You enabled an audit policy by issuing the following statements: SQL> AUDIT POLICY ORA_DATABASE_PARAMETER BY SCOTT; SQL> AUDIT POLICY ORA_DATABASE_PARAMETER BY SYS, SYSTEM; For which database users…

SCOTT is no longer audited because the second AUDIT POLICY BY SYS, SYSTEM statement replaced the original BY SCOTT clause, removing SCOTT from the active audit configuration.

In Oracle unified auditing, when AUDIT POLICY is issued a second time for the same policy with a new BY clause, it supersedes the previous BY clause; the initial statement auditing SCOTT is replaced by the second statement specifying SYS and SYSTEM, so only those two users remain active for that policy.

The second AUDIT POLICY statement superseded the first, so SCOTT is excluded from auditing and only SYS and SYSTEM are active.

Oracle unified auditing does not restrict coverage to successful executions only unless WHENEVER SUCCESSFUL is explicitly specified in the AUDIT statement.

Oracle unified auditing does not restrict coverage to failed executions only unless WHENEVER NOT SUCCESSFUL is explicitly specified in the AUDIT statement.

When an AUDIT POLICY statement omits the WHENEVER SUCCESSFUL or WHENEVER NOT SUCCESSFUL clause, Oracle unified auditing defaults to capturing both successful and failed executions for the specified users.