Which of the following statements is true about the relationship between an Oracle wallet and an
HSM device?
A.
You get additional security by having an Oracle wallet and an HSM device
B.
The Oracle wallet provides more security than an HSM device
C.
You can have either an Oracle wallet or an HSM device
D.
ou create a master key in an Oracle wallet with an ALTER SYSTEM command, but use a hardwarespecific command for the same function with an HSM device.
Explanation:
HSM is a more secure alternative to the Oracle wallet. TDE can use HSM to provide enhanced
security for sensitive data. An HSM is used to store the master encryption key used for TDE. The key
is secure from unauthorized access attempts as the HSM is a physical device and not an operating
system file. All encryption and decryption operations that use the master encryption key are
performed inside the HSM. This means that the master encryption key is never exposed in insecure
memory.