Oracle 1Z0-116 Certification Sample Questions and Answers

1Z0-116 PDF, 1Z0-116 Dumps PDF Free Download, 1Z0-116 Latest Dumps Free PDF, Database Security Administration PDF DumpsThe Oracle Database Security Administration (1Z0-116) Sample Question Set is designed to help you prepare for the Oracle Certified Professional Oracle Database Security Expert certification exam. To become familiar with the actual Oracle Certification exam environment, we suggest you try our Sample Oracle 1Z0-116 Certification Practice Exam.

This Oracle Database Security Administration certification sample practice test and sample question set are designed for evaluation purposes only. If you want to test your Oracle 1Z0-116 knowledge to identify your areas of improvement and get familiar with the actual exam format, we suggest you prepare with the Premium Oracle Certified Professional Oracle Database Security Expert Certification Practice Exam. Our team of Oracle Database experts has designed Questions-Answers for this premium practice exam by collecting inputs from recently certified candidates. Our premium Oracle 1Z0-116 certification practice exam will boost your confidence as well as your actual Oracle Database Security Administration exam result.

Oracle 1Z0-116 Sample Questions:

01. Which pair of profile parameters together lock an account after too many failed password attempts and govern how long the account then stays locked?
a) FAILED_LOGIN_ATTEMPTS and PASSWORD_LOCK_TIME
b) PASSWORD_LIFE_TIME and PASSWORD_GRACE_TIME
c) PASSWORD_REUSE_TIME and PASSWORD_REUSE_MAX
d) SEC_MAX_FAILED_LOGIN_ATTEMPTS and SEC_CASE_SENSITIVE_LOGON
 
02. How do the profile parameters PASSWORD_REUSE_TIME and PASSWORD_REUSE_MAX work together to restrict reusing an old password?
a) PASSWORD_REUSE_MAX sets the number of days that must pass before a password can be reused, and PASSWORD_REUSE_TIME caps the maximum allowed password length, so the two combine a delay with a size rule.
b) Both parameters must be left at UNLIMITED before any reuse restriction can take effect, and setting either one to a finite value would simply disable the password history the profile otherwise enforces.
c) PASSWORD_REUSE_TIME restricts reuse by elapsed time and PASSWORD_REUSE_MAX restricts it by the number of intervening password changes, and both conditions generally must be met before an old password may be reused.
d) PASSWORD_REUSE_TIME applies only to accounts that also have a PASSWORD_VERIFY_FUNCTION assigned, and it is otherwise ignored, so reuse and complexity are evaluated as one combined check.
 
03. Within a realm's authorization model, what distinguishes a realm owner from a realm participant?
a) A participant may add and remove other authorized users, while an owner may only exercise privileges on the protected objects
b) A participant may grant or revoke realm-secured roles, while an owner is limited to reading the protected data
c) Only a participant is subject to the realm's command rules, while an owner is entirely exempt from those rules
d) Both may use their privileges on realm-protected objects, but only an owner can grant or revoke realm authorization to others
 
04. What does the REMOTE_LOGIN_PASSWORDFILE initialization parameter control?
a) Whether the instance uses a password file for privileged authentication and whether that file may be bound to more than one database.
b) Whether ordinary, non-administrative users may connect over the network using operating-system authentication, and whether that same behavior is permitted for remote client sessions to the instance.
c) Whether password case sensitivity is enforced at logon and whether the resulting verifier is stored for every database user account.
d) Whether the secure external password store is consulted before the client prompts, and whether its wallet credentials override a typed user name and password.
 
05. In a middle-tier connection pool where many end users share one database session over time, which call stamps the current session with the individual end user's identity so it appears in USERENV.CLIENT_IDENTIFIER and audit records?
a) DBMS_SESSION.SET_CONTEXT
b) DBMS_SESSION.SET_ROLE
c) DBMS_SESSION.SET_IDENTIFIER
d) DBMS_APPLICATION_INFO.SET_MODULE
 
06. After a Privilege Analysis capture window ends, an administrator generates the analysis results and reviews the list of granted-but-unused privileges.
What does Privilege Analysis do with those unused grants?
a) It automatically revokes each unused privilege once the capture window is disabled
b) It reports them as used versus unused, leaving the administrator to revoke them manually
c) It relocates the unused privileges into a Database Vault realm for later review
d) It disables the affected roles until each privilege is formally re-requested
 
07. Security requires that a role be enablable only when the session originates from a specific application-server subnet and module, with the deciding logic held centrally in the database and never exposed to end users.
Which role type meets this requirement?
a) A password-protected role whose password is embedded in the application connection code
b) A global role granted to the enterprise user through Enterprise User Security
c) A default role automatically enabled at logon for every session of the user
d) A secure application role whose enabling procedure checks the IP and module context
 
08. A three-tier HR application connects to the database through a shared pool account APP_POOL. Auditors report that every audited action shows APP_POOL as the user, making it impossible to trace an action to an individual employee. The application already authenticates employees at the middle tier.
What is the most appropriate change to attribute each audited action to the real employee without giving each employee a database account?
a) Switch the pool so each employee authenticates with a separate database password
b) Grant DV_ACCTMGR to APP_POOL so it can create per-employee accounts on demand
c) Have the application call DBMS_SESSION.SET_IDENTIFIER with the employee's id for each request
d) Enable a global application context and read it with SYS_CONTEXT in each audit record
 
09. Before a hardening review, an auditor needs to identify accounts that exist but appear dormant, so they can be locked or expired.
Which source most directly reveals when each account last authenticated?
a) The V$SESSION view, which lists only the sessions currently connected to the running instance.
b) The DBA_USERS view, whose LAST_LOGIN column records each account's most recent authentication time.
c) The DBA_ROLE_PRIVS view, which lists the roles granted to each user.
d) The UNIFIED_AUDIT_TRAIL view, whose purge job is scheduled through DBMS_AUDIT_MGMT to manage retention.
 
10. Management asks for a control that helps reduce the privileges database users hold to only what they need, and wants to understand what Privilege Analysis delivers compared with adjacent controls.
Which statements correctly describe Privilege Analysis?
(Choose two.)
a) It produces a used-versus-granted inventory that supports revoking privileges and roles that went unused
b) It prevents SYSDBA from selecting application data once a capture has been enabled
c) It captures privilege and role usage over a defined window rather than blocking any access
d) It continuously writes every privilege use to a persistent trail retained for compliance and audit
e) It enforces separation of duties by splitting the DV_OWNER and DV_ACCTMGR responsibilities across administrators
f) It transparently appends a predicate to each query to enforce row-level access restrictions

Answers:

Question: 01

Answer: a

Question: 02

Answer: c

Question: 03

Answer: d

Question: 04

Answer: a

Question: 05

Answer: c

Question: 06

Answer: b

Question: 07

Answer: d

Question: 08

Answer: c

Question: 09

Answer: b

Question: 10

Answer: a, c

 

Rating: 4.9 / 5 (79 votes)