Oracle Oracle Certifications 1Z0-820 Questions & Answers

• Question 101:

  Which three events trigger the automated NWAM configuration? (Choose three.)

  A. a DHCP lease is acquired.

  B. a WLAN card is disconnected.

  C. The DefaultFixed NCP is enabled.

  D. An Ethernet cable is disconnected.

  E. A failed interface card assigned to an IPMP group is replaced.

  F. The dladm create-vnic command is executed to create a virtual network interface.

  Correct Answer: ABD

• Question 102:

  You are using this rule file with the Basic Audit Reporting Tool (BART) to detect inappropriate file system changes. CHECK all IGNORE dirmtime

  /etc/acct /etc/security /etc/notices IGNORE contents /export/home/alice IGNORE mtime size contents A/ar CHECK

  /var/tmp IGNORE all

  Identify the two correct statements describing the attributes recorded. (Choose two.)

  A. /var/spool/cron/crontabs Attributes: size uid gid mode acl

  B. /var/spool/croa'crontabs Attnbutes: size uid gid mode acl dirmtime

  C. /export/home/lesley/.bash_history Attributes: uid gid mode acl

  D. /export/home/sandra/.bash_history Attributes: uid gid mode dest

  E. /etc/security/prof_attr.d Attributes: uid gid mode acl dirmtime

  F. /etc/security/prof_attr.d Attributes: size uid gid mode acl devnode

  Correct Answer: BC

• Question 103:

  You are going to use the- Automated installer (AI) to install a non global zone named zone1. You have created a custom manifest for the non-global zone and named it zone1manifest

  Which command will you use to add this custom manifest to the s11-sparc install service and associate this custom manifest with the non-global zone?

  A. installadm create-profile -n s11-sparc -f /tmp/zone1manifest.xml - c

  B. installadm create-manifest -n s11-sparc -f /tmp/zone1manifest.xml -m

  C. installadm create-client -n s11-sparc -f /tmp/zone1manifest.xml -m zone1manifest -c zonename= "zone1"

  D. installadm create-service - n s11-sparc -f /tmp/zone1manifest.xml -m zone1manifest - c zonename="zone1"

  Correct Answer: B

  Explanation: installadm add-manifest

  Associates manifests with a specific install service, thus making the manifests available on the network, independently from creating a service. When publishing a non-default manifest, it is required to associate criteria either via criteria entered on the command line (-c) or via a criteria XML file (-C). Reference: installadm

• Question 104:

  I he Automated Installer is used, rather than JumpStart, to install the Oracle Solans 11 operating System. Identify the two correctly matching pairs of equivalent functionality.

  A. AJ: manifest files JumpStart: begin script

  B. Al:installadmcreate-client JumpStart: setup_install_sen/er

  C. Al SMF system configuration profile files JumpStart: profile files

  D. Al: SMF system configuration profile files JumpStart: finish scripts and sysidcfg files

  Correct Answer: A

• Question 105:

  The current ZFS configuration on your server is:

  pool1200K3.91G31K/pool1 pool1/data31K3.91G31K/data

  Your backup policy states that you are to perform a full backup of /data on Sunday and incremental backups on Monday through Saturday. Each incremental will back up only the data that has been created or modified since the Sunday backup was started The file systems must be available to users at all times and the data will be backed up to tape.

  Which option should you choose for the Wednesday backup?

  A. On Sunday zfs snapshot pool1/data@sunday zfs send pool1/data@sunday > /dev/rmt/0 On Wednesday zfs snapshot pool1/data@wednesday zfs send -i pool1/data@sunday pool1/data@wednesday > /dev/rmt/0

  B. On Sunday zfs snapshot pool1/data@sunday > /dev/rmt/0 On Wednesday zfs snapshot -i pool1/data@wednesday >/dev/rmt/0

  C. On Sunday zfs snapshot pool1/data@sunday zfs send pool1/data@sunday > /dev/rmt/0 On Wednesday zfs snapshot pool1/data@wednesday zfs send -i pooll/data@wednesday pooll/data@sunday > /dev/rmt/0

  D. On Sunday zfs snapshot pool1/data@sunday zfs send pool1/data@sunday > /dev/rmt/0 On Wednesday zfs snapshot pool1/data@wednesday zfs send -i pool1/data@wednesday > /dev/rmt/0

  E. On Sunday zfs snapshot pool1/data@sunday zfs send pool1/data@sunday | zfs recv> /dev/rmt/0 On Wednesday zfs snapshot pool1/data@wednesday zfs send -i pool1/data@sunday pool1/data@wednesday|zfs recv > /dev/rmt/0

  Correct Answer: C

• Question 106:

  Identify the two security features incorporated in the Oracle Solaris 11 Cryptographic Framework.

