A court-records analytics stream on OCI Streaming must use a customer-managed encryption key instead of relying only on Oracle-managed keys. Where is that customer-managed key sourced?
Select an answer to reveal the explanation.
Short Explanation
Streaming always locks the filing cabinet; you choose whether Oracle holds the master key or you name your own key in Vault. Data is encrypted in transit and at rest either way. Selecting a Vault master key is the Streaming setting for customer-managed control—creating and rotating keys in depth belongs to securing applications, not this item.
Full Explanation
OCI Streaming encrypts data in transit and at rest. You may use Oracle-managed keys or specify a customer-managed master key from OCI Vault when that control is required. Naming the Vault key is the Streaming-side setting under test here; detailed key creation and rotation procedures are covered with Vault in the securing domain. Do not invent alternate key stores such as usage-plan tokens or consumer offsets.