Which statement is true about assigning privileged accounts to end users by using Oracle Privileged Account Manager? (Choose the best answer.)

Question

Options

• APrivileged accounts can be directly assigned to end users but not to groups.
• BPrivileged accounts can be directly assigned to groups but not to specific end users.
• CPrivileged accounts can be directly assigned to end users and to groups.
• DPrivileged accounts can be directly assigned to only one unique end user.
• EPrivileged accounts must be directly assigned to more than one end user.

• A
  3% (1)
• C
  79% (30)
• D
  5% (2)
• E
  13% (5)

Explanation

In addition to directly assigning privileged accounts to end users, Oracle Privileged Account Manager allows you to assign privileged accounts to groups. For example, you might want to create a "Data Center Product UNIX Administrators" group and give that group access to certain privileged accounts. When designing your deployment, it is important to ensure that a given end user is granted access to a privileged account through only one path (either directly or through a single group). When Oracle Privileged Account Manager discovers multiple grant paths, it picks the first path retrieved from its back-end, which leads to non-deterministic behavior. This behavior can cause the effective Usage Policy to be different from the intended Usage Policy.

No community discussion yet for this question.