nerdexam
Oracle

1Z0-062 · Question #245

The HR user owns the BONUSES table. HR grants privileges to the user TOM by using the command: SQL> GRANT SELECT ON bonuses TO tom WITH GRANT OPTION; TOM then executes this command to grant…

The correct answer is B. HR can revoke the SELECT ON HR.BINUSES privilege from JIM. When a user grants privileges with the WITH GRANT OPTION, the original grantor retains the ability to revoke those privileges from any user in the subsequent grant chain.

Administering User Security

Question

The HR user owns the BONUSES table. HR grants privileges to the user TOM by using the command:

SQL> GRANT SELECT ON bonuses TO tom WITH GRANT OPTION; TOM then executes this command to grant privilegesto the user JIM:

SQL> GRANT SELET ON hr.bonuses TO jim; Which statement is true?

Options

  • ATOM cannot revoke the SELECT ON HR.BONUSES privilege from JIM.
  • BHR can revoke the SELECT ON HR.BINUSES privilege from JIM.
  • CJIM can grant the SELECT ON HR.BONUSESprivilege to other users, but cannot revoke the
  • DHR can revoke the SELECT ON HR.BONUSES privilege from TOM, which will automatically

How the community answered

(28 responses)
  • A
    4% (1)
  • B
    79% (22)
  • C
    11% (3)
  • D
    7% (2)

Why each option

When a user grants privileges with the `WITH GRANT OPTION`, the original grantor retains the ability to revoke those privileges from any user in the subsequent grant chain.

ATOM cannot revoke the SELECT ON HR.BONUSES privilege from JIM.

TOM can revoke the `SELECT` privilege from JIM because TOM was the direct grantor of that privilege to JIM.

BHR can revoke the SELECT ON HR.BINUSES privilege from JIM.Correct

HR is the original grantor of the `SELECT` privilege on `HR.BONUSES` to TOM. As the ultimate owner and grantor, HR can revoke the privilege from any user in the grant chain, including JIM, even if TOM was the direct grantor to JIM.

CJIM can grant the SELECT ON HR.BONUSESprivilege to other users, but cannot revoke the

JIM received the `SELECT` privilege from TOM without the `WITH GRANT OPTION`, therefore JIM cannot grant this privilege to other users.

DHR can revoke the SELECT ON HR.BONUSES privilege from TOM, which will automatically

If HR revokes the `SELECT` privilege from TOM, it will automatically revoke the privilege from any user to whom TOM subsequently granted it (such as JIM), but the question asks which statement is true regarding HR's ability to revoke from JIM directly.

Concept tested: Oracle privilege management and cascading revokes

Source: https://docs.oracle.com/en/database/oracle/oracle-database/21/sqlrf/REVOKE.html#GUID-0CC9C19B-9321-4EED-AC2E-5A2EC6D12716

Topics

#GRANT OPTION#privilege revocation#object privileges#user security

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 1Z0-062 Practice