Which two statements are true about Valid Node Checking for Registration (VNCR)?

Question

Options

• AIt denies Instance registration through IPC.
• BIt can only be used with Oracle RAC.
• CIt enforces the Listener connectivity through TCPS.
• DIt is a replacement for Class of Secure Transport (COST).
• EIt restricts specific instances from registering with the Listener.

• A
  73% (19)
• B
  4% (1)
• C
  15% (4)
• E
  8% (2)

Explanation

VNCR is an Oracle Listener security feature that controls which database nodes are permitted to register with the listener, replacing the older COST mechanism.

Why A and D are correct:

• (A) VNCR can deny instance registration attempts made through IPC (Inter-Process Communication) when the originating node is not on the approved registration list - it applies to local IPC connections, not just remote TCP ones.
• (D) VNCR was explicitly introduced in Oracle 12c as a more flexible, granular replacement for the older Class of Secure Transport (COST), which also controlled listener registrations but was less configurable.

Why the distractors are wrong:

• (B) VNCR works in both single-instance and Oracle RAC environments - it is not RAC-exclusive.
• (C) VNCR has no dependency on TCPS (SSL/TLS encrypted transport); it operates at the registration control level, not the transport encryption layer.
• (E) VNCR controls registration at the node/host level (by IP address or hostname), not by specific named database instances - all instances on an approved node are permitted.

Memory tip: Think of VNCR as a node ID check at the listener's door - it checks where the registration is coming from (the node), not who is knocking (the instance), and it retired the old COST doorman when it arrived in 12c.

No community discussion yet for this question.