May 12, 2022 Detailed New 1Z0-116 Exam Questions for Concept Clearance [Q53-Q75]

Rate this post

May 12, 2022 Detailed New 1Z0-116 Exam Questions for Concept Clearance

1Z0-116 Exam Preparation Material with New 1Z0-116 Dumps Questions.

QUESTION 53
Examine this command that Is executed:

What is the result?

The salary column is fine grain audited.

The salary column is nullified when queried by the database users.

The bind variables for the salary column are masked In trace files and vS views.

The salary column is encrypted using TDE column encryption.

The salary column is redacted when queried by database users.

QUESTION 54
You configured Kerberos authentication for databases running on servers A and B.
However a database link connecting the database on server A to the database on server B fails with ORA-12638 Credential retrieval failed.
Where must you make a change to sqlnet.ora to allow the database link to use its stored credentials Instead of trying to use Kerberos?

on client side of server B

on client side of server A

on server side of server B

on server side of server A

QUESTION 55
Which two authorization rights does a Database Vault realm owner have that a realm participant does not have?

Add or remove realm-protected objects to or from the reaim.

Grant or revoke privileges on realm-protected objects to or from other users.

Add or remove realm-secured database roles to or from the realm.

Grant or revoke system privileges to access objects protected by the realm.

Add or remove participants to or from the realm.

Add or remove owners to or from the realm.

Grant or revoke realm-secured database roles.

QUESTION 56
Examine these commands and responses:

Which object privilege must be granted to allow execution of the stored procedure?

grant EXECUTE ON MARY.PBOC2 Co U1;

grant INHERIT PRIVILEGES ON USER U1 TO MARY;

grant INHERIT PRIVILEGES ON USER MARY TO Ul ;

grant EXECUTE ON Ul.PROC2 TO MARY;

QUESTION 57
Examine this query:

Why is this account in this status?

The account uses a global authentication.

The user exceeded the value of FAILED_LOGIN _ATTEMPTS and its password has not been reset yet.

The account has the SYSDBA privilege granted.

The user exceeded the value of PASSWORD_LIFE_TIME and Its password has not been reset yet

The ACCOUNTS_ STATUS column is not updated until the user attempts to log in.

QUESTION 58
You check the Risk Matrix of the latest Critical Patch Update (CPU).
One of the ” Common Vulnerability and Exposure” reports (CVEs) has Base Score that is above 9 in the Risk Matrix.
Which one is not a supported method to address this CVE?

Request a one off patch exception from Oracle Support.

Implement a workaround recommended by Oracle Support.

Upgrade to a new Release.

Install a new Release Update.

Install a new Release Update Revision.

QUESTION 59
Which two privileges can be restricted at the column level?

SELECT

INSERT

REVOKE

UPDATE

GRANT

DELETE

QUESTION 60
You export and Import a table’s data using Data Pump connected as a user who Is assigned DBA role with default privileges.
There is a data redaction policy on the table.
Which two statements are true about the redaction policy?

The actual data in the tables is copied to the Data Pump target system with the redaction policy applied.

The policy Is not Included In export and Import operation.

The actual data in the tables is copied to the Data Pump target system without being redacted.

The policy Is Included In the export and Import operation but is not applied by default to the objects In the target system.

The policy is included in the export and import operation and applied by default to the objects in the target system.

QUESTION 61
Which type of attack attempts to find data by repeatedly trying similar SQL with a modified predicate?

timing attack

Inference attack

data remanence attack

cache attack

side-channel attack

known-plaintext attack

QUESTION 62
Which CVSS Version 3.1 metric indicates how close an attacker needs to be to the vulnerable component?

Privileges Required

User Interaction

Attack Vector

Scope

Availability

Attack Complexity

QUESTION 63
You must mask data consistently In three database copies such that data relations across the databases remain In place.
Which Data Masking Format allows this?

Shuffle

Auto Mask

Array List

Substitute

Random Strings

QUESTION 64
Which two statements are true about running the Oracle Database Security Assessment Tool (DBSAT) Collector?

It runs only on UNIX/Linux systems.

It must connect to the database using a SYSDBA connection.

It must be run by an OS user with read permissions on files and directories under ORACLE_HOME.

It runs only on Windows systems.

It must be run on the server that contains the database.

QUESTION 65
Which statement is true about Network ACLs?

They ate used to control access by users to external network services and resources from the database through PL/SQL.

They are used to provide access to database packages.

They are used to control the usage of UTL_TCP, ITL_HTTP, and UTL_INADDR.

They are used to configure proxy for PL/SQL network utility packages.

QUESTION 66
As the SYSKM user you must create the password-based keystore, which will be used for TDE. Examine this list:

Identify the sequence that Oracle uses to search for the keystore and its location.

