Deck 7: User Creation and Management

Question 1

Even if a set of privileges have been assigned to a role, it does not make it any easier for the DBA since the privileges will still need to be granted individually to the users.

Answer 1

False

Question 2

A user can be granted both system and object privileges in the same GRANT command.

Answer 2

False

Question 3

The GRANT clause of the GRANT command identifies the user who is granting a specific privilege.

Answer 3

False

Question 4

The PASSWORD EXPIRE option can be used to force a user to change his or her password at the time of the next login.

Question 5

The WITH GRANT OPTION is required to allow a user to grant the specified object privileges to other users.

Question 6

The ON clause of the GRANT command is used to specify which objects can be altered by the system privilege(s) specified in the command.

Question 7

The GRANT ROLE command is used to grant roles to users.

Question 8

Any privilege with the ANY keyword in it is automatically an object privilege.

Question 9

Authentication is the process of ensuring that the individuals trying to access the system are who they claim to be.

Question 10

An object privilege cannot be granted to a role with the WITH GRANT OPTION.

Question 11

The UPDATE ANY TABLE privilege is a system privilege.

Question 12

The system privileges available in Oracle11g can be viewed through the SYSTEM_PRIVILEGE_MAP data dictionary view.

Question 13

The INSERT, UPDATE, and DELETE object privileges can be applied to tables and views.

Question 14

User names in Oracle11g can consist of up to 30 characters.

Question 15

A role can be created with the CREATE ROLE command.

Question 16

Both system and object privileges can be granted with the GRANT command.

Question 17

Permissions allow users to execute certain SQL statements in Oracle11g.

Question 18

The password for a user can be set with the PASSWORD clause of the CREATE USER command.

Question 19

Object privileges allow users to perform DML operations on the data contained within database objects.

Question 20

A role can only be granted to other roles.

Question 21

The $\underline { FOR }$ clause of the GRANT command is used to specify the object to which the privilege applies. _________________________

Question 22

Once a privilege has been granted to a role, it cannot be revoked without re-creating the role.

Question 23

Use an asterisk in the REVOKE command to revoke all system and object privileges that have been assigned to a user.

Question 24

Even if users are $\underline { \text { authenticated } }$ by the operating system, the users are still required to have valid Oracle11g accounts to access the database. _________________________

Question 25

When revoking an object privilege that was issued with the WITH GRANT OPTION, the action will have a cascading effect because if that user granted the privilege to other users, the privilege will be revoked from them also.

Question 26

When a role is removed from the database, users will lose any privileges assigned to them through that role.

Question 27

A user can check all his or her currently enabled privileges by examining the SESSION_PRIVS view.

Question 28

A user can change his or her current $\underline { \text { PASSWORD } }$ using the PASSWORD command. _________________________

Question 29

The $\underline {\text { CHANGE PASSWORD }}$ option can be used to force a user to change the user password at the time of the next login. _________________________

Question 30

All privileges granted to a role must be revoked before the role can be removed from the database.

Question 31

The $\underline { \text { WITH ADMIN OPTION } }$ is required to enable the user to grant the specified object privileges to other users. _________________________

Question 32

A user can be assigned a default role that is automatically enabled whenever the user logs in to the database.

Question 33

$\underline { \text { Privileges } }$ allow Oracle11g users to execute certain SQL statements. _________________________

Question 34

Oracle11g uses a process known as $\underline { \text { selection } }$ to ensure that users are who they say they are. _________________________

Question 35

The ALTER USER command can be used to change the name assigned to a user account.

Question 36

All available system privileges for the current user can be displayed through the USER_SYS_PRIVS data dictionary view.

Question 37

The $\underline { \text { PASS IS } }$ clause of the CREATE USER command indicates the password assigned to a user. _________________________

Question 38

There are $\underline { 15 }$ object privileges available in Oracle11g. _________________________

Question 39

$\underline {\text { Obiect } }$ privileges allow users to execute DDL commands. _________________________

Question 40

A password cannot be assigned to a role, only to a user.

Question 41

Which of the following will revoke a user's object privileges?

A) REVOKE objectprivilege ON OBJECT objectname FROM username;
B) REVOKE objectprivilege ON objectname FROM username;
C) REVOKE objectprivilege ON objectname FOR username;
D) DROP objectprivilege ON objectname FROM username;

Question 42

The $\underline {\text { GENERATE ROLE } }$ command is used to add a new role to the database. _________________________

Question 43

A(n) $\underline {\text { group } }$ is a collection of privileges that can be granted to users. _________________________

Question 44

A user can query the $\underline {\text { ROLE SYS PRIVS }}$ data dictionary view to determine the privileges currently enabled for that user. _________________________

Question 45

Which of the following commands will change a user's password?

A) ALTER USERNAME username IDENTIFIED BY newpassword;
B) ALTER USER username IDENTITY newpassword;
C) ALTER USER username IDENTIFIED BY newpassword;
D) ALTER USERNAME username PASSWORD newpassword;

Question 46

The $\underline {\text { REVOKE }}$ command can be used to revoke system and object privileges, but not both in the same command. _________________________

Question 47

Which command will delete a user account from Oracle11g?

A) DELETE USER username;
B) DELETE USER username IDENTIFIED BY password;
C) DROP USER username IDENTIFIED BY password;
D) DROP USER username;

Question 48

When revoking a privilege that was issued with the WITH $\underline {\text { ADMIN }}$ OPTION, the action will have a cascading effect because if that user granted the privilege to other users, the privilege will be revoked from them also. _________________________

Question 49

A user can issue the $\underline {\text { ENABLE ROLE } }$ command to enable a role assigned to the user. _________________________

Question 50

All system and object privileges currently enabled for a user are displayed in the $\underline { \text { SESSION PRIVS } }$ view. _________________________

Question 51

A role can be removed from the database with the $\underline {\text { DELETE ROLE } }$ command. _________________________

Question 52

User names can consist of up to $\underline { 30 }$ characters and include the _, #, and $ symbols. _________________________

Question 53

The $\underline {\text { REVOKE }}$ command can be used to revoke a role from a user or another role. _________________________

Question 54

The ____ privilege will allow a user to connect to the Oracle11g database.

