1Z0-116 · Question #52
For which two reasons would you define Network ACLs?
The correct answer is A. for configuring fine-grained access control for users and roles that need to access external network D. to block network attacks or denial of service attacks directed at the database. Network ACLs in Oracle Database serve as fine-grained privilege controls that restrict which database users and roles can make outbound network connections (e.g., via UTL_HTTP or UTL_SMTP), making A correct - and they also act as a security boundary to block unauthorized…
Question
For which two reasons would you define Network ACLs?
Options
- Afor configuring fine-grained access control for users and roles that need to access external network
- Bfor configuring fine-grained access control to Oracle wallets to make HTTP requests that require
- Cto create auditing policies regarding the usage of network services from the database
- Dto block network attacks or denial of service attacks directed at the database
- Eto Improve the performance of the database applications that require access to remote network
How the community answered
(55 responses)- A84% (46)
- B5% (3)
- C2% (1)
- E9% (5)
Explanation
Network ACLs in Oracle Database serve as fine-grained privilege controls that restrict which database users and roles can make outbound network connections (e.g., via UTL_HTTP or UTL_SMTP), making A correct - and they also act as a security boundary to block unauthorized inbound traffic, including network attacks and denial-of-service attempts, making D correct.
B is wrong because Oracle Wallets are a separate mechanism for storing credentials and certificates; ACLs don't configure wallet access. C is wrong because auditing policies are created through Oracle's Unified Auditing or AUDIT commands, not through ACLs. E is wrong because ACLs are purely a security control - they have no role in performance optimization.
Memory tip: ACL = Access Control List - keep it focused on security: who gets access (users/roles to external networks) and who gets blocked (attackers). Anything about auditing, wallets, or performance is a distractor pulling you away from the core security purpose.
Topics
Community Discussion
No community discussion yet for this question.