ExamTopics Logo
Mail Us[email protected]
Menu
Oracle Discussions
exam questions

Exam 1z0-1072-20 All Questions

View all questions & answers for the 1z0-1072-20 exam
Go to Exam

Exam 1z0-1072-20 topic 1 question 5 discussion

Actual exam question from Oracle's 1z0-1072-20
Question #: 5
Topic #: 1
[All 1z0-1072-20 Questions]

Which of the following statements is true about the Oracle Cloud Infrastructure (OCI) Object Storage server-side encryption?

  • A. Encryption of data encryption keys with a master encryption key is optional.
  • B. Customer-provided encryption keys are always stored in OCI Vault service.
  • C. Encryption is enabled by default and cannot be turned off.
  • D. Each object in a bucket is always encrypted with the same data encryption key.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by LanAnh at Dec. 12, 2020, 11:34 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
LanAnh
Highly Voted 4 years, 5 months ago
The correct answer is C See "Data encryption" section : https://docs.cloud.oracle.com/en-us/iaas/Content/Security/Reference/objectstorage_security.htm
upvoted 16 times
...
Nandan_aswal
Highly Voted 4 years, 5 months ago
Correct Answer is C All data in Object Storage is encrypted at rest by using AES-256. Encryption is on by default and cannot be turned off. Each object is encrypted with its encryption key, and the object encryption keys are encrypted with a master encryption key. In addition, customers can use client-side encryption to encrypt objects with their encryption keys before storing them in Object Storage buckets. An available option for customers is to use the Amazon S3 Compatibility API, along with client-side object encryption support available in AWS SDK for Java
upvoted 14 times
...
Ludo
Most Recent 2 years, 8 months ago
Selected Answer: C
C. All data in Object Storage is encrypted at rest by using AES-256. Encryption is on by default and cannot be turned off.
upvoted 1 times
...
gwerin
3 years, 3 months ago
Selected Answer: C
C is correct. It is enabled by default and cannot be turned off. This was a question on the fundamentals exam I did.
upvoted 1 times
...
Rishadpp
3 years, 4 months ago
Selected Answer: C
Object Storage is encrypted at rest
upvoted 1 times
...
sam_11
3 years, 5 months ago
I am confused....i thought C was correct. Why are the solutions wrong? i thought i got all wrong.
upvoted 1 times
...
NRk5
3 years, 5 months ago
Selected Answer: C
"Data encryption" section : https://docs.cloud.oracle.com/en-us/iaas/Content/Security/Reference/objectstorage_security.htm
upvoted 2 times
...
NRk5
3 years, 5 months ago
Selected Answer: B
"Data encryption" section : https://docs.cloud.oracle.com/en-us/iaas/Content/Security/Reference/objectstorage_security.htm
upvoted 1 times
...
peppe95
3 years, 5 months ago
IT'S C!!
upvoted 1 times
...
Kaiserlulu
3 years, 6 months ago
Correct answer is B, Just get a trainee with Oracle trainer employee, you can turn off the encryption so it's not answer C.
upvoted 1 times
anerao
3 years, 2 months ago
You can’t. What you can do is to use your own keys but never disable the encryption
upvoted 1 times
...
...
acarugat
3 years, 6 months ago
Obviously "C" is the correct answer!!! I'm wondering who is the author of all these WRONG solutions: 4 out of the first 5 are WRONG! - Even trying to answer by randomly selecting an options could have performed better!
upvoted 2 times
okixavi
3 years, 5 months ago
dude, just don-t look at the answers, go directly to the discussions
upvoted 2 times
...
...
ThaiAnh
3 years, 10 months ago
It is C
upvoted 1 times
...
Piccoro
3 years, 10 months ago
The correct answer is C. B is "NOT always".
upvoted 1 times
...
ercec
4 years, 2 months ago
B is not right since key may be stores in bucket or even AWS S3
upvoted 1 times
...
KSF
4 years, 2 months ago
B is correct answer
upvoted 1 times
...
treborbg
4 years, 2 months ago
It's C, Encryption https://docs.oracle.com/en-us/iaas/Content/Object/Concepts/objectstorageoverview.htm
upvoted 2 times
...
FPM
4 years, 4 months ago
I think "B" is also correct. All custom keys are stored in the Vault. Anyone disagrees?
upvoted 1 times
pecamacho
3 years, 10 months ago
Important Object Storage does not store your encryption keys. You are responsible for tracking the key that is associated with each object and rotating the key as necessary. If you lose your encryption key, you cannot retrieve your object. https://docs.oracle.com/en-us/iaas/Content/Object/Tasks/usingyourencryptionkeys.htm#Using_Your_Own_Keys_for_ServerSide_Encryption
upvoted 1 times
...
sunny_32121
3 years, 6 months ago
it is customer responsibility to store keys in vault .oci doent not store customer managed keys in vault by it self.
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel