Which of the following statements about Transparent Data Encryption (TDE) is NOT true?
A.
For a partitioned table, you can have some partitions in encrypted tablespaces and some in nonencrypted tablespaces.
B.
For a partitioned table, you can encrypt a column in some partitions and not in others.
C.
A range-based selection condition can use an index with tablespace-based Transparent Data
Encryption (TDE).
D.
An index on a value in an encrypted tablespace does not have to be encrypted.
Explanation:
ORA-28346: an encrypted column cannot serve as a partitioning column
Cause: An attempt was made to encrypt a partitioning key column or create partitioning index with
encrypted columns.
Action: The column must be decrypted.
ORA-28347: encryption properties mismatch
Cause: An attempt was made to issue an ALTER TABLE EXCHANGE
PARTITION | SUBPARTITION command, but encryption properties were mismatched.
Action: Make sure encryption algorithms and columns keys are identical. The corresponding columns
must be encrypted on both tables with the same salt and non-salt flavor.
You can create an index on an encrypted column if it has been encrypted without salt.
TDE tablespace encryption also allows index range scans on data in encrypted tablespaces. This is
not possible with TDE column encryption.
If you need to perform range scans over indexed, encrypted, columns, then you should use TDE
tablespace encryption in place of TDE column encryption.