nerdexam
Oracle

1Z0-052 · Question #19

Examine the following steps performed on a database instance: 1. The DBA grants the CREATE TABLE system privilege to the SKD user with ADMIN OPTION 2. The SKD user creates a table 3. The SKD user…

The correct answer is C. The table created by HR remains and HR still has the CREATE TABLE system privilege. Revoking a system privilege in Oracle does not cascade to users who received it from the grantee, so HR retains the CREATE TABLE privilege and the table HR already created remains intact.

Administering User Security

Question

Examine the following steps performed on a database instance: 1. The DBA grants the CREATE TABLE system privilege to the SKD user with ADMIN OPTION 2. The SKD user creates a table 3. The SKD user grants the CREATE TABLE system privilege to the HR user 4. The HR user creates a table 5. The DBA revokes the CREATE TABLE system privilege from SKD Which statement is true after step 5 is performed?

Options

  • AThe table created by SKD is not accessible and SKD cannot create new tables
  • BThe tables created by SKD and HR remain, but both cannot create new tables
  • CThe table created by HR remains and HR still has the CREATE TABLE system privilege
  • DThe table created by HR remains and HR can grant the CREATE TABLE system privilege to other users

How the community answered

(23 responses)
  • A
    4% (1)
  • B
    17% (4)
  • C
    65% (15)
  • D
    13% (3)

Why each option

Revoking a system privilege in Oracle does not cascade to users who received it from the grantee, so HR retains the CREATE TABLE privilege and the table HR already created remains intact.

AThe table created by SKD is not accessible and SKD cannot create new tables

SKD's existing table remains accessible after the revoke because privilege revocation in Oracle does not retroactively remove objects already created; only SKD's ability to create future tables is eliminated.

BThe tables created by SKD and HR remain, but both cannot create new tables

HR retains CREATE TABLE because system privilege revocations are non-cascading in Oracle; the revoke from SKD has no effect on HR's grant, so HR can still create new tables.

CThe table created by HR remains and HR still has the CREATE TABLE system privilegeCorrect

Oracle system privilege revocations are non-cascading - unlike object privilege revocations - so when the DBA revokes CREATE TABLE from SKD, HR's independently held grant remains valid. Additionally, revoking a privilege never drops objects already created using that privilege, so HR's table is unaffected.

DThe table created by HR remains and HR can grant the CREATE TABLE system privilege to other users

The question states only that SKD granted CREATE TABLE to HR - not WITH ADMIN OPTION - so HR does not have the right to further grant the privilege to other users.

Concept tested: Non-cascading revocation of Oracle system privileges

Source: https://docs.oracle.com/en/database/oracle/oracle-database/19/dbseg/configuring-privilege-and-role-authorization.html

Topics

#ADMIN OPTION#privilege revocation#cascading revoke#system privileges

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 1Z0-052 Practice