OCP Security And Upgrades Practice Test 4 — 15 Questions

Question 1

You need to perform a Rolling Upgrade using Data Guard. What is the minimum required configuration?

Accepted Answer

Physical Standby Database. A physical standby database is required to perform a rolling upgrade using transient logical standby or switchover methods.

Answer

Active Data Guard

Answer

Oracle GoldenGate

Answer

Snapshot Standby

Question 2

You are upgrading from 19c to 23ai and need to identify incompatible parameters before the upgrade. Which tool should you use?

Accepted Answer

Pre-Upgrade Information Tool. The Pre-Upgrade Information Tool (preupgrade.jar) is the standard method for identifying parameter incompatibilities.

Answer

Cloud Pre-Migration Advisor Tool

Answer

Oracle Fleet Patching and Provisioning

Answer

DBUA

Question 3

You want to enforce password complexity in 23ai using a profile. Which clause is used to reference a custom verification function?

Accepted Answer

PASSWORD_VERIFY_FUNCTION. The PASSWORD_VERIFY_FUNCTION clause in the CREATE PROFILE statement allows for custom verification logic.

Answer

FAILED_LOGIN_ATTEMPTS

Answer

PASSWORD_LOCK_TIME

Answer

PASSWORD_LIFE_TIME

Question 4

Which user is responsible for the management of the Unified Audit trail?

Accepted Answer

AUDIT_ADMIN. The AUDIT_ADMIN role is required for managing unified audit policies and data.

Answer

SYSDBA

Answer

DBA

Answer

SECURITY_ADMIN

Question 5

What is the purpose of the 'Database Vault' option?

Accepted Answer

To prevent DBA access to sensitive data. Database Vault restricts access to application data by privileged users like SYS.

Answer

To improve query performance

Answer

To encrypt backups

Answer

To manage user passwords

Question 6

Which utility is used to perform a 'fixup' during the AutoUpgrade process?

Accepted Answer

preupgrade_fixups.sql. The AutoUpgrade utility performs pre-upgrade and post-upgrade fixups by running SQL scripts; the preupgrade_fixups.sql script is generated by the 'java -jar autoupgrade.jar -mode analyze' step and is executed during the 'fixup' phase to address issues that would block the upgrade. It is the specific artifact used to apply corrective actions before the actual upgrade proceeds.

Answer

srvctl

Answer

utlu122s.sql

Answer

catupgrd.sql

Question 7

How do you ensure that a user cannot connect to the database via SQL*Plus but can connect via an application service?

Accepted Answer

Create a Logon Trigger. You can use a login trigger to check the program name (e.g., 'sqlplus.exe') and reject connections.

Answer

Modify TNSNAMES.ORA

Answer

Use Profile limits

Answer

Revoke CONNECT role

Question 8

What is the primary function of the Database Resident Connection Pooling (DRCP) in a 23ai environment?

Accepted Answer

Connection scaling. DRCP reduces the memory footprint of a database by pooling server processes.

Answer

Security authentication

Answer

Data encryption

Answer

Audit trail management

Question 9

What is the consequence of not running the 'catupgrd.sql' script after a major version upgrade?

Accepted Answer

Data dictionary remains in old version format. The data dictionary will be inconsistent, and many objects will be invalid, leading to database failure.

Answer

Only performance is affected

Answer

The database will run in read-only mode

Answer

The database will not start

Question 10

When configuring a secure listener in 23ai, which protocol is recommended for encrypted communication?

Accepted Answer

TCPS. TCPS (TCP with SSL/TLS) is the recommended protocol for a secure listener in Oracle 23ai because it encrypts all communication between clients and the database using SSL/TLS certificates. Configuring the listener with TCPS ensures that authentication and data transfer are protected against eavesdropping and man-in-the-middle attacks. While TCP is the default for non-secure connections, TCPS is specifically designed for encrypted communication and is required for features like Oracle Data Guard and many compliance standards.

Answer

TCP

Answer

IPC

Answer

HTTP

Question 11

What is the purpose of the 'Wallet' in Oracle security?

Accepted Answer

To store encryption keys and credentials. In Oracle security, a wallet is a password-protected container that stores encryption keys, credentials, and certificates. It is used by TDE to store the master encryption key and by clients to store credentials for secure connections. The wallet protects these secrets with a password or auto-login mechanism.

Answer

To backup the database

Answer

To manage database users

Answer

To improve query performance

Question 12

Which file needs to be updated when you move the wallet location in 23ai?

Accepted Answer

sqlnet.ora. The sqlnet.ora file contains the WALLET_LOCATION parameter that must be updated.

Answer

init.ora

Answer

tnsnames.ora

Answer

listener.ora

Question 13

What is the primary purpose of 'Data Masking' in the Oracle Data Masking and Subsetting Pack?

Accepted Answer

To protect sensitive data in non-production databases. Oracle Data Masking and Subsetting Pack is designed to replace sensitive production data with realistic but fictitious values before it is used in non-production environments such as development, test, and QA. This protects sensitive data (PII, PCI, PHI) from exposure while preserving data format and referential integrity for application testing. It is not a performance, encryption-in-transit, or auditing tool.

Answer

To improve performance

Answer

To encrypt data in transit

Answer

To audit privileged users

Question 14

Which command is used to start the AutoUpgrade process?

Accepted Answer

java -jar autoupgrade.jar. AutoUpgrade is Oracle's command-line utility for automating database upgrades, and it is invoked as a Java executable: 'java -jar autoupgrade.jar'. The tool then reads a config file specifying source and target homes, databases, and modes (analyze, fixups, deploy, upgrade).

Answer

sqlplus / as sysdba

Answer

opatch

Answer

dbua

Question 15

You have a 19c database. Which tool must you run to ensure the database is ready for an upgrade to 23ai?

Accepted Answer

preupgrade.jar. The Pre-Upgrade Information Tool (preupgrade.jar) is mandatory for evaluating the source database.

Answer

utlrp.sql

Answer

dbv

Answer

catupgrd.sql