CREST Practitioner Security Analyst (CPSA) Practice

What does the command 'SELECT name, password, astatus FROM sys.user$;' do in Oracle?

1. It lists all password hashes

2. It displays user information from the system

3. It retrieves version details of the database

4. It lists the names of all users

The correct answer is: It displays user information from the system

The command 'SELECT name, password, astatus FROM sys.user$;' retrieves user information from the system by querying the 'user$' table in Oracle's data dictionary. This table contains critical details about the database users, including their names, password hashes, and account status. By selecting 'name', 'password', and 'astatus', you gain insights into the identities of users, the hashes of their passwords (as stored in the database), and the status of their accounts (whether they are active, locked, etc.). This is vital for database administration, auditing, and security management. The command effectively aggregates relevant user data necessary for understanding the current user landscape within the Oracle environment. In contrast, the other options do not align with this command's function. For instance, while listing all password hashes might seem related, the command specifically includes more user-related information beyond just hashes. Similarly, retrieving version details of the database and listing the names of all users either lacks the broader context of account status or does not account for the password component at all.