1Z0-052 Question #28: Real Exam Question with Answer & Explanation

Question

Options

• AOne audit record is created for every successful DROP TABLE command executed in the session
• BOne audit record is generated for the session when SCOTT grants the DROP ANY TABLE privilege
• COne audit record is created for the whole session if user SCOTT successfully drops one or more tables
• DOne audit record is created for every session of any other user in which a table owned by SCOTT is
• EOne audit record is created for every successful DROP TABLE command executed by any user to

Explanation

The BY SESSION clause in Oracle traditional auditing writes a single audit record for the entire session rather than one record per individual SQL execution.

Common mistakes.

• A. Generating one record per individual DROP TABLE statement describes BY ACCESS auditing behavior, not BY SESSION.
• B. The AUDIT statement here audits the DROP ANY TABLE system privilege usage (executing DROP TABLE), not the act of granting that privilege to another user.
• D. The BY scott clause audits actions performed BY the user SCOTT, not actions performed by other users against tables owned by SCOTT.
• E. BY scott restricts the audit scope to SCOTT's own sessions and actions, so drops performed by any other user are not captured by this audit definition.

Concept tested. Oracle traditional auditing BY SESSION vs BY ACCESS

Reference. https://docs.oracle.com/en/database/oracle/oracle-database/19/sqlrf/AUDIT-Traditional-Auditing.html

No community discussion yet for this question.