Oracle 1z0-148 問題集

質問 1：
In your schema, the DEPARTMENTS table contains the columns DEPARTMENT_ID and DEPARTMENT_NAME.
You want to display the department name for existing department id 10.
With SERVEROUTPUT enabled, which two blocks of code will give the required output?
A. DECLARETYPE dept_cur IS REF CURSOR RETURN departments%ROWTYPE;cv1
dept_cur;v_dept_name departments.department_name%TYPE;BEGINOPEN cv1 FOR SELECT * FROM departments WHERE department_id=10;FETCH cv1. department_name INTO v_dept_name;DBMS_OUTPUT.PUT_LINE (v_dept_name);CLOSE cv1;END;
B. DECLARETYPE dept_cur IS REF CURSOR;cv1 dept_cur;v_dept_name departments.
department_name%TYPE;BEGINOPEN cv1 FOR SELECT department_name FROM departments WHERE department_id=10;IF cv1 IS NOT NULL THENFETCH cv1 INTO v_dept_name;DBMS_OUTPUT.PUT_LINE (v_dept_name);END IFCLOSE cv1;END;
C. DECLAREcv1 SYS_REFCURSOR;v_dept_name
departments.department_name%TYPE;BEGINEXECUTE IMMEDIATE 'BEGIN OPEN: cv1 FORSELECT department_name FROM departmnets WHERE department_id=10: END;'USING IN cv1;FETCH cv1 INTO v_dept_name;DBMS_OUTPUT.PUT_LINE (v_dept_name);CLOSE cv1;END;
D. DECLARETYPE names_t IS TABLE OF SYS_REFCURSOR INDEX BY PLS_INTEGER;cv1 names_t;v_dept_name departments.department_name%TYPE;BEGINOPEN cv1 FOR SELECT department_name FROM departments WHERE department_id=10;FETCH cv1 INTO v_dept_name;DBMS_OUTPUT.PUT_LINE (v_dept_name);CLOSE cv1;END;
正解：B,C

質問 2：
Examine this code:

Which two are valid correlations to the code to avoid or mitigate SQL Injection?
A. CREATE PROCEDURE list_products_dynamic (p_product_name VARCHAR2 DEFAULT NULL) ASv_bind VARCHAR2 (400);BEGINv_bind := '%' | | p_prodname | | '%';FOR rec IN ('SELECT name, price FROM prod_info WHERE name like ' | | v_bind) LOOPDBMS_OUTPUT.PUT_LINE ('Product Info: ' | | rec.name | | ',' | | rec.price);END LOOP;END;
B. CREATE PROCEDURE list_products_dynamic (p_product_name VARCHAR2 DEFAULT NULL) ASTYPE cv_pordtyp IS REF CURSOR;cv cv_prodtyp;v_prodname prod_info.name%TYPE;v_listprice prod_info.price%TYPE;v_bind VARCHAR2 (400);BEGINv_bind := '%' | | p_product_name | |
'%';OPEN cv FOR 'SELECT name, price FROM prod_info WHERE name LIKE ' | | v_bind;LOOPFETCH cv INTO v_prodname, v_listprice;EXIT WHEN cv%NOTFOUND;DBMS_OUTPU.PUT_LINE ('Product Info: ' | | v_prodname | | ',' | | v_listprice);END LOOP;CLOSE cv;END;
C. CREATE PROCEDURE list_products_dynamic (p_product_name VARCHAR2 DEFAULT NULL) ASTYPE cv_pordtyp IS REF CURSOR;cv cv_prodtyp;v_prodname prod_info.name%TYPE;v_listprice prod_info.price%TYPE;v_bind VARCHAR2 (400);BEGINv_bind := '%' | | p_product_name | |
'%';OPEN cv FOR 'SELECT name, price FROM prod_info WHERE name LIKE :b' USING v_bind;LOOPFETCH cv INTO v_prodname, v_listprice;EXIT WHEN cv%NOTFOUND;DBMS_OUTPU.PUT_LINE ('Product Info: ' | | v_prodname | | ',' | | v_listprice);END LOOP;CLOSE cv;END;
D. CREATE PROCEDURE list_products_dynamic (p_product_name VARCHAR2 DEFAULT NULL) ASTYPE cv_pordtyp IS REF CURSOR;cv cv_prodtyp;v_prodname prod_info.name%TYPE;v_listprice prod_info.price%TYPE;v_bind VARCHAR2 (400);BEGINv_bind := DBMS_ASSERT.ENQUOTE_LITERAL ('%' | | p_product_name | | '%');OPEN cv FOR 'SELECT name, price FROM prod_info WHERE name LIKE ' | | v_bind;LOOPFETCH cv INTO v_prodname, v_listprice;EXIT WHEN cv%NOTFOUND;DBMS_OUTPU.PUT_LINE ('Product Info: ' | | v_prodname | | ',' | | v_listprice);END LOOP;CLOSE cv;END;
E. CREATE PROCEDURE list_products_dynamic (p_product_name VARCHAR2 DEFAULT NULL) ASTYPE cv_pordtyp IS REF CURSOR;cv cv_prodtyp;v_prodname prod_info.name%TYPE;v_listprice prod_info.price%TYPE;v_bind VARCHAR2 (400);BEGINv_bind := '''%' | | p_product_name | |
'%''';OPEN cv FOR 'SELECT name, price FROM prod_info WHERE name LIKE ' | | v_bind;LOOPFETCH cv INTO v_prodname, v_listprice;EXIT WHEN cv%NOTFOUND;DBMS_OUTPU.PUT_LINE ('Product Info: ' | | v_prodname | | ',' | | v_listprice);END LOOP;CLOSE cv;END;
正解：A,B

