单选题You need to perform these tasks: 1. Create and assign a MANAGER role to Blake and Clark 2. Grant CREATE TABLE and CREATE VIEW privileges to Blake and Clark Which set of SQL statements achieves the desired results?（）A CREATE ROLE manager; GRANT create t

第1题：

You want to create a role to meet these requirements：  1：The role is to be protected from unauthorized usage.  2：The password of the role is not to be embedded in the application source code or stored in a table.  Which method would you use to restrict enabling of such roles（）

• A、Create the role with global authentication.
• B、Create the role with external authentication.
• C、Create the role as a secure application role.
• D、Create the role as a password-protected role.
• E、Create a role and use Fine-Grained Access Control （FGAC） to secure the role.

第2题：

You need to perform these tasks: 1. Create and assign a MANAGER role to Blake and Clark 2. Grant CREATE TABLE and CREATE VIEW privileges to Blake and Clark Which set of SQL statements achieves the desired results? （）

• A、CREATE ROLE manager; GRANT create table, create view TO manager; GRANT manager TO BLACK, CLARK;
• B、CREATE ROLE manager; GRANT create table, create voew TO manager; GRANT manager ROLE TO BLACK, CLARK;
• C、GRANT manager ROLE TO BLACK, CLARK; GRANT create table, create voew TO BLACK CLARK; ***MISSING***

第3题：

You want to create a role to meet these requirements： 1. The role is to be protected from unauthorized usage. 2. The password of the role is not to be embedded in the application source code or stored in a table. method would you use to restrict enabling of such roles（）

• A、Create the role with external authentication.
• B、Create the role as a secure application role.
• C、Create the role as a password-protected role.
• D、Create a role and use Fine-Grained Access Control （FGAC） to secure the role

第4题：

You execute the following set of commands to create a database user and to grant the system privileges in your production environment.  SQL> CREATE USER user01  IDENTIFIED BY oracle DEFAULT TABLESPACE tbs1  TEMPORARY TABLESPACE temp PROFILE default  /  SQL> GRANT create session， create table TO user01； While executing the command to create a table， the user gets the following error message and the CREATE TABLE.. command fails.  ERROR at line 1： ORA-01950： no privileges on tablespace  What could be the possible reason for this error message？（）

• A、The tablespace TBS1 is full.
• B、The user is not the owner of the SYSTEM tablespace.
• C、The user does not have quota on the TBS1 tablespace.
• D、The user does not have sufficient system privileges to create table in the TBS1 tablespace.
• E、The user does not have sufficient privileges to create table on the default permanent tablespace.

第5题：

You have been asked to create three users， PUB1， PUB2 and PUB3， for three newly hired employees and to allocate unlimited quota on their default tablespace PUBLISHER_TBS with no other privileges. After creating the users， which method can you use for granting the required privileges？（）

• A、grant CONNECT role to all of the three users
• B、grant RESOURCE role to all of the three users
• C、grant both CONNECT and RESOURCE role to all of the three users
• D、execute ALTER USER .. QUOTA UNLIMITED ON publisher_tbs command for all of the three users
• E、create role with UNLIMITED TABLESPACE system privilege and assign the role to all of the three users

第6题：

.Your companys virtual environment includes Windows Server 2008 R2 Hyper-V servers. You manage the environment by using Microsoft System Center Virtual Machine Manager （VMM） 2008 R2. You need to provide a user with the ability to perform only the Create， Delete， Start， Stop， Pause， Resume， and Shut Down virtual machine （VM） management tasks on your host servers .  What should you do？（）

• A、In VMM，create a Self-Service user role.
• B、In VMM，create a Delegated Administrator user role.
• C、In VMM，assign the Local Administrator permission for the host servers to the user.
• D、In Authorization Manager， create a role on the users client computer and add the user to this role.

