1Z0-053 争议题目解析304

1Z0-053 争议题目解析304

考试科目：1Z0-053
题库版本：V13.02

题库中原题为：

304.What privileges must be granted to allow an account to create the recovery catalog? (Choose all that
apply.)
A. RECOVERY_CATALOG_OWNER
B. DBA
C. RESOURCE
D. SELECT ANY DICTIONARY
E. CONNECT
Answer: AC

争议点：
题库答案是AC。
网上争议，只有A，或者ACE。
实际上，只赋予RECOVERY_CATALOG_OWNER角色是可以的。
也就是说RESOURCE和CONNECT角色都不是必须的。
此题如果是单选题，那么无疑就是A，
但是此题作为多选题的话，歧义就比较大了，选择AC或者ACE都不能说是不对。

让我们来看下RECOVERY_CATALOG_OWNER角色的权限：

SQL> create user xxx identified by xxx;

User created.

SQL> grant RECOVERY_CATALOG_OWNER to xxx;

Grant succeeded.

SQL> conn xxx/xxx
Connected.
SQL> select * from user_role_privs;

USERNAME                       GRANTED_ROLE                   ADM DEF OS_
------------------------------ ------------------------------ --- --- ---
XXX                            RECOVERY_CATALOG_OWNER         NO  YES NO

SQL> select * from role_sys_privs;

ROLE                           PRIVILEGE                                ADM
------------------------------ ---------------------------------------- ---
RECOVERY_CATALOG_OWNER         CREATE SYNONYM                           NO
RECOVERY_CATALOG_OWNER         CREATE CLUSTER                           NO
RECOVERY_CATALOG_OWNER         ALTER SESSION                            NO
RECOVERY_CATALOG_OWNER         CREATE DATABASE LINK                     NO
RECOVERY_CATALOG_OWNER         CREATE SESSION                           NO
RECOVERY_CATALOG_OWNER         CREATE TABLE                             NO
RECOVERY_CATALOG_OWNER         CREATE SEQUENCE                          NO
RECOVERY_CATALOG_OWNER         CREATE PROCEDURE                         NO
RECOVERY_CATALOG_OWNER         CREATE VIEW                              NO
RECOVERY_CATALOG_OWNER         CREATE TYPE                              NO
RECOVERY_CATALOG_OWNER         CREATE TRIGGER                           NO

11 rows selected.

再来看下connect, resource角色的权限：

SQL> create user yyy identified by yyy;

User created.

SQL> grant connect, resource to yyy;

Grant succeeded.

SQL> conn yyy/yyy
Connected.
SQL>  select * from role_sys_privs;

ROLE                           PRIVILEGE                                ADM
------------------------------ ---------------------------------------- ---
RESOURCE                       CREATE SEQUENCE                          NO
RESOURCE                       CREATE TRIGGER                           NO
RESOURCE                       CREATE CLUSTER                           NO
RESOURCE                       CREATE PROCEDURE                         NO
RESOURCE                       CREATE TYPE                              NO
CONNECT                        CREATE SESSION                           NO
RESOURCE                       CREATE OPERATOR                          NO
RESOURCE                       CREATE TABLE                             NO
RESOURCE                       CREATE INDEXTYPE                         NO

9 rows selected.

确定，RECOVERY_CATALOG_OWNER角色完全包含了connect角色的权限，不完全包含resource的权限。

初步结论：
保留争议，暂时遵循题库答案，选择AC。