Which two represent the set of users that are never affected by connect command rules?

Question

Options

• ASYS
• Busers with the DV_ACCTMGR role
• Cusers with the DV_OWNER role
• Dusers with the DV_ADMIN role
• ESYSTEM

• A
  3% (1)
• B
  8% (3)
• C
  85% (33)
• D
  5% (2)

Explanation

In Oracle Database Vault, connect command rules restrict when and how users can log into the database. Two accounts are permanently immune to these rules: SYSTEM (E) because Oracle treats it as a privileged administrative account that must always retain connectivity for core database operations, and users with DV_OWNER (C) because DV_OWNER is the Database Vault ownership role - blocking its holders from connecting would lock out the very administrators responsible for managing Vault itself.

Why the distractors are wrong:

• SYS (A): SYS is exempt from realm protections (as SYSDBA bypasses realms), but it is still subject to connect command rules - a common and deliberate exam trap.
• DV_ACCTMGR (B): This role handles account management tasks (creating/altering users) but grants no immunity from connect command rules.
• DV_ADMIN (D): DV_ADMIN can configure Database Vault policies but is still governed by connect command rules, unlike DV_OWNER.

Memory tip: Think "Own the vault, own the connection" - only the owner (DV_OWNER) and the built-in SYSTEM account are untouchable by connect rules. SYS sounds like the obvious choice, but that's the trap: SYS dodges realms, not connect rules.

No community discussion yet for this question.