User jane must report on who has done RMAN backups on a database that has Unified Auditing enabled. What is the minimum that must be done to allow JANE to generate these reports?

Question

Options

• AUse create audit policy.
• BUse grant audit_admin to Jane;
• CUse grant audit_viewer to Jane;
• DUse alter system set AUDIT_SYS_OPERATION= TRUE;

• A
  78% (14)
• B
  11% (2)
• C
  6% (1)
• D
  6% (1)

Explanation

Option A is correct because in Oracle Unified Auditing, RMAN backup activities are not captured by default - you must explicitly define an audit policy using CREATE AUDIT POLICY (with ACTIONS COMPONENT=RMAN BACKUP) and then enable it before any RMAN activity data exists to report on. Without this policy in place, the unified audit trail contains no RMAN records at all, so no report can ever produce meaningful results regardless of what privileges Jane holds.

Option B (AUDIT_ADMIN) is wrong because it grants far more privilege than necessary (the ability to create and drop policies system-wide) and still wouldn't generate data if no RMAN policy had been defined. Option C (AUDIT_VIEWER) seems tempting since it allows querying the audit trail, but it's insufficient alone - there is nothing to view if no audit policy for RMAN was ever created. Option D (AUDIT_SYS_OPERATION=TRUE) belongs to the older traditional auditing model, not Unified Auditing, making it irrelevant once Unified Auditing is enabled.

Memory tip: Think "No policy, no data" - in Unified Auditing, tracking must be explicitly turned on via CREATE AUDIT POLICY before any reporting is possible, so the policy creation always comes first.

No community discussion yet for this question.