Oracle Database Security Administration - 1Z0-116 Exam Questions [2026]

QUESTION NO: 1
Database Vault Is configured and enabled In the Oracle database.
Three users are granted the dba, dv_omneb, and dv_acctmgb roles.
There is a requirement to create a user who can:
1. Connect to the database Instance
2. Select from dictionary views
Which users can complete the operation to meet the requirement?

A. users granted DV_OWNER role B. users granted DBA and DV_OWNER roles C. users granted DV_ACCTMGR and DV_OWNER roles D. users granted DV_ACCTMGR and DBA roles

Correct Answer: D

QUESTION NO: 2
Examine this command that Is executed:

What is the result?

A. The salary column is redacted when queried by database users. B. The salary column is nullified when queried by the database users. C. The bind variables for the salary column are masked In trace files and vS views. D. The salary column is fine grain audited. E. The salary column is encrypted using TDE column encryption.

Correct Answer: A

QUESTION NO: 3
Examine this sqlnet.ora file used by a client application:

Which three are found in the wallet specified by the directory parameter?

A. the trusted certificates of the database service B. the username, password, and service name required to connect to the database C. the user certificate used to uniquely Identify the client application D. the private key of the client application E. the private key of the database service F. the trusted certificates of the Certification Authority G. the user certificate used to uniquely Identify the database service

Correct Answer: C,D,F

QUESTION NO: 4
Which three are part of an access control list (ACL) when using Real Application Security?

A. roles B. policies C. data realms D. column constraints E. data realm constraints F. schemas G. privileges

Correct Answer: D,E,G

QUESTION NO: 5
Examine this configuration and requirement:
1. The hr user created a private database link in the pdb2 pluggable database linking to the hr schema In the PDBl pluggable database.
2. Other users in pdb2 must query the remote HR.EMPLOYEES table In PDBI using this database link.
Which two operations together ensure that the database link provides access only to the HR.EMPLOYEES table in the PDBI pluggable database?

A. Grant access to the view of the remote HR.EMPLOYEES table In the PDB2 pluggable database. B. Create a view In the HR schema for the remote hr. employees table of the pdb2 pluggable database . C. Grant other users access to the database link In the PDB2 pluggable database. D. Grant other users access to the database link in the PDBI pluggable database. E. Only grant other users access to the HR.EMPLOYEES table In the pdb2 pluggable database.

Correct Answer: B,C

QUESTION NO: 6
Examine this command :
GRANT EXEMPT ACCESS POLICY TO PUBLIC;
Which Transparent Sensitive Data Protection functionality will be affected when this command is executed?

A. Bind Masking B. Virtual Private Database C. Transparent Data Encryption D. Data Redaction

Correct Answer: C

QUESTION NO: 8
Which two authorization rights does a Database Vault realm owner have that a realm participant does not have?

A. Grant or revoke realm-secured database roles. B. Add or remove owners to or from the realm. C. Grant or revoke privileges on realm-protected objects to or from other users. D. Add or remove realm-protected objects to or from the reaim. E. Grant or revoke system privileges to access objects protected by the realm. F. Add or remove participants to or from the realm. G. Add or remove realm-secured database roles to or from the realm.

Correct Answer: E,G

QUESTION NO: 9
Database user SCOTT requires the privilege to select from all tables and you decide to configure this using a global role.
You have not yet configured the database with Enterprise User Security.
You plan to perform these steps:
1. create role GLOBAI._ROI.E identified globally;
2. grant select any table to GLODAL_COLE;
3. grant GLOBAL_ROLE to SCOTT;
What is the result?

A. All statements succeed even without Enterprise User Security configuration, but the role is not effective. B. The second statement falls because granting a global role can be completed only by using a central authority. C. The first statement falls because the database Is not set up with Enterprise User Security. D. The third statement falls because global roles can be granted only by using a central authority.

Correct Answer: C

QUESTION NO: 10
Which statement can be used to force password complexity in the password file?

A. orapwd file=orapwOPCL forcaat=12 B. orapwd file=orapwOBCL forroat=12.2 C. orapwd file=orapwORCL format=12 force-yes D. orapwd file=orapwORCL force=yes format=legacy

Correct Answer: B