Free Oct-2022 UPDATED Oracle 1z1-116 Certification Exam Dumps is Online
Oracle Exam 2022 1z1-116 Dumps Updated Questions
NEW QUESTION 41
Which two statements are true about running the Oracle Database Security Assessment Tool (DBSAT) Collector?
- A. It must be run on the server that contains the database.
- B. It must be run by an OS user with read permissions on files and directories under ORACLE_HOME.
- C. It must connect to the database using a SYSDBA connection.
- D. It runs only on UNIX/Linux systems.
- E. It runs only on Windows systems.
Answer: B,E
NEW QUESTION 42
Which two statements are true about Database Vault factors?
- A. You can use a factor to enforce conditions for a command rule.
- B. Changing a factor type can change how factors are evaluated.
- C. You get an error at the time of factor creation If the retrieval method function you have specified does not exist.
- D. A factor can reference a function In another schema to compute its value, provided execute privilege Is granted to the sys user.
- E. You can configure a factor to be evaluated only once per session.
Answer: D,E
NEW QUESTION 43
Which CVSS Version 3.1 metric indicates how close an attacker needs to be to the vulnerable component?
- A. Privileges Required
- B. User Interaction
- C. Attack Complexity
- D. Attack Vector
- E. Scope
- F. Availability
Answer: E
NEW QUESTION 44
Examine this command that Is executed:
What is the result?
- A. The salary column is nullified when queried by the database users.
- B. The bind variables for the salary column are masked In trace files and vS views.
- C. The salary column is fine grain audited.
- D. The salary column is encrypted using TDE column encryption.
- E. The salary column is redacted when queried by database users.
Answer: E
NEW QUESTION 45
Database Vault is not used in your installation.
Why is a conventional secure application role more secure than a normal role?
- A. It can be set only by a package or procedure that is created with deflner's rights.
- B. It Is In effect only when configured as a default role for the user.
- C. It can be set only by a package or procedure associated with the role definition.
- D. It requires a password to be set.
- E. It can be set only by users with the grant any bole privilege.
Answer: E
NEW QUESTION 46
Which three authentication methods are available with Centrally Managed Users (CMU)?
- A. remote Access Services authentication
- B. public key Infrastructure (PKT) authentication
- C. username/password authentication
- D. kerberos authentication
- E. smart key authentication
- F. SSH authentication
Answer: A,C,D
NEW QUESTION 47
Which two are true about Database Privilege Analysis?
- A. It can be used after you install the Oracle Database without any additional database configuration steps.
- B. It must have the Database Vault option enabled.
- C. If a privilege is captured during run time, it is saved under the run-time capture name.
- D. Privilege analysis data for dropped objects are kept.
- E. It cannot be used to capture the privileges that have been exercised on precompiled database objects.
- F. It shows the grant paths to the privileges and suggests which grant path to keep.
Answer: A,F
NEW QUESTION 48
Which two represent the set of users that are never affected by connect command rules?
- A. SYSTEM
- B. users with the DV_ADMIN role
- C. users with the DV_OWNER role
- D. SYS
- E. users with the DV_ACCTMGR role
Answer: A,C
NEW QUESTION 49
Examine this statement and its result:
You issue this statement and then restart the database instance:
Which Is true about generated audit records?
- A. Information is now populated in auds .commentstext.
- B. They now Include all application context attribute values.
- C. They now Include SQL statements and any bind variables.
- D. They are now written to XML files as well as the database.
Answer: B
NEW QUESTION 50
You are required to remove embedded passwords from scripts that connect to database instances. Which tool can be used to implement this requirement?
- A. dbca
- B. netca
- C. orapki
- D. mkstore
- E. owm
- F. netmgr
Answer: A
NEW QUESTION 51
Examine these statements which execute successfully:
Which are the two reasons that no rows Are returned from the query?
- A. The application context is global.
- B. An administrator issues the ALTER SYSTEM FLUSH global context statement.
- C. The set_empno_crx_proc procedure must be in a package.
- D. Only DBA users can query SESSION_CONTEXT view contents.
- E. Enterprise User Security is not configured and used for the user.
Answer: A,E
NEW QUESTION 52
Users and applications must be able to access a web server of type https using database package UTL_HTTP.
Which three are part of the configuration to make this possible?
- A. Download the root certificate from the Certificate Authority In Base64 format
- B. Configure an Oracle wallet using mkstore or Wallet Manager
- C. Download the trusted certificate of the web server in Base64 format a
- D. Configure sqinet.ora with parameter sq.lnet.encrypt70N_server
- E. Configure liscener.oia with an endpolnt for tcps
- F. Configure access control lists using DBMS_NETWORK_ACL._ADMIN
- G. Configure sqlnet. ora with parameter tcp . invited_nodes
Answer: B,D,G
NEW QUESTION 53
Which two statements are true about the Secure External Password Store (SEPS)?
- A. Password credentials are stored on the database server.
- B. Password rotation policies can be enforced without changing application code.
- C. Wallet usage secures deployments that rely on password credentials for connecting to databases Instances.
- D. Bypassing database authentication adds significant performance benefits to middle-tier applications.
- E. The database does not need to authenticate the connection because the password credentials are stored in a wallet.
