1Z0-078 practice question 10 of 15

Secure Cluster Communication protects the cluster interconnect from common security threats when used together with Single Network Support. Secure…

Full set: 77 questions
Secure Cluster Communication protects the cluster interconnect from common security threats when used together with Single Network Support. Secure Cluster Communication includes message digest mechanisms, protection against fuzzing, and uses Transport Layer Security (TLS) to provide privacy and data integrity between the cluster members. Which statement is true about securing cluster interconnect communication?
Answer options
A: Security for the cluster interconnect is invoked automatically as part of a new Oracle Grid Infrastructure 19c deployment or an upgrade to Oracle Grid Infrastructure 19c and Database administrators or cluster administrators do not need to make any configuration changes for this feature. Correct answer
B: Security for the cluster interconnect is invoked automatically as part of a new Oracle Grid Infrastructure 19c deployment or an upgrade to Oracle Grid Infrastructure 19c using an auto- generated encryption key that is stored locally on each node of the cluster in an Oracle Wallet and Database administrators or cluster administrators must provide a valid path for the Wallet file.
C: Security for the cluster interconnect is invoked by auto-generated server certificates that will be assigned to each cluster node as part of a new Oracle Grid Infrastructure 19c deployment or an upgrade to Oracle Grid Infrastructure 19c.
D: Database administrators or cluster administrators must provide an encryption key during new Oracle Grid Infrastructure 19c deployment or an upgrade to Oracle Grid Infrastructure 19c to secure the interconnect communication.
E: Database administrators or cluster administrators must provide a valid server certificate and an Oracle Wallet for each node during new Oracle Grid Infrastructure 19c deployment or an upgrade to Oracle Grid Infrastructure 19c to secure the interconnect communication.
Correct Answer:
A. Security for the cluster interconnect is invoked automatically as part of a new Oracle Grid Infrastructure 19c deployment or an upgrade to Oracle Grid Infrastructure 19c and Database administrators or cluster administrators do not need to make any configuration changes for this feature.
Explanation

Secure Cluster Communication (SCC) is automatically enabled in Oracle Grid Infrastructure 19c. During either a fresh installation or an upgrade, Oracle Clusterware generates the required TLS certificates and keys, stores them in the cluster wallet, and begins protecting all inter-instance traffic without any manual intervention. No parameter setting, wallet path, or user-supplied key or certificate is required from database or cluster administrators.

Why Incorrect

B – Wallet path need not be provided; wallet is auto-created. C – Certificates are auto-generated but administrators need not invoke SCC explicitly. D – User-supplied encryption keys are not requested. E – User-supplied server certificates or wallets are not required.

References

1. Oracle Grid Infrastructure Security Guide 19c, Ch. 5 “Secure Cluster Communication”, first paragraph (“enabled by default… no administrator action is required”).

2. Oracle Release 19c New Features for GI, Sec. “Secure Cluster Communication Automatically Enabled”.

Scroll to Top