Security And Upgrades

You are reviewing security best practices for 23ai. Which THREE of the following represent recommended actions to harden a production instance?

You have a 19c database. Which tool must you run to ensure the database is ready for an upgrade to 23ai?

You are preparing to upgrade a 19c non-CDB database to Oracle Database 23ai using the AutoUpgrade utility. Before running the upgrade, you must create the AutoUpgrade configuration file with the correct parameters. Which file format does AutoUpgrade require for its configuration file?

Which utility is used to perform a 'fixup' during the AutoUpgrade process?

What is the consequence of not running the 'catupgrd.sql' script after a major version upgrade?

In Oracle 23ai, you want to use Database Vault to prevent highly privileged users (like SYS) from accessing sensitive application data. Which component must be enabled and configured to achieve this separation of duty?

What is the primary function of the Database Resident Connection Pooling (DRCP) in a 23ai environment?

Which TWO components must be secured to maintain database integrity?

What is the purpose of the 'Database Vault' option?

You are upgrading a 19c database to Oracle Database 23ai. The database uses a password-protected software keystore for TDE. During the upgrade, you need to ensure that the keystore remains accessible. Which command should you use to open the keystore automatically after the upgrade, without manual intervention?

You are the lead DBA for a 23ai production database. Company policy requires that all administrative actions performed by DBAs be recorded in the Unified Audit Trail. You have already created an audit policy named DBA_ACTIONS that captures the relevant actions, but you need to ensure that it is enforced. Which action must you perform?

Which THREE of the following are valid methods to patch an Oracle 23ai database?

You are implementing Transparent Data Encryption (TDE) in a 23ai database. You have configured the wallet and set the encryption key. You need to ensure that the data in the USERS tablespace is encrypted. Which statement correctly describes the process to encrypt the USERS tablespace?

You are upgrading from 19c to 23ai and need to identify incompatible parameters before the upgrade. Which tool should you use?

What is the purpose of the 'Wallet' in Oracle security?

What happens to a traditional audit record when you migrate to Unified Auditing in 23ai?

Which THREE things can prevent an AutoUpgrade process from starting?

Which component is required to implement Transparent Data Encryption (TDE) in 23ai?

Which view should you query to verify the encryption status of tablespaces in 23ai?

You are implementing Transparent Data Encryption (TDE) in Oracle Database 23ai. You have already configured the keystore and created the master encryption key. Now you need to encrypt several existing tablespaces and columns. Which two actions must you perform to ensure that the data is encrypted and accessible? (Choose two.)

You are upgrading an Oracle Database 19c non-CDB to Oracle Database 23ai. The database uses a custom application that relies on the DBMS_LOB package and has a large amount of PL/SQL code. You have chosen the AutoUpgrade utility to perform the upgrade. During the upgrade, you encounter an error related to the DBMS_LOB package. Which action should you take to resolve the issue?

What is the primary purpose of 'Data Masking' in the Oracle Data Masking and Subsetting Pack?

Which TWO files are modified to configure a secured listener?

You are upgrading a 19c container database (CDB) to Oracle Database 23ai using AutoUpgrade. As part of the upgrade, you need to ensure that the database is in the correct state and that all prerequisites are met. Which two actions should you perform before starting the upgrade? (Choose two.)

Which command is used to start the AutoUpgrade process?

When configuring Oracle Network Encryption, which TWO of the following parameters in the sqlnet.ora file are used to specify encryption settings?

What is the primary benefit of using Unified Auditing in 23ai?

When upgrading a database, what is a 'Flashback Database' used for?

Which THREE items are generally included in an Oracle Patch?

Which THREE tasks are performed after an upgrade is finished?

Which THREE things should be checked before upgrading to 23ai?

What is the best way to ensure an encrypted connection between the application server and the database?

You are migrating to 23ai and need to use the 'DBMS_COMPARISON' package to verify data integrity between the old and new instances. What is the prerequisite for this operation?

Which THREE actions are part of the AutoUpgrade process?

You are managing an Oracle Database 23ai environment with Transparent Data Encryption (TDE) enabled. A security audit requires that you rotate the master encryption key for the database. You have already taken a backup of the keystore. Which command should you use to rotate the master key?

How do you ensure that a user cannot connect to the database via SQL*Plus but can connect via an application service?

Which file needs to be updated when you move the wallet location in 23ai?

Which THREE factors influence the duration of a database upgrade?

Which TWO methods are used to verify the success of an upgrade?

Which view can you use to check the status of TDE wallet encryption?

You are upgrading a 19c multitenant container database (CDB) to Oracle Database 23ai using AutoUpgrade. The source CDB contains three pluggable databases (PDBs). After running the upgrade, you need to verify that the upgrade was successful and that no manual intervention is required. Which two actions should you perform? (Choose two.)

You want to enforce password complexity in 23ai using a profile. Which clause is used to reference a custom verification function?

What is the primary role of the 'Patching' phase in an upgrade?

What is the recommended tool to apply a bundle patch to a 23ai environment?

When configuring a secure listener in 23ai, which protocol is recommended for encrypted communication?

You are administering an Oracle Database 23ai environment with Unified Auditing enabled. A new security policy requires that all failed logon attempts be audited. Which action should you take to meet this requirement?

You are preparing to upgrade a 19c database to 23ai using the AutoUpgrade utility. You have created the configuration file and run the upgrade in analyze mode. The analysis completes successfully. What is the next step you should perform according to best practices?

Your organization is migrating a critical 19c database to Oracle Database 23ai. The business requires that the cutover downtime be minimized, ideally under 10 minutes. You have a large database (20 TB) and a high transaction rate. Which migration method should you use to achieve the least downtime?

Which user is responsible for the management of the Unified Audit trail?

You need to perform a Rolling Upgrade using Data Guard. What is the minimum required configuration?

You are applying an Oracle Release Update (RU) in a Data Guard environment. Following the 'Rolling Upgrade' methodology, which instance should be patched first to ensure continuous availability?

In 23ai, if you want to audit 'CREATE TABLE' statements, which policy type should you use?

Which TWO are common audit types in Oracle?