Which Oracle Database component is audited by default if the unified Auditing option is enabled?

Oracle Data Pump is not audited by default - capturing import and export operations requires explicitly enabling a predefined policy such as ORA_DP_AUDIT.

Oracle Recovery Manager (RMAN) is audited by default when unified auditing is enabled because it is a core Oracle Database component always present and active. RMAN backup, restore, and recovery operations are automatically written to the unified audit trail without requiring any explicit audit policy to be created or enabled. This mandatory auditing ensures that critical database maintenance activities are always tracked for security and compliance purposes.

Oracle Label Security activity is not captured by default in the unified audit trail and requires an explicitly enabled dedicated audit policy to record label-based access control events.

Oracle Database Vault operations are not audited by default under unified auditing - realm and command rule violations require enabling a predefined policy like ORA_DV_AUDPOL.

Oracle Real Application Security events are not captured by default and require explicitly enabling policies such as ORA_RAS_POLICY_MGMT or ORA_RAS_SESSION_MGMT to record application security activities.