1Z0-908: MySQL 8.0 Database AdministratorDemo

By Oracle · Question Mode

QuestionQ57

Database Security

Which statement is accurate about MySQL Enterprise Transparent Data Encryption (TDE)?

  • A MySQL TDE uses an appropriate keyring plugin to store the keys in a centralized location.
  • B Both MyISAM and InnoDB tables can be encrypted by setting the keyring_engine = ALL variable in the MySQL configuration file.
  • C Lost tablespace encryption keys can be regenerated only if the master database key is known or present in the Key Vault specification.
  • D TDE can encrypt InnoDB and MyISAM tables only when the tables are stored in the SYSTEM tablespace.
Explanation

MySQL Enterprise Transparent Data Encryption (TDE) uses a keyring component or plugin with a centralized key-management solution to manage encryption keys. InnoDB data-at-rest encryption supports multiple InnoDB tablespace types, while recovery of encrypted data requires the original encryption keys; regenerated keys cannot decrypt existing data.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!