Be able to relocate a TDE wallet by editing sqlnet.ora, start AutoUpgrade with the correct java -jar command, and explain why catupgrd.sql must run after a major upgrade. The critical point: the wallet path lives in sqlnet.ora, not in the wallet itself.
Start practicing
Security And Upgrades — choose a session length
Free · No account required
Domain overview
This domain covers Oracle Database 23ai security and upgrade mechanics: Transparent Data Encryption wallet relocation, AutoUpgrade job execution, and post-upgrade dictionary maintenance. Questions test concrete file paths, command syntax, and the operational consequences of skipping required upgrade steps during major version transitions.
Exam objectives
Updating sqlnet.ora ENCRYPTION_WALLET_LOCATION when relocating the TDE wallet
Launching AutoUpgrade with java -jar autoupgrade.jar -config <config>
Running catupgrd.sql or the parallel catctl.pl after a major version upgrade
Factors affecting upgrade duration: data volume, component count, and parallelism settings
Editing the wallet files themselves instead of the sqlnet.ora parameter that points Oracle to the new wallet directory.
Assuming AutoUpgrade runs automatically; it requires an explicit java -jar invocation with a valid config file.
Skipping catupgrd.sql, leaving the data dictionary inconsistent and the database unusable or partially upgraded.
Click any question to see the full explanation and answer options, or start a focused practice session above.
Which view should you query to verify the encryption status of tablespaces in 23ai?
2Which component is required to implement Transparent Data Encryption (TDE) in 23ai?
3What is the primary benefit of using Unified Auditing in 23ai?
4You need to perform a Rolling Upgrade using Data Guard. What is the minimum required configuration?
5You are upgrading from 19c to 23ai and need to identify incompatible parameters before the upgrade. Which tool should you use?
6You want to enforce password complexity in 23ai using a profile. Which clause is used to reference a custom verification function?
7Which user is responsible for the management of the Unified Audit trail?
8What is the purpose of the 'Database Vault' option?
9Which utility is used to perform a 'fixup' during the AutoUpgrade process?
10How do you ensure that a user cannot connect to the database via SQL*Plus but can connect via an application service?
11What is the primary function of the Database Resident Connection Pooling (DRCP) in a 23ai environment?
12What is the consequence of not running the 'catupgrd.sql' script after a major version upgrade?
13When configuring a secure listener in 23ai, which protocol is recommended for encrypted communication?
14What is the purpose of the 'Wallet' in Oracle security?
15Which file needs to be updated when you move the wallet location in 23ai?
16What is the primary purpose of 'Data Masking' in the Oracle Data Masking and Subsetting Pack?
17Which command is used to start the AutoUpgrade process?
18You have a 19c database. Which tool must you run to ensure the database is ready for an upgrade to 23ai?
19In 23ai, if you want to audit 'CREATE TABLE' statements, which policy type should you use?
20When upgrading a database, what is a 'Flashback Database' used for?
21What is the best way to ensure an encrypted connection between the application server and the database?
22What is the primary role of the 'Patching' phase in an upgrade?
23What is the recommended tool to apply a bundle patch to a 23ai environment?
24Which view can you use to check the status of TDE wallet encryption?
25What happens to a traditional audit record when you migrate to Unified Auditing in 23ai?
26Which THREE actions are part of the AutoUpgrade process?
27Which THREE things should be checked before upgrading to 23ai?
28Which TWO files are modified to configure a secured listener?
29Which TWO are common audit types in Oracle?
30Which THREE factors influence the duration of a database upgrade?
31Which THREE tasks are performed after an upgrade is finished?
32Which TWO components must be secured to maintain database integrity?
33Which THREE items are generally included in an Oracle Patch?
34Which TWO methods are used to verify the success of an upgrade?
35Which THREE things can prevent an AutoUpgrade process from starting?
36In Oracle 23ai, you want to use Database Vault to prevent highly privileged users (like SYS) from accessing sensitive application data. Which component must be enabled and configured to achieve this separation of duty?
37You are applying an Oracle Release Update (RU) in a Data Guard environment. Following the 'Rolling Upgrade' methodology, which instance should be patched first to ensure continuous availability?
38You are migrating to 23ai and need to use the 'DBMS_COMPARISON' package to verify data integrity between the old and new instances. What is the prerequisite for this operation?
