ExamGecko
Question list
Search
Search

List of questions

Search

Question 53 - DEA-C01 discussion

Report
Export

Which of the below concepts/functions helps while implementing advanced Column-level Security?

A.
CURRENT_ROLE
Answers
A.
CURRENT_ROLE
B.
INVOKER_ROLE
Answers
B.
INVOKER_ROLE
C.
Role Hierarchy
Answers
C.
Role Hierarchy
D.
CURRENT_CLIENT
Answers
D.
CURRENT_CLIENT
Suggested answer: A, B, C

Explanation:

Column-level Security supports using Context Functions in the conditions of the masking policy body to enforce whether a user has authorization to see data. To determine whether a user can see data in a given SQL statement, it is helpful to consider:

Masking policy conditions using CURRENT_ROLE target the role in use for the current session.

Masking policy conditions using INVOKER_ROLE target the executing role in a SQL statement.

Role hierarchy Determine if a specified role in a masking policy condition (e.g. ANALYST custom role) is a lower privilege role in the CURRENT_ROLE or INVOKER_ROLE role hierarchy. If so, then the role returned by the CURRENT_ROLE or INVOKER_ROLE functions inherits the privileges of the specified role.

asked 23/09/2024
Mike de Roo
29 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first