For which two reasons would you define Network ACLs?

Network Access Control Lists (ACLs) are a security feature for controlling outbound network traffic initiated from the database via PL/SQL packages like UTLTCP and UTLHTTP. Their primary purpose is to provide fine-grained access control, specifying which database users (principals) can connect to which external network hosts and ports (A). For secure connections like HTTPS, an Oracle Wallet containing certificates is required. While the ACL does not control access to the wallet itself, it is a mandatory prerequisite for enabling the HTTP request that uses the wallet. Therefore, defining an ACL is a necessary step in the configuration process for such requests (B).

C. Auditing is a separate function. While you can audit network access, ACLs are the control mechanism, not the audit policy itself.
D. ACLs control outbound connections initiated from the database, not inbound attacks directed at the database, which is the role of a firewall.
E. ACLs are a security feature that adds a permission check; they do not inherently improve the performance of network operations.

- Oracle Database Security Guide 21c, Chapter 10, "Configuring Fine-Grained Access to External Network Services". It states, "You can use access control lists (ACLs) to provide fine-grained control over access by database users to external network services."

- Oracle Database PL/SQL Packages and Types Reference 21c, "UTLHTTP". The documentation specifies that before using the package, "an entry must be created in the database's network access control list (ACL)." It also notes for HTTPS, a wallet is required.