nerdexam
Oracle

1Z0-908 · Question #75

Which three are characteristics of a newly created role? (Choose three.)

The correct answer is A. It can be dropped using the DROP ROLE statement. E. It can be granted to user accounts. F. It can be protected with a password. Roles in MySQL are flexible, reusable permission containers that behave much like user accounts under the hood. A is correct because DROP ROLE is a valid MySQL statement for removing roles. E is correct because the entire point of a role is to bundle privileges and grant them…

Security

Question

Which three are characteristics of a newly created role? (Choose three.)

Options

  • AIt can be dropped using the DROP ROLE statement.
  • BIt is stored in the mysql.role table.
  • CIt is created as a locked account.
  • DIt can be renamed using the RENAME ROLE statement.
  • EIt can be granted to user accounts.
  • FIt can be protected with a password.

How the community answered

(51 responses)
  • A
    90% (46)
  • B
    6% (3)
  • C
    2% (1)
  • D
    2% (1)

Explanation

Roles in MySQL are flexible, reusable permission containers that behave much like user accounts under the hood. A is correct because DROP ROLE is a valid MySQL statement for removing roles. E is correct because the entire point of a role is to bundle privileges and grant them to one or more user accounts (or other roles). F is correct because roles are stored internally as entries in mysql.user, meaning they can optionally be assigned a password, just like regular user accounts.

B is wrong because there is no mysql.role table - roles are stored in the existing mysql.user table, not a dedicated one. C is wrong in this context because while roles are stored similarly to user accounts, they are not classified as "locked accounts" as a defining characteristic; the locked-account property describes a security state of user logins, not a role trait being tested here. D is wrong because MySQL does not provide a RENAME ROLE statement - to rename a role, you would need to drop and recreate it.

Memory tip: Think of a role as a "named bag of privileges" - you can Drop it, Grant it, and optionally Password-protect it (D, G, P). Any answer implying a special storage table or a rename shortcut is a red flag, since roles piggyback on the standard mysql.user infrastructure.

Topics

#Roles#Access Control#Privilege Management#DDL

Community Discussion

No community discussion yet for this question.

Full 1Z0-908 Practice