To understand how to properly secure an Oracle environment without shortcuts, refer to the Oracle Database Security Guide
Which of those would you like?