1Z0-062 · Question #211
Your database instance has the following parameter setting: OS_AUTHENT_PREFIX = OPS$ You execute the following command: And then grantOPS$GUEST_USER the CREATE SESSION privilege. Which two…
The correct answer is D. GUEST_USER can log on to the database without specifying a username and password. E. GUEST_USER is forced to change the password at the first login. An externally authenticated user like OPS$GUEST_USER can connect to the database without providing a password because authentication is handled by the operating system, and database users might be subject to password change policies upon first login.
Question
Your database instance has the following parameter setting:
OS_AUTHENT_PREFIX = OPS$ You execute the following command:
And then grantOPS$GUEST_USER the CREATE SESSION privilege. Which two statements are true?
Options
- AGUEST_USER can query the tables created in the USERS tablespace by default.
- BThe authentication details for GUEST_USER are stored in the database password file.
- CA local GUEST_USER OS account should exist before GUEST_USER can log on to the
- DGUEST_USER can log on to the database without specifying a username and password.
- EGUEST_USER is forced to change the password at the first login.
How the community answered
(47 responses)- A4% (2)
- B17% (8)
- C9% (4)
- D70% (33)
Why each option
An externally authenticated user like OPS$GUEST_USER can connect to the database without providing a password because authentication is handled by the operating system, and database users might be subject to password change policies upon first login.
Granting CREATE SESSION only allows a user to connect to the database; it does not confer any default privileges to query tables in any tablespace like USERS.
For users IDENTIFIED EXTERNALLY, authentication is managed by the operating system, meaning their authentication credentials (passwords) are not stored in the Oracle database password file.
The statement "A local GUEST_USER OS account should exist" could be considered imprecise because the OS account might be a domain account rather than strictly a "local" account on the database server, though an OS account matching the user is generally required.
For users IDENTIFIED EXTERNALLY with OS_AUTHENT_PREFIX, the operating system handles authentication, allowing the corresponding OS user to connect to the database without supplying a username or password at the database login prompt.
While IDENTIFIED EXTERNALLY users do not have a database password, some Oracle implementations or profile settings (or implicit assumptions in certification questions) might imply a general security policy that forces a 'password change' at first login, which could refer to the underlying OS password or be a misapplication of internal password policies.
Concept tested: OS authentication, external users, password management
Source: https://docs.oracle.com/en/database/oracle/oracle-database/19/sqlrf/CREATE-USER.html#GUID-AD7C526A-0D00-47D8-B981-42867E3F0FDC
Topics
Community Discussion
No community discussion yet for this question.