Question 1
In oracle, you can view all triggers created on a table by using the following data dictionary view.
a. TABLE_TRIGGERS
b. TRIGGER
c. DB_TRIGGERS
d. USER_TRIGGERS

Question 2
An advantage of using a smartphone over a PC is that smartphone operating systems (ex. Android and iOS) are immune to malware and cannon infected.
True
False

Quéstion 3
A SQL injection attack could delete entire tables in a database.
True
False

Question 4
With regards to Oracle auditing which statement is FALSE:
a. Oracle has twelve Data Manipulation Language (DML) events, also known as
rigger timings for INSERT, UPDATE
b. Column-level auditing is also known as fine-grained auditing (FGA).
c. Recording of the before value of the modified column(s) is referred to as column level auditing.

Question 5
Select all statements that are true of column-level security in Oracle. (Choose all that apply.)
VPD implements column-level security by using query re-writing.
Even if a query does not access a column defined in the VPD policy, the query is still re-written to restrict data.
You can apply column-level VPD policies to synonyms.
A column-level VPD can be implemented to restrict the number of rows returned from a query or return all rows, but mask or sanitize out restricted data.

Question 6
If the DBA wants to know all system privileges granted to user Scott, he or she can issue the following query (Cho
SELECT * FROM user_tab_privs_recd WHERE GRANTEE = 'SCOTT'
SELECT * FROM user_tab_privs_made WHERE GRANTEE = 'SCOTT'
SELECT * FROM dba_sys_privs WHERE GRANTEE = 'SCOTT'

Question 7
The Oracle DBA_AUDIT_TRAIL data dictionary view contains the audit trail data for traditional auditing.
True
False

Question 8
Unsuccessful deletions from any table can be audited.
True
False

Question 9
Select all of the statements that are true of auditing with Oracle. (Choose all that apply
In Oracle, use the AUDIT OFF command to disable audit commands.
With Oracle Traditional Auditing, the AUDIT ALL command audits all statements.
Audit records cannot be written to the audit trail if a transaction fails and is rolled back.
In Oracle objects can be audited but privileges cannot be audited.
In Oracle, you can audit statements by access or by session.

Quéstion 10
Authorization is the process that validates the identity of the user in order to permit access to the operating system.
True
False

Quéstion 11
Which operating system layer is considered an insecure link to information in the database (Choose one)?
Memory layer
Services layer
Files layer
All of the above

Question 12
The Oracle NOAUDIT command is used by the DBA to list all objects (such as tables or views) that have not been selected for auditing.
True
False

Question 13
Select all statements that are true of SQL Injection. (Choose all that apply.) SQL injection is used to exploit vulnerabilities in applications that pass code to a database.
There is no need to scrub user input in the application since this is always handled by the database.
The potential for SQL injection is created whenever SQL statements are created dynamically in an application.
It is a good security practice to return generic error messages from your application rather than allowing a user to see database or vend errors.

Question 15
Which of the following statements regarding column-level VPD with column masking behavior is true for a query that references columns containing sensitive information?
a. Defining column masking behavior will hide all data in security-relevant columns.
b. Defining column masking behavior will return all rows, but the security-relevant columns will display as NULL values.
c. Defining column masking behavior will restrict the number of rows returned in accordance with VPD policy.

Question 16
Which of the following statements is FALSE? (Choose all that apply.)
Setting AUDIT_TRAIL value to "DB" will write audit records to the database.
Setting AUDIT_TRAIL value to "OS" will write audit records to the operating system.
AUDIT_TRAIL parameter is used to enable fine-grained auditing.
Setting AUDIT_TRAIL - value to "TRUE" will write audit records to the database.

Question 17
Spoofing is the act of installing malware on a system that stops or limits users from accessing their computer. The malware then holds your computer or files for ransom.
True
False

Quéstion 19
You can expire and lock an account using a statement like this: ALTER USER PASSWORD EXPIRE ACCOUNT LOCK;
True
False

Question 1 In oracle, you can view all triggers created on a table...