nerdexam
Oracle

1Z0-052 · Question #46

A user, who is authenticated externally, logs in to a remote machine and connects to the database instance. What action would you take to ensure that a user cannot connect to the database instance…

The correct answer is C. Set the REMOTE_OS_AUTHENT parameter to FALSE. The REMOTE_OS_AUTHENT initialization parameter controls whether remote clients can authenticate to Oracle using operating system credentials.

Administering User Security

Question

A user, who is authenticated externally, logs in to a remote machine and connects to the database instance. What action would you take to ensure that a user cannot connect to the database instance by merely logging in to a remote machine?

Options

  • ASet REMOTE_OS_ROLES to FALSE
  • BSet OS_ROLES parameter to FALSE
  • CSet the REMOTE_OS_AUTHENT parameter to FALSE
  • DSet the REMOTE_LOGIN_PASSWORD_FILE parameter to NONE

How the community answered

(42 responses)
  • A
    14% (6)
  • B
    5% (2)
  • C
    74% (31)
  • D
    7% (3)

Why each option

The REMOTE_OS_AUTHENT initialization parameter controls whether remote clients can authenticate to Oracle using operating system credentials.

ASet REMOTE_OS_ROLES to FALSE

REMOTE_OS_ROLES controls whether OS groups can be used to assign Oracle roles to remote users, not whether remote OS authentication itself is permitted.

BSet OS_ROLES parameter to FALSE

OS_ROLES is not a standard Oracle initialization parameter governing remote authentication; the correct parameter for this purpose is REMOTE_OS_AUTHENT.

CSet the REMOTE_OS_AUTHENT parameter to FALSECorrect

Setting REMOTE_OS_AUTHENT to FALSE disables remote OS-based authentication, preventing any user from connecting to the database instance simply by logging into a remote machine. With this parameter set to FALSE, Oracle refuses OS-authenticated connections from remote clients, requiring explicit database credential verification for all remote sessions.

DSet the REMOTE_LOGIN_PASSWORD_FILE parameter to NONE

REMOTE_LOGIN_PASSWORD_FILE determines how the password file is used for SYSDBA and SYSOPER authentication, not whether remote OS-authenticated connections are permitted.

Concept tested: Disabling remote OS authentication in Oracle

Source: https://docs.oracle.com/en/database/oracle/oracle-database/19/refrn/REMOTE_OS_AUTHENT.html

Topics

#external authentication#REMOTE_OS_AUTHENT#OS authentication#remote connection

Community Discussion

No community discussion yet for this question.

Full 1Z0-052 Practice