QUESTION 87 SEC_MAX_FAILED_LOGIN_ATTEMPTS

You are administering a database and you receive a requirement to apply the following restrictions :

1. A connection must be terminated after four unsuccessful login attempts by user.

2. A user should not be able to create more than four simultaneous sessions .

3. User session must be terminated after 15 minutes of inactivity.

4. Users must be prompted to change their passwords every 15 days.

How would you accomplish these requirements?

A. by granting a secure application role to the users

B. by creating and assigning a profile to the users and setting the REMOTE_OS_AUTHENT parameter to  FALSE 

C. By creating and assigning a profile to the users and setting the  SEC_MAX_FAILED_LOGIN_ATTEMPTS parameter to 4

D. By Implementing Fine-Grained Auditing (FGA) and setting the REMOTE_LOGIN_PASSWORD_FILE  parameter to NONE.

E. By implementing the database resource Manager plan and setting the  SEC_MAX_FAILED_LOGIN_ATTEMPTS parameters to 4.

Correct Answer: C

 

SEC_MAX_FAILED_LOGIN_ATTEMPTS specifies the number of authentication attempts that can bemade by a client on a connection to the server process. These login attempts can be for multiple user  accounts in the same connection. After the specified number of failure attempts, the connection will be  automatically dropped by the server process.

 

 

您正在管理一个数据库，并收到一个要求，要求应用以下限制:

1. 在用户四次失败的登录尝试后，必须终止连接。

2. 一个用户不能同时创建四个以上的会话。

3.用户会话必须在15分钟不活动后终止。

4. 用户必须每15天修改一次密码。

你将如何完成这些要求?

通过向用户授予安全应用程序角色

B.创建配置文件并分配给用户，参数REMOTE_OS_AUTHENT设置为FALSE

C.通过创建并分配一个配置文件给用户，并将SEC_MAX_FAILED_LOGIN_ATTEMPTS参数设置为4

D.通过实现细粒度审计(FGA)，并设置REMOTE_LOGIN_PASSWORD_FILE参数为NONE。

E.通过实现数据库资源管理器计划并将SEC_MAX_FAILED_LOGIN_ATTEMPTS参数设置为4。

正确答案:C

 

SEC_MAX_FAILED_LOGIN_ATTEMPTS指定客户端在连接到服务器进程时可以进行的身份验证尝试的次数。这些登录尝试可以用于同一连接中的多个用户帐户。在指定的失败次数之后，连接将被服务器进程自动删除。