1Z0-052 · Question #46
A user, who is authenticated externally, logs in to a remote machine and connects to the database instance. What action would you take to ensure that a user cannot connect to the database instance…
The correct answer is C. Set the REMOTE_OS_AUTHENT parameter to FALSE. The REMOTE_OS_AUTHENT initialization parameter controls whether remote clients can authenticate to Oracle using operating system credentials.
Question
A user, who is authenticated externally, logs in to a remote machine and connects to the database instance. What action would you take to ensure that a user cannot connect to the database instance by merely logging in to a remote machine?
Options
- ASet REMOTE_OS_ROLES to FALSE
- BSet OS_ROLES parameter to FALSE
- CSet the REMOTE_OS_AUTHENT parameter to FALSE
- DSet the REMOTE_LOGIN_PASSWORD_FILE parameter to NONE
How the community answered
(42 responses)- A14% (6)
- B5% (2)
- C74% (31)
- D7% (3)
Why each option
The REMOTE_OS_AUTHENT initialization parameter controls whether remote clients can authenticate to Oracle using operating system credentials.
REMOTE_OS_ROLES controls whether OS groups can be used to assign Oracle roles to remote users, not whether remote OS authentication itself is permitted.
OS_ROLES is not a standard Oracle initialization parameter governing remote authentication; the correct parameter for this purpose is REMOTE_OS_AUTHENT.
Setting REMOTE_OS_AUTHENT to FALSE disables remote OS-based authentication, preventing any user from connecting to the database instance simply by logging into a remote machine. With this parameter set to FALSE, Oracle refuses OS-authenticated connections from remote clients, requiring explicit database credential verification for all remote sessions.
REMOTE_LOGIN_PASSWORD_FILE determines how the password file is used for SYSDBA and SYSOPER authentication, not whether remote OS-authenticated connections are permitted.
Concept tested: Disabling remote OS authentication in Oracle
Source: https://docs.oracle.com/en/database/oracle/oracle-database/19/refrn/REMOTE_OS_AUTHENT.html
Topics
Community Discussion
No community discussion yet for this question.