Security Manager's functionality

1. Unified Auditing:
   1. Oracle 9i: Traditional auditing mechanisms were present.
   2. Oracle 12c: Introduced Unified Auditing, which consolidates all auditing into a single framework, allowing for more efficient and holistic auditing capabilities.
2. Transparent Data Encryption (TDE):
   1. Oracle 9i: No native support for transparent data encryption.
   2. Oracle 12c: Enhanced TDE capabilities, allowing tablespace-level encryption and hardware security module (HSM) support for storing encryption keys.
3. Data Redaction:
   1. Oracle 9i: This feature was not available.
   2. Oracle 12c: Introduced Data Redaction, enabling the masking of sensitive data when queried, but retaining the actual data in the database.
4. Privilege Analysis:
   1. Oracle 9i: No specific feature for analyzing the usage of privileges.
   2. Oracle 12c: Introduced Privilege Analysis, allowing database administrators to capture and analyze granted privileges that are actually being used, assisting in the implementation of the principle of least privilege.
5. Virtual Private Database (VPD) and Fine-Grained Access Control:
   1. Oracle 9i: Introduced VPD, which allows security policies to be attached to tables and views.
   2. Oracle 12c: Enhanced with more granular controls and easier administration, providing more flexibility in defining security policies.
6. Administrative Privileges:
   1. Oracle 9i: More general roles such as SYSDBA and SYSOPER.
   2. Oracle 12c: Introduced more granular administrative privileges like SYSBACKUP, SYSDG, and SYSKM, enabling administrators to have only the necessary privileges for specific tasks.
7. SQL*Net Encryption and Checksumming:
   1. Oracle 9i: Basic encryption capabilities for network traffic.
   2. Oracle 12c: Enhanced security for network communication, including better algorithms and easier setup.
8. Role-Based Access Control (RBAC):
   1. Oracle 9i: Basic role-based capabilities were present.
   2. Oracle 12c: RBAC was enhanced to offer a more layered and modular approach to managing user access, making user management more efficient and secure.
9. Real Application Security (RAS):
   1. Oracle 9i: No such feature existed.
   2. Oracle 12c: Introduced RAS, a declarative model for application security, providing a finer level of access controls on application data.
10. Conditionally Auditing Policies:
    1. Oracle 9i: Basic auditing capabilities were present.
    2. Oracle 12c: Introduced the ability to conditionally trigger audit policies based on factors like IP address, program name, and more.

Exploring Security Manager

1. You need to log into a database. Enter system in the Username field and press Tab to advance to the password field. Type dogtoad in the Password field and press Tab to advance to the service field. Next, tell Enterprise Manager which database you want to connect to. Type coin in the Service field and click the OK button.
2. This is the opening screen that you will see after connecting to the database. From here, you can click either Users or Roles in the left pane to see information about that item. You can expand the Roles item by clicking the + next to it. Click the close box in the upper right corner to exit.
3. A list of database users is displayed on the right-hand side of the screen. From here, you can click any of the items in the left pane to see information about that item. You can expand the Roles item by clicking the + next to it. Click the close box in the upper right corner to exit.
4. A list of database roles is displayed. From here, you can click either Roles or Users in the left pane to see information about that item. You can expand the Roles item by clicking the + next to it. Click the close box in the upper right corner to exit.
5. A list of database roles is displayed in the left-hand portion of the window. Click on Users, Roles, or DBA in the left paneto view more information. Click the close box in the upper right corner to exit.
6. Clicking the DBA role causes the definition for that role to be displayed on the right-hand side of the screen. The definition is broken up into four areas: General, Role, System Privileges, and Object Privileges. Each area has its own tab. From here, you can click Users or Roles in the left pane to see information about that item. You can close the Roles folder by clicking the - next to it. You can also click the tabs at the top of the right-hand pane. Click the close box in the upper right corner to exit.
7. A list of system privileges that have been granted to the role is displayed. From here, you can click Users or Roles in the left pane to see information about that item. You can close the Roles folder by clicking the - next to it. You can also click the DBA role in order to see detailed information about that role. Click the close box in the upper right corner to exit.
8. The Role s tab shows a list of roles that have been granted to the DBA role. From here, you can click Users or Roles in the left pane to see information about that item. You can close the Roles folder by clicking the - next to it. You can also click any of the tabs at the top of the right-hand pane. Click the close box in the upper right corner to exit.
9. The object privileges tab lists any object privileges that have been granted to the role. From here, you can click the Users or Roles folders in the left pane to see information about that item. You can close the Roles folder by clicking the - next to it. You can also click any of the tabs at the top of the right-hand pane. Click the close box in the upper right corner or the exit button to end this simulation.

Module Functionality - Quiz