nerdexam
Oracle

1Z0-052 · Question #6

You executed the following command to create a password file in the database server: $ orapwd file = orapworcl entries = 5 ignorecase=N Which statement describes the purpose of the above password…

The correct answer is C. It is used by Oracle to authenticate users for remote database administrator. The Oracle password file created by orapwd stores credentials that allow users to authenticate as SYSDBA or SYSOPER when connecting remotely, bypassing OS-level authentication.

Administering User Security

Question

You executed the following command to create a password file in the database server:

$ orapwd file = orapworcl entries = 5 ignorecase=N Which statement describes the purpose of the above password file?

Options

  • AIt records usernames and passwords of users when granted the DBA role
  • BIt contains usernames and passwords of users for whom auditing is enabled
  • CIt is used by Oracle to authenticate users for remote database administrator
  • DIt records usernames and passwords of all users when they are added to OSDBA or OSOPER operating

How the community answered

(30 responses)
  • B
    3% (1)
  • C
    93% (28)
  • D
    3% (1)

Why each option

The Oracle password file created by orapwd stores credentials that allow users to authenticate as SYSDBA or SYSOPER when connecting remotely, bypassing OS-level authentication.

AIt records usernames and passwords of users when granted the DBA role

The DBA role and its grantees are recorded in the data dictionary (DBA_ROLE_PRIVS), not in the external password file, which only holds SYSDBA/SYSOPER credentials.

BIt contains usernames and passwords of users for whom auditing is enabled

Audit records, including usernames and audit events, are stored in the database audit trail (AUD$ table or OS audit files), not in the password file.

CIt is used by Oracle to authenticate users for remote database administratorCorrect

The orapwd utility creates a password file (orapworcl in this case) that Oracle uses to authenticate privileged connections made remotely with SYSDBA or SYSOPER privileges, where operating system group membership cannot be verified. The 'entries' parameter defines how many privileged users can be stored, and 'ignorecase=N' enforces case-sensitive password matching.

DIt records usernames and passwords of all users when they are added to OSDBA or OSOPER operating

OSDBA and OSOPER operating system group membership is managed by the OS and does not require or use the Oracle password file for authentication.

Concept tested: Oracle orapwd password file for remote privileged authentication

Source: https://docs.oracle.com/en/database/oracle/oracle-database/19/dbseg/configuring-authentication.html

Topics

#password file#orapwd#remote DBA authentication#SYSDBA privilege

Community Discussion

No community discussion yet for this question.

Full 1Z0-052 Practice