39Which THREE of the following are valid methods to patch an Oracle 23ai database?
40When configuring Oracle Network Encryption, which TWO of the following parameters in the sqlnet.ora file are used to specify encryption settings?
41You are reviewing security best practices for 23ai. Which THREE of the following represent recommended actions to harden a production instance?
42You are the lead DBA for a 23ai production database. Company policy requires that all administrative actions performed by DBAs be recorded in the Unified Audit Trail. You have already created an audit policy named DBA_ACTIONS that captures the relevant actions, but you need to ensure that it is enforced. Which action must you perform?
43You are upgrading an Oracle Database 19c non-CDB to Oracle Database 23ai. The database uses a custom application that relies on the DBMS_LOB package and has a large amount of PL/SQL code. You have chosen the AutoUpgrade utility to perform the upgrade. During the upgrade, you encounter an error related to the DBMS_LOB package. Which action should you take to resolve the issue?
44You are implementing Transparent Data Encryption (TDE) in Oracle Database 23ai. You have already configured the keystore and created the master encryption key. Now you need to encrypt several existing tablespaces and columns. Which two actions must you perform to ensure that the data is encrypted and accessible? (Choose two.)
45You are implementing Transparent Data Encryption (TDE) in a 23ai database. You have configured the wallet and set the encryption key. You need to ensure that the data in the USERS tablespace is encrypted. Which statement correctly describes the process to encrypt the USERS tablespace?
46You are preparing to upgrade a 19c database to 23ai using the AutoUpgrade utility. You have created the configuration file and run the upgrade in analyze mode. The analysis completes successfully. What is the next step you should perform according to best practices?
47You are preparing to upgrade a 19c non-CDB database to Oracle Database 23ai using the AutoUpgrade utility. Before running the upgrade, you must create the AutoUpgrade configuration file with the correct parameters. Which file format does AutoUpgrade require for its configuration file?
48You are upgrading a 19c multitenant container database (CDB) to Oracle Database 23ai using AutoUpgrade. The source CDB contains three pluggable databases (PDBs). After running the upgrade, you need to verify that the upgrade was successful and that no manual intervention is required. Which two actions should you perform? (Choose two.)
49You are upgrading a 19c container database (CDB) to Oracle Database 23ai using AutoUpgrade. As part of the upgrade, you need to ensure that the database is in the correct state and that all prerequisites are met. Which two actions should you perform before starting the upgrade? (Choose two.)
50You are managing an Oracle Database 23ai environment with Transparent Data Encryption (TDE) enabled. A security audit requires that you rotate the master encryption key for the database. You have already taken a backup of the keystore. Which command should you use to rotate the master key?
51You are administering an Oracle Database 23ai environment with Unified Auditing enabled. A new security policy requires that all failed logon attempts be audited. Which action should you take to meet this requirement?
52You are upgrading a 19c database to Oracle Database 23ai. The database uses a password-protected software keystore for TDE. During the upgrade, you need to ensure that the keystore remains accessible. Which command should you use to open the keystore automatically after the upgrade, without manual intervention?
53Your organization is migrating a critical 19c database to Oracle Database 23ai. The business requires that the cutover downtime be minimized, ideally under 10 minutes. You have a large database (20 TB) and a high transaction rate. Which migration method should you use to achieve the least downtime?
Be able to relocate a TDE wallet by editing sqlnet.ora, start AutoUpgrade with the correct java -jar command, and explain why catupgrd.sql must run after a major upgrade. The critical point: the wallet path lives in sqlnet.ora, not in the wallet itself.
The Courseiva OCP question bank contains 53 questions in the Security And Upgrades domain. Click any question to see the full explanation and answer breakdown.
Start with a 10-question focused session to identify your baseline accuracy in this domain. Read every explanation — even for questions you answer correctly — to understand the reasoning. Once you score consistently above 80%, move to a 20–30 question session to confirm depth before moving to the next domain.
Yes — the session launcher on this page draws questions exclusively from the Security And Upgrades domain. Choose 10, 20, 30, or 50 questions for a focused session, or click individual questions to review them one by one.
Save your results, see per-domain analytics, and get readiness scores — free, for every certification.
Sign Up FreeFree forever · Every certification included