Examine this command that Is executed: What is the result?

Question

Exhibit

Options

• AThe salary column is fine grain audited.
• BThe salary column is nullified when queried by the database users.
• CThe bind variables for the salary column are masked In trace files and vS views.
• DThe salary column is encrypted using TDE column encryption.
• EThe salary column is redacted when queried by database users.

• A
  15% (4)
• B
  4% (1)
• D
  8% (2)
• E
  73% (19)

Explanation

Option E is correct because the command shown invokes DBMS_REDACT.ADD_POLICY, Oracle's Data Redaction package, which intercepts query results at runtime and returns masked/redacted values to unauthorized users - the underlying stored data is never altered.

Why the distractors are wrong:

• (A) Fine-grained auditing uses DBMS_FGA.ADD_POLICY, a separate package that logs access events - it does not modify what users see.
• (B) Nullification is not a native Oracle security mechanism; Data Redaction replaces values with a redaction format (e.g., zeros, Xs), not NULL.
• (C) Bind variable masking in trace files is controlled by DBMS_SQLTUNE or diagnostic parameters - unrelated to column-level data visibility policies.
• (D) TDE column encryption uses ALTER TABLE ... MODIFY (salary ENCRYPT) and operates at the storage layer, protecting data at rest - not at query time.

Memory tip: Think of the word redact literally - like blacking out text in a declassified document. The data exists in full on disk (unlike encryption which scrambles it), but users only see the "blacked out" version at query time. DBMS_REDACT = Data shown Redacted to End users.

No community discussion yet for this question.