Which two statements are true about the IPTables firewall configuration on a new Exadata Database...

On Oracle Exadata Database Machine X9M, the default configuration of the IPTables firewall varies between storage servers and database servers:

Storage Servers: After initial deployment, IPTables is installed but remains in an unconfigured and inactive state. The Exadata storage servers focus on providing high availability and performance for database workloads and thus rely on internal security measures. The external firewall or network security policies typically handle firewall responsibilities, so IPTables is not actively configured on these servers by default​​.

Database Servers: Similar to storage servers, IPTables is also installed but neither configured nor running on the database servers. The Oracle Exadata Database Machine X9M emphasizes security through other means, such as its network isolation and dedicated interconnects. As part of Oracle’s engineered systems design philosophy, the database servers are primarily focused on database performance, offloading much of the security management to other parts of the infrastructure and relying on data center-level firewalls for perimeter security​​.

To summarize, both database and storage servers have IPTables installed and available, but they are not configured or running by default on either server type. This setup allows Exadata environments to focus on optimized database performance while integrating with external network security solutions.