nerdexam
Oracle

1Z0-116 · Question #69

You grant user JANE the SYSDBA administrative privilege. Which two are true?

The correct answer is D. User JANE can create objects In sys schema only when connected as SYSDBA. Granting SYSDBA to JANE means she can connect as SYSDBA, but her session identity shifts to SYS - so D is correct: any objects she creates in that session land in the SYS schema, and that only happens when she explicitly connects AS SYSDBA. Note that F is also correct (the…

Configuring and Auditing User Security

Question

You grant user JANE the SYSDBA administrative privilege. Which two are true?

Options

  • AUser JANE must always connect as SYSDBA to the database instance.
  • BUser JANE can grant SYSDBA privilege to roles.
  • CUser JANE must use operating system authentication.
  • DUser JANE can create objects In sys schema only when connected as SYSDBA.
  • EUser JANE acquires the DBA role by default.
  • FUser JANE can backup and recover the database.

How the community answered

(38 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    5% (2)
  • D
    76% (29)
  • F
    13% (5)

Explanation

Granting SYSDBA to JANE means she can connect as SYSDBA, but her session identity shifts to SYS - so D is correct: any objects she creates in that session land in the SYS schema, and that only happens when she explicitly connects AS SYSDBA. Note that F is also correct (the question asks for two): SYSDBA carries full backup and recovery privileges, which is one of its defining administrative capabilities.

Why the distractors are wrong:

  • A - SYSDBA is an optional elevated connection mode, not a forced one; JANE can still connect normally as herself.
  • B - Administrative privileges (SYSDBA, SYSOPER) cannot be granted to roles, only directly to users; this is an Oracle security restriction.
  • C - OS authentication is one way to authenticate SYSDBA, but password-file authentication is equally valid; neither is mandatory.
  • E - When connected AS SYSDBA the session gets DBA-role privileges, but JANE is not permanently granted the DBA role to her account.

Memory tip: Think of AS SYSDBA as putting on a SYS costume - you look like SYS, your objects go into SYS's closet (schema), and you can do everything including starting the database up from scratch and running backups. Take the costume off and you're plain JANE again.

Topics

#SYSDBA privilege#system administration#user privileges#schema access control

Community Discussion

No community discussion yet for this question.

Full 1Z0-116 Practice