Explanation:
Prior to Oracle9i, value-based auditing was possible with before and after triggers for the INSERT, UPDATE, and DELETE operations. Oracle9i extended the concept of the finegrained access to the auditing functions to enable you to audit SELECT operations. FGA can audit attempts to access information even if the information itself was not accessed.
Incorrect Answers:
1: FGA is not an extension of FGAC.
2: FGAC and FGA do not prohibits or enables access by row. FGA specifically audit just the successful operations or the unsuccessful operations.
3: FGA can use the Secure Application role also.
Reference:
OCP Oracle9i Database: New Features for Administrators, Daniel Benjamin, p. 21-22
Chapter 1: Security Enhancements
Oracle 9i New Features, Robert Freeman, p. 132-139
Chapter 5: Miscellaneous Oracle9i Features and Enhancements

---