Oracle Database 12c provides new task-specific privileges (SYSBACKUP, SYSDG, and SYSKM)
to handle standard administration duties. Which two statements about these standard
administration privileges are true?
A.
These administrative privileges enable you to connect to the database only if the database is
open.
B.
After connecting with these privileges, you are connected under a predefined user whose name
is the privilege name.
C.
These administrative privileges allow a user to view DBA_xxx, GV$, VS, and SELECT on
application tables.
D.
Without being a member of OSBACKUP. OSDG, and OSKM OS groups, users cannot connect
as administrative users by using OS authentication.
A is wrong, for example privilege SYSBACKUP allows to startup and full recover a database, which is only possible in an not opened database, see
https://docs.oracle.com/database/121/DBSEG/authorization.htm#DBSEG785
correct answers: BD
Ans: BD
Only SYSKM requires database to be open. SYSBACKUP and SYSDG can connect to database even if it is down and perform startup and shutdown.
https://docs.oracle.com/database/121/ADMIN/dba.htm#ADMIN11052
Local Connections and Secure Remote Connections
You can connect to Oracle Database as a privileged user over a local connection or a secure remote connection in two ways:
• If the database has a password file and you have been granted a system privilege, then you can connect and be authenticated by a password file.
• If the server is not using a password file, or if you have not been granted a system privilege and are therefore not in the password file, then you can use operating system authentication. On most operating systems, authentication for database administrators involves placing the operating system username of the database administrator in a special group.
For example, users in the OSDBA group are granted the SYSDBA administrative privilege. Similarly, the OSOPER group is used to grant SYSOPER administrative privilege to users, the OSBACKUPDBA group is used to grant SYSBACKUP administrative privilege to users, the OSDGDBA group is used to grant SYSDG administrative privilege to users, and the OSKMDBA group is used to grant SYSKM administrative privilege to users.