OCP-1Z0-052-V8.02-161题

161. In your database instance, the user sessions are connected to the database server from the remote

machines. You want to achieve the following for these users:

1: The user account must be locked after four unsuccessful login attempts.
PASSWORD_LOCK_TIME

2: The user must be prompted to change the password at regular intervals.
PASSWORD_LIFE_TIME

3: The user may not have more than three simultaneous sessions.
SESSIONS_PER_USER

4: The user session must automatically be logged off if more than 10 minutes elapsed time used.
CONNECT_TIME

How would you accomplish the above?

A.by assigning profiles for the users

B.by implementing Fine-Grained Auditing (FGA)

C.by granting a secure application role to the users

D.by implementing the Database Resource Manager plan

Answer: A

答案解析：

参考：/article/1629024.html

创建一个概要文件，来实施口令安全。

default概要文件的配置。

sys@TEST0924> select * from dba_profiles where profile='DEFAULT';
PROFILE RESOURCE_NAME RESOURCE LIMIT
------------------------------ -------------------------------- -------- ----------------------------------------
DEFAULT COMPOSITE_LIMIT KERNEL UNLIMITED
DEFAULT SESSIONS_PER_USER KERNEL UNLIMITED
DEFAULT CPU_PER_SESSION KERNEL UNLIMITED
DEFAULT CPU_PER_CALL KERNEL UNLIMITED
DEFAULT LOGICAL_READS_PER_SESSION KERNEL UNLIMITED
DEFAULT LOGICAL_READS_PER_CALL KERNEL UNLIMITED
DEFAULT IDLE_TIME KERNEL UNLIMITED
DEFAULT CONNECT_TIME KERNEL UNLIMITED
DEFAULT PRIVATE_SGA KERNEL UNLIMITED
DEFAULT FAILED_LOGIN_ATTEMPTS PASSWORD 10
DEFAULT PASSWORD_LIFE_TIME PASSWORD 180
DEFAULT PASSWORD_REUSE_TIME PASSWORD UNLIMITED
DEFAULT PASSWORD_REUSE_MAX PASSWORD UNLIMITED
DEFAULT PASSWORD_VERIFY_FUNCTION PASSWORD NULL
DEFAULT PASSWORD_LOCK_TIME PASSWORD 1
DEFAULT PASSWORD_GRACE_TIME PASSWORD 7
16 rows selected.