Your organization requires that all data stored in the 23ai database be encrypted at rest using Transparent Data Encryption (TDE). You have configured the Keystore. Which command correctly rotates the master encryption key without re-encrypting all existing data blocks immediately?
You are upgrading a multi-tenant 19c database to 23ai using AutoUpgrade. You need to ensure the upgrade process automatically handles post-upgrade fixups without manual intervention. Which parameter should you configure in your AutoUpgrade config file?
You are implementing Unified Auditing in an Oracle 23ai database. You need to capture all actions performed by a specific user 'APP_USER', regardless of the object accessed. Which SQL statement is correct?
You are planning to upgrade a critical 23ai database from 19c. The database uses Transparent Data Encryption (TDE) with a software keystore. After the upgrade, you need to ensure that the encrypted data remains accessible. Which step must you perform before starting the upgrade?
Your organization requires that all connections to the production 23ai database be encrypted in transit, but the application team reports that their JDBC thin clients are failing to connect after you enabled native network encryption with the parameter SQLNET.ENCRYPTION_CLIENT = REQUIRED on the server. The clients have no Oracle client software installed and use only the JDBC thin driver. What is the most likely cause and resolution?
Your organization is preparing to upgrade several Oracle Database 19c instances to Oracle Database 23ai. You need to ensure that all databases meet the minimum requirements for upgrade. Which tool should you use to analyze the databases and generate a report of potential issues before the upgrade?
You are upgrading a 19c non-CDB database to Oracle Database 23ai as a pluggable database (PDB) using the plug-in method. During the upgrade, you need to ensure that the time zone file version is compatible. The source database uses time zone file version 32, and the target 23ai CDB uses version 42. Which action must you perform before plugging in the non-CDB as a PDB?
You are managing an Oracle Database 23ai environment with Unified Auditing enabled. A security audit requires that you capture all failed login attempts and all changes to user privileges. You need to create an audit policy that records these events and ensures the audit records are written to the unified audit trail. Which statement should you execute?
You are upgrading an Oracle Database 19c non-CDB to Oracle Database 23ai using the plug-in method. During the upgrade, you notice that the target PDB has several locally managed tablespaces that are dictionary-managed in the source. Which action must you take before plugging in the non-CDB as a PDB?
You are preparing a 19c non-CDB database for migration to Oracle Database 23ai. The database uses a password-protected TDE master encryption key stored in a software keystore. To comply with security policy, you must migrate the keystore to an HSM-based hardware keystore before the upgrade. Which command correctly performs this migration?
You are the DBA for an Oracle Database 23ai multitenant environment. The security team requires that all local users in the PDB named SALESPDB be forced to change their passwords every 90 days and that they cannot reuse any of their last 10 passwords. The SALESPDB currently uses the default profile. What is the most efficient way to meet these requirements?
You are upgrading a 19c multitenant container database (CDB) to Oracle Database 23ai. The CDB contains several pluggable databases (PDBs). A security audit requires that you verify the unified audit trail configuration and ensure that audit records are being written to the correct destination. Which two tasks must you perform to validate the unified audit trail setup before the upgrade? (Choose two.)
You are administering an Oracle Database 23ai container database (CDB) with several pluggable databases (PDBs). A compliance rule requires that all administrative actions performed by local DBAs in the PDB named FINPDB be audited, including actions by users with the SYSDBA privilege when connected to that PDB. Unified Auditing is enabled in the CDB. Which statement should you execute to meet this requirement?
You are planning to upgrade a 19c database to Oracle Database 23ai. The database has Unified Auditing enabled, and the audit trail is stored in the SYSAUX tablespace. Your security team requires that audit records be retained for at least 90 days and that the audit trail does not impact the performance of the SYSAUX tablespace. What should you do before the upgrade?
You manage an Oracle Database 23ai environment with Transparent Data Encryption (TDE) enabled. The master encryption key is stored in a software keystore. A security audit requires that the master key be rotated immediately and that the old key be retained for decryption of existing data. Which statement should you execute?
You are upgrading a 19c database to Oracle Database 23ai. The database uses Transparent Data Encryption (TDE) with a software keystore. During the upgrade, you need to ensure that the TDE master encryption key is backed up. Which command should you use to back up the encryption key?
