security quiz for ddd

data-safe/check-your-understanding/check-your-understanding.md

@@ -0,0 +1,82 @@
+# Check Your Understanding
+
+## Introduction
+
+This quiz reviews the core concepts from the Oracle Data Safe workshop. Complete the scored questions to confirm your understanding of how Data Safe helps assess security posture, discover and mask sensitive data, and enforce SQL Firewall policies.
+
+Estimated Time: 10 minutes
+
+### Objectives
+
+In this lab, you will:
+
+* Review the main purpose of Oracle Data Safe
+* Confirm how Security Assessment helps track configuration risk
+* Distinguish User Assessment from Security Assessment
+* Recognize the purpose of Data Discovery and Data Masking
+* Understand how SQL Firewall protects a database with an allow-list
+
+### Prerequisites
+
+Complete the previous workshop labs before taking this quiz.
+
+```quiz-config
+passing: 75
+badge: images/security-badge.png
+```
+
+## Task 1: Complete the quiz
+
+1. Review the questions before you submit your answers.
+
+2. Complete all scored quiz blocks below. You need 75% or higher to pass.
+
+    ```quiz score
+    Q: In Oracle Data Safe Security Assessment, what must you do to monitor security configuration drift on your target database over time?
+    - Create a new target database registration
+    * Set a baseline assessment
+    - Enable activity auditing
+    - Generate a PDF report
+    > Setting a baseline allows Data Safe to compare later assessment refreshes against it and highlight security drift over time.
+    ```
+
+    ```quiz score
+    Q: In Oracle Data Safe's User Assessment, which of the following actions can you perform? (Select all that apply)
+    * Evaluate user entitlements and roles
+    * Identify users with administrative privileges
+    - Monitor real-time user activities
+    * Assess password policies for compliance
+    > User Assessment helps evaluate user entitlements, privileged access, and password-related risk indicators. It does not provide real-time activity monitoring.
+    ```
+
+    ```quiz score
+    Q: In the Data Discovery lab, what is the output of a successful Data Discovery job in Oracle Data Safe?
+    - A masking policy ready to execute
+    * A sensitive data model (SDM) containing discovered sensitive columns and referential relationships
+    - An encrypted copy of the target database
+    - An audit policy applied to all sensitive tables
+    > Data Discovery produces a sensitive data model that lists discovered sensitive columns, their metadata, and referential relationships.
+    ```
+
+    ```quiz score
+    Q: Which of the following statements about Data Masking in Oracle Data Safe are true? (Select all that apply)
+    * Data masking permanently replaces sensitive data with fictitious yet realistic data
+    * Data masking preserves referential integrity by masking related columns consistently
+    * You can create a masking policy directly from a sensitive data model generated by Data Discovery
+    - Masked data does not need to pass any validation checks since it is fictitious
+    > Data masking replaces sensitive values, preserves referential integrity, and can use a sensitive data model as its source. Masked data still needs to pass validation checks so applications continue to function correctly.
+    ```
+
+    ```quiz score
+    Q: What is the correct sequence of steps when configuring SQL Firewall for a database user through Oracle Data Safe?
+    - Enable the firewall policy, capture SQL activities, generate allowlists
+    * Capture SQL activities, generate a firewall policy with allowlists, enable the firewall policy
+    - Generate allowlists, capture SQL activities, enable the firewall policy
+    - Enable the firewall policy, generate allowlists, capture SQL activities
+    > The correct workflow is to capture the user's normal SQL activity first, generate the policy and allow-list from that activity, and then enable enforcement.
+    ```
+
+## Acknowledgements
+
+* **Author** - Jody Glover, Linda Foinding
+* **Last Updated By/Date** - Linda Foinding, March 2026

data-safe/workshops/ocw26-sandbox/manifest.json

@@ -44,6 +44,12 @@
         "filename": "../../sqlfw/sqlfw-ocw.md",
         "type": "livelabs"
       },
+      {
+        "title": "Lab 7: Check Your Understanding",
+        "description": "Review key Oracle Data Safe concepts with a scored quiz.",
+        "filename": "../../check-your-understanding/check-your-understanding.md",
+        "type": "livelabs"
+      },
       {
         "title": "Need Help?",
         "description": "Solutions to Common Problems and Directions for Receiving Live Help",