Oracle Oracle Certifications 1Z0-820 Questions & Answers

• Question 1:

  Review the zonestat command

  zonestat -q -r physical-memory -R high -z dbzone -p -p "zones" 10 24h 60m

  Select the option that correctly describes the information that is displayed by this command

  A. It is a sample of dbzone's physical memory usage taken every hour over a 24-hour period Only the top 10 samplings of peak memory usage are displayed. All other utilization data is eliminated

  B. It is a sample of dbzone's CPU, virtual memory, and networking utilization Physical memory is excluded from the report The sampling is taken every 10 minutes over a 24 hour period and peak utilization is displayed each hour.

  C. ft is a sample of dbzone's CPU, virtual memory, and networking utilization Physical memory is excluded from the report. The sampling is taken every 10 seconds over a 24- hour period and displayed each hour.

  D. It is a sample of dbzone's memory and CPU utilization every 10 seconds over a 24-hour period Only peak virtual memory usage and CPU utilization are displayed each hour All other utilization data is eliminated.

  E. it is a sample of dbzone's physical memory usage taken every 10 seconds over a 24- hour period. Only peak memory usage is displayed each hour All other utilization data is eliminated.

  Correct Answer: E

• Question 2:

  A process associated with a user application keeps crashing on the user, but a core dump is not being saved in the /var/core/pprocess directory. The core dump configuration is: global core file pattern: /var/core/core. %f.%p global core file content: default init core file pattern: core init core file content: default global core dumps: enabled per-process core dumps: enabled global setid core dumps disabled per-process setid core dumps: disabled

  global core dump logging: disabled Which option would change the core dump configuration so that a user's per-process core dumps get saved in the /var/core/pprocess directory?

  A. coreadm --g /var/core/pprocess/core.%f %p

  B. coreadm --i /var/core/pprocess/core.%f.%p

  C. coreadm --i /var/core/pprocess/core.%f.%p coreadm --e proc--setid --d process

  D. coreadm --g /var/core/pprocess/core.%f.%p coreadm --e global--setid

  E. Make this change to the /etc/coreadm conf file: init core file pattern: /var/core/pprocess/core.%f.%p

  Correct Answer: E

• Question 3:

  A change in your company's security policy now requires an audit trial of all administrators assuming the sysadm role, capturing:

  Executed commands, including options Logins and logouts

  There are two command necessary to accomplish this change. One is a rolemod command. What is the other?

  A. auditconfig set policy=argv

  B. auditconfig -setpolicy +argv

  C. auditconfig -setflags lo, ex sysadm

  D. auditconfig set flags=lo, ex sysadm

  Correct Answer: B

  Explanation: Audit Significant Events in Addition to Login/Logout (see step 2 below) Use this procedure to audit administrative commands, attempts to invade the system, and other significant events as specified by your site security policy.

  Audit all uses of privileged commands by users and roles. For all users and roles, add the AUE_PFEXEC audit event to their preselection mask.

  # usermod -K audit_flags=lo,ps:no username # rolemod -K audit_flags=lo,ps:no rolename Record the arguments to audited commands. # auditconfig -setpolicy +argv 3- Record the environment in which audited commands are executed. # auditconfig -setpolicy +arge

  Note: [-t] -setpolicy [+|-]policy_flag[,policy_flag ...] Set the kernel audit policy. A policy policy_flag is literal strings that denotes an audit policy. A prefix of + adds the policies specified to the current audit policies. A prefix of - removes the policies specified from the current audit policies. No policies can be set from a local zone unless the perzone policy is first set from the global zone.

  Reference: Oracle Solaris 11 Security Guidelines, Audit Significant Events in Addition to Login/Logout

• Question 4:

  You are using A! to install a new system. You have added the following information to the Al manifest: configuration type-'zone" name-'dbzone" source=nhttp://svsA.examDle.com/zone cfg/zonecfQ7> Which statement is true with regard to the zone.cfg file?

  A. The zone.cfg file is a text file in a zonecfg export format.

  B. The zone.cfg file is an Al manifest that specifies how the zone is to be installed.

  C. The zone.cfg file is an XML file in a form suitable for use as a command file for the zonecfg command.

  D. The zone.cfg file is an SC profile with keywords that are specific for configuring a zone as part of the installation process.

  E. ft is an XML configuration file from the /etc/zone directory. It will be used as a profile for the zone. It specifies the zonename. zonepath, and other zonecfg parameters

  Correct Answer: A

• Question 5:

  You are troubleshooting the failure of an Automated Installation (Al). Identify two activities that may lead to the solution. (Choose two.)

  A. Examine the file /system/volatile/installjog

  B. Ensure that the dtlogin daemon is running on the Al server

  C. Check that the X 509 v3 certificate of the DHCP server is valid

  D. Run the command pka list -q htto://Dkqmvdomain com/solaris/ entire

  E. Run the dfshares command to be sure that the boot_archive is mounted on the IPS software package repository.

  Correct Answer: AB

• Question 6:

  Review the zonestat command:

  zonestate - q physical - memory -R high -z -p -p "zones" 10 24h 60m

  Select the option that correctly describes the information that is displayed by this command.

