A records office encrypts citizen PDFs with envelope encryption in OCI Vault. Which statement correctly matches key roles?
Select an answer to reveal the explanation.
Short Explanation
Think of three jobs: the vault’s master key, the everyday DEK that locks each PDF, and the wrapping key that packages material you bring in. Same vault family, different jobs.
Full Explanation
In OCI Vault, a master encryption key is the customer-managed key in the vault. A data encryption key encrypts application data (the DEK in envelope encryption). A wrapping key—4096-bit RSA, one per vault—wraps material you import. Envelope encryption ties the master key and DEK together; the roles are not interchangeable labels for one key.