Examine the following steps:
A DBA grants the CREATE TABLE system privilege with ADMIN OPTION to the user SIDNEY.
SIDNEY grants the CREATE TABLE system privilege to the HR user.
Which statement is true?
A. SIDNEY can revoke the CREATE TABLE system privilege only from HR, to whom he granted it.
B. HR can grant the CREATE TABLE system privilege toother users.
C. Neither SIDNEY nor HR can create new tables if the DBA revokes the CREATE TABLE privilege from SIDNEY.
D. HR still retains the CREATE TABLE system privilege if the DBA revokes the CREATE TABLE privilege from SIDNEY
|
Download Printable PDF. VALID exam to help you PASS. |
 |
answer is D
CORRECT ANSWER: D
https://docs.oracle.com/database/121/DBSEG/authorization.htm#GUID-EBD4B0D4-CE3F-4E00-B558-B55B01B3FF78
Notice that the example is basically the same as in the question.
Cascading Effects When Revoking System Privileges
There are no cascading effects when you revoke a system privilege that is related to DDL operations.
This applies regardless of whether the privilege was granted with or without the ADMIN option.
For example, assume the following:
1. The security administrator grants the CREATE TABLE system privilege to user jfee with the ADMIN option.
2. User jfee creates a table.
3. User jfee grants the CREATE TABLE system privilege to user tsmith.
4. User tsmith creates a table.
5. The security administrator revokes the CREATE TABLE system privilege from user jfee.
6. The table created by user jfee continues to exist. User tsmith still has the table and the CREATE TABLE system privilege.
You can observe cascading effects when you revoke a system privilege related to a DML operation. If the SELECT ANY TABLE privilege is revoked from a user, then all procedures contained in the user’s schema relying on this privilege can no longer be executed successfully until the privilege is reauthorized