As the SYSKM user you must create the password-based keystore, which will be used for TDE. Examine this list: Identify the sequence that Oracle uses to search for the keystore and its location.

Question

Options

• A3,5,2,4,1
• B1,4,5,2
• C1,2,5,4
• D1,2,3,5

• A
  2% (1)
• B
  2% (1)
• C
  90% (47)
• D
  6% (3)

Explanation

Option C (1,2,5,4) is correct because it reflects Oracle's documented precedence order for locating a TDE keystore: Oracle first checks the WALLET_ROOT initialization parameter, then the ENCRYPTION_WALLET_LOCATION setting in sqlnet.ora, then the WALLET_LOCATION setting in sqlnet.ora, and finally falls back to the default OS-level wallet directory - each step only reached if the previous yields no result.

Why the distractors are wrong:

• A (3,5,2,4,1) inverts the hierarchy, placing lower-priority sources (like WALLET_LOCATION) before higher-priority ones (WALLET_ROOT), which contradicts Oracle's defined search logic.
• B (1,4,5,2) skips over the ENCRYPTION_WALLET_LOCATION check entirely and incorrectly jumps to the default location before exhausting sqlnet.ora options.
• D (1,2,3,5) omits the default directory fallback and misorders the sqlnet.ora parameters, placing WALLET_LOCATION before the step where Oracle reaches the OS default.

Memory tip: Think of Oracle as moving from most specific/explicit to most generic - a spfile parameter wins over sqlnet.ora, and sqlnet.ora wins over the OS default. The mnemonic "Root → Encryption → Location → Default" mirrors the priority chain tested in option C.

No community discussion yet for this question.