  A. It is a sample of dbzone's physical memory usage taken every hour over a 24-hour period. Only the top 10 samplings of peak memory usage are displayed. All other utilization data is eliminated.

  B. It is a sample of dbzone's CPU, virtual memory, and networking utilization. Physical memory is executed from the report. The sampling is taken every 10 minutes over a 24-hour period and peak utilization id displayed each hour.

  C. It is a sample of dbzone's CPU, virtual memory, and networking utilization. Physical memory is executed from the report. The sampling is taken every 10 minutes over a 24-hour period and displayed each hour.

  D. It is a sample of dbzone's physical memory usage taken every 10 seconds and 24-hour period. Only peak virtual memory usage and CPU utilization are displayed each hour. All other Utilization data is eliminated.

  E. It is a sample of dbzone's physical memory usage taken every 10 seconds and 24-hour period. Only peak memory usage is displayed each hour. All other utilization data is eliminated.

  Correct Answer: D

  Explanation: * (Not A, B, C): interval (here 10 seconds): Specifies the length in seconds to pause between each interval report.

  * duration (here 24 h)

  * -R report[,report] (here high)

  Print a summary report.

  high Print a summary report detailing the highest usage of each resource and zone during any interval of

  the zonestat utility invocation.

  Note: The zonestat utility reports on the cpu, memory, and resource control utilization of the currently

  running zones. Each zone's utilization is reported both as a percentage of system resources and the

  zone's configured limits.

  The zonestat utility prints a series of interval reports at the specified interval. It optionally also prints one or

  more summary reports at a specified interval. The default output is a summary of cpu, physical, and virtual

  memory utilization. The -r option can be used to choose detailed output for specific resources.

• Question 7:

  You want the system to generate core files when an application crashes, but you want only root to be able to view the core files. The current core configuration is:

  global core file pattern: /var/core/core %f.%p

  global core file content: default

  init core file pattern: /var/core/pprocess/core.%f.%pp

  init core file content: default

  global core dumps: enabled

  per--process core dumps: enabled

  global setid core dumps disabled

  per-process setid core dumps: disabled

  global core dump logging disabled

  Select the option that describes the change that needs to be made to the core dump configuration to meet this requirement.

  A. coreadm --d process

  B. coreadm -i /var/core/core.%f %p

  C. coreadm--d global

  D. coreadm -d process -d global -e global-setid -e proc-setid

  E. Make this change to the /etc/coreadm.conf file: per-process core dumps: disabled

  Correct Answer: A

• Question 8:

  When you issue the gzip command, the "gzip: command not found" message is displayed. You need to install the gzip utility on your system. Which command would you use to check if the gzip utility is available from the default publisher for installation?

  A. pkg info|grep gzip

  B. pkg list SUNWgzip

  C. pkg contents gzip

  D. pkg search gzip

  Correct Answer: D

• Question 9:

  Before booting test zone a non-global zone, you want to connect to the zone's console so that you can watch the boot process.

  Choose the command used to connect to testzone's console.

  A. zoneadm -C testzone

  B. zoneadm -console testzone

  C. zlogin - z testzone console

  D. zlogin - z testzone - C

  E. zlogin -C testzone

  F. zoneadm - testzone - c

  Correct Answer: E

  Explanation: The following options are supported:

  -C

  Connects to the zone console. Connects to the zone console.

  Note:

  After you install a zone, you must log in to the zone to complete its application environment. You might log

  in to the zone to perform administrative tasks as well. Unless the -C option is used to connect to the zone

  console, logging in to a zone using zlogin starts a new task. A task cannot span two zones Reference: man

  zlogin

• Question 10:

  Which three options are valid methods of installing a Solaris 10 branded zone on a system running Oracle Solaris 11?

  A. Use the V2V process to migrate an existing Solaris 8 or 9 non-global zone from a Solaris 10 system to a solaris10 branded zone.

  B. Use the V2V process to migrate an existing Solaris 10 non global whole root zone from a Solaris 10 system to a solaris10 branded whole root zone.

  C. Install a solaris10 branded zone directly from the Oracle Solaris 10 media.

  D. Migrate an existing 64-bit Solaris 10 system to a solaris10 branded non-global zone using the P2V process.

  E. Migrate an existing 32 bit Solaris10 system to a solaris10 branded non-global zone using the P2V process.

  F. Use the V2V process to migrate an existing Solaris 10 non-global sparse root zone from a Solaris 10 system to a solaris10 branded sparse root zone.

  Correct Answer: BDE

  Explanation: B: Due to change in package system (SRV4 to IPS) there is no direct upgrade from S10 to S11 one can use

  *

  P2Vconverting s10 physical system to solaris10 branded zone in s11 (32-bit or 64-bit)

  *

  V2V converting s10 native full root zone to solaris10 branded zone in s11 (B)