Exam 1z0-083 topic 1 question 75 discussion

It is A. RMAN encryption keys are stored in a database keystore. D. The SET ENCRYPTION command overrides encryption settings specified by the CONFIGURE ENCRYPTION command.

I think A D

I'm sure with AD

A,D correct. See vkra

A+C Dual Mode Encryption of Backups : Dual-mode encrypted backups can be restored either transparently or by specifying a password. Dual-mode encrypted backups are useful when you create backups that are normally restored on-site using the Oracle keystore, but which occasionally must be restored offsite, where the Oracle keystore is not available. When restoring a dual-mode encrypted backup, you can use either the Oracle keystore or a password for decryption.

BCE incorrect for sure D correct for sure A... i would say 'wallet keystore'

A,D Not C, "When restoring a dual-mode encrypted backup, you can use either the Oracle keystore or a password for decryption."

C & D c : (below description) https://docs.oracle.com/database/121/BRADV/rcmconfa.htm#BRADV89457 If you forget or lose the password that you used to encrypt a dual-mode encrypted backup and you also lose your Oracle keystore, then you are unable to restore the backup.

-Dual-mode encrypted backups can be restored either transparently or by specifying a password. (C incorrect, you just need either password or wallet) -Encrypted backups are decrypted automatically during restore and recovery, if the required decryption keys are available. Each backup set gets a separate key. The key is stored in encrypted form in the backup piece. The backup is decrypted with keys obtained by a user-supplied password or the Oracle software keystore ( A is correct for TDE but not for password encryption, so I'm not sure about A) Does anyone could clarify?? https://docs.oracle.com/en/database/oracle/oracle-database/19/bradv/configuring-rman-client-advanced.html#GUID-2210B194-FDA8-4BB4-BC1E-DBE7DBEACB4A https://docs.oracle.com/cd/B19306_01/backup.102/b14192/bkup001.htm

AD (not sure about A) -Password encryption cannot be persistently configured. (E is incorrect) -Although the database depends on other types of files for operation, such as network configuration files, password files, and the contents of the Oracle home, these files cannot be backed up with RMAN (you can't even backup a password file, B incorrect) -You can also use the SET ENCRYPTION command to perform the following actions: Override the encryption settings specified by the CONFIGURE ENCRYPTION command. (D is correct)