Which three are true about Transparent Data Encryption (TDE)? (Choose three.) 

It stores the current and all past master keys in the keystore. 

It replaces secure application roles. 

Master encryption keys are managed by Oracle Database Vault. 

It can encrypt data at the column level. 

It uses a single master key for a database. 

It encrypts only data on the client.