OCP-1Z0-052-V8.02-161题

161. In your database instance, the user sessions are connected to the database server from the remote

machines. You want to achieve the following for these users:

1: The user account must be locked after four unsuccessful login attempts. PASSWORD_LOCK_TIME

2: The user must be prompted to change the password at regular intervals. PASSWORD_LIFE_TIME

3: The user may not have more than three simultaneous sessions. SESSIONS_PER_USER

4: The user session must automatically be logged off if more than 10 minutes elapsed time used. CONNECT_TIME

How would you accomplish the above?

A.by assigning profiles for the users

B.by implementing Fine-Grained Auditing (FGA)

C.by granting a secure application role to the users

D.by implementing the Database Resource Manager plan

Answer: A

答案解析：

参考：http://blog.csdn.net/rlhua/article/details/12277557

创建一个概要文件，来实施口令安全。

default概要文件的配置。

sys@TEST0924> select * from dba_profiles where profile='DEFAULT';

PROFILE RESOURCE_NAME RESOURCE LIMIT

------------------------------ -------------------------------- -------- ----------------------------------------

DEFAULT COMPOSITE_LIMIT KERNEL UNLIMITED

DEFAULT SESSIONS_PER_USER KERNEL UNLIMITED

DEFAULT CPU_PER_SESSION KERNEL UNLIMITED

DEFAULT CPU_PER_CALL KERNEL UNLIMITED

DEFAULT LOGICAL_READS_PER_SESSION KERNEL UNLIMITED

DEFAULT LOGICAL_READS_PER_CALL KERNEL UNLIMITED

DEFAULT IDLE_TIME KERNEL UNLIMITED

DEFAULT CONNECT_TIME KERNEL UNLIMITED

DEFAULT PRIVATE_SGA KERNEL UNLIMITED

DEFAULT FAILED_LOGIN_ATTEMPTS PASSWORD 10

DEFAULT PASSWORD_LIFE_TIME PASSWORD 180

DEFAULT PASSWORD_REUSE_TIME PASSWORD UNLIMITED

DEFAULT PASSWORD_REUSE_MAX PASSWORD UNLIMITED

DEFAULT PASSWORD_VERIFY_FUNCTION PASSWORD NULL

DEFAULT PASSWORD_LOCK_TIME PASSWORD 1

DEFAULT PASSWORD_GRACE_TIME PASSWORD 7

16 rows selected.