Verified 1z1-116 exam dumps Q&As with Correct 92 Questions and Answers [Q26-Q46]

Rate this post

Verified 1z1-116 exam dumps Q&As with Correct 92 Questions and Answers

Oracle 1z1-116 Test Engine PDF – All Free Dumps from PDF4Test

Who should take the Oracle Database Security Administration Exam Number: 1Z0-116

Oracle Database Security Administration Exam Number: 1Z0-116 has is ideal for:

DB designers and analysts
DB Architects
Development DBAs
Production Database Security experts (DBAs)

NEW QUESTION 26
Which two are true about auditing in an Oracle Database?

SYS logon operations are always audited In unified auditing.

All SYS operations are audited by default in unified auditing.

No SYS operations are audited by default In unified auditing.

SYS logon operations are always audited in mixed mode auditing.

No SYS operations are audited if audit_sys_operations is set on false in unified auditing.

No SYS operations are audited if audit_sys_operations is set on false in mixed mode auditing.

NEW QUESTION 27
Which statement can be used to force password complexity in the password file?

orapwd file=orapwORCL format=12 force-yes

orapwd file=orapwORCL force=yes format=legacy

orapwd file=orapwOPCL forcaat=12

orapwd file=orapwOBCL forroat=12.2

NEW QUESTION 28
You Issue this statement as user SYS:
audit, context namespace kilimanjaro attributes a, b;
Which is true?

The statement will audit all users.

The statement will not audit any users.

The statement will only audit sys.

The statement must be updated to specify which users to audit.

NEW QUESTION 29
You connect to the database Instance over a network to change the password of user scott.
Which two methods avoid the new password for user scott from being compromised by network sniffing?

Set the server side sqlnet.ora parameter SQLNET.CRYPTO_CHECKSUM_SERVER-REQUESTED.

Use ALTER USER SCOTT PASSWORD EXPIRE.

Set the server side sqlnet.ora parameter SQLNET.ENCRYPTION_SERVER=REQUESTED.

Use ALTER USER SCOTT IDENTIFIED BY VALUES ‘<value>*.

Use ALTER USER SCOTT IDENTIFIED BY <password>.

Use the SQL”PIus command password SCOTT.

NEW QUESTION 30
Which three are part of an access control list (ACL) when using Real Application Security?

privileges

schemas

data realms

column constraints

policies

data realm constraints

roles

NEW QUESTION 31
What Is the first step when analyzing security within a database?

Encrypt tablespaces using Transparent Data Encryption

Configure and enable Database Vault

Execute Database Security Assessment Tool (DBSAT)

Mask nonproduction data using Data Masking & Subsetting

Deploy Oracle Key Vault

Create a Data Redaction Policy for your most sensitive tables

NEW QUESTION 32
Examine these commands that execute successfully:

What must be done to allow the index to be used?

Use tublespace encryption instead of column encryption.

Add the first_name column to the ix_employee Index to Improve its selectivity.

Create a SQL baseline to preserve the execution plan from before the encryption.

Enable encryption hardware acceleration on the CPUs of the machine.

NEW QUESTION 33
Database user SCOTT requires the privilege to select from all tables and you decide to configure this using a global role.
You have not yet configured the database with Enterprise User Security.
You plan to perform these steps:
1. create role GLOBAI._ROI.E identified globally;
2. grant select any table to GLODAL_COLE;
3. grant GLOBAL_ROLE to SCOTT;
What is the result?

All statements succeed even without Enterprise User Security configuration, but the role is not effective.

The third statement falls because global roles can be granted only by using a central authority.

The second statement falls because granting a global role can be completed only by using a central authority.

The first statement falls because the database Is not set up with Enterprise User Security.

NEW QUESTION 34
Examine these statements which execute successfully:

Which are the two reasons that no rows Are returned from the query?

Only DBA users can query SESSION_CONTEXT view contents.

An administrator issues the ALTER SYSTEM FLUSH global context statement.

The set_empno_crx_proc procedure must be in a package.

The application context is global.

Enterprise User Security is not configured and used for the user.

NEW QUESTION 35
You must rekey encrypted sensitive credential data In your database.
You run the command alter database dictionary rekey credentials.
Which three options ate true about the bkkey process?

Credential Data Is automatically encrypted using aes2S6.

The credential data encryption process does not de-obfuscate the obfuscated passwords before re-encrypts begin.

Both sys. links and sys . SCHEDULER_CREDENTIAL tables are rekeyed.

The rekey process prompts the user to provide a new key algorithm If needed.

The process of rekeylng does not automatically open the keystore.

The rekey process only applies to the sys.ltnks CREDENTUIALS table.

The rekey process only applies to the SYS.SCHEDULES$ credential table.

