Mar-2023 FREE Oracle 1Z0-116 PRACTICE QUESTIONS AND ANSWERS UPDATES [Q12-Q36]

1Z0-116 Oracle

admin -

March 3, 2023

4/5 - (1 vote)

Mar-2023 FREE Oracle 1Z0-116 PRACTICE QUESTIONS AND ANSWERS UPDATES

DEMO FREE BEFORE YOU BUY 1Z0-116 DUMPS

NEW QUESTION 12
The sqinet.oia file on the client contains this parameter setting:
SQLNET.ENCRYPTION_CLIEKT = REQUESTED
What value for the parameter sQLNET.ENCRYPTION _server In the sqlnet.ora file on the server will disable Encryption and Data Negotiation?

REQUESTED

ACCEPTED

REQUIRED

REJECTED

NEW QUESTION 13
Which type of attack attempts to find data by repeatedly trying similar SQL with a modified predicate?

timing attack

Inference attack

data remanence attack

cache attack

side-channel attack

known-plaintext attack

NEW QUESTION 14
Examine this configuration and requirement:
1. The hr user created a private database link in the pdb2 pluggable database linking to the hr schema In the PDBl pluggable database.
2. Other users in pdb2 must query the remote HR.EMPLOYEES table In PDBI using this database link.
Which two operations together ensure that the database link provides access only to the HR.EMPLOYEES table in the PDBI pluggable database?

Only grant other users access to the HR.EMPLOYEES table In the pdb2 pluggable database.

Grant other users access to the database link in the PDBI pluggable database.

Grant access to the view of the remote HR.EMPLOYEES table In the PDB2 pluggable database.

Grant other users access to the database link In the PDB2 pluggable database.

Create a view In the HR schema for the remote hr. employees table of the pdb2 pluggable database .

NEW QUESTION 15
Database Vault is configured and enabled in the database. You create a rule set to enforce security on the hr. employees table.
Examine these requirements:
1. Users working In hr department are allowed to view all rows In HR.EMPLOYEES.
2. hr managers are allowed to view, update, and delete data in In HR.EMPLOYEES.
3. Audit records are to be collected for every evaluation of the rule set.
Which two options are true when creating the rule set?

One rule set contains two rules OR’ed together.

The rule set parameter audit_options must be set to dbms_macutl.g_ruleset_audtt_fail.

The rule set must be defined as is_static.

The rule set parameter eval_options must be set to dbms_macutl.g_ruleset_eval_all.

The rule set parameter audit_options must be set to dbms_macutl.g_buleset_audit_fail + DBMS MACUTL.G RULESET AUDIT SUCCESS.

NEW QUESTION 16
You are required to remove embedded passwords from scripts that connect to database instances. Which tool can be used to implement this requirement?

orapki

netca

dbca

netmgr

mkstore

owm

NEW QUESTION 17
What Is the first step when analyzing security within a database?

Encrypt tablespaces using Transparent Data Encryption

Configure and enable Database Vault

Execute Database Security Assessment Tool (DBSAT)

Mask nonproduction data using Data Masking & Subsetting

Deploy Oracle Key Vault

Create a Data Redaction Policy for your most sensitive tables

NEW QUESTION 18
You are connected to an Oracle database Instance as a user with privileges to query the hr.employees table.
You are not exempt from any reduction policies.
Examine this query and result:

You implement this Data Redaction policy:

You re-execute the select statement.
What is the result?
A)

B)

C)

D)

E)

Option A

Option B

Option C

Option D

Option E

NEW QUESTION 19
You connect to the database Instance over a network to change the password of user scott.
Which two methods avoid the new password for user scott from being compromised by network sniffing?

Set the server side sqlnet.ora parameter SQLNET.CRYPTO_CHECKSUM_SERVER-REQUESTED.

Use ALTER USER SCOTT PASSWORD EXPIRE.

