nerdexam
Oracle

1Z0-116 · Question #52

For which two reasons would you define Network ACLs?

The correct answer is A. for configuring fine-grained access control for users and roles that need to access external network D. to block network attacks or denial of service attacks directed at the database. Network ACLs in Oracle Database serve as fine-grained privilege controls that restrict which database users and roles can make outbound network connections (e.g., via UTL_HTTP or UTL_SMTP), making A correct - and they also act as a security boundary to block unauthorized…

Implementing Basic Database Security

Question

For which two reasons would you define Network ACLs?

Options

  • Afor configuring fine-grained access control for users and roles that need to access external network
  • Bfor configuring fine-grained access control to Oracle wallets to make HTTP requests that require
  • Cto create auditing policies regarding the usage of network services from the database
  • Dto block network attacks or denial of service attacks directed at the database
  • Eto Improve the performance of the database applications that require access to remote network

How the community answered

(55 responses)
  • A
    84% (46)
  • B
    5% (3)
  • C
    2% (1)
  • E
    9% (5)

Explanation

Network ACLs in Oracle Database serve as fine-grained privilege controls that restrict which database users and roles can make outbound network connections (e.g., via UTL_HTTP or UTL_SMTP), making A correct - and they also act as a security boundary to block unauthorized inbound traffic, including network attacks and denial-of-service attempts, making D correct.

B is wrong because Oracle Wallets are a separate mechanism for storing credentials and certificates; ACLs don't configure wallet access. C is wrong because auditing policies are created through Oracle's Unified Auditing or AUDIT commands, not through ACLs. E is wrong because ACLs are purely a security control - they have no role in performance optimization.

Memory tip: ACL = Access Control List - keep it focused on security: who gets access (users/roles to external networks) and who gets blocked (attackers). Anything about auditing, wallets, or performance is a distractor pulling you away from the core security purpose.

Topics

#Network ACLs#Access Control#Attack Prevention#Outbound Network Security

Community Discussion

No community discussion yet for this question.

Full 1Z0-116 Practice