OCP Security And Upgrades — 15 Questions

Question 1

Which command is used to enable Unified Auditing if it was not enabled during installation?

Accepted Answer

Relink the oracle binary with 'unified_audit' and restart. Unified Auditing must be enabled by relinking the Oracle binary and restarting the database.

Answer

ALTER SYSTEM SET AUDIT_TRAIL=UNIFIED;

Answer

ALTER DATABASE ENABLE UNIFIED AUDITING;

Answer

Configure in SQL*Plus using 'audit_sys_operations'

Question 2

Which command is used to rotate the master key for TDE?

Accepted Answer

ALTER SYSTEM SET ENCRYPTION KEY. ALTER SYSTEM SET ENCRYPTION KEY is used to rotate the master encryption key.

Answer

ALTER SYSTEM ROTATE KEY

Answer

ALTER DATABASE REKEY

Answer

ADMINISTER KEY MANAGEMENT

Question 3

Which parameter in 23ai determines the audit trail destination?

Accepted Answer

AUDIT_FILE_DEST. The AUDIT_TRAIL parameter still exists, but for Unified Auditing, the destination is configured automatically within the audit record storage.

Answer

AUDIT_DESTINATION

Answer

AUDIT_LOG_PATH

Answer

LOG_ARCHIVE_DEST

Question 4

Which privilege allows a user to create and manage Unified Audit Policies?

Accepted Answer

AUDIT SYSTEM. The AUDIT SYSTEM privilege is required to manage audit policies.

Answer

GRANT ANY AUDIT

Answer

MANAGE AUDIT

Answer

CREATE AUDIT POLICY

Question 5

You are upgrading to 23ai. Which feature allows you to perform an upgrade without having to manually patch the OS libraries?

Accepted Answer

AutoUpgrade. Oracle Enterprise Manager (OEM) or Fleet Patching and Provisioning (FPP) can automate the environment preparation.

Answer

SQL Developer

Answer

RMAN

Answer

DBUA

Question 6

You are upgrading a multi-tenant 19c database to 23ai using AutoUpgrade. You need to ensure the upgrade process automatically handles post-upgrade fixups without manual intervention. Which parameter should you configure in your AutoUpgrade config file?

Accepted Answer

autofixup=yes. The 'autofixup' parameter enables AutoUpgrade to execute the necessary pre- and post-upgrade fixup scripts automatically.

Answer

upg_fixups=auto

Answer

run_fixups=true

Answer

post_upgrade_fix=true

Question 7

You need to determine if a database is currently running in Unified Auditing mode or traditional auditing. Which view should you query?

Accepted Answer

V$OPTION. V$OPTION shows whether Unified Auditing is enabled.

Answer

DBA_AUDIT_TRAIL

Answer

V$PARAMETER

Answer

V$DATABASE

Question 8

Which view should you query to verify the encryption status of tablespaces in 23ai?

Accepted Answer

V$ENCRYPTED_TABLESPACES. V$ENCRYPTED_TABLESPACES shows the encryption status of all tablespaces in the database.

Answer

DBA_ENCRYPTED_COLUMNS

Answer

DBA_ENCRYPTION_KEYS

Answer

DBA_TABLESPACES

Answer

V$WALLET

Question 9

Which component is required to implement Transparent Data Encryption (TDE) in 23ai?

Accepted Answer

Oracle Wallet. A keystore (wallet) is required to hold the master encryption key for TDE.

Answer

Oracle Audit Vault

Answer

Oracle Key Vault

Answer

Oracle Data Guard

Question 10

When using AutoUpgrade to move to 23ai, which file format is required for the configuration?

Accepted Answer

CFG. AutoUpgrade uses a configuration file in a specific text-based key-value format (cfg file).

Answer

JSON

Answer

YAML

Answer

XML

Question 11

What is the primary benefit of using Unified Auditing in 23ai?

Accepted Answer

Simplified audit management and unified audit trail. Unified Auditing provides a single, unified audit trail for all audit records from various sources.

Answer

Improved query performance for application tables

Answer

Increased storage capacity

Answer

Automatic data masking

Question 12

You need to perform a Rolling Upgrade using Data Guard. What is the minimum required configuration?

Accepted Answer

Physical Standby Database. A physical standby database is required to perform a rolling upgrade using transient logical standby or switchover methods.

Answer

Active Data Guard

Answer

Oracle GoldenGate

Answer

Snapshot Standby

Question 13

You are upgrading from 19c to 23ai and need to identify incompatible parameters before the upgrade. Which tool should you use?

Accepted Answer

Pre-Upgrade Information Tool. The Pre-Upgrade Information Tool (preupgrade.jar) is the standard method for identifying parameter incompatibilities.

Answer

Cloud Pre-Migration Advisor Tool

Answer

Oracle Fleet Patching and Provisioning

Answer

DBUA

Question 14

You want to enforce password complexity in 23ai using a profile. Which clause is used to reference a custom verification function?

Accepted Answer

PASSWORD_VERIFY_FUNCTION. The PASSWORD_VERIFY_FUNCTION clause in the CREATE PROFILE statement allows for custom verification logic.

Answer

FAILED_LOGIN_ATTEMPTS

Answer

PASSWORD_LOCK_TIME

Answer

PASSWORD_LIFE_TIME

Question 15

Which user is responsible for the management of the Unified Audit trail?

Accepted Answer

AUDIT_ADMIN. The AUDIT_ADMIN role is required for managing unified audit policies and data.

Answer

SYSDBA

Answer

DBA

Answer

SECURITY_ADMIN