nerdexam
Oracle

1Z0-062 · Question #138

You executed the following command to create a password file in the database server: $ orapwd file = orapworcl entries = 5 ignorecase=N Which statement describes the purpose of the above password…

The correct answer is C. It is used by Oracle to authenticate users for remote database administrator. The orapwd utility creates a password file that Oracle uses to authenticate privileged users connecting remotely as SYSDBA or SYSOPER, since OS-level authentication is unavailable for remote sessions.

Administering User Security

Question

You executed the following command to create a password file in the database server:

$ orapwd file = orapworcl entries = 5 ignorecase=N Which statement describes the purpose of the above password file?

Options

  • AIt records usernames and passwords of users when granted the DBA role
  • BIt contains usernames and passwords of users for whom auditing is enabled
  • CIt is used by Oracle to authenticate users for remote database administrator
  • DIt records usernames and passwords of all users when they are added to OSDBA or OSOPER

How the community answered

(48 responses)
  • A
    4% (2)
  • B
    6% (3)
  • C
    88% (42)
  • D
    2% (1)

Why each option

The orapwd utility creates a password file that Oracle uses to authenticate privileged users connecting remotely as SYSDBA or SYSOPER, since OS-level authentication is unavailable for remote sessions.

AIt records usernames and passwords of users when granted the DBA role

The DBA role is granted and managed entirely within the data dictionary; the password file stores only SYSDBA and SYSOPER credentials, not DBA role grantees.

BIt contains usernames and passwords of users for whom auditing is enabled

Audit configuration and audit records are stored in the database itself (the AUD$ table or unified audit trail), not in the Oracle password file.

CIt is used by Oracle to authenticate users for remote database administratorCorrect

The Oracle password file created by orapwd is the mechanism Oracle uses to verify credentials for remote privileged connections (SYSDBA/SYSOPER). Because remote sessions cannot leverage operating system group membership (OSDBA/OSOPER), Oracle falls back to the password file. The 'entries=5' parameter sets the maximum number of privileged users whose credentials can be stored in the file.

DIt records usernames and passwords of all users when they are added to OSDBA or OSOPER

OSDBA and OSOPER are operating system groups used for local OS authentication, which bypasses the password file entirely; the password file is relevant for remote connections, not OS group membership.

Concept tested: Oracle password file remote privileged authentication

Source: https://docs.oracle.com/en/database/oracle/oracle-database/19/dbseg/configuring-authentication.html

Topics

#password file#remote DBA authentication#database security

Community Discussion

No community discussion yet for this question.

Full 1Z0-062 Practice