Set the server side sqlnet.ora parameter SQLNET.ENCRYPTION_SERVER=REQUESTED.

Use ALTER USER SCOTT IDENTIFIED BY VALUES ‘<value>*.

Use ALTER USER SCOTT IDENTIFIED BY <password>.

Use the SQL”PIus command password SCOTT.

NEW QUESTION 20
Database user SCOTT requires the privilege to select from all tables and you decide to configure this using a global role.
You have not yet configured the database with Enterprise User Security.
You plan to perform these steps:
1. create role GLOBAI._ROI.E identified globally;
2. grant select any table to GLODAL_COLE;
3. grant GLOBAL_ROLE to SCOTT;
What is the result?

All statements succeed even without Enterprise User Security configuration, but the role is not effective.

The third statement falls because global roles can be granted only by using a central authority.

The second statement falls because granting a global role can be completed only by using a central authority.

The first statement falls because the database Is not set up with Enterprise User Security.

NEW QUESTION 21
The utl_http package is used to invoke REST API’s to manage Oracle GoldenGate Microservlces Architecture components on host1.
You must use dbms__network_acl_admin to specify a range of ports to be used when connecting to host01.
What three requirements must you consider?

The lower_port may be null but the upper_port must specify a value.

The port range must not overlap with any other port ranges for host01.

upper_port must be greater than or equal to lower_port.

The port range may not include values larger than or equal to 1024.

Both lower_port and upper_port must not be NULL

The upper_port may be null but the lower_port must specify a value.

NEW QUESTION 22
You configured Kerberos authentication for databases running on servers A and B.
However a database link connecting the database on server A to the database on server B fails with ORA-12638 Credential retrieval failed.
Where must you make a change to sqlnet.ora to allow the database link to use its stored credentials Instead of trying to use Kerberos?

on client side of server B

on client side of server A

on server side of server B

on server side of server A

NEW QUESTION 23
A policy predicate function Is associated with an enabled Virtual Private Database (VPD) policy for a table.
Which two arguments are passed to the function?

the table name

the schema owning the table

the policy type

the policy name

the policy group to which the policy belongs

NEW QUESTION 24
Which two statements are true about Database Vault rules and rule sets?

You must create a rule set for a rule, before creating the rule.

You con reference Oracle-supplied rules In rule sets that you create.

If a rule set Is disabled. It Is evaluated to true without having Its rules evaluated.

A given rule can be added to only one rule set.

Deleting a rule set also deletes all the rules that have been added to It.

NEW QUESTION 25
Which two are true about Database Privilege Analysis?

It can be used after you install the Oracle Database without any additional database configuration steps.

It must have the Database Vault option enabled.

Privilege analysis data for dropped objects are kept.

If a privilege is captured during run time, it is saved under the run-time capture name.

It shows the grant paths to the privileges and suggests which grant path to keep.

It cannot be used to capture the privileges that have been exercised on precompiled database objects.

NEW QUESTION 26
For which two reasons would you define Network ACLs?

for configuring fine-grained access control for users and roles that need to access external network services from the database

for configuring fine-grained access control to Oracle wallets to make HTTP requests that require password or client-certificate authentication

to create auditing policies regarding the usage of network services from the database

to block network attacks or denial of service attacks directed at the database

to Improve the performance of the database applications that require access to remote network services

NEW QUESTION 27
Which two are true about auditing in an Oracle Database?

SYS logon operations are always audited In unified auditing.

All SYS operations are audited by default in unified auditing.

No SYS operations are audited by default In unified auditing.

SYS logon operations are always audited in mixed mode auditing.

No SYS operations are audited if audit_sys_operations is set on false in unified auditing.

No SYS operations are audited if audit_sys_operations is set on false in mixed mode auditing.

