Which three statements are true about ASM Cloud File System (ACFS) encryption? (Choose three.)
A.
A copy of an encrypted file is not encrypted unless it is created in an encrypted directory.
B.
acfsutil encr init is used to establish role separation between encryption managers and
encryption auditors.
C.
acfsutil encr off can be run by an encryption manager who may not have system administrator privileges.
D.
acfsutil encr on can be used to specify the encryption key length for a directory or file.
E.
An ACFS snapshot can be ACFS encrypted.
Correct: A, D,E
I think BDE
A is wrong
ACFS encryption can be applied to the entire file system or just individual files and directories.
http://www.oracle.com/technetwork/database/cloud-storage/acfs-security-encryption-514418.pdf pag. 7
from your document:
ACFS encryption can be applied to the entire file system or just individual files
and directories. It is completely transparent to authorized users, and
applications work unchanged with encrypted files. Encrypted and unencrypted
files can co-exist on the same file system.
Correct Answer is CDE
C – acfsutil encr off
Only a user with root or system administrator privileges can run this command to disable encryption on a file system. The file owner can also run this command to disable encryption on a directory or file.
D and E are sure answers
A is definitely incorrect. B i dont know where this came from.
Let me correct this one: A, D, E is the BEST answer.
https://docs.oracle.com/database/121/OSTMG/GUID-5591C710-D763-4F72-BB56-A1452CA6AAB2.htm#OSTMG34510