Which three statements are true about the users (other than sys) in the output?

Examine the query and its output executed In an RDBMS Instance:

Examine the query and its output executed In an RDBMS Instance:

Which three statements are true about the users (other than sys) in the output?

A.
The C # # B_ADMIN user can perform all backup and recovery operations using RMAN only.

B.
The C # # C_ADMIN user can perform the data guard operation with Data Guard Broker.

C.
The C # # A_ADMIN user can perform wallet operations.

D.
The C # # D_ADMIN user can perform backup and recovery operations for Automatic Storage
Management (ASM).

E.
The C # # B_ADMIN user can perform all backup and recovery operations using RMAN or
SQL* Plus.

Explanation:

B: SYSDG administrative privilege has ability to perform Data Guard operations (including startup
and shutdown) using Data Guard Broker or dgmgrl.
D: SYSASM
The new (introduced in 11g) SYSASM role to manage the ASM instance, variable extent sizes to
reduce shared pool usage, and the ability of an instance to read from a specific disk of a diskgroup
E (Not A): SYSDBA is like a role in the sense that it is granted, but SYSDBA is a special built-in
privilege to allow the DBA full control over the database
Incorrect:
Not C: SYSKM. SYSKM administrative privilege has ability to perform transparent data encryption
wallet operations.
Note:
Use the V$PWFILE_USERS view to see the users who have been granted administrative
privileges.

Show Hint

← Previous question

Next question →

Leave a Reply 25

JanK

A – FALSE
SYSBACKUP facilitates Oracle Recovery Manager (RMAN) backup and recovery operations either from RMAN or SQL*Plus.

B – TRUE
SYSDG facilitates Data Guard operations. The user can perform operations either with Data Guard Broker or with the DGMGRL command-line interface.

C – FALSE
SYSKM facilitates Transparent Data Encryption keystore operations.
key not wallet

D – TRUE
SYSASM – username SYS – privileges for administering an ASM instance only (first introduced in 11g)

E – TRUE
SYSBACKUP facilitates Oracle Recovery Manager (RMAN) backup and recovery operations either from RMAN or SQL*Plus.

Ranjit

bdf

Ranjit

bde

Mohammad Rafiq

A B and E

Ranjit

A and E both can not be true. As E is true A is false

Djuro

Correct answers are BDE

SUN

BDE is final answer

Alessandro

BDE

Marco

The SYSKM administrative privilege enables the SYSKM user to manage Transparent Data Encryption wallet operations.

C is better that D ASM backup/recover is only metadata

nax

B D E

C: is wrong.
$# sqlplus ‘/as syskm’
SQL> ALTER SYSTEM SET ENCRYPTION WALLET OPEN IDENTIFIED BY “oracle”;
ALTER SYSTEM SET ENCRYPTION WALLET OPEN IDENTIFIED BY “oracle”
*
ERROR at line 1:
ORA-01031: insufficient privileges

SQL> ALTER SYSTEM SET ENCRYPTION WALLET CLOSE IDENTIFIED by “oracle”;
ALTER SYSTEM SET ENCRYPTION WALLET CLOSE IDENTIFIED by “oracle”
*
ERROR at line 1:
ORA-01031: insufficient privileges

$# sqlplus ‘/as sysdba’
SQL> ALTER SYSTEM SET ENCRYPTION WALLET OPEN IDENTIFIED BY “oracle”;

System altered.

SQL> ALTER SYSTEM SET ENCRYPTION WALLET CLOSE IDENTIFIED by “oracle”;

System altered.

In 12c you dont need to run an alter system.
Note: since 12c, wallet and keystore is used as synonyms in several oracle docs.

To open a TDE wallet in 12c the command differs from 11g:
ADMINISTER KEY MANAGEMENT SET KEYSTORE OPEN IDENTIFIED BY software_keystore_password [CONTAINER = ALL | CURRENT];

Ex.:

[oracle@oel7 ~]$ sqlplus / as syskm

SQL> ADMINISTER KEY MANAGEMENT SET KEYSTORE OPEN IDENTIFIED BY mypassword;
keystore altered.

Steve

BCE

C: The SYSKM administrative privilege enables the SYSKM user to manage Transparent Data Encryption wallet operations.

https://docs.oracle.com/database/121/DBSEG/authorization.htm#DBSEG787

Not D: no mention of being able to backup and recover with ASM. Backup and recovery requires SYSBACKUP.

http://docs.oracle.com/cd/B28359_01/server.111/b31107/asminst.htm#CHDEDIID

Yaseen

BCE :

E – True : https://docs.oracle.com/database/121/DBSEG/authorization.htm#DBSEG785

To perform backup and recovery operations from either Oracle Recovery Manager (RMAN) and or through SQL*Plus, log in with the SYSBACKUP administrative privilege.

B – true : https://docs.oracle.com/database/121/DBSEG/authorization.htm#DBSEG786

You can log in as user SYSDG with the SYSDG administrative privilege to perform Data Guard operations.

You can use this privilege with either Data Guard Broker or the DGMGRL command-line interface.

C – true : https://docs.oracle.com/database/121/DBSEG/authorization.htm#DBSEG787

The SYSKM administrative privilege enables the SYSKM user to manage Transparent Data Encryption wallet operations.

Yaseen

C – wrong https://docs.oracle.com/cd/E11882_01/network.112/e40393/asotrans.htm#ASOAG10143

If the user does not have the ALTER SYSTEM privilege, or the wallet is unavailable, or an incorrect password is given, then the command returns an error and exits

SYSKM doesnt have ALTER SYSTEM Privilege.

SYSKM

System/Object privileges

CREATE SESSION
ADMINISTER KEY MANAGEMENT
SELECT SYS.V$WALLET
SELECT SYS.V$ENCRYPTION_WALLET
SELECT SYS.V$ENCRYPTED_TABLESPACES

In 12c you dont need alter system privilege.
Note that to open a TDE wallet in 12c the command differs from 11g:
ADMINISTER KEY MANAGEMENT SET KEYSTORE OPEN IDENTIFIED BY software_keystore_password [CONTAINER = ALL | CURRENT];

Ex.:

[oracle@oel7 ~]$ sqlplus / as syskm

SQL> ADMINISTER KEY MANAGEMENT SET KEYSTORE OPEN IDENTIFIED BY mypassword;
keystore altered.

Peter

BCE

Carlos

C is correct

https://docs.oracle.com/database/121/DBSEG/authorization.htm#DBSEG787

The SYSKM administrative privilege enables the SYSKM user to manage Transparent Data Encryption wallet operations.

The SYSKM administrative privilege enables the following operations:

ADMINISTER KEY MANAGEMENT

CREATE SESSION

SELECT (only when database is open)

https://oracle-base.com/articles/12c/multitenant-transparent-data-encryption-tde-12cr1#syskm

Oracle database 12c introduced a new way to manage keystores, encryption keys and secrets using the ADMINISTER KEY MANAGEMENT command. This replaces the ALTER SYSTEM SET ENCRYPTION KEY and ALTER SYSTEM SET ENCRYPTION WALLET commands for key and wallet administration from previous releases

Answer BCE