Identify three benefits of Unified Auditing.

Question

Options

• ADecreased use ofstorage to store audit trail rowsin the database.
• BIt improves overall auditing performance.
• CIt guarantees zero-loss auditing.
• DThe audit trail cannot be easily modified because it is read-only.
• EIt automatically audits Recovery Manager (RMAN) events.

• A
  9% (3)
• B
  86% (30)
• C
  6% (2)

Explanation

Unified Auditing (Oracle DB) consolidates multiple legacy audit trails into a single, unified trail stored in the AUDSYS schema. B is correct because unified auditing writes records asynchronously and in bulk, reducing the performance overhead of the older mixed-mode auditing. D is correct because the unified audit trail (AUDSYS.AUD$UNIFIED) is a read-only table - even privileged users cannot alter or delete records without special administrative privileges, making tampering much harder. E is correct because Unified Auditing automatically captures RMAN backup and recovery events out of the box, with no extra configuration required.

Why A is wrong: Unified Auditing doesn't inherently reduce storage - consolidating multiple audit sources into one trail can actually increase DB storage usage. Why C is wrong: "Guaranteed zero-loss" is too absolute; in the default queued-write mode, a crash before a flush could lose recent records (immediate-write mode exists but isn't the default, and neither guarantees zero loss unconditionally).

Memory tip: Think "BDE = Better, Defended, Everything-RMAN" - Better performance, Defended trail (read-only), and Everything from RMAN is auto-audited.

No community discussion yet for this question.