Which two are true about backup encryption? (Choose two.)
Which two are true about backup encryption? (Choose two.)
Keystore-based encryption is the default mode for RMAN backup encryption because it uses the Oracle software keystore, which is more secure since it does not involve passwords. Backup encryption can indeed be enabled selectively for specific tablespaces using the SET ENCRYPTION command, allowing for granular control over what portions of the database are encrypted.
E is False: The BACKUP BACKUPSET command can neither encrypt nor decrypt backup sets. https://docs.oracle.com/en/database/oracle/oracle-database/19/rcmrf/BACKUP.html#GUID-73642FF2-43C5-48B2-9969-99001C52EB50
https://docs.oracle.com/en/database/oracle/oracle-database/19/rcmrf/BACKUP.html#:~:text=The%20BACKUP%20BACKUPSET%20command%20can%20neither%20encrypt%20nor%20decrypt%20backup%20sets.
AD correct
D - TRUE : https://docs.oracle.com/en/database/oracle/oracle-database/19/rcmrf/CONFIGURE.html#GUID-B5094E73-C26C-4FED-AE39-8C2E9540050A : ENCRYPTION : This configuration applies unless overridden with the SET ENCRYPTION command. Options specified for an individual tablespace take precedence over options specified for the whole database. A - TRUE: https://docs.oracle.com/en/database/oracle/oracle-database/19/bradv/configuring-rman-client-advanced.html#GUID-6ED708C7-1092-45FC-80C6-236F062D0DAC : Note: Keystore-based encryption is more secure than password-based encryption because no passwords are involved. Use password-based encryption only when it is absolutely necessary because your backups must be transportable.
E - FALSE : https://docs.oracle.com/en/database/oracle/oracle-database/19/rcmrf/BACKUP.html#GUID-73642FF2-43C5-48B2-9969-99001C52EB50 : Note: When you use the BACKUP BACKUPSET command with encrypted backup sets, the backup sets are backed up in their encrypted form. Because BACKUP BACKUPSET just copies the encrypted backup set to disk or tape, no decryption key is needed during a BACKUP BACKUPSET operation. The data is never decrypted during any part of the operation. The BACKUP BACKUPSET command can neither encrypt nor decrypt backup sets.
AE: Transparent encryption is the default mode and it uses the Oracle software keystore . keystore is a password-protected container used to store a Transparent Data Encryption (TDE) key. RMAN enables you to create encrypted backups of unencrypted backup sets. Before you back up the unencrypted backup sets, use the SET ENCRYPTION FOR DATABASE ON command to enable encryption.
AE correct
AD is right E is false --> The BACKUP BACKUPSET command can neither encrypt nor decrypt backup sets.
AD is correct
Sure of AD are both true.
AD for sure
AE is correct
AD C is not correct - Image copies can be encrypted should be backupset.
A: *Transparent encryption: This is the default mode and uses the Oracle software keystore. E: You can use BACKUP ... BACKUPSET to back up unencrypted backup sets in encrypted format. Before running the BACKUP command, enable encryption using the SET ENCRYPTION FOR DATABASE ON command. Not D: (the title above indicates Oracle Data Guard Environment): MANUAL_ENABLE enables you to selectively encrypt tablespaces if the database is licensed for Oracle Advanced Security. This is the default for both on-premises primary and standby databases and it uses the same behavior as in previous Oracle Database releases.
A: https://docs.oracle.com/en/database/oracle/oracle-database/19/bradv/configuring-rman-client-advanced.html#:~:text=RMAN%20offers%20the,or%20a%20password. E: https://docs.oracle.com/en/database/oracle/oracle-database/19/rcmrf/BACKUP.html#GUID-73642FF2-43C5-48B2-9969-99001C52EB50__CHDIJGIJ Not D: https://docs.oracle.com/en/database/oracle/oracle-database/19/asoag/using-transparent-data-encryption-with-other-oracle-features.html