Oracle Database Administration I — Question 98

You want to apply the principle of Least Privilege in all your live databases.

One of your requirements is to revoke unnecessary privileges from all users who have them using Privilege Analysis.

Which two are types of analyses can be done using the DBMS_PRIVILEGE_CAPTURE package? (Choose two.)

Answer options

• A. analysis of privileges that a user has on other schema’s objects
• B. analysis of privileges that a user has on their own schema objects
• C. analysis of all privileges used by the sys user.
• D. analysis of privileges granted indirectly to a role that are then used by a user who has been granted that role
• E. analysis of privileges granted directly to a role that are then used by a user who has been granted that role

Correct answer: D, E

Explanation

The correct answers are D and E because the DBMS_PRIVILEGE_CAPTURE package is designed to analyze privileges related to roles, both directly and indirectly assigned. Options A, B, and C do not pertain to the specific analysis capabilities of this package, as they focus on user-specific privileges rather than role-based privileges.