Chapter 5, Implementing VPD with Fine Grained Access Control

Question No.	Answer	Explanation
1	c	The policy function returns the predicate as <Column>=<Value>.
2	b	The security policy can be associated to one and only one schema object.
3	b and c	The DBMS_RLS package is a SYS owned built in package whose public synonym is shared amongst the users. It is a useful package to work with policies and policy groups.
4	b	There is no such privilege as CREATE_CONTEXT. It should be the CREATE ANY CONTEXT privilege. All context metadata is in either ALL_CONTEXTS or DBA_CONTEXTS.
5	a	Context creation followed by the creation of its trusted package. A policy function is created for the predicate and the security is attached for the protection.
6	b	Policy groups are created by the collection of policies under them.
7	b and d	Default policy type is Dynamic. Shared static policy is the one where a static policy can be shared by multiple database objects. In such cases, the column appearing in the predicate must exist in all the tables.
8	c and d	Either a DBA or a user with the DBA role can create and drop an application context. A DBA can modify certain USERENV attributes, but not all.
9	a	The predicate information returned by the policy function is retained in SGA until the query is reparsed. During the parse stage, the current context information is matched with the latest. If the value has been changed, Oracle synchs the context values; otherwise the old value is retained.
10	a	The applicable policy tries to access the F_JOB_POLICY policy function which doesn't exist in the ORADEV schema.