質問 3：
Which three statements are correct with reference to intra unit inlining?
A. You cannot inline an external subroutine.
B. You cannot inline local subroutines.
C. Setting PLSQL_OPTIMIZE_LEVEL to 2 means automatic inlining is attempted.
D. Programs that make use of smaller helper subroutines are good candidates for inlining.
E. Pragmas apply only to calls in the next statement following the pragma.
F. Inlining will always decrease the size of a unit.
正解：A,D,E

質問 4：
Refer to the Exhibit.

Examine this procedure created in a session where PLSQL_OPTIMIZE_LEVEL =2:

PL/SQL tracing in enabled in a user session using this command:
EXEC DBMS_TRACE.SET_PLSQL_TRACE (DBMS_TRACE.TRACE_ENABLED_LINES)
The procedure is executed using this command:
EXEC PRC_1
Examine the exhibit for the content of the PLSQL_TRACE_EVENTS table.
Why is tracing excluded from the PLSQL_TRACE_EVENTS table?
A. DBMS_TRACE.TRACE_ENABLED_LINES traces only exceptions in subprograms.
B. PRC_1 is compiled with the default AUTHID DEFINER clause.
C. PRC_1 is not compiled with debugging information.
D. Tracing is not enabled with the TRACE_ENABLED_CALLS option.
E. Tracing will be enabled only for the second execution of PRC_1.
正解：C

質問 5：
Examine this code executed in the ORA1 schema:

Examine this code executed by DBA_USER who has been granted the DBA role:
REVOKE INHERIT PRIVILEGES ON USER dba_user FROM PUBLIC;
Examine this query:
SELECT return_date (1) FROM dual;
What is the result of executing this query in the DBA_USER schema?
A. It will fail with a runtime error complaining of insufficient INHERIT PRIVILEGES.
B. It will execute successfully and return the date but the DBA role will not be granted to ORA1.
C. It will execute successfully, return the date and the DBA role will be granted to ORA1.
D. It will fail with a compile-time error.
正解：C

質問 6：
You are designing and developing a complex database application built using many dynamic SQL statements.
Which option could expose your code to SQL injection attacks?
A. Using automated tools to generate code
B. Using bind variables instead of directly concatenating parameters into dynamic SQL statements
C. Having excess database privileges
D. Not validating parameters which are concatenated into dynamic SQL statements
E. Validating parameters before concatenating them into dynamic SQL statements
正解：D