Which two are benefits of unified auditing in full mode?

Question

Options

• AAll audit data is written to both the traditional locations and to the unified location.
• BThe audit trail is in a single format.
• CPre 12c audit data is written to the traditional locations and new 12c audit data is written to the
• DThe audit trail is read-only.
• EThe audit trail uses less space.

• A
  5% (1)
• B
  90% (19)
• E
  5% (1)

Explanation

B is correct because full unified auditing consolidates all audit records - standard audit, fine-grained audit (FGA), SYSDBA/SYSOPER actions, etc. - into a single, consistent format in the UNIFIED_AUDIT_TRAIL view, eliminating fragmented, format-inconsistent records across multiple sources.

C is correct because when transitioning to full unified auditing mode, Oracle preserves pre-12c audit records in their original traditional locations (e.g., SYS.AUD$, OS files) while directing all new 12c audit activity exclusively to the unified audit trail. This protects historical audit data during migration.

Why the distractors are wrong:

• A describes mixed mode behavior (the default post-upgrade state), not full mode - in full mode, data goes only to the unified trail, not to both locations.
• D is inaccurate because the unified audit trail is more protected than traditional trails, but not read-only - privileged DBAs can purge records via DBMS_AUDIT_MGMT.
• E is a misconception - unified auditing can actually capture more detail and doesn't guarantee reduced space consumption.

Memory tip: Think of full mode as a "clean handoff" - old data stays where it was, new data goes to one unified destination in one format. If you see "both locations" in an answer, that's mixed mode, not full mode.

No community discussion yet for this question.