you to create FOREIGN KEY constraints that reference the table.

A) REFERENCES
B) FOREIGN KEY
C) CONSTRAINT
D) INDEX

Question 75

____ are like table aliases,which any user can use in place of the table's name.

A) Mappings
B) Public synonyms
C) Equivalencies
D) Labels

Question 76

____ shows privileges belonging to the current user.

A) USER_PRIVILEGES
B) USER_PRIVS
C) USER_SYS_PRIVS
D) USER_OBJ_PRIVS

Question 77

You can use the AUDIT command to set up object auditing for any object you own.Otherwise,you must have the ____ privilege to audit objects.

A) AUDIT ALL
B) AUDIT OBJECTS
C) AUDIT ANY
D) AUDIT SYSTEM

Question 78

The Enterprise Manager console's ____ Manager can be used to create and manage roles very easily.

A) Role
B) Privilege
C) Security
D) User

Question 79

When granting object privileges,the ____ can only be used to grant UPDATE,REFERENCES,and DELETE privileges.

A) column list
B) hierarchy option
C) grant option
D) schema

Question 80

The audit trail records are written to the ____ table.

A) SYSTEM.AUDIT$
B) SYSTEM.AUD$
C) SYS.AUDIT$
D) SYS.AUD$