OCP Security And Upgrades — Timed 10 Questions

Question 1

Which command is used to enable Unified Auditing if it was not enabled during installation?

Accepted Answer

Relink the oracle binary with 'unified_audit' and restart. Unified Auditing must be enabled by relinking the Oracle binary and restarting the database.

Answer

ALTER SYSTEM SET AUDIT_TRAIL=UNIFIED;

Answer

ALTER DATABASE ENABLE UNIFIED AUDITING;

Answer

Configure in SQL*Plus using 'audit_sys_operations'

Question 2

Which command is used to rotate the master key for TDE?

Accepted Answer

ALTER SYSTEM SET ENCRYPTION KEY. ALTER SYSTEM SET ENCRYPTION KEY is used to rotate the master encryption key.

Answer

ALTER SYSTEM ROTATE KEY

Answer

ALTER DATABASE REKEY

Answer

ADMINISTER KEY MANAGEMENT

Question 3

Which parameter in 23ai determines the audit trail destination?

Accepted Answer

AUDIT_FILE_DEST. The AUDIT_TRAIL parameter still exists, but for Unified Auditing, the destination is configured automatically within the audit record storage.

Answer

AUDIT_DESTINATION

Answer

AUDIT_LOG_PATH

Answer

LOG_ARCHIVE_DEST

Question 4

Which privilege allows a user to create and manage Unified Audit Policies?

Accepted Answer

AUDIT SYSTEM. The AUDIT SYSTEM privilege is required to manage audit policies.

Answer

GRANT ANY AUDIT

Answer

MANAGE AUDIT

Answer

CREATE AUDIT POLICY

Question 5

You are upgrading to 23ai. Which feature allows you to perform an upgrade without having to manually patch the OS libraries?

Accepted Answer

AutoUpgrade. Oracle Enterprise Manager (OEM) or Fleet Patching and Provisioning (FPP) can automate the environment preparation.

Answer

SQL Developer

Answer

RMAN

Answer

DBUA

Question 6

You are upgrading a multi-tenant 19c database to 23ai using AutoUpgrade. You need to ensure the upgrade process automatically handles post-upgrade fixups without manual intervention. Which parameter should you configure in your AutoUpgrade config file?

Accepted Answer

autofixup=yes. The 'autofixup' parameter enables AutoUpgrade to execute the necessary pre- and post-upgrade fixup scripts automatically.

Answer

upg_fixups=auto

Answer

run_fixups=true

Answer

post_upgrade_fix=true

Question 7

You need to determine if a database is currently running in Unified Auditing mode or traditional auditing. Which view should you query?

Accepted Answer

V$OPTION. V$OPTION shows whether Unified Auditing is enabled.

Answer

DBA_AUDIT_TRAIL

Answer

V$PARAMETER

Answer

V$DATABASE

Question 8

Which view should you query to verify the encryption status of tablespaces in 23ai?

Accepted Answer

V$ENCRYPTED_TABLESPACES. V$ENCRYPTED_TABLESPACES shows the encryption status of all tablespaces in the database.

Answer

DBA_ENCRYPTED_COLUMNS

Answer

DBA_ENCRYPTION_KEYS

Answer

DBA_TABLESPACES

Answer

V$WALLET

Question 9

Which component is required to implement Transparent Data Encryption (TDE) in 23ai?

Accepted Answer

Oracle Wallet. A keystore (wallet) is required to hold the master encryption key for TDE.

Answer

Oracle Audit Vault

Answer

Oracle Key Vault

Answer

Oracle Data Guard

Question 10

When using AutoUpgrade to move to 23ai, which file format is required for the configuration?

Accepted Answer

CFG. AutoUpgrade uses a configuration file in a specific text-based key-value format (cfg file).

Answer

JSON

Answer

YAML

Answer

XML