Q88. Which two are true about backup encryption?
- A. Keystore-based encryption is the default mode for RMAN backup encryption.
- B. Backup encryption can be enabled selectively for specific tablespaces.
- C. The BACKUP BACKUPSET command can encrypt and decrypt backup sets.
- D. The Transparent Data Encryption (TDE) keystore is backed up using RMAN.
- E. Vendor-specific media management software can be used for making encrypted RMAN backups to media.
- F. Image copies can be encrypted.
Answer: AB
B – TRUE :
https://docs.oracle.com/en/database/oracle/oracle-database/19/rcmrf/CONFIGURE.html#GUID-B5094E73-C26C-4FED-AE39-8C2E9540050A :
ENCRYPTION : This configuration applies unless overridden with the SET ENCRYPTION command. Options specified for an individual tablespace take precedence over options specified for the whole database.
A – TRUE:
https://docs.oracle.com/en/database/oracle/oracle-database/19/bradv/configuring-rman-client-advanced.html#GUID-6ED708C7-1092-45FC-80C6-236F062D0DAC :
Note: Keystore-based encryption is more secure than password-based encryption because no passwords are involved. Use password-based encryption only when it is absolutely necessary because your backups must be transportable.