Oracle Database Administration I — Question 37

You want to apply the principle of Least Privilege in all your live databases.
One of your requirements is to revoke unnecessary privileges from all users who have them using Privilege Analysis.
Which three types of analyses can be done using the DBMS_PRIVILEGE_CAPTURE package? (Choose three.)

Answer options

• A. analysis of all privileges used by all users including administrative users in the database
• B. analysis of all privileges used by all users but excluding administrative users in the database
• C. analysis of privileges that a user has on their own schema objects that they did not use
• D. analysis of privileges that a user has on their own schema objects that they did use
• E. analysis of privileges granted directly to a role that are then used by a user who has been granted that role
• F. analysis of privileges granted indirectly to a role that are then used by a user who has been granted that role

Correct answer: C, D, F

Explanation

The correct answers are C, D, and F because they focus on analyzing schema object privileges that a user has either not used (C) or has used (D), as well as the privileges granted indirectly to a role that are used by a user (F). Options A and B are incorrect as they pertain to a broader analysis that includes or excludes administrative users but do not focus on individual user privileges. Options E is also incorrect as it pertains to direct grants rather than indirect ones.