Answer: A,C
NEW QUESTION 54
Examine the statement:
CREATE BOLE hr_admin IDENTIFIED USING pac_mgr.hr_admin_rola_ch9ck;
Which three are true about the sec_mgr. hr_admin_role_check procedure?
- A. It must contain a SET ROLE statement or a DBMS_SESSION.SET_ROLE call.
- B. It must use the deflner's rights to enable the role.
- C. Its owner SEC_MGR must be granted the execute any procedure role.
- D. It can Include one or more security checks to validate the user.
- E. It can use only the DBMS_SESSION. SET_ROLE procedure.
- F. It must use the invokcr's rights to enable the role,
- G. It must use only one security check to validate the user.
Answer: B,C,E
NEW QUESTION 55
Oracle Database Vault is enabled In the database. You have these requirements:
1. Database administrator dbai must export and import data from and to a non-protected schema.
2. Database administrator dba2 must export and Import data from and to a protected schema.
Which three options together satisfy these requirements?
- A. Run dbms_macadm.authobize_datapump_useb procedure granting dba2 privileges to impdp and expdp utilities.
- B. Grant sysdba to both users.
- C. Grant imp_full_database and exp_full_database to dbai and dba2.
- D. Run d3ms_macadm.authorize_datapump_user procedure granting dbai privileges to impdp and expdp utilities.
- E. Grant sysoper to both users.
- F. Grant become user to dba2.
- G. Grant become user to dbai.
Answer: A,D,G
NEW QUESTION 56
What Is the first step when analyzing security within a database?
- A. Deploy Oracle Key Vault
- B. Configure and enable Database Vault
- C. Encrypt tablespaces using Transparent Data Encryption
- D. Execute Database Security Assessment Tool (DBSAT)
- E. Create a Data Redaction Policy for your most sensitive tables
- F. Mask nonproduction data using Data Masking & Subsetting
Answer: C
NEW QUESTION 57
Which two does the master key encrypt with Transparent Data Encryption?
- A. encrypted columns
- B. encrypted column keys
- C. encrypted tablespace keys
- D. encrypted tablespaces
- E. temporary segments
- F. encryption wallet
Answer: E,F
NEW QUESTION 58
When querying the database view, VSECRYPTION_WALLET, the status Is OPEN_NO_MASTER _KEY. What does this mean?
- A. The master key has not been created.
- B. The master key has been corrupted.
- C. You do not have select privileges on this database view.
- D. The key store is not open.
- E. This is expected behavior for this view.
Answer: D
NEW QUESTION 59
Examine this query:
Why is this account in this status?
- A. The account uses a global authentication.
- B. The user exceeded the value of PASSWORD_LIFE_TIME and Its password has not been reset yet
- C. The account has the SYSDBA privilege granted.
- D. The ACCOUNTS_ STATUS column is not updated until the user attempts to log in.
- E. The user exceeded the value of FAILED_LOGIN _ATTEMPTS and its password has not been reset yet.
Answer: C
NEW QUESTION 60
Examine this security parameter and Its value:
SEC_USER_ONAUTHORIZED_ACCESS_BANNER=/opt/oracla/admin/data/unauthwarninq.txt In which file must you include this parameter?
- A. tnsnaroes.ora
- B. init. era
- C. server.xml
- D. listener.ora
- E. names.ora
- F. aqlnet.ora
Answer: D
NEW QUESTION 61
You export and Import a table's data using Data Pump connected as a user who Is assigned DBA role with default privileges.
There is a data redaction policy on the table.
Which two statements are true about the redaction policy?
- A. The policy Is Included In the export and Import operation but is not applied by default to the objects In the target system.
- B. The policy Is not Included In export and Import operation.
- C. The actual data in the tables is copied to the Data Pump target system without being redacted.
- D. The policy is included in the export and import operation and applied by default to the objects in the target system.
- E. The actual data in the tables is copied to the Data Pump target system with the redaction policy applied.
Answer: B,C
NEW QUESTION 62
You are Implementing a security policy that makes use of the USERENV namespace.
Which USERRENV value does not change for the duration of a session?
- A. SESSION_CSER
- B. CURRENT_OSER
- C. CURRENT SCHEMA
- D. CLIENT_INFO
Answer: A
NEW QUESTION 63
What is true about the client identifier?
- A. The client Identifier is automatically included In the audit trail.
- B. The client Identifier cannot be changed during the session.
- C. A session can have multiple client Identifier values set simultaneously.
- D. The client Identifier is automatically set by the SQL-Net layer.
Answer: D
NEW QUESTION 64
For which two are Oracle Label Security policies not applied?
- A. objects in the SYS schema
- B. conventional path exports
- C. direct path exports
- D. partitioned tables
- E. users with the SYSDA privilege other than sys
Answer: A,D
NEW QUESTION 65
......
Oracle Certified 1z1-116 Dumps Questions Valid 1z1-116 Materials: https://www.passreview.com/1z1-116_exam-braindumps.html
Get The Most Updated 1z1-116 Dumps To Oracle Database Security Certification: https://drive.google.com/open?id=1VwXJ5ja39OTL_OWhngT3jJc976I-YS0O