Oracle Security Interview Preparation Guide

1. shutdown the database with normal/emmidiate/transactional
2. modify/include the parameter log_archive_start=true,
log_archive_dest= (location to which the redo log file
group is archived), log_archive_format=(in which format you
want to apper the archive log file)
3. start up the database

To check database is in which mode

1. Conn sys/sys as sysdba
2. select log_mode from v$database

To set database in Archivelog mode

1. shutdown immediate;
2. startup mount;
3. alter database archivelog;
4. alter database open;

To set database in NoArchivelog Mode
1. shutdown immediate;
2. startup mount;
3. alter database noarchivelog;
4. alter database open;

If a user wants to give some privileges to
another user or a group of users then they will create role
and they give this role to the users.let the privileges
be 'insert' and 'update' on 'emp' table then instead of
specifying them by their names they will create role which
inturn includes these methods. this role is further given
to the users.
If in futher if he wants to remove some
privilege given to the users, he can just alter the role
and remove that particular privilege such as he can remove
update from this created role..
Later the users cant do updations on that emp
table.but still can insert the values into that table.
Hence Roles are the easiest way to grant and
manage common privileges needed by different groups of
database users.Creating roles and assign each role to group
of users will simplify the job of assigning privileges to
individual users.

DB NAME - Must set to a text string of no more than 8
characters and it will be stored inside the datafiles,
redo log files and control files and control file while
database creation.

DB_DOMAIN - It is string that specifies the network
domain where the database is created. The global
database name is identified by setting these parameters
(DB_NAME & DB_DOMAIN)

CONTORL FILES - List of control filenames of the database.
If name is not mentioned then default name will be used.

DB_BLOCK_BUFFERS - To determine the no of buffers in the
buffer cache in SGA.

PROCESSES - To determine number of operating system
processes that can be connected to ORACLE concurrently.
The value should be 5 (background process) and
additional 1 for each user.

ROLLBACK_SEGMENTS - List of rollback segments an ORACLE
instance acquires at database startup.

Also optionally
LICENSE_MAX_SESSIONS,LICENSE_SESSION_WARNING and
LICENSE_MAX_USERS.

So many database utilities are avalibale
1. SQLPLUS
2. RMAN
3. TKPROF
4. SQLLODAR
5. EXP,IMP AND EXPDP,IMPDP
6. EXPLAN PLAN
7. LSNRCTL
etc.

DBA - role Contains all database system privileges.

SYS user account - The DBA role will be assigned to this
account. All of the basetables and views for the
database's dictionary are store in this schema and are
manipulated only by ORACLE.

SYSTEM user account - It has all the system privileges for
the database and additional tables and views that
display administrative information and internal tables and
views used by oracle tools are created using this username.

Depending on the company and the department, this role can either be highly specialized or incredibly diverse. The primary role of the Database Administrator is to adminster, develop, maintain and implement the policies and procedures necessary to ensure the security and integrity of the corporate database. Sub roles within the Database Administrator classification may include security, architecture, warehousing and/or business analysis. Other primary roles will include:

1.Deciding the h/w devices to be used
2.Deciding the user and data to be used by user.
3.Deciding the information content data base system.
4.Deciding the data dictionary contain the data in data.
5.Deciding the validation check on data.
6.Deciding the backup and recovery.
7.Monitoring the response to be changing environment.

DBA_DATA_FILES is view to show the space for the tablespace
if you want the calulate the space of the database the all
tablespace size is the database size.

Don't grant user access directly to tables within the
application.

Instead grant the ability to access the procedures that
access the tables.

When procedure executed it will execute the privilege of
procedures owner. Users cannot access tables except via the
procedure.

An user account is not a physical structure in Database
but it is having important relationship to the objects in
the database and will be having certain privileges