nerdexam
Oracle

1Z0-062 · Question #314

Examine the following steps: A DBA grants the CREATE TABLE system privilege with ADMIN OPTION to the user SIDNEY. grants the CREATE TABLE system privilege to the HR user. SIDNEY Which statement is…

The correct answer is C. Neither SIDNEY nor HR can create new tables if the DBA revokes the CREATE TABLE privilege from. When a system privilege granted with ADMIN OPTION is revoked from the original grantee, all subsequent grants based on that ADMIN OPTION are automatically revoked in a cascading fashion.

Administering User Security

Question

Examine the following steps:

A DBA grants the CREATE TABLE system privilege with ADMIN OPTION to the user SIDNEY. grants the CREATE TABLE system privilege to the HR user. SIDNEY Which statement is true?

Options

  • ASIDNEY can revoke the CREATE TABLE system privilege only from HR, to whom he granted it.
  • BHR can grant the CREATE TABLE system privilege to other users.
  • CNeither SIDNEY nor HR can create new tables if the DBA revokes the CREATE TABLE privilege from .
  • DHR still retains the CREATE TABLE system privilege if the DBA revokes the CREATE TABLE privilege

How the community answered

(37 responses)
  • A
    5% (2)
  • B
    16% (6)
  • C
    73% (27)
  • D
    5% (2)

Why each option

When a system privilege granted with ADMIN OPTION is revoked from the original grantee, all subsequent grants based on that ADMIN OPTION are automatically revoked in a cascading fashion.

ASIDNEY can revoke the CREATE TABLE system privilege only from HR, to whom he granted it.

SIDNEY, having received the privilege with ADMIN OPTION, can revoke CREATE TABLE from any user, not just HR, making the statement 'only from HR' incorrect.

BHR can grant the CREATE TABLE system privilege to other users.

HR received the CREATE TABLE privilege without the ADMIN OPTION (as not specified in the grant from SIDNEY), meaning HR cannot grant this privilege to other users.

CNeither SIDNEY nor HR can create new tables if the DBA revokes the CREATE TABLE privilege from .Correct

If the DBA revokes the CREATE TABLE privilege from SIDNEY, SIDNEY loses the privilege. Since HR's CREATE TABLE privilege was granted by SIDNEY based on SIDNEY's ADMIN OPTION, HR's privilege is also revoked due to the cascading revoke behavior.

DHR still retains the CREATE TABLE system privilege if the DBA revokes the CREATE TABLE privilege

HR will lose the CREATE TABLE system privilege if the DBA revokes it from SIDNEY because HR's grant was dependent on SIDNEY's privilege which was granted with ADMIN OPTION, leading to a cascading revoke.

Concept tested: Oracle system privileges and cascading revoke

Source: https://docs.oracle.com/en/database/oracle/oracle-database/21/sqlrf/REVOKE-System-Privileges-and-Roles.html

Topics

#system privileges#ADMIN OPTION#privilege cascade#REVOKE

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 1Z0-062 Practice