1Z0-116 practice question 5 of 15

A policy predicate function Is associated with an enabled Virtual Private Database (VPD) policy for a table. Which two arguments are passed to the function?

Full set: 90 questions
Answer options
A: the table name Correct answer
B: the schema owning the table Correct answer
C: the policy type
D: the policy name
E: the policy group to which the policy belongs
Correct Answer:
A. the table name; B. the schema owning the table
Explanation

A Virtual Private Database (VPD) policy predicate function is invoked by the Oracle server whenever a user accesses the associated table. The server automatically passes two arguments to this function: the schema name of the object being accessed and the name of the object itself (e.g., the table or view name). The function uses these arguments, along with session context information (like SYSCONTEXT), to dynamically generate a WHERE clause predicate. This predicate is then appended to the user's SQL statement to enforce row-level security.

Why Incorrect

C. The policy type (e.g., DYNAMIC, STATIC) is part of the policy definition, not an argument passed to the predicate function at runtime.
D. The policy name is used to identify the policy but is not passed as an argument to its associated function during execution.
E. The policy group is an organizational container for policies and is not passed as a runtime argument to the predicate function.

References

- Oracle Database Security Guide 21c, Chapter 8, "Using Oracle Virtual Private Database to Control Data Access". The section "Step 2: Create the Policy Function" explicitly shows the required signature: FUNCTION policyfunctionname (schemaname IN VARCHAR2, objectname IN VARCHAR2) RETURN VARCHAR2;.

- Oracle Database PL/SQL Packages and Types Reference 21c, "DBMSRLS". The documentation for ADDPOLICY shows the functionschema and policyfunction parameters, and the standard signature for the policy function confirms the two arguments.

Scroll to Top