NEW QUESTION 36
A policy predicate function Is associated with an enabled Virtual Private Database (VPD) policy for a table.
Which two arguments are passed to the function?

the table name

the schema owning the table

the policy type

the policy name

the policy group to which the policy belongs

NEW QUESTION 37
Examine this output:

Which three are true?

John must connect as system to perform backup and recovery operations.

John can query dba tables.

John can perform backup and recovery operations by using SQL.

John can perform backup and recovery operations by using RMAN.

John must connect as sys to perform backup and recovery operations.

John Is not able to perform startup and shutdown operations.

John can query other user’s data.

NEW QUESTION 38
Using Unified Audit, you must determine who performed an pkan backup ot recovery operations on a database.
You are connected as sysdba.
Which statement(s) achieve this?
A)

B)

C)

D)

E)

Option A

Option B

Option C

Option D

Option E

NEW QUESTION 39
You configured Kerberos authentication for databases running on servers A and B.
However a database link connecting the database on server A to the database on server B fails with ORA-12638 Credential retrieval failed.
Where must you make a change to sqlnet.ora to allow the database link to use its stored credentials Instead of trying to use Kerberos?

on client side of server B

on client side of server A

on server side of server B

on server side of server A

NEW QUESTION 40
Users and applications must be able to access a web server of type https using database package UTL_HTTP.
Which three are part of the configuration to make this possible?

Configure liscener.oia with an endpolnt for tcps

Configure sqinet.ora with parameter sq.lnet.encrypt70N_server

Download the root certificate from the Certificate Authority In Base64 format

Configure sqlnet. ora with parameter tcp . invited_nodes

Download the trusted certificate of the web server in Base64 format a

Configure an Oracle wallet using mkstore or Wallet Manager

Configure access control lists using DBMS_NETWORK_ACL._ADMIN

NEW QUESTION 41
What is true about the client identifier?

The client Identifier is automatically included In the audit trail.

The client Identifier is automatically set by the SQL-Net layer.

A session can have multiple client Identifier values set simultaneously.

The client Identifier cannot be changed during the session.

NEW QUESTION 42
Examine this list:
1. You must monitor access to email column or salary column In the employees table.
2. If any activity is detected, the action must be audited and a notification sent out by email.
3. The database has Unified Auditing enabled.
4. You have created and successfully tested the email sending procedure, sysadmin_fga.emaii._ai.ert.
You create the audit policy:

A user with select privilege on hr.employees executes this :
SELECT email FROM HR.EMPLOYEES;
What will be the result?

The query will be executed, an entry will be created in the unified audit trail, and the mail will be sent.

The query will be executed, an entry will be created In FGA_LOG$ table, and the mall will be sent.

The query will be executed, but no audit entry will be created nor any mail sent.

The query will be executed, no audit entry will be created but the mall will be sent.

NEW QUESTION 43
Which two are true about Database Privilege Analysis?

It can be used after you install the Oracle Database without any additional database configuration steps.

It must have the Database Vault option enabled.

Privilege analysis data for dropped objects are kept.

If a privilege is captured during run time, it is saved under the run-time capture name.

It shows the grant paths to the privileges and suggests which grant path to keep.

It cannot be used to capture the privileges that have been exercised on precompiled database objects.

NEW QUESTION 44
Which four products, features, or methods can help facilitate compliance with various privacy-related regulatory requirements such as PCI-DSS and the EU GDPR?

Data Redaction

Data Guard

Real Application Clusters

Transparent Data Encryption

Data Masking & Subsetting

Table Partitioning

Database Vault

GoldenGate

Oracle Sharding

Real Application Testing

NEW QUESTION 45
Database Vault realm r protects all tables In the fin schema from DBA access User fin is configured as the owner in realm R.
You must also prevent access to realm r protected tables by user FIN. Which achieves this?

Revoke the select any table privilege from user FIN.

Make realm R a mandatory realm.

Remove the owner authorization of user fin in realm R.

Make user FIN participant In realm r. Instead of owner.

NEW QUESTION 46
As the SYSKM user you must create the password-based keystore, which will be used for TDE. Examine this list:

Identify the sequence that Oracle uses to search for the keystore and its location.

3,5,2,4,1

1,4,5,2

1,2,5,4

1,2,3,5

Certification Path for Oracle Database Security Administration Exam Number: 1Z0-116

Oracle Database Security Administration Exam Number: 1Z0-116 is an advanced exam. Successful completion by candidates of Data Administrator I and II will allow them to achieve Oracle Certified Database Security Expert status.

100% Passing Guarantee – Brilliant 1z1-116 Exam Questions PDF: https://www.pdf4test.com/1z1-116-dump-torrent.html

Free certification test prep