Which two statements are true about encrypted backups performed by using RMAN?

Question

Options

• ATransparent encryption of backups uses an encryption wallet.
• BImage copy backups can be created by using password encryption.
• CA password encryption of backups uses the password while creating and restoring backups.
• DEncrypted backups can only be written to disk.
• EA database uses the same encryption key for every encrypted backup.

• A
  79% (45)
• B
  4% (2)
• D
  7% (4)
• E
  11% (6)

Explanation

A is correct because RMAN's transparent encryption mode relies on an Oracle Wallet (auto-login or password-based) to store and manage the master encryption key - no user-supplied password is needed at backup or restore time, as long as the wallet is open. C is correct because password-mode encryption is symmetric: you must supply the same password when creating the backup and again when restoring it, making it portable (no wallet required on the target system).

B is wrong because RMAN encryption only applies to backup sets, not image copies - image copies are block-for-block copies of datafiles and cannot be encrypted. D is wrong because encrypted backup sets can be written to disk or tape (e.g., via SBT to Oracle Secure Backup or a third-party media manager). E is wrong because RMAN generates a unique encryption key per backup set - each backup piece gets its own key, which is then wrapped by the master key; reusing the same key for every backup would be a significant security weakness.

Memory tip: Think of the two correct answers as two different "unlock methods" - Wallet (transparent, automatic) vs. Password (manual, required at both ends). If you remember those two unlock mechanisms, A and C follow naturally.

No community discussion yet for this question.