You are preparing to upgrade a 19c non-CDB database to Oracle Database 23ai as a PDB using the plug-in method with AutoUpgrade. You have already run the pre-upgrade checks and fixed the issues. Which two actions must you perform before running the actual upgrade with AutoUpgrade? (Choose two.)
You are managing an Oracle Database 23ai environment with Unified Auditing enabled. You need to create an audit policy that captures all successful SELECT statements on a sensitive table named HR.EMPLOYEES, but only when the access occurs outside of normal business hours (Monday-Friday, 9:00 AM to 5:00 PM). Which feature should you use to implement this conditional auditing?
You have upgraded a 19c database to Oracle Database 23ai. The database uses Transparent Data Encryption (TDE) with a software keystore. After the upgrade, you need to rotate the TDE master encryption key for the pluggable database (PDB) named SALESPDB. Which command should you execute?
In Oracle 23ai, you want to use Database Vault to prevent highly privileged users (like SYS) from accessing sensitive application data. Which component must be enabled and configured to achieve this separation of duty?
You are applying an Oracle Release Update (RU) in a Data Guard environment. Following the 'Rolling Upgrade' methodology, which instance should be patched first to ensure continuous availability?
You are migrating to 23ai and need to use the 'DBMS_COMPARISON' package to verify data integrity between the old and new instances. What is the prerequisite for this operation?
You are the lead DBA for a 23ai production database. Company policy requires that all administrative actions performed by DBAs be recorded in the Unified Audit Trail. You have already created an audit policy named DBA_ACTIONS that captures the relevant actions, but you need to ensure that it is enforced. Which action must you perform?
You are upgrading an Oracle Database 19c non-CDB to Oracle Database 23ai. The database uses a custom application that relies on the DBMS_LOB package and has a large amount of PL/SQL code. You have chosen the AutoUpgrade utility to perform the upgrade. During the upgrade, you encounter an error related to the DBMS_LOB package. Which action should you take to resolve the issue?
You are implementing Transparent Data Encryption (TDE) in Oracle Database 23ai. You have already configured the keystore and created the master encryption key. Now you need to encrypt several existing tablespaces and columns. Which two actions must you perform to ensure that the data is encrypted and accessible? (Choose two.)
You are implementing Transparent Data Encryption (TDE) in a 23ai database. You have configured the wallet and set the encryption key. You need to ensure that the data in the USERS tablespace is encrypted. Which statement correctly describes the process to encrypt the USERS tablespace?
You are preparing to upgrade a 19c database to 23ai using the AutoUpgrade utility. You have created the configuration file and run the upgrade in analyze mode. The analysis completes successfully. What is the next step you should perform according to best practices?
You are preparing to upgrade a 19c non-CDB database to Oracle Database 23ai using the AutoUpgrade utility. Before running the upgrade, you must create the AutoUpgrade configuration file with the correct parameters. Which file format does AutoUpgrade require for its configuration file?
You are upgrading a 19c multitenant container database (CDB) to Oracle Database 23ai using AutoUpgrade. The source CDB contains three pluggable databases (PDBs). After running the upgrade, you need to verify that the upgrade was successful and that no manual intervention is required. Which two actions should you perform? (Choose two.)
You are upgrading a 19c container database (CDB) to Oracle Database 23ai using AutoUpgrade. As part of the upgrade, you need to ensure that the database is in the correct state and that all prerequisites are met. Which two actions should you perform before starting the upgrade? (Choose two.)
You are managing an Oracle Database 23ai environment with Transparent Data Encryption (TDE) enabled. A security audit requires that you rotate the master encryption key for the database. You have already taken a backup of the keystore. Which command should you use to rotate the master key?
You are administering an Oracle Database 23ai environment with Unified Auditing enabled. A new security policy requires that all failed logon attempts be audited. Which action should you take to meet this requirement?
You are upgrading a 19c database to Oracle Database 23ai. The database uses a password-protected software keystore for TDE. During the upgrade, you need to ensure that the keystore remains accessible. Which command should you use to open the keystore automatically after the upgrade, without manual intervention?
Your organization is migrating a critical 19c database to Oracle Database 23ai. The business requires that the cutover downtime be minimized, ideally under 10 minutes. You have a large database (20 TB) and a high transaction rate. Which migration method should you use to achieve the least downtime?