OCP OCP Security and Auditing 2 — Questions and Answers
Question 1: Which Oracle auditing framework introduced in Oracle 12c consolidates all audit data into a single unified audit trail?
- Standard Auditing
- Fine-Grained Auditing (FGA)
- Unified Auditing (Correct answer)
- SYS Auditing
Correct answer: Unified Auditing
Unified Auditing, introduced in Oracle 12c, consolidates audit records from all sources into a single trail in the AUDSYS schema.
Question 2: Which Oracle component creates 'realms' to prevent even privileged DBAs from accessing sensitive application data?
- Oracle Label Security
- Oracle Database Vault (Correct answer)
- Oracle Virtual Private Database
- Oracle Data Safe
Correct answer: Oracle Database Vault
Oracle Database Vault uses realms and command rules to restrict privileged users, including DBAs, from accessing protected data.
Question 3: What is the default profile automatically assigned to a new Oracle user if no profile is specified during creation?
- DEFAULT (Correct answer)
- STANDARD
- SECURE_USER
- ORA_STIG_PROFILE
Correct answer: DEFAULT
The DEFAULT profile is automatically assigned to all new Oracle users unless a specific profile is named in the CREATE USER statement.
Question 4: Which data dictionary view shows the auditing options currently configured for individual database objects?
- DBA_AUDIT_TRAIL
- DBA_OBJ_AUDIT_OPTS (Correct answer)
- ALL_AUDIT_POLICIES
- V$AUDIT_OBJECT
Correct answer: DBA_OBJ_AUDIT_OPTS
DBA_OBJ_AUDIT_OPTS displays the audit options set for every database object, showing which operations are audited.
Question 5: What does Oracle Data Redaction do to sensitive data when a user queries a protected column?
- Permanently deletes the sensitive value
- Masks the value in query results without altering stored data (Correct answer)
- Encrypts the stored value before returning it
- Raises an error and denies access to the column
Correct answer: Masks the value in query results without altering stored data
Oracle Data Redaction dynamically replaces sensitive column values in query output while leaving the actual stored data unchanged.
Question 6: Which user profile parameter specifies the number of consecutive failed login attempts before an Oracle account is locked?
- FAILED_LOGIN_ATTEMPTS (Correct answer)
- PASSWORD_LOCK_AFTER
- MAX_FAILED_LOGINS
- LOGIN_RETRY_LIMIT
Correct answer: FAILED_LOGIN_ATTEMPTS
FAILED_LOGIN_ATTEMPTS in a user profile defines how many consecutive incorrect passwords trigger an automatic account lock.
OCP OCP Security and Auditing 2
Which Oracle auditing framework introduced in Oracle 12c consolidates all audit data into a single unified audit trail?