（158）You want to create a role to meet these requirements:

1: The role is to be protected from unauthorized usage.

2: The password of the role is not to be embedded in the application source code or stored in a table.

Which method would you use to restrict enabling of such roles?

A. Create the role with global authentication.

B. Create the role with external authentication.

C. Create the role as a secure application role.

D. Create the role as a password-protected role.

E. Create a role and use Fine-Grained Access Control (FGAC) to secure the role.

答案：（C）

解析：

《Security Guide》 Glossary

secure application role, 是授予给应用程序用户的数据库角色，通过调用者权限存储过程从数据库表获取角色的口令。

secure application role的口令不是嵌在应用程序中的

ITPub博客

Oracle 11G OCP 1Z0-052 158