Which two statements are true about the SSH tunnels wit…

Which two statements are true about the SSH tunnels within a Database as a Service
(DBaaS) Cloud environment?

A.
The SSH tunnel must be selected by an access rule to enable remote access.

B.
The server must hold the SSH public and private keys in the SSHauthorized_keysfile.

C.
DBaaS provides a centralized key server for all SSH connections.

D.
The client must provide the server with the SSH private key.

Explanation:
A: Oracle Database Cloud Service relies on Oracle Compute Cloud Service to provide
secure network accessto database deployments. You can use the Oracle Database Cloud
Service console to perform network access operations such as enabling access to a port
on a compute node, or creating new security rules.
D: Creating an SSH tunnel enables you to access a specific compute node port by using an
SSH connection as the transport mechanism. To create the tunnel, you must have the SSH
private key file that matches the public key specified during the database deployment
creation process.

Using Oracle Database Cloud Service (February 2017), 3-2
https://docs.oracle.com/en/cloud/paas/database-dbaas-cloud/csdbi/using-oracle-databasecloud-service.pdf