Which three are true about Audit policies In container databases (CDBs)?

Question

Options

• AAll audit records are written to the audit trail in CDB$ROOT
• BA common unified audit policy can be created at the application root level.
• CA common unified audit policy can be created at the CDB level.
• DAn application PDB cannot have a local audit policy.
• EFine-grained auditing policies defined in an application root must be manually synchronized by
• FApplication-common unified audit policies defined In an application root must be manually

• A
  14% (5)
• B
  56% (20)
• D
  6% (2)
• E
  25% (9)

Explanation

In Oracle Multitenant, unified audit policies operate at multiple container levels. B is correct because Application Containers have their own root (Application Root) where application-common audit policies can be defined, scoping coverage to Application PDBs beneath it. C is correct because a common unified audit policy created in CDB$ROOT applies across all containers in the CDB - this is the broadest scope. F is correct because application-common unified audit policies defined in an Application Root are part of the application's versioned schema and must be explicitly propagated to Application PDBs using the application sync mechanism (ALTER PLUGGABLE DATABASE APPLICATION ... SYNC); they don't replicate automatically.

Why the distractors fail:

• A is wrong - audit records are written to the audit trail of the container where the activity occurs, not always CDB$ROOT; each PDB maintains its own AUD$UNIFIED records.
• D is wrong - Application PDBs can have local audit policies; local policies coexist with inherited common/app-common policies.
• E is wrong - Fine-Grained Auditing (FGA) policies behave differently from unified audit policies in Application Containers and do not follow the same manual sync requirement that application-common unified audit policies do.

Memory tip: Picture a three-tier ladder - CDB$ROOT (common, widest reach), App Root (app-common, needs a sync "push"), PDB (local, narrowest). Anything defined higher up that belongs to a versioned application requires an explicit sync, while FGA and local policies play by different rules.

No community discussion yet for this question.