A) CREATE CONNECT
B) CREATE LOG
C) CREATE SESSION
D) CONNECT

Question 55

A system privilege can be taken away from a user through the $\underline { \text { UNGRANT } }$ command. _________________________

Question 56

Which of the following commands will allow a use to connect to the Oracle database?

A) GRANT SESSION TO username;
B) GRANT CREATE SESSION TO username;
C) GRANT CREATE SESSION FOR username;
D) GRANT CREATE LOGON TO username;

Question 57

The $\underline {\text { DEFAULT ROLE }}$ option of the ALTER USER command can be used to assign a default role to an existing user. _________________________

Question 58

A user can have several $\underline {\text { roles } }$ enabled at the same time. _________________________

Question 59

The $\underline { \text { WITH GRANT OPTION } }$ cannot be included when assigning privileges to roles. _________________________

Question 60

Which of the following commands is used to establish a user account?

A) CREATE NEW USER username IDENTIFIED BY password;
B) CREATE USERNAME username IDENTITY password;
C) CREATE USER username PASSWORD password;
D) CREATE USER username IDENTIFIED BY password;

Question 61

Which of the following commands can be used to revoke system or object privileges previously granted to a user?

A) UNGRANT
B) REMOVE
C) REVOKE
D) DROP

Question 62

There are ____ object privileges in Oracle11g.

A) 7
B) 13
C) 15
D) 25

Question 63

Which of the following commands will grant a role to a user?

A) GRANT rolename TO username;
B) GRANT ROLE rolename TO username;
C) GRANT rolename FOR username;
D) GRANT ROLE rolename FOR username;

Question 64

Which of the following will add a password to a role?

A) ALTER USER username SET ROLE rolename;
B) ALTER ROLE rolename SET USER username
C) ALTER USER username PASSWORD password;
D) ALTER ROLE rolename IDENTIFIED BY password;

Question 65

Which of the following are examples of object privileges?

A) SELECT and UPDATE
B) CREATE USER and CREATE TABLE
C) UPDATE ANY TABLE and ALTER ANY TABLE
D) all of the above

Question 66

Which of the following is not a method used by the Oracle11g database to prevent illegal access into the software?

A) automatic encryption of all user input
B) limiting user privileges to access data
C) authentication through user name and password
D) support for third-party security software and hardware devices

Question 67

Which of the following statements about privileges is incorrect?

A) There are five types of privileges, including DATATYPE, ROLETYPE, and USERNAME privileges.
B) System privileges allow access to the Oracle10g database and let users perform DDL operations such as CREATE, ALTER, and DROP on database objects.
C) Object privileges allow users to perform DML operations on the data contained within the database objects.
D) When a user creates an object, he or she automatically has all the object privileges associated with that object.

Question 68

Which of the following can be considered potential threats to an organization's data?

A) natural disaster
B) disgruntled employees
C) computer criminals
D) all of the above

Question 69

Which of the following privileges will allow a user to reference a table when creating a FOREIGN KEY constraint?

A) FOREIGN KEY
B) REFERENCES
C) SELECT
D) none of the above

Question 70

Which of the following commands can be used to assign a default role to a user?

A) ASSIGN
B) ROLE ASSIGNMENT
C) RESET DEFAULT
D) ALTER USER

Question 71

The ____ command is used to revoke a role.

A) REVOKE rolename FROM username;
B) ALTER rolename REVOKE username;
C) DROP rolename FROM username;
D) DROP rolename REVOKE FROM username;

Question 72

Which of the following clauses is required when granting an objective privilege to a user?

A) FOR
B) ON
C) OBJECT
D) none of the above

Question 73

Which command will remove an existing role from a database?

A) DROP rolename;
B) DROP ROLE rolename;
C) DELETE ROLE rolename;
D) DELETE rolename;

Question 74

Which command will establish a new role?

A) CREATE NEW ROLE rolename;
B) CREATE ROLE rolename;
C) CREATE ROLE rolename FOR username;
D) CREATE ROLE rolename WITH privilege;

Question 75

The ____ command will assign a default role to a user.

A) ALTER USER username MODIFY ROLE rolename;
B) ALTER DEFAULT ROLE rolename GRANT username;
C) ALTER ROLE rolename MODIFY USER username;
D) ALTER USER username DEFAULT ROLE rolename;

Question 76

The ____ keywords are used to grant object privileges to users and roles.

A) GRANT...FOR...TO
B) CREATE...WITH...TO
C) GRANT...WITH...TO
D) GRANT...ON...TO

Question 77

Which of the following refers to the process of ensuring that individuals trying to access the system are who they say they are, thus preventing them from illegally accessing data?

A) authorization
B) authentication
C) individualization
D) accreditation

Question 78

Which of the following commands will enable a role for a user?

A) ENABLE ROLE rolename;
B) ENABLE rolename;
C) SET ROLE rolename;
D) ROLE rolename;

Question 79

Which command will grant a system privilege to a user?

A) GRANT systemprivilege USERNAME username
B) GRANT PRIVILEGE systemprivilege TO username
C) GRANT systemprivilege TO username
D) GRANT systemprivilege ON username

Question 80

Which of the following statements about creating a username is incorrect?

A) A user name can contain up to 30 characters.
B) A user name can contain the symbols _ , $, and #.
C) A user name cannot contain numbers.
D) A user name can contain upper-case letters.