QUESTION 35 统一审计策略

QUESTION 35
You wish to enable an audit policy for all database users, except SYS, SYSTEM, and SCOTT. You issue the following statements:
SQL> AUDIT POLICY ORA_DATABASE_PARAMETER EXCEPT SYS;
SQL> AUDIT POLICY ORA_DATABASE_PARAMETER EXCEPT SYSTEM;
SQL> AUDIT POLICY ORA_DATABASE_PARAMETER EXCEPT SCOTT;
For which database users is the audit policy now active?
A. All users except SYS
B. All users except SCOTT
C. All users except SYS and SCOTT
D. All users except SYS, SYSTEM, and SCOTT
Correct Answer: B
Section: (none)
Explanation
Explanation/Reference:
Explanation:
If you run multiple AUDIT statements on the same unified audit policy but specify different EXCEPT users, then Oracle Database uses the last exception user list, not any of the users from the preceding lists. This means the effect of the earlier AUDIT POLICY ... EXCEPT statements are overridden by the latest AUDIT POLICY ... EXCEPT statement.
Note:
* The ORA_DATABASE_PARAMETER policy audits commonly used Oracle Database parameter settings. By default, this policy is not enabled.
* You can use the keyword ALL to audit all actions. The following example shows how to audit all actions on the HR.EMPLOYEES table, except actions by user pmulligan. Example Auditing All Actions on a Table
CREATE AUDIT POLICY all_actions_on_hr_emp_pol
ACTIONS ALL ON HR.EMPLOYEES;
AUDIT POLICY all_actions_on_hr_emp_pol EXCEPT pmulligan;

 

问题35

需要为除SYS、SYSTEM和SCOTT外的所有数据库用户启用审计策略。你发表以下声明:

SQL> AUDIT POLICY ORA_DATABASE_PARAMETER EXCEPT SYS;
SQL> AUDIT POLICY ORA_DATABASE_PARAMETER EXCEPT SYSTEM;
SQL> AUDIT POLICY ORA_DATABASE_PARAMETER EXCEPT SCOTT;

对于哪些数据库用户，审计策略现在处于活动状态?

A.除SYS外的所有用户

B.除SCOTT外的所有用户

C.所有用户，除了SYS和SCOTT

D.除SYS、SYSTEM和SCOTT外的所有用户

正确答案是:B

部分:(一)

解释

解释/参考:

解释:

如果在同一个统一审计策略上运行多个审计语句，但指定的用户不同，Oracle数据库将使用最后一个例外用户列表，而不是上述列表中的任何用户。这意味着早期审计策略的影响…除非报表被最新的审计策略覆盖…除了声明。

注意:

* ORA_DATABASE_PARAMETER策略审计常用Oracle数据库参数设置。缺省情况下，不启用此策略。

*可以使用关键字ALL审计所有操作。下面的示例演示如何审计HR上的所有操作。雇员表，除了用户pmulligan的操作。审计表上的所有操作

创建审计策略“all_actions_on_hr_emp_pol”

所有针对人力资源员工的行动;

审计策略all_actions_on_hr_emp_pol (pmulligan除外);