OCP Security And Upgrades — Timed 20 Questions

Question 1

Which command is used to enable Unified Auditing if it was not enabled during installation?

Accepted Answer

Relink the oracle binary with 'unified_audit' and restart. Unified Auditing must be enabled by relinking the Oracle binary and restarting the database.

Answer

ALTER SYSTEM SET AUDIT_TRAIL=UNIFIED;

Answer

ALTER DATABASE ENABLE UNIFIED AUDITING;

Answer

Configure in SQL*Plus using 'audit_sys_operations'

Question 2

Which command is used to rotate the master key for TDE?

Accepted Answer

ALTER SYSTEM SET ENCRYPTION KEY. ALTER SYSTEM SET ENCRYPTION KEY is used to rotate the master encryption key.

Answer

ALTER SYSTEM ROTATE KEY

Answer

ALTER DATABASE REKEY

Answer

ADMINISTER KEY MANAGEMENT

Question 3

Which parameter in 23ai determines the audit trail destination?

Accepted Answer

AUDIT_FILE_DEST. The AUDIT_TRAIL parameter still exists, but for Unified Auditing, the destination is configured automatically within the audit record storage.

Answer

AUDIT_DESTINATION

Answer

AUDIT_LOG_PATH

Answer

LOG_ARCHIVE_DEST

Question 4

Which privilege allows a user to create and manage Unified Audit Policies?

Accepted Answer

AUDIT SYSTEM. The AUDIT SYSTEM privilege is required to manage audit policies.

Answer

GRANT ANY AUDIT

Answer

MANAGE AUDIT

Answer

CREATE AUDIT POLICY

Question 5

You are upgrading to 23ai. Which feature allows you to perform an upgrade without having to manually patch the OS libraries?

Accepted Answer

AutoUpgrade. Oracle Enterprise Manager (OEM) or Fleet Patching and Provisioning (FPP) can automate the environment preparation.

Answer

SQL Developer

Answer

RMAN

Answer

DBUA

Question 6

You are upgrading a multi-tenant 19c database to 23ai using AutoUpgrade. You need to ensure the upgrade process automatically handles post-upgrade fixups without manual intervention. Which parameter should you configure in your AutoUpgrade config file?

Accepted Answer

autofixup=yes. The 'autofixup' parameter enables AutoUpgrade to execute the necessary pre- and post-upgrade fixup scripts automatically.

Answer

upg_fixups=auto

Answer

run_fixups=true

Answer

post_upgrade_fix=true

Question 7

You need to determine if a database is currently running in Unified Auditing mode or traditional auditing. Which view should you query?

Accepted Answer

V$OPTION. V$OPTION shows whether Unified Auditing is enabled.

Answer

DBA_AUDIT_TRAIL

Answer

V$PARAMETER

Answer

V$DATABASE

Question 8

Which view should you query to verify the encryption status of tablespaces in 23ai?

Accepted Answer

V$ENCRYPTED_TABLESPACES. V$ENCRYPTED_TABLESPACES shows the encryption status of all tablespaces in the database.

Answer

DBA_ENCRYPTED_COLUMNS

Answer

DBA_ENCRYPTION_KEYS

Answer

DBA_TABLESPACES

Answer

V$WALLET

Question 9

Which component is required to implement Transparent Data Encryption (TDE) in 23ai?

Accepted Answer

Oracle Wallet. A keystore (wallet) is required to hold the master encryption key for TDE.

Answer

Oracle Audit Vault

Answer

Oracle Key Vault

Answer

Oracle Data Guard

Question 10

When using AutoUpgrade to move to 23ai, which file format is required for the configuration?

Accepted Answer

CFG. AutoUpgrade uses a configuration file in a specific text-based key-value format (cfg file).

Answer

JSON

Answer

YAML

Answer

XML

Question 11

What is the primary benefit of using Unified Auditing in 23ai?

Accepted Answer

Simplified audit management and unified audit trail. Unified Auditing provides a single, unified audit trail for all audit records from various sources.

Answer

Improved query performance for application tables

Answer

Increased storage capacity

Answer

Automatic data masking

Question 12

You need to perform a Rolling Upgrade using Data Guard. What is the minimum required configuration?

Accepted Answer

Physical Standby Database. A physical standby database is required to perform a rolling upgrade using transient logical standby or switchover methods.

Answer

Active Data Guard

Answer

Oracle GoldenGate

Answer

Snapshot Standby

Question 13

You are upgrading from 19c to 23ai and need to identify incompatible parameters before the upgrade. Which tool should you use?

Accepted Answer

Pre-Upgrade Information Tool. The Pre-Upgrade Information Tool (preupgrade.jar) is the standard method for identifying parameter incompatibilities.

Answer

Cloud Pre-Migration Advisor Tool

Answer

Oracle Fleet Patching and Provisioning

Answer

DBUA

Question 14

You want to enforce password complexity in 23ai using a profile. Which clause is used to reference a custom verification function?

Accepted Answer

PASSWORD_VERIFY_FUNCTION. The PASSWORD_VERIFY_FUNCTION clause in the CREATE PROFILE statement allows for custom verification logic.

Answer

FAILED_LOGIN_ATTEMPTS

Answer

PASSWORD_LOCK_TIME

Answer

PASSWORD_LIFE_TIME

Question 15

Which user is responsible for the management of the Unified Audit trail?

Accepted Answer

AUDIT_ADMIN. The AUDIT_ADMIN role is required for managing unified audit policies and data.

Answer

SYSDBA

Answer

DBA

Answer

SECURITY_ADMIN

Question 16

What is the purpose of the 'Database Vault' option?

Accepted Answer

To prevent DBA access to sensitive data. Database Vault restricts access to application data by privileged users like SYS.

Answer

To improve query performance

Answer

To encrypt backups

Answer

To manage user passwords

Question 17

Which utility is used to perform a 'fixup' during the AutoUpgrade process?

Accepted Answer

preupgrade_fixups.sql. AutoUpgrade performs fixups automatically, but you can also run them manually using the pre-upgrade fixup scripts.

Answer

srvctl

Answer

utlu122s.sql

Answer

catupgrd.sql

Question 18

When migrating to 23ai, which method allows for the least amount of downtime?

Accepted Answer

Transportable Tablespaces. Transportable Tablespaces combined with Data Guard or GoldenGate typically offers the lowest downtime.

Answer

Full Export/Import

Answer

Upgrade in-place

Answer

Manual Database Re-creation

Question 19

How do you ensure that a user cannot connect to the database via SQL*Plus but can connect via an application service?

Accepted Answer

Create a Logon Trigger. You can use a login trigger to check the program name (e.g., 'sqlplus.exe') and reject connections.

Answer

Modify TNSNAMES.ORA

Answer

Use Profile limits

Answer

Revoke CONNECT role

Question 20

What is the primary function of the Database Resident Connection Pooling (DRCP) in a 23ai environment?

Accepted Answer

Connection scaling. DRCP reduces the memory footprint of a database by pooling server processes.

Answer

Security authentication

Answer

Data encryption

Answer

Audit trail management