問題文
A security standard for an estate in OD@GCP states that the master encryption key of the databases will live in Cloud KMS. The estate holds Exadata VM clusters, Exascale VM clusters, Autonomous AI Database Serverless instances and Base Database DB systems. Which part of that standard calls for an exception today?
選択肢
- The Base Database DB systems, because the documentation records the Cloud KMS integration for that service as unsupported today and leaves the OCI vault and the separate key vault product as its customer-managed choices.
- The Exascale VM clusters, because the raw block-chaining key from Cloud KMS is offered to the dedicated infrastructure service and to the Autonomous service while the Exascale clusters keep the customer-managed choices that Oracle holds.
- The Autonomous AI Database Serverless instances, because their customer-managed choice reaches the OCI vault and the separate key vault product while the Cloud KMS path belongs to the two Exadata services that sit on dedicated hardware in the region.
- The whole standard holds today, because the four services reach Cloud KMS once the key ring is registered in the tenancy that holds them and the service accounts for the clusters and the instances carry the customer-managed role at the key ring.