You must disable OS authentication for database administrative users on a RAC database. Which option must you use to do this?

Question

Options

• ASet sqlnet.aothentication_sebvices=(NONe?In sqlnet.ora on the database server.
• BRemove all OS users from OS groups: osdba, osoper, osbackupdba, osdgdba, osrmdba,
• CSet REMOTE_LOGIH_PASSWORDFILE = EXCLUSIVE In the init.ora file.
• DSet REMOTE_OS_AUTHENT = FALSE In the init.ora file.

• A
  3% (1)
• B
  7% (2)
• C
  14% (4)
• D
  76% (22)

Explanation

Setting REMOTE_OS_AUTHENT = FALSE in the initialization parameter file directly controls whether Oracle allows OS-based authentication for remote database connections - and in a RAC environment, node-to-node connections are inherently remote, making this the precise lever to disable OS authentication for administrative users across the cluster.

Why the distractors are wrong:

• A is incorrect because sqlnet.authentication_services=(NONE) in sqlnet.ora affects network-layer authentication broadly and is a client/server-side network config, not the database-level control needed for RAC administrative users - and the option also contains obvious typos.
• B is incorrect because removing OS group memberships only affects local OS authentication on that node; it doesn't enforce the restriction at the database engine level across all RAC nodes.
• C is incorrect because REMOTE_LOGIN_PASSWORDFILE = EXCLUSIVE enables password file authentication for privileged users - it's a complementary hardening step, but it does not itself disable OS authentication.

Memory tip: Associate the parameter name with its purpose - REMOTE (RAC nodes connect remotely) + OS_AUTHENT (OS authentication) + FALSE (turn it off). If you want to block admins from logging in via their OS credentials on a RAC cluster, you flip the REMOTE OS authentication switch to FALSE.

No community discussion yet for this question.