exam questions

Exam 1z0-082 All Questions

View all questions & answers for the 1z0-082 exam

Exam 1z0-082 topic 1 question 63 discussion

Actual exam question from Oracle's 1z0-082
Question #: 63
Topic #: 1
[All 1z0-082 Questions]

You want to apply the principle of Least Privilege in all your live databases.
One of your requirements is to revoke unnecessary privileges from all users who have them using Privilege Analysis.
Which three types of analyses can be done using the DBMS_PRIVILEGE_CAPTURE package? (Choose three.)

  • A. analysis of all privileges used by all users including administrative users in the database
  • B. analysis of all privileges used by all users but excluding administrative users in the database
  • C. analysis of privileges that a user has on their own schema objects that they did not use
  • D. analysis of privileges that a user has on their own schema objects that they did use
  • E. analysis of privileges granted directly to a role that are then used by a user who has been granted that role
  • F. analysis of privileges granted indirectly to a role that are then used by a user who has been granted that role
Show Suggested Answer Hide Answer
Suggested Answer: ACF 🗳️
Reference:
https://docs.oracle.com/database/121/ARPLS/d_priv_prof.htm#ARPLS74328

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
ama
Highly Voted 4 years, 5 months ago
i would say B, E , F are correct!
upvoted 20 times
Ekos
4 years, 1 month ago
i agree
upvoted 2 times
...
Yema
3 years, 10 months ago
I agree also http://dbaparadise.com/2019/02/7-steps-to-setup-privilege-analysis/
upvoted 1 times
...
Fw1z
3 years, 6 months ago
b is wrong only SYS!!!!!!
upvoted 2 times
...
...
Guhborges
Highly Voted 3 years, 1 month ago
A - E - F CORRECT!!!! A - Right - We can analyze the administrative user, the oracle just excludes the SYS user B - Wrong, oracle does not delete administrative user, like question A, only SYS user C - Wrong - We cannot analyze the permission of the scheme itself D - Wrong - We cannot analyze the privilege of our schema E - Right - we can analyze the permission that was given directly. F - Right - we can analyze the permission that was given indirectly.
upvoted 5 times
...
Rafafm
Most Recent 2 months, 3 weeks ago
B, E, F is correct!
upvoted 1 times
...
antonica
10 months ago
a tip, this procedure analized if you had used a privilege not is you have.. "You then can determine the privileges that your users are using and not using." what do you think?
upvoted 1 times
antonica
10 months ago
133.1 DBMS_PRIVILEGE_CAPTURE Overview Database privilege analysis enables you to create a policy that records the usage of system and object privileges that have been granted to users. You then can determine the privileges that your users are using and not using. From there, you can revoke any unused privileges, thereby reducing the number of excess privilege grants for users.
upvoted 1 times
...
...
guretto
1 year, 2 months ago
SYS, SYSTEM, SYSBACKUP, SYSDG, SYSKM, SYSRAC, SYSMAN, and DBSNMP are administrative users as reported in 19c Database Administrator’s Guide, Par. 7.5 (Predefined User Accounts): Furthermore (19c Database PL/SQL Packages and Types Reference) given that DBMS_PRIVILEGE_CAPTURE.CREATE_CAPTURE "Analyzes all privilege use, except privileges used by the SYS user.", it follows that A cannot be right since SYS is included in "administrative users" The DBMS_PRIVILEGE_CAPTURE works on database, role and context level. Therefore B is right and C, D are not. E, F are right as "When using role-based analysis for the CREATE_CAPTURE procedure, privilege use is analyzed even if the privilege is indirectly granted to the specified role."
upvoted 1 times
...
zouve
1 year, 4 months ago
Selected Answer: BEF
https://www.databasejournal.com/oracle/oracle-database-12c-new-privilege-management-features/
upvoted 2 times
...
auwia
1 year, 6 months ago
Selected Answer: CDF
Provided answer are wrong. C, D, and F the correct answer, everything described here: https://docs.oracle.com/en/database/oracle/oracle-database/19/arpls/DBMS_PRIVILEGE_CAPTURE.html
upvoted 2 times
...
auwia
1 year, 6 months ago
A. analysis of all privileges used by all users including administrative users in the database --> False, SYS is excluded B. analysis of all privileges used by all users but excluding administrative users in the database -->False, SYSTEM is included. C. analysis of privileges that a user has on their own schema objects that they did not use D. analysis of privileges that a user has on their own schema objects that they did use E. analysis of privileges granted directly to a role that are then used by a user who has been granted that role F. analysis of privileges granted indirectly to a role that are then used by a user who has been granted that role
upvoted 1 times
auwia
1 year, 6 months ago
F a TRUE
upvoted 2 times
auwia
1 year, 6 months ago
I would say C, D, and F ; but D makes no sense, but it's possible to do (as the question is asking).
