nerdexam
Oracle

1Z0-060 · Question #211

Your multitenant container database (CDB) contains several pluggable databases (PDBs). A common user C##A_ADMIN, is created with connect privileges. You execute this command from the root container…

The correct answer is C. The command executes successfully, enabling the C##A_ADMIN user to create tablespaces in the. Granting a privilege to a common user from the root container without a CONTAINER clause defaults to CONTAINER=CURRENT, so the privilege is scoped to the root only and the command succeeds.

New Features for Security

Question

Your multitenant container database (CDB) contains several pluggable databases (PDBs). A common user C##A_ADMIN, is created with connect privileges. You execute this command from the root container:

SQL> GRANT create tablespace to C##A_ADMIN; Which statement is true?

Options

  • AThe command executes successfully, enabling the C##A_ADMIN user to create a tablespace only
  • BThe command fails because the CONTAINER=ALL clause is not used.
  • CThe command executes successfully, enabling the C##A_ADMIN user to create tablespaces in the
  • DThe command fails because the CONTAINER=CURRENT clause is not used.

How the community answered

(38 responses)
  • A
    3% (1)
  • B
    13% (5)
  • C
    79% (30)
  • D
    5% (2)

Why each option

Granting a privilege to a common user from the root container without a CONTAINER clause defaults to CONTAINER=CURRENT, so the privilege is scoped to the root only and the command succeeds.

AThe command executes successfully, enabling the C##A_ADMIN user to create a tablespace only

Incorrect - the phrasing implies an unqualified restriction; the privilege is granted in the current container (root) by default, which is a valid and successful operation.

BThe command fails because the CONTAINER=ALL clause is not used.

Incorrect - CONTAINER=ALL is not mandatory; omitting it does not cause the command to fail. It simply changes the scope of the grant to the current container.

CThe command executes successfully, enabling the C##A_ADMIN user to create tablespaces in theCorrect

When no CONTAINER clause is specified, Oracle uses CONTAINER=CURRENT by default, which is the root container in this context. The GRANT command executes successfully, but C##A_ADMIN receives the CREATE TABLESPACE privilege only within the root - not in any PDB. To grant the privilege across all containers, CONTAINER=ALL would be required.

DThe command fails because the CONTAINER=CURRENT clause is not used.

Incorrect - CONTAINER=CURRENT is the implicit default when no CONTAINER clause is given, so explicitly specifying it is not required for the command to succeed.

Concept tested: Common user privilege grants in CDB root container scope

Source: https://docs.oracle.com/en/database/oracle/oracle-database/12.2/sqlrf/GRANT.html

Topics

#common user grants#CDB root container#CONTAINER clause#privilege scope

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 1Z0-060 Practice