System and Object Privileges in Oracle Database
Which three are true about system and object privileges? (Choose three.)
Community Votes
67% of anonymous learners picked answer ACD. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The exam tests the distinction between System Privilege cascading (via ADMIN OPTION) and Object Privilege cascading (via GRANT OPTION), often confusing candidates with the 'WITH GRANT OPTION' syntax restrictions.
This question tests the rules for granting system and object privileges, specifically focusing on WITH GRANT OPTION limitations and cascading revocation effects. The correct answer identifies that object privilege grants cannot cascade to roles, but revoking them does cascade, and REFERENCES is required for foreign keys.
Many candidates incorrectly choose Option B, believing that WITH GRANT OPTION can be used when granting to a role, which is false in Oracle; it only applies to users or PUBLIC.
Community Discussion (5 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Option A is true because Oracle restricts the WITH GRANT OPTION clause for object privileges to users or PUBLIC, not roles. Option C is true because if User A grants an object privilege to User B with GRANT OPTION, and then A's privilege is revoked, B's privilege is also revoked (cascading). Option D is true because creating a foreign key referencing another schema requires the REFERENCES object privilege on that table.Why the Other Options Are Wrong
Option B is false because you cannot specify WITH GRANT OPTION when granting an object privilege to a role. Option E is false because revoking a system privilege granted with WITH ADMIN OPTION does NOT have a cascading effect; the grantee retains the privilege.Community Comment Notes
Community consensus is split between ACD and BCE. Some users argue for BCE based on misunderstanding the cascading rule for object privileges. Others correctly identify ACD, noting that while A seems restrictive, it aligns with Oracle documentation stating roles cannot receive grants with GRANT OPTION. One user noted that altering tables requires ALTER ANY TABLE, not REFERENCES, confirming D is about FK constraints.Exam Strategy
Memorize the difference between ADMIN OPTION (system privileges, no cascade on revoke) and GRANT OPTION (object privileges, cascade on revoke). Remember that roles generally cannot hold GRANT OPTION for object privileges.
Frequently Asked Questions
Why can't WITH GRANT OPTION be used with roles?
Oracle does not allow granting object privileges with WITH GRANT OPTION to roles. It is only permitted for users or PUBLIC.
Does revoking WITH ADMIN OPTION cascade?
No. Revoking a system privilege granted with WITH ADMIN OPTION does not remove the privilege from those who received it via that grant.