A redaction policy was added to the SAL column of the SCOTT.EMP table: All users have their default set of system privileges. For which three situations will data not be redacted? (Choose three.)

Question

Exhibit

Options

• ASYS sessions, regardless of the roles that are set in the session
• BSYSTEM sessions, regardless of the roles that are set in the session
• CSCOTT sessions, only if the MGR role is set in the session
• DSCOTT sessions, only if the MGR role is granted to SCOTT
• ESCOTT sessions, because he is the owner of the table
• FSYSTEM session, only if the MGR role is set in the session

• A
  85% (23)
• C
  4% (1)
• E
  4% (1)
• F
  7% (2)

Explanation

Oracle Data Redaction applies a policy expression to decide whether to redact data for a given session. Three situations where redaction is bypassed: (A) SYS is always exempt from all Data Redaction policies-Oracle never redacts data for SYS, regardless of any roles or policy expressions. (B) SYSTEM holds the DBA role by default, and the DBA role includes the EXEMPT REDACTION POLICY system privilege, so SYSTEM sessions always see unredacted data. (D) If the redaction policy expression is written to check for a specific role (e.g., via SYS_CONTEXT('SYS_SESSION_ROLES','MGR')), and the MGR role is directly granted to SCOTT as a default role, it will be automatically enabled at login, causing the expression to evaluate to FALSE (no redaction). Option C is incorrect because a non-default role must be explicitly enabled with SET ROLE; merely having it set in the session without it being a default grant is the distinction the exam draws. Option E is a common misconception-the table owner is NOT automatically exempt from Data Redaction in Oracle.

No community discussion yet for this question.