3,5,2,4,1

1,4,5,2

1,2,5,4

1,2,3,5

QUESTION 67
When creating labels using Oracle Label Security, which is required?

level and group

level, compartment, and group

compartment

group

level

compartment and group

level and compartment

QUESTION 68
You must rekey encrypted sensitive credential data In your database.
You run the command alter database dictionary rekey credentials.
Which three options ate true about the bkkey process?

Credential Data Is automatically encrypted using aes2S6.

The credential data encryption process does not de-obfuscate the obfuscated passwords before re-encrypts begin.

Both sys. links and sys . SCHEDULER_CREDENTIAL tables are rekeyed.

The rekey process prompts the user to provide a new key algorithm If needed.

The process of rekeylng does not automatically open the keystore.

The rekey process only applies to the sys.ltnks CREDENTUIALS table.

The rekey process only applies to the SYS.SCHEDULES$ credential table.

QUESTION 69
Database Vault is configured and enabled in the database. You create a rule set to enforce security on the hr. employees table.
Examine these requirements:
1. Users working In hr department are allowed to view all rows In HR.EMPLOYEES.
2. hr managers are allowed to view, update, and delete data in In HR.EMPLOYEES.
3. Audit records are to be collected for every evaluation of the rule set.
Which two options are true when creating the rule set?

One rule set contains two rules OR’ed together.

The rule set parameter audit_options must be set to dbms_macutl.g_ruleset_audtt_fail.

The rule set must be defined as is_static.

The rule set parameter eval_options must be set to dbms_macutl.g_ruleset_eval_all.

The rule set parameter audit_options must be set to dbms_macutl.g_buleset_audit_fail + DBMS MACUTL.G RULESET AUDIT SUCCESS.

QUESTION 70
The utl_http package is used to invoke REST API’s to manage Oracle GoldenGate Microservlces Architecture components on host1.
You must use dbms__network_acl_admin to specify a range of ports to be used when connecting to host01.
What three requirements must you consider?

The lower_port may be null but the upper_port must specify a value.

The port range must not overlap with any other port ranges for host01.

upper_port must be greater than or equal to lower_port.

The port range may not include values larger than or equal to 1024.

Both lower_port and upper_port must not be NULL

The upper_port may be null but the lower_port must specify a value.

QUESTION 71
Data Masking uses a combination of data patterns to discover sensitive dat a. Which three items are used?

column names

encrypted masks

column privileges

table privileges

column comments

column data

user-defined functions

QUESTION 72
Which four products, features, or methods can help facilitate compliance with various privacy-related regulatory requirements such as PCI-DSS and the EU GDPR?

Data Redaction

Data Guard

Real Application Clusters

Transparent Data Encryption

Data Masking & Subsetting

Table Partitioning

Database Vault

GoldenGate

Oracle Sharding

Real Application Testing

QUESTION 73
Database user SCOTT requires the privilege to select from all tables and you decide to configure this using a global role.
You have not yet configured the database with Enterprise User Security.
You plan to perform these steps:
1. create role GLOBAI._ROI.E identified globally;
2. grant select any table to GLODAL_COLE;
3. grant GLOBAL_ROLE to SCOTT;
What is the result?

All statements succeed even without Enterprise User Security configuration, but the role is not effective.

The third statement falls because global roles can be granted only by using a central authority.

The second statement falls because granting a global role can be completed only by using a central authority.

The first statement falls because the database Is not set up with Enterprise User Security.

QUESTION 74
While upgrading your Oracle database server from 10g to 19c, you want to ensure that the users can still connect with their current passwords after the upgrade.
What do you need to set explicitly for this purpose?

SQLNET.ALLOWED_LOGON_VERSION_SERVER = 12a in the sqlnet.ora of the new database home

Client net. allowed_lLOGON_VERSION_client must be set to a lower value than the server SQLNET.ALLOWED LOGON. VEBSION .SERVER.

SQLNET.ALLOWED_LOGON_VERSION_client = 8 in the sqlnec.ora file of the client application.

SQLNET.ALLOWED_LOGON_VERSION_sebveb = 8 In the aqlnec.ora of the new database homo.

QUESTION 75
Database Vault is not used in your installation.
Why is a conventional secure application role more secure than a normal role?

It Is In effect only when configured as a default role for the user.

It requires a password to be set.

It can be set only by a package or procedure that is created with deflner’s rights.

It can be set only by users with the grant any bole privilege.

It can be set only by a package or procedure associated with the role definition.

1Z0-116 2022 Training With 92 QA’s: https://www.test4cram.com/1Z0-116_real-exam-dumps.html

Leave a Reply Cancel reply