upvoted 2 times
auwia
1 year, 6 months ago
D makes sense! :-) https://docs.oracle.com/en/database/oracle/oracle-database/19/arpls/DBMS_PRIVILEGE_CAPTURE.html 131.1 DBMS_PRIVILEGE_CAPTURE Overview Database privilege analysis enables you to create a policy that records the usage of system and object privileges that have been granted to users. You then can determine the privileges that your users are using and not using. From there, you can revoke any unused privileges, thereby reducing the number of excess privilege grants for users.
upvoted 2 times
auwia
1 year, 6 months ago
F confirmed by this: Usage Notes When using role-based analysis for the CREATE_CAPTURE procedure, privilege use is analyzed even if the privilege is indirectly granted to the specified role. For example, say role R2 contains role R1, and R1 contains privilege P1. If the privilege policy includes only role R2, any use of the P1 privilege is still analyzed, as privilege P1 is an indirect part of role R2.
upvoted 2 times
...
...
...
...
...
Darkseid1231
1 year, 6 months ago
A C E is the correct answer
upvoted 2 times
...
Kuraudio
2 years, 1 month ago
A says: " including administrative users". The definition of administrative users is here: https://docs.oracle.com/database/121/ADMQS/GUID-CF1CD853-AF15-41EC-BC80-61918C73FDB5.htm#ADMQS12003 So as SYS is excluded from the analysis, I can say A is wrong.
upvoted 1 times
...
XhostSI
2 years, 11 months ago
A. An undo segment may be used by multiple transactions simultaneously - True B. Undo segments can wrap around to the first extent when a transaction fills the last extent of the undo segment - True (undo segment act as a circular buffer) C. Undo segments have a minimum of three extents - False (each segment has a minimum of two extents) D. Undo segments can extend when a transaction fills the last extent of the undo segment - True (Undo tablespace are locally managed with auto extent allocation ) E. A single transaction may use multiple undo segments simultaneously - False F. Undo segments must be stored in a BIGFILE tablespace - False G. Undo segments must be stored in a SMALLFILE tablespace - False (DBCA automatically creates a smallfile undo tablespece, but it can be configured as bigfile table space as well) So correct answers are: A, B, D
upvoted 1 times
hadiwuu
1 year, 7 months ago
HOLD UP!
upvoted 1 times
...
...
Borislone
3 years, 6 months ago
sorry BEF is definitely correct
upvoted 2 times
...
Borislone
3 years, 6 months ago
the correct answer is AEF
upvoted 2 times
...
nobody347
3 years, 6 months ago
Anybody have answer for this question after exam?
upvoted 1 times
...
ama
4 years, 5 months ago
we can analyze all users except SYS, i dunno but answer B saying all users except administrative Users! You cannot analyze the privileges of the SYS user. https://docs.oracle.com/en/database/oracle/oracle-database/19/dbseg/performing-privilege-analysis-find-privilege-use.html#GUID-AD683DDB-D345-4702-B1F4-37B79F276B66
upvoted 3 times
KtNow
4 years ago
administrative users - SYS, SYSTEM. DBMS_PRIVILEGE_CAPTURE Analyzes all privilege use, except privileges used by the SYS (ONLY SYS!!!!!) DEF sounds right
upvoted 3 times
Guhborges
3 years, 1 month ago
You are wrong bout the user SYSTEM, we can't analyze only the user SYS SQL> BEGIN DBMS_PRIVILEGE_CAPTURE.CREATE_CAPTURE( name => 'validando_permissao', description => 'Analyzes system privilege use', type => DBMS_PRIVILEGE_CAPTURE.G_CONTEXT, condition => 'SYS_CONTEXT(''USERENV'', ''SESSION_USER'')=''system'''); END; / 2 3 4 5 6 7 8 9 10 11 12 13 PL/SQL procedure successfully completed.
upvoted 1 times
...
leozanon94
3 years, 4 months ago
DEF sounds right also for me. A and B: are false for administrative users. C: is false cause this procedure doesn't analyze privileges not used. D: is true cause you can set the type as G_DATABASE --> : "Captures all privilege use in the database, except privileges used by the SYS user." So including privileges in own schema. E and F are true cause it analyzes privileges directly and indirectly https://docs.oracle.com/en/database/oracle/oracle-database/21/arpls/DBMS_PRIVILEGE_CAPTURE.html#GUID-8E855D12-AF7B-4995-878B-B954FA92FF08
upvoted 2 times
...
...
...
ama
4 years, 5 months ago
C, D are wrong! Privileges in own Schema can not be analyzed!
upvoted 1 times
...
NowOrNever
4 years, 5 months ago
DEF - i think Database privilege analysis enables you to create a policy that records the usage of system and object privileges that have been granted to users. You then can determine the privileges that your users are using and not using. From there, you can revoke any unused privileges, thereby reducing the number of excess privilege grants for users. C- you can analize only used privileges, but then determine the unsued privileges F - When using role-based analysis for the CREATE_CAPTURE procedure, privilege use is analyzed even if the privilege is indirectly granted to the specified role.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago