OCP Practice Test 4 — 25 Questions

Question 1

Which THREE things should be checked before upgrading to 23ai?

Accepted Answer

Current patch levels. System resources, disk space, and patch levels are critical checks.

Answer

Table indexes

Answer

Application user passwords

Question 2

When configuring Oracle Network Encryption, which TWO of the following parameters in the sqlnet.ora file are used to specify encryption settings?

Accepted Answer

SQLNET.ENCRYPTION_TYPES_SERVER. SQLNET.ENCRYPTION_SERVER and SQLNET.ENCRYPTION_TYPES_SERVER are the primary parameters for configuring server-side network encryption.

Answer

TNS_ENCRYPTION_ENABLED

Answer

SQLNET.AUTHENTICATION_SERVICES

Answer

NETWORK_SECURE_MODE

Question 3

Which tool can be used to monitor the progress of an AutoUpgrade process?

Accepted Answer

AutoUpgrade Job Monitor. The AutoUpgrade tool provides a job monitor output in the log file directory.

Answer

ADRCI

Answer

SQL*Plus

Answer

Enterprise Manager

Question 4

Your organization requires that all data stored in the 23ai database be encrypted at rest using Transparent Data Encryption (TDE). You have configured the Keystore. Which command correctly rotates the master encryption key without re-encrypting all existing data blocks immediately?

Accepted Answer

ADMINISTER KEY MANAGEMENT SET KEY IDENTIFIED BY 'password' WITH BACKUP;. ADMINISTER KEY MANAGEMENT SET KEY IDENTIFIED BY 'password' WITH BACKUP rotates the master key, which is a metadata-only operation for TDE tablespaces.

Answer

ALTER SYSTEM SET ENCRYPTION KEY;

Answer

ALTER TABLESPACE USERS REKEY;

Answer

ALTER SYSTEM ROTATE MASTER KEY;

Question 5

Which TWO files are modified to configure a secured listener?

Accepted Answer

listener.ora. listener.ora and sqlnet.ora are both typically involved in network security configuration.

Answer

spfile.ora

Answer

init.ora

Answer

tnsnames.ora

Question 6

Which TWO features help protect database availability during an upgrade?

Accepted Answer

Data Guard. Data Guard and Flashback Database are key for availability and recovery.

Answer

TDE

Answer

Database Vault

Answer

Audit Vault

Question 7

You are reviewing security best practices for 23ai. Which THREE of the following represent recommended actions to harden a production instance?

Accepted Answer

Apply the latest quarterly Release Update (RU). Using Oracle Key Vault, enforcing password complexity, and applying the latest Release Updates are core hardening practices.

Answer

Run database in NoArchiveLog mode for security

Answer

Disable all default schemas immediately

Question 8

What is the primary purpose of 'Data Masking' in the Oracle Data Masking and Subsetting Pack?

Accepted Answer

To protect sensitive data in non-production databases. Data masking permanently obscures sensitive data in a non-production environment.

Answer

To improve performance

Answer

To encrypt data in transit

Answer

To audit privileged users

Question 9

When upgrading a database, what is a 'Flashback Database' used for?

Accepted Answer

Quick recovery after a failed upgrade. Flashback Database allows you to quickly revert to a point-in-time if the upgrade fails.

Answer

User authentication

Answer

Data migration

Answer

Performance tuning

Question 10

Which THREE of the following are valid methods to patch an Oracle 23ai database?

Accepted Answer

OPatchAuto. OPatch, OPatchAuto, and Fleet Patching and Provisioning (FPP) are the standard methods for patching Oracle databases.

Answer

Data Pump Patching

Answer

SQL*Plus Patch

Question 11

Which TWO components must be secured to maintain database integrity?

Accepted Answer

Data files. The data files and the backup files must be secured to prevent tampering.

Answer

User manual

Answer

System logs

Answer

Client browser

Question 12

Which TWO audit trails can be enabled simultaneously?

Accepted Answer

Unified Audit. Unified and traditional audit trails can both be active, though it is not recommended.

Answer

Redo log audit

Answer

Memory audit

Answer

Tablespace audit

Question 13

What is the purpose of the 'Wallet' in Oracle security?

Accepted Answer

To store encryption keys and credentials. A wallet stores sensitive credentials like passwords and encryption keys.

Answer

To backup the database

Answer

To manage database users

Answer

To improve query performance

Question 14

Which view displays the list of active Unified Audit policies?

Accepted Answer

AUDIT_UNIFIED_POLICIES. AUDIT_UNIFIED_POLICIES shows the policies defined in the database.

Answer

UNIFIED_AUDIT_TRAIL

Answer

DBA_AUDIT_POLICIES

Answer

DBA_PRIV_AUDIT_POLICIES

Question 15

What is the best way to ensure an encrypted connection between the application server and the database?

Accepted Answer

Using Native Network Encryption. Configuring Native Network Encryption (NNE) or TLS on the listener ensures encrypted traffic.

Answer

Using Audit Vault

Answer

Using Database Vault

Answer

Using TDE

Question 16

Which THREE items are generally included in an Oracle Patch?

Accepted Answer

Security updates. Patches typically contain bug fixes, security updates, and performance improvements.

Answer

Application source code

Answer

New hardware drivers

Question 17

How do you disable a Unified Audit policy?

Accepted Answer

NOAUDIT POLICY. The 'NOAUDIT POLICY' command is used to disable a policy.

Answer

ALTER POLICY DISABLE

Answer

DISABLE AUDIT POLICY

Answer

DROP POLICY

Question 18

Which THREE components are involved in TDE master key management?

Accepted Answer

Oracle Wallet. The keystore, the master key, and the database instance itself are the components.

Answer

User profile

Answer

Audit policy

Question 19

You are applying an Oracle Release Update (RU) in a Data Guard environment. Following the 'Rolling Upgrade' methodology, which instance should be patched first to ensure continuous availability?

Accepted Answer

The Standby database instance. In a rolling upgrade, the standby instance is patched first, then a switchover is performed, and finally the former primary is patched.

Answer

The observer node only

Answer

The Primary database instance

Answer

Both instances simultaneously

Question 20

In Oracle 23ai, you want to use Database Vault to prevent highly privileged users (like SYS) from accessing sensitive application data. Which component must be enabled and configured to achieve this separation of duty?

Accepted Answer

Database Vault Realms. Database Vault Realms are specifically designed to restrict access to data by privileged users.

Answer

Virtual Private Database (VPD)

Answer

Data Redaction

Answer

Label Security