第7题：

Your company has an Active Directory Domain Services （AD DS） domain that includes an AD security group named Monitoring. You are configuring a Windows Server 2008 R2 Hyper-V server. You need to ensure that members of the Monitoring group can view virtual machines （VMs） but cannot make changes to them. What are two possible ways to achieve this goal？（）

• A、In Active Directory， create a group named HVMonitor. Grant the Read permission to the HVMonitor group for the VM configuration files and the VHD files. Add the Monitoring group to the HVMonitor group.
• B、In Local Users and Computers， create a group named HVMonitor. Grant the Read permission to the HVMonitor group for the VM configuration files and the VHD files. Add the Monitoring group to the HVMonitor group.
• C、In Authorization Manager， create a role named HVMonitor. Add all the View operations and the Read Service Configuration operation to the role. Assign the role to the Monitoring group.
• D、In Authorization Manager， create a role named HVMonitor. Create a task that includes all the View operations and the Read Service Configuration operation. Add this task to the HVMonitor role. Assign the role to the Monitoring group.

第8题：

You need to ensure that the new sales manager is able to view clients within only the North and South regions. What should you do?（）

• A、Add a Denied member set for the West clients to NorthRole.
• B、Add an Allowed member set for the South clients to NorthRole.
• C、Create a new role for the sales manager and add a Denied member set for the South clients.
• D、Create a new role for the sales manager and add an Allowed member set for the South clients. Remove the sales manager from SouthAndWestRole.

第9题：

第10题：

第11题：

第12题：

第13题：

You are the DBA for an academic database. You need to create a role that allows a group of users to modify existing rows in the STUDENT_GRADES table.Which set of statements accomplishes this?（）

• A、CREATE ROLL registrar; GRANT MODIFY ON student_grant TO registrar; GRANT registrar to user 1, user2, user3
• B、CREATE NEW ROLE registrar; GRANT ALL ON student_grant TO registrar; GRANT registrar to user 1, user2, user3
• C、CREATE ROLL registrar; GRANT UPDATE ON student_grant TO registrar; GRANT ROLE to user1, user2, user3
• D、CREATE ROLL registrar; GRANT UPDATE ON student_grant TO registrar; GRANT registrar to user 1, user2, user3;
• E、CREATE registrar; GRANT CHANGE ON student_grant TO registrar; GRANT registrar;

第14题：

You need to give the MANAGER role the ability to select from, insert into, and modify existing rows in the STUDENT_GRADES table. Anyone given this MANAGER role should be able to pass those privileges on to others. Which statement accomplishes this? （）

• A、GRANT select, insert, update ON student_grades TO manager
• B、GRANT select, insert, update ON student_grades TO ROLE manager
• C、GRANT select, insert, modify ON student_grades TO manager WITH GRANT OPTION;
• D、GRANT select, insert, update ON student_grades TO manager WITH GRANT OPTION;
• E、GRANT select, insert, update ON student_grades TO ROLE manager WITH GRANT OPTION;  
• F、GRANT select, insert, modify ON student_grades TO ROLE manager WITH GRANT OPTION;

第15题：

You want to create a consumer group， GROUP1， and you execute the following command in the command-line interface：  SQL> EXEC DBMS_RESOURCE_MANAGER.CREATE_CONSUMER_GROUP （CONSUMER_GROUP =>’group1’， COMMENT => ’New Group’）；  This command errorsout displaying the following message：  ERROR at line 1：  ORA-01031： insufficient privileges  ORA-06512： at "SYS.DBMS_RMIN"， line 115  ORA-06512： at SYS.DBMS_RESOURCE_MANAGER"， line 108 ORA-06512： at line 1  What action would you take to overcome this error？（）

• A、 grant SYSDBA to the user
• B、 grant SYSOPER to the user
• C、 grant the RESOURCE role to the user
• D、 use the GRANT command to grant the ADMINISTER_RESOURCE_MANAGER privilege to the use
• E、 grant the ADMINISTER_RESOURCE_MANAGER privilege to the user by using the DBMS_RESOURCE_MANAGER_PRIVS package

