nerdexam
Oracle

1Z0-067 · Question #92

You are administering a multitenant container database (CDB) that contains multiple pluggable databases (PDBs). You are connected to cdb$root as the sys user. You execute the commands: SQL> CREATE…

The correct answer is D. It is granted to the c##admin user in all PDBs and can be granted object and system privileges for. https://docs.oracle.com/database/121/SQLRF/statements_6014.htm#SQLRF01311 "CONTAINER Clause The CONTAINER clause applies when you are connected to a CDB. However, it is not necessary to specify the CONTAINER clause because its default values are the only allowed values. To…

New Features for Security

Question

You are administering a multitenant container database (CDB) that contains multiple pluggable databases (PDBs). You are connected to cdb$root as the sys user. You execute the commands:

SQL> CREATE USER C##ADMIN IDENTIFIED BY orcll23; SQL> CREATE ROLE C##CONNECT; SQL> GRANT CREATE SESSION, CREATE TABLE, SELECT ANY TABLE TO C##CONNECT; SQL> GRANT C##CONNECT to C##ADMIN CONTAINER=ALL; Which statement is true about the c##connect role?

Options

  • AIt is created only in cdb$root and cannot be granted to the c##admin user with the container=all
  • BIt is granted to the c##admin user only in the CDB.
  • CIt is granted to the c##admin user in all PDBs and can be granted only to a local user in a PDB.
  • DIt is granted to the c##admin user in all PDBs and can be granted object and system privileges for

How the community answered

(44 responses)
  • A
    11% (5)
  • B
    7% (3)
  • C
    2% (1)
  • D
    80% (35)

Explanation

https://docs.oracle.com/database/121/SQLRF/statements_6014.htm#SQLRF01311 "CONTAINER Clause The CONTAINER clause applies when you are connected to a CDB. However, it is not necessary to specify the CONTAINER clause because its default values are the only allowed values. To create a common role, you must be connected to the root. You can optionally specify CONTAINER = ALL, which is the default when you are connected to the root. To create a local role, you must be connected to a PDB. You can optionally specify CONTAINER = CURRENT, which is the default when you are connected to a PDB."

Topics

#common role#CONTAINER=ALL#CDB security#common user privileges

Community Discussion

No community discussion yet for this question.

Full 1Z0-067 Practice