nerdexam
Oracle

1Z0-062 · Question #149

You Execute the Following command to create a password file in the database server: $ orapwd file = `+DATA/PROD/orapwprod entries = 5 ignorecase = N format = 12' Which two statements are true about…

The correct answer is C. Is used by Oracle to authenticate users for remote database administration. E. It supports the SYSBACKUP, SYSDG, and SYSKM system privileges. The Oracle password file authenticates privileged users for remote DBA operations and supports extended system privileges introduced in Oracle 12c.

Administering User Security

Question

You Execute the Following command to create a password file in the database server:

$ orapwd file = `+DATA/PROD/orapwprod entries = 5 ignorecase = N format = 12' Which two statements are true about the password file?

Options

  • AIt records the usernames and passwords of users when granted the DBA role.
  • BIt contains the usernames and passwords of users for whom auditing is enabled.
  • CIs used by Oracle to authenticate users for remote database administration.
  • DIt records the usernames and passwords of all users when they are added to the OSDBA or
  • EIt supports the SYSBACKUP, SYSDG, and SYSKM system privileges.

How the community answered

(30 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    90% (27)
  • D
    3% (1)

Why each option

The Oracle password file authenticates privileged users for remote DBA operations and supports extended system privileges introduced in Oracle 12c.

AIt records the usernames and passwords of users when granted the DBA role.

The password file does not record users granted the DBA role - it only records users explicitly granted SYSDBA, SYSOPER, or other administrative system privileges like SYSBACKUP.

BIt contains the usernames and passwords of users for whom auditing is enabled.

The password file has no relationship to auditing - it is solely an authentication mechanism for privileged remote connections.

CIs used by Oracle to authenticate users for remote database administration.Correct

The password file is specifically used by Oracle to authenticate users who connect remotely with administrative privileges such as SYSDBA and SYSOPER, enabling remote database administration without relying solely on OS authentication.

DIt records the usernames and passwords of all users when they are added to the OSDBA or

OSDBA is an operating system group used for local OS authentication, not a privilege stored in the password file - the password file tracks SYSDBA, SYSOPER, SYSBACKUP, SYSDG, and SYSKM grantees.

EIt supports the SYSBACKUP, SYSDG, and SYSKM system privileges.Correct

Oracle 12c extended the password file to support SYSBACKUP, SYSDG, and SYSKM system privileges in addition to the traditional SYSDBA and SYSOPER, which is activated by specifying format=12 in the orapwd command.

Concept tested: Oracle password file authentication and 12c system privileges

Source: https://docs.oracle.com/en/database/oracle/oracle-database/12.2/dbseg/configuring-authentication.html

Topics

#password file#remote administration#SYSDBA#privileges

Community Discussion

No community discussion yet for this question.

Full 1Z0-062 Practice