1Z0-062 · Question #225
You plan to install the Oracle Database 12c software on a new server. The database will use Automatic Storage Management (ASM) and Oracle Restart. Oracle Grid Infrastructure for a standalone server…
The correct answer is C. assigning asmadmin and asmoper as primary groups for the oracle user D. creating OS groups associated with the OSBACKUPDBA, OSDGDBA, and OSKMDBA system. For Oracle 12c job role separation with ASM, the oracle user needs ASM operational group memberships and three new 12c-specific OS privilege groups must be created.
Question
You plan to install the Oracle Database 12c software on a new server. The database will use Automatic Storage Management (ASM) and Oracle Restart. Oracle Grid Infrastructure for a standalone server is already installed on the server. You want to configure job role separation. You create the following operating system users and groups:
- The user oracle as the owner of the Oracle database installation
- The user grid as the owner of Oracle Grid Infrastructure
- The group oinstall as an Oracle Inventory group
- The group dba as the OSDBA group for Oracle database
- The group asmdbaas the OSDBA group for Oracle ASM
- The group asmadmin as the administration privileges group for Oracle
ASM
- The group asmoper as the group for Oracle ASM
Which two additional tasks should you perform with regard to the OS-level owners and groups?
Options
- Acreating a separate central inventory group for the Oracle Database 12c installation
- Bassigning oinstall as the primary group for the oracle user
- Cassigning asmadmin and asmoper as primary groups for the oracle user
- Dcreating OS groups associated with the OSBACKUPDBA, OSDGDBA, and OSKMDBA system
- Eassigning asmdba as the secondary group for the oracle user
How the community answered
(18 responses)- A6% (1)
- B17% (3)
- C72% (13)
- E6% (1)
Why each option
For Oracle 12c job role separation with ASM, the oracle user needs ASM operational group memberships and three new 12c-specific OS privilege groups must be created.
A separate central inventory group for the Oracle Database 12c installation is not required; the existing oinstall group already serves as the shared Oracle Inventory group for both the oracle and grid users.
Assigning oinstall as the primary group for the oracle user is already implied by the baseline installation described in the question stem, so it does not represent an additional task.
The oracle user must have asmadmin and asmoper assigned as secondary groups so it holds the necessary OS-level ASM operational privileges to interact with ASM disk groups when running alongside Oracle Grid Infrastructure.
Oracle Database 12c introduced three new fine-grained OS privilege groups - OSBACKUPDBA for RMAN backup operations, OSDGDBA for Data Guard administration, and OSKMDBA for TDE key management - which must be created to implement complete job role separation.
Assigning only asmdba as a secondary group is insufficient for full ASM interaction in a job role separation environment where asmadmin and asmoper privileges are also required for the oracle user.
Concept tested: Oracle 12c job role separation OS groups for ASM and database
Source: https://docs.oracle.com/en/database/oracle/oracle-database/12.2/ladbi/about-operating-system-groups-and-users-requirements-for-oracle-database-installation.html
Topics
Community Discussion
No community discussion yet for this question.