OCP 1Z0 053 7

7.You need to configure fine-grained access control to external network resources from within your 
database. You create an access control list (ACL) using the DBMS_NETWORK_ACL_ADMIN package. 
Which statement is true regarding the ACL created? 
A. It is a list of remote database links stored in the XML file that are available to the users of the database. 
B. It is a list of users and network privileges stored in the XML file according to which a group of users can 
connect to one or more hosts. 
C. It is a list of users and network privileges stored in the data dictionary according to which a group of 
users can connect to one or more hosts. 
D. It is the list of the host names or the IP addresses stored in the data dictionary that can connect to your 
database through PL/SQL network utility packages such as UTL_TCP. 
Answer: B 

http://docs.oracle.com/cd/E11882_01/appdev.112/e23094/xdb21sec.htm#ADXDB5463

Access Control List (ACL)

An access control list (ACL) is a list of access control entries (ACEs). By default, order in the list is relevant (see "ACL and ACE Evaluation"). Example 27-2shows a simple ACL that contains only the ACE of Example 27-1.

Example 27-2 Simple Access Control List (ACL) that Grants a Privilege

<acl description="myacl"
     xmlns="http://xmlns.oracle.com/xdb/acl.xsd"
     xmlns:dav="DAV:"
     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
     xsi:schemaLocation="http://xmlns.oracle.com/xdb/acl.xsd
                         http://xmlns.oracle.com/xdb/acl.xsd">
  <ace>
    <grant>true</grant>
    <principal>dav:owner</principal>
    <privilege>
      <dav:all/>
    </privilege>
  </ace>
</acl>