Database operations such as shutting down or starting up the database should not be performed by non-administrative database users. These operations require SYSDBA or SYSOPER privileges. 

For our discussion please consider and expand on the following questions: 

1) Discuss how users can be authenticated by the operating system to connect to the Oracle database.  how does SQL*Plus relate to this method?

2) What methods does Oracle support for authentication by the network?

3) What are the key components you would include in a password policy? Why?

4) Give an example how you define a good password policy.  Can you design a general password policy? Or do you need to design it to consider a particular situation always?