Oracle Database 12c: Advanced Administration — Question 174

Which three are true about Transparent Data Encryption (TDE)? (Choose three.)

Answer options

• A. It stores the current and all past master keys in the keystore.
• B. It replaces secure application roles.
• C. Master encryption keys are managed by Oracle Database Vault.
• D. It can encrypt data at the column level.
• E. It uses a single master key for a database.
• F. It encrypts only data on the client.

Correct answer: A, C, D

Explanation

Option A is correct because TDE does store both current and past master keys. Option C is accurate as Oracle Database Vault is responsible for managing the master encryption keys. Option D is true since TDE can encrypt data at the column level. Options B, E, and F are incorrect as they misrepresent the functionality and characteristics of TDE.