OCP Security And Upgrades Practice Test 4 — 15 Questions

Question 1

Which THREE components are involved in TDE master key management?

Accepted Answer

Oracle Wallet. The keystore, the master key, and the database instance itself are the components.

Answer

User profile

Answer

Audit policy

Question 2

Which TWO are common audit types in Oracle?

Accepted Answer

Unified Auditing. Standard and Unified auditing are the two primary types.

Answer

Tablespace Auditing

Answer

Instance Auditing

Answer

Flashback Auditing

Question 3

Which THREE factors influence the duration of a database upgrade?

Accepted Answer

Number of database objects. The number of objects, the amount of data, and system resources all impact performance.

Answer

The color of the server

Answer

Number of users

Question 4

Which TWO statements about Unified Auditing are correct?

Accepted Answer

It replaces standard auditing. Unified auditing is enabled by default in some configurations and is the replacement for standard auditing.

Answer

It requires manual setup for all events

Answer

It is only for Linux

Answer

It only works with SYS user

Question 5

Which THREE tools can be used to manage security settings?

Accepted Answer

Oracle Security Dashboard. SQL*Plus, EM, and the Oracle Security Dashboard are standard management tools.

Answer

AutoUpgrade

Answer

RMAN

Question 6

Which TWO are benefits of TDE?

Accepted Answer

Helps with compliance. TDE provides security for data at rest and helps with regulatory compliance.

Answer

Reduces disk space

Answer

Simplifies login

Answer

Increases performance

Question 7

Which THREE tasks are performed after an upgrade is finished?

Accepted Answer

Recompile invalid objects. Post-upgrade, you must run the timezone script, recompile invalid objects, and gather dictionary statistics.

Answer

Create new users

Answer

Deinstall old version

Question 8

Which TWO audit trails can be enabled simultaneously?

Accepted Answer

Unified Audit. Unified and traditional audit trails can both be active, though it is not recommended.

Answer

Redo log audit

Answer

Memory audit

Answer

Tablespace audit

Question 9

Which TWO features help protect database availability during an upgrade?

Accepted Answer

Data Guard. Data Guard and Flashback Database are key for availability and recovery.

Answer

TDE

Answer

Database Vault

Answer

Audit Vault

Question 10

Which THREE steps are required for a manual TDE configuration?

Accepted Answer

Create the keystore. Setting the location, creating the wallet, and opening the wallet are the required steps.

Answer

Rebuild all tables

Answer

Encrypt the entire database

Question 11

Which TWO components must be secured to maintain database integrity?

Accepted Answer

Data files. The data files and the backup files must be secured to prevent tampering.

Answer

User manual

Answer

System logs

Answer

Client browser

Question 12

Which THREE items are generally included in an Oracle Patch?

Accepted Answer

Security updates. Patches typically contain bug fixes, security updates, and performance improvements.

Answer

Application source code

Answer

New hardware drivers

Question 13

Which TWO methods are used to verify the success of an upgrade?

Accepted Answer

Reviewing log files. Checking the log files and querying the dictionary version are standard verification methods.

Answer

Reinstalling the OS

Answer

Running a test report

Answer

Checking user login

Question 14

Which THREE things can prevent an AutoUpgrade process from starting?

Accepted Answer

Existing lock files. Insufficient space, incorrect permissions, or already running processes are common blockers.

Answer

Expired passwords

Answer

Too many users

Question 15

Your organization requires that all data stored in the 23ai database be encrypted at rest using Transparent Data Encryption (TDE). You have configured the Keystore. Which command correctly rotates the master encryption key without re-encrypting all existing data blocks immediately?

Accepted Answer

ADMINISTER KEY MANAGEMENT SET KEY IDENTIFIED BY 'password' WITH BACKUP;. ADMINISTER KEY MANAGEMENT SET KEY IDENTIFIED BY 'password' WITH BACKUP rotates the master key, which is a metadata-only operation for TDE tablespaces.

Answer

ALTER SYSTEM SET ENCRYPTION KEY;

Answer

ALTER TABLESPACE USERS REKEY;

Answer

ALTER SYSTEM ROTATE MASTER KEY;