Which Oracle Database component is audited by default if the unified Auditing option is enabled?

Oracle Data Pump is not audited by default under Unified Auditing; it requires a separately enabled predefined policy such as ORA_LOGON_FAILURES or a custom policy.

When Unified Auditing is enabled, Oracle automatically activates the ORA_SECURECONFIG and related predefined policies, which include auditing of Oracle Recovery Manager (RMAN) operations by default. RMAN backup and recovery activities are considered security-sensitive, so Oracle includes them in the default audit coverage without requiring manual policy creation or enablement.

Oracle Label Security activities are not included in the default Unified Auditing policies and must be explicitly audited by enabling a relevant predefined or custom policy.

Oracle Database Vault actions are not audited by default under Unified Auditing; a dedicated predefined policy must be enabled separately.

Oracle Real Application Security is not audited by default; it requires its own audit configuration separate from the default Unified Auditing policies.