1Z0-1104-25 Question 137
Select 2Your organization is preparing a new test environment from production data stored in an Oracle Autonomous Database. You must ensure that any personally identifiable information (PII) is protected from unauthorized testers, and you also want to evaluate the privileges assigned to database users for compliance. Which two OCI Data Safe functionalities would you primarily leverage to address these requirements?
- A
Activity Auditing
- B
Data Masking
- C
User Assessment
- D
SQL Tuning Advisor
Show answer and explanation
Correct answers: B, C
Explanation
OCI Data Safe offers several features to secure Oracle databases. Data Masking helps protect PII by anonymizing data in lower environments, while User Assessment checks and reports on user privileges. These two functionalities align directly with the scenario� objectives. For more details, refer to Oracle� documentation on Data Safe features and best practices for securing sensitive data in test environments.
- A. Incorrect.
Activity Auditing provides visibility into database operations and user activities, which can help with forensics and compliance. However, it does not directly ensure PII is masked or assess user privileges/roles in detail. It's beneficial but not the primary capability for the stated scenario.
- B. Correct.
Data Masking is correct because it allows you to replace sensitive data with anonymized, yet realistic, data in non-production environments�protecting PII from unauthorized access.
- C. Correct.
User Assessment is correct because it evaluates existing user accounts, their roles, and privileges. This helps you identify and remediate excessive or unnecessary privileges, ensuring security and compliance.
- D. Incorrect.
SQL Tuning Advisor is not part of OCI Data Safe functionalities. It is a database performance tool that helps optimize SQL queries, rather than masking data or auditing user privileges.