Oracle Exam 1Z0-1072-25 Topic 4 Question 7 Discussion

Actual exam question for Oracle's 1Z0-1072-25 exam

Question #: 7
Topic #: 4

[All 1Z0-1072-25 Questions]

Which TWO statements about the Oracle Cloud Infrastructure (OCI) File Storage Service are accurate?

ACommunication with file systems in a mount target is encrypted via HTTPS.

BCustomers can encrypt data in their file system using their own Vault encryption key.

CCustomers can encrypt the communication to a mount target via export options.

DFile systems use Oracle-managed keys by default.

Show Suggested Answer

Suggested Answer: B, D

Oracle Cloud Infrastructure (OCI) File Storage Service offers robust encryption capabilities to ensure data security.

B . Customer-Managed Encryption: Customers can choose to encrypt their data using their own keys stored in the OCI Vault service. This gives customers control over their encryption keys and enhances data security.

D . Oracle-Managed Encryption: By default, all data stored in OCI File Storage is encrypted using Oracle-managed keys. This ensures that data is encrypted at rest without requiring any action from the customer.

Incorrect Statements:

A . Communication is not encrypted via HTTPS when accessing file systems; instead, encryption in transit is typically managed via NFS over TLS.

C . Encryption of communication to a mount target is handled via network configurations, not through export options.

Oracle Cloud Infrastructure Documentation: File Storage Encryption

by Alfreda at Apr 08, 2025, 01:23 PM

Limited Time Offer

25%

Off

Get Premium 1Z0-1072-25 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Brittni

1 months ago

Ha, I bet there are some IT admins out there who would love to use their own 'Vault' keys. B and D for the win!

upvoted 0 times

Jonelle

15 days ago

I agree, using our own encryption keys would give us more control over our data.

upvoted 0 times

...

Micheal

1 months ago

This is a tricky one! I'm going to go with B and D. Encrypting data with your own keys and using Oracle-managed keys by default sounds about right.

upvoted 0 times

Krissy

1 days ago

That makes sense. Those are the two correct statements about the Oracle Cloud Infrastructure File Storage Service.

upvoted 0 times

...

Sharan

3 days ago

I agree with you, and D is also accurate because file systems use Oracle-managed keys by default.

upvoted 0 times

...

Lisbeth

8 days ago

I think B is correct because customers can encrypt data using their own Vault encryption key.

upvoted 0 times

...

Yong

2 months ago

I'm not sure about option C and D, but I think the first two options are the most important for security.

upvoted 0 times

...

Lenna

2 months ago

I agree with Vi, but I also think option B is accurate because customers should have control over their encryption keys.

upvoted 0 times

...

Cornell

2 months ago

Hmm, I think B and D are the accurate statements. Customers can encrypt data using their own Vault keys, and the default is to use Oracle-managed keys.

upvoted 0 times

Mable

23 days ago

Actually, it's B and D. Customers can encrypt data with their own keys and Oracle-managed keys are the default.

upvoted 0 times

...

Lorrine

1 months ago

I think A and B are accurate. Communication is encrypted via HTTPS and customers can use their own encryption keys.

upvoted 0 times

...

Carmela

1 months ago

That's right, communication with file systems is encrypted via HTTPS and customers can encrypt data using their own Vault keys.

upvoted 0 times

...

Brande

1 months ago

I agree, B and D are correct. Customers can use their own encryption keys and Oracle-managed keys are the default.

upvoted 0 times

...

Bulah

2 months ago

I'm confident that B and C are the right answers. Customers can definitely encrypt the communication to a mount target, and they can use their own encryption keys as well.

upvoted 0 times

...

Vi

2 months ago

I think option A is accurate because encryption is important for security.

upvoted 0 times

...

Jamal

2 months ago

B and D seem to be the correct answers. I'm pretty sure OCI File Storage Service uses Oracle-managed keys by default, and customers can bring their own encryption keys too.

upvoted 0 times

Steffanie

8 days ago

Definitely, having the flexibility to use Oracle-managed keys or bring your own encryption keys adds an extra layer of security to the service.

upvoted 0 times

...

Roselle

9 days ago

It's good to know that customers have the option to encrypt data in their file system using their own encryption keys.

upvoted 0 times

...

Vilma

10 days ago

Yes, that's correct. Communication with file systems in a mount target is encrypted via HTTPS, and customers can also bring their own Vault encryption key.

upvoted 0 times

...

Leonora

11 days ago

I think you're right, B and D are accurate. Customers can use their own encryption keys in OCI File Storage Service.

upvoted 0 times

...

Gracia

12 days ago

So, it seems like both B and D are correct statements about the Oracle Cloud Infrastructure File Storage Service.

upvoted 0 times

...

Margarita

13 days ago

That's good to know. Communication with file systems in a mount target is encrypted via HTTPS as well.

upvoted 0 times

...

Maurine

14 days ago

Yes, customers can also encrypt data in their file system using their own Vault encryption key.

upvoted 0 times

...

Olene

24 days ago

I think you're right, B and D are accurate. File systems use Oracle-managed keys by default.

upvoted 0 times

...