第16题：

Examine the commands executed in the following sequence：  1：SQL> CREATE ROLE mgrrole；  2：SQL> GRANT create user，select any table，connect，resource TO mgrrole；  3：SQL> GRANT select，update ON sh.sales TO mgrrole；  4：SQL> CREATE ROLE ceo IDENTIFIED BY boss；  5：SQL> GRANT mgrrole，drop any table，create any directory TO ceo；  6：SQL> GRANT ceo TO mgrrole；  Which statement is true about the above commands（）

• A、The commands execute successfully.
• B、Command 6 produces an error because of circular role grant.
• C、Command 5 produces an error because a role cannot be granted to another role.
• D、Command 3 produces an error because the MGRROLE role already contains system privileges.
• E、The table created by HR remains and HR still has the CREATE TABLE system privilege.
• F、The table created by HR remains and HR can grant the CREATE TABLE system privilege to other users.

第17题：

You need to perform these tasks: 1. Create and assign a MANAGER role to Blake and Clark 2. Grant CREATE TABLE and CREATE VIEW privileges to Blake and Clark Which set of SQL statements achieves the desired results?（）

• A、CREATE ROLE manager; GRANT create table, create view TO manager; GRANT manager TO BLACK, CLARK;
• B、CREATE ROLE manager; GRANT create table, create voew TO manager; GRANT manager ROLE TO BLACK, CLARK;
• C、GRANT manager ROLE TO BLACK, CLARK; GRANT create table, create voew TO BLACK CLARK; ***MISSING***

第18题：

You manage Hyper-V host servers and virtual machines （VMs） by using Microsoft System Center Virtual Machine Manager （VMM） 2008 R2. Developers are members of an AD security group named  Development. You need to ensure that on a specific host server， members of the Development group can perform only the Create，Modify，and Remove VM management tasks. What should you do？（）

• A、Create a Self-Service user role and add the Development group to this role.
• B、Create a Delegated Administrator user role and add the Development group to this role.
• C、In Authorization Manager， create a role on the client computer of each member of the Development group， and add the Development group to this role.
• D、Install Hyper-V Manager on the client computer of each member of the Development group，and grant the Development group administrative privileges on the specific server.

第19题：

Your company has an Active Directory Domain Services （AD DS） domain. You have a Windows Server 2008 R2 Hyper-V server. You manage the virtual environment by using Microsoft System Center Virtual Machine Manager （VMM） 2008 R2. You need to ensure that a user can create new virtual machines （VMs） on only a specific set of servers . The user must not be able to see or manage servers outside of that set within VMM . Which two actions should you perform？（）

• A、Create a host group. Add the host servers that the user will manage to the host group.
• B、Create a failover cluster. Join the host servers that the user will manage to the failover cluster.
• C、Using Authorization Manager， assign the user to a role with the necessary permission to manage the servers by using VMM.
• D、Using Authorization Manager， assign the user to a role with the necessary permission to manage the servers by using the VMM Self-Service Portal.

第20题：

You need to give the MANAGER role the ability to select from, insert into, and modify existing rows in the STUDENT_GRADES table. Anyone given this MANAGER role should be able to pass those privileges on to others. Which statement accomplishes this?（）

• A、GRANT select, insert, update   ON student_grades   TO manager;
• B、GRANT select, insert, update   ON student_grades   TO ROLE manager;
• C、GRANT select, insert, modify   ON student_grades   TO manager   WITH GRANT OPTION;
• D、GRANT select, insert, update   ON student_grades   TO manager   WITH GRANT OPTION;
• E、GRANT select, insert, update   ON student_grades   TO ROLE manager   WITH GRANT OPTION;
• F、GRANT select, insert, modify   ON student_grades   TO ROLE manager   WITH GRANT OPTION;

第21题：

第22题：

第23题：

第24题：