1Z0-082 Oracle Database Monitoring and Auditing 2 — Questions and Answers
Question 1: Which Oracle auditing feature allows policies to audit specific rows based on column values, such as auditing access to salary data over $100,000?
- Standard Auditing
- Fine-Grained Auditing (FGA) (Correct answer)
- Unified Auditing
- Value-Based Auditing
Correct answer: Fine-Grained Auditing (FGA)
Fine-Grained Auditing (FGA) allows administrators to create policies that trigger audit records only when specific column values or conditions are met in a query.
Question 2: Which initialization parameter must be set to enable traditional (non-unified) database auditing in Oracle?
- ENABLE_AUDIT
- AUDIT_TRAIL (Correct answer)
- AUDIT_LEVEL
- DB_AUDIT
Correct answer: AUDIT_TRAIL
The AUDIT_TRAIL parameter controls whether auditing is enabled and where audit records are stored, with values such as DB, OS, XML, or NONE.
Question 3: When AUDIT_TRAIL is set to DB, where are standard audit records stored?
- In the operating system audit file
- In the SYS.AUD$ table in the database (Correct answer)
- In the redo log files
- In a separate audit database
Correct answer: In the SYS.AUD$ table in the database
When AUDIT_TRAIL=DB, Oracle writes audit records to the SYS.AUD$ table, which is accessible through the DBA_AUDIT_TRAIL data dictionary view.
Question 4: Which data dictionary view shows audit records for DDL and DML operations performed by database users?
- DBA_AUDIT_TRAIL (Correct answer)
- V$AUDIT_EVENTS
- ALL_AUDIT_LOG
- USER_AUDIT_HISTORY
Correct answer: DBA_AUDIT_TRAIL
DBA_AUDIT_TRAIL is a view over SYS.AUD$ that shows all standard audit trail entries including the user, action, object, and timestamp.
Question 5: What is Unified Auditing introduced in Oracle 12c?
- A single consolidated audit framework that replaces all previous auditing methods with one policy-based system (Correct answer)
- An auditing feature limited to DML operations only
- An external OS-level logging solution
- A feature that audits only privileged users
Correct answer: A single consolidated audit framework that replaces all previous auditing methods with one policy-based system
Unified Auditing consolidates standard auditing, FGA, SYS auditing, and RMAN auditing into a single framework stored in AUDSYS.AUD$UNIFIED and managed via audit policies.
Question 6: Which SQL statement enables auditing of SELECT operations on the HR.EMPLOYEES table for all users?
- ENABLE AUDIT SELECT ON hr.employees
- AUDIT SELECT ON hr.employees BY ACCESS (Correct answer)
- CREATE AUDIT POLICY ON hr.employees FOR SELECT
- SET AUDIT SELECT hr.employees ON
Correct answer: AUDIT SELECT ON hr.employees BY ACCESS
The AUDIT statement with the SELECT action and object name enables auditing of SELECT operations on a specific table, optionally specifying BY ACCESS or BY SESSION.
Which Oracle auditing feature allows policies to audit specific rows based on column values, such as auditing access to salary data over $100,000?