A redaction policy was added to the SAL column of the SCOTT.EMP table: All users have their default set of system privileges. For which three situations will data not be redacted? (Choose three.)

The correct answer is A. SYS sessions, regardless of the roles that are set in the session B. SYSTEM sessions, regardless of the roles that are set in the session D. SCOTT sessions, only if the MGR role is granted to SCOTT. Oracle Data Redaction exempts SYS unconditionally - it bypasses all policies by design, regardless of what roles are active (A). SYSTEM holds the EXEMPT REDACTION POLICY system privilege by default, making it permanently immune to redaction regardless of session roles (B)…

Security

Question

A redaction policy was added to the SAL column of the SCOTT.EMP table:

All users have their default set of system privileges. For which three situations will data not be redacted? (Choose three.)

Exhibit

Options

ASYS sessions, regardless of the roles that are set in the session
BSYSTEM sessions, regardless of the roles that are set in the session
CSCOTT sessions, only if the MGR role is set in the session
DSCOTT sessions, only if the MGR role is granted to SCOTT
ESCOTT sessions, because he is the owner of the table
FSYSTEM session, only if the MGR role is set in the session

How the community answered

(43 responses)

A
67% (29)
C
5% (2)
E
9% (4)
F
19% (8)

Explanation

Oracle Data Redaction exempts SYS unconditionally - it bypasses all policies by design, regardless of what roles are active (A). SYSTEM holds the EXEMPT REDACTION POLICY system privilege by default, making it permanently immune to redaction regardless of session roles (B). SCOTT is exempt only when the MGR role is granted to him (D) because a granted default role is active in every session automatically, meaning the EXEMPT REDACTION POLICY it carries is always in effect.

Why the distractors fail:

C is wrong because "set in session" implies the role must be manually activated each time (a non-default role), making the exemption conditional and unreliable - the exam treats this as insufficient for a guaranteed bypass.
E is a classic trap: table ownership confers no Data Redaction exemption. SCOTT sees his own SAL column redacted just like any other user without the appropriate privilege.
F is wrong because SYSTEM's exemption is unconditional - it comes from a directly granted system privilege, not from any role. Adding the "only if MGR role is set" condition makes the statement false.

Memory tip: Think "SYS and SYSTEM are Super-immune; Ownership is meaningless; Granted beats Set." Granted roles are always on; roles you must manually SET are session-by-session and not a reliable redaction bypass in this context.

Topics

#Data Redaction#Privileged Accounts#Role-Based Security#Redaction Policy Exceptions

Community Discussion

No community discussion yet for this question.

Full 1Z0-083 Practice