NEW QUESTION 28
An audit administrator wants to log Client Context variables In the audit trail.
Examine this query and the output:

AUDIT CONTEXT NAMESPACE hr_Ct:x ATTRIBUTES hr_app_id NAMESPACE USERENV ATTRIBUTES ALL BY hr;

AUDIT CONTEXT NAMESPACE hr_ctx ATTRIBUTES hr_app_id NAMESPACE USERENV ATTRIBUTES current:_user( db_name BY hr;

CREATE AUDIT POLICY hr_omp_pol ACTIONS UPDATE ON hr.employoes;

AUDIT CONTEXT NAMESPACE hr_ctx ATTRIBUTES hr_app_id, current_user, db_name BY hr

AUDIT POLICY hr_emp_pol BY hr;

CREATE AUDIT POLICY hr_emp_pol ACTIONS SELECT ON hr. employees;

AUDIT POLICY hr_emp_pol EXCEPT hr;

NEW QUESTION 29
Examine this command:

Which two statements are true?

Opening the software keystore from remote computers is possible.

Opening the software keystore from the local computer Is possible.

Opening the software keystore from remote computers is not possible.

Opening the software keystore must always be done manually on the local computer.

Opening the software keystore from the local computer is not possible.

NEW QUESTION 30
Which two statements are true about Valid Node Checking for Registration (VNCR)?

It denies Instance registration through IPC.

It can only be used with Oracle RAC.

It enforces the Listener connectivity through TCPS.

It is a replacement for Class of Secure Transport (COST).

It restricts specific instances from registering with the Listener.

NEW QUESTION 31
User jane must report on who has done RMAN backups on a database that has Unified Auditing enabled.
What is the minimum that must be done to allow JANE to generate these reports?

Use create audit policy.

Use grant audit_admin to Jane;

Use grant audit_viewer to Jane;

Use alter system set AUDIT_SYS_OPERATION= TRUE;

NEW QUESTION 32
For which two are Oracle Label Security policies not applied?

partitioned tables

direct path exports

users with the SYSDA privilege other than sys

objects in the SYS schema

conventional path exports

NEW QUESTION 33
Which three are part of an access control list (ACL) when using Real Application Security?

privileges

schemas

data realms

column constraints

policies

data realm constraints

roles

NEW QUESTION 34
Database Vault Is configured and enabled In the Oracle database.
Three users are granted the dba, dv_omneb, and dv_acctmgb roles.
There is a requirement to create a user who can:
1. Connect to the database Instance
2. Select from dictionary views
Which users can complete the operation to meet the requirement?

users granted DV_ACCTMGR and DV_OWNER roles

users granted DV_OWNER role

users granted DBA and DV_OWNER roles

users granted DV_ACCTMGR and DBA roles

NEW QUESTION 35
Which two statements are true about column-level transparent data encryption?

It can bo used for tables in encrypted tablcspaces.

encrypted columns cannot have an Index.

All encrypted columns of a table use the same encryption key.

Column level encrypted data remains encrypted in the buffer cache.

Column-level encryption keys are not encrypted by the master key.

NEW QUESTION 36
Which four products, features, or methods can help facilitate compliance with various privacy-related regulatory requirements such as PCI-DSS and the EU GDPR?

Data Redaction

Data Guard

Real Application Clusters

Transparent Data Encryption

Data Masking & Subsetting

Table Partitioning

Database Vault

GoldenGate

Oracle Sharding

Real Application Testing

Loading …

How to book the Oracle Database Security Administration Exam Number: 1Z0-116

You can plan the test whenever at Pearson VUE. You can pay straightforwardly from a charge card or reclaim a voucher bought from Oracle.

Certification Path for Oracle Database Security Administration Exam Number: 1Z0-116

Oracle Database Security Administration Exam Number: 1Z0-116 is an advanced exam. Successful completion by candidates of Data Administrator I and II will allow them to achieve Oracle Certified Database Security Expert status.

Latest Oracle 1Z0-116 Dumps with Test Engine and PDF: https://www.dumpstests.com/1Z0-116-latest-test-dumps.html