Which statement regarding setting up a local keystore for DB2 native encryption is TRUE?

A.
A local keystore is not needed if a Hardware Security Module (HSM) is used to manage master keys.

B.
If a local keystore is used to store data encryption keys, a stash file must be used to store master keys
temporarily.

C.
A master key must be generated and placed in an existing local keystore before a new encrypted database
will be created.

D.
After a local keystore is created, you will be prompted for a password whenever the database manager
accesses the keystore.