  A. Layer 5 IP address encryptions

  B. Internet protocol security

  C. Diffie-Kerberos coaxial key encryption

  D. Signed cryptographic plugins (providers)

  E. Kernel support for signed antivirus plugins

  Correct Answer: DE

  Explanation: The framework enables providers of cryptographic services to have their services used by many consumers in the Oracle Solaris operating system. Another name for providers is plugins. The framework allows three types of plugins:

  *

  User-level plugins - Shared objects that provide services by using PKCS #11 libraries, such as pkcs11_softtoken.so.1.

  *

  Kernel-level plugins - Kernel modules that provide implementations of cryptographic algorithms in software, such as AES.

  Many of the algorithms in the framework are optimized for x86 with the SSE2 instruction set and for SPARC hardware.

  *

  Hardware plugins - Device drivers and their associated hardware accelerators. The Niagara chips, the ncp and n2cp device drivers, are one example. A hardware accelerator offloads expensive cryptographic functions from the operating system. The Sun Crypto Accelerator 6000 board is one example.

  Reference: Oracle Solaris Cryptographic Framework

  http://docs.oracle.com/cd/E19963-01/html/821-1456/scf-10.html

• Question 107:

  You are setting up a local image packaging System (IPS) package repository on your Oracle Solaris 11

  server. The information and specifications that you have are as follows:

  The Oracle Solaris11 repository ISO image has been downloaded into the /repo directory (a zfs file

  system).

  The current publisher is:

  PUBLISHERTYPESTATUSURI

  solarisoriginonlinehttp://pkg.oracle.com/solaris/release/

  You will be replacing the current publisher with:

  PUBLISHERTYPESTATUSURI

  solarisoriginonlinehttp://solaris.example.com/

  The location of the repository will be /export/IPS. This ZFS file system has already been created.

  Among the steps you will perform is to set the publisher to the local repository by using the pkg set

  publisher command.

  Which six other steps are required to set up the local IPS package repository?

  A. Perform an rsync on the ISO image to copy the files from the ISO image to the /export/IPS file system.

  B. chmod 700 on/export/IPS

  C. Use the svccfg command to set the pkg/inst_root property to export/IPS.

  D. Use the svccfg command to set the pkg.inst_root property to /export/IPS.

  E. Use the svccfg command to set the pkg/readonly property to the application/pkg/server service to true.

  F. Use the svccfg command to set the pkg/readonly property for the application/pkg/server service false.

  G. Refresh the application/pkg/server service with the svcadm refresh command.

  H. Refresh the package repository with the pkgrep refresh command.

  I. Enable the application /pkg/server service.

  J. Run the pkhrepo rebuild command to rebuild the repository catalog.

  Correct Answer: ABDEGI

  Explanation: B: Set the correct permissions.

  Serving a Local Repository Using SMF

  First, create a ZFS file system to hold the repository.

  Next, make a local copy of the IPS repository file.

  Make the contents of the repository file available to the pkg.depotd(1M) server, using the lofiadm command

  to mount the ISO image.

  4.

  (A) Copy the repository files to the ZFS file system you created. This will increase the performance of repository accesses and avoid the need to remount the .iso image each time the system restarts. (Be sure to use /mnt/repo, not /mnt/repo/, so that you copy the repo directory and not just the files and subdirectories in the repo directory.)

  # rsync -aP /mnt/repo /export/repo2010_11 You can use the df command to confirm the copy:

  5.

  Once the files are copied, unmount the image and deallocate the block device.

  6.

  Now that your local copy is ready, use the svccfg command to configure the repository server service, specifying the location of your local repository and setting readonly to true: (D)# svccfg -s application/pkg/server setprop pkg/inst_root=/export/repo2010_11/repo (E)# svccfg -s application/pkg/server setprop pkg/readonly=true

  7.

  Start the pkg.depotd repository service:

  (G)

  # svcadm refresh application/pkg/server

  (I)

  # svcadm enable application/pkg/server

  Reference: How I Created Local Package Repositories

  http://www.oracle.com/technetwork/articles/servers-storage-admin/localrepositories- 1377242.html

• Question 108:

  You are setting up a local IPS package repository on your Oracle Solaris 11 server; solans example.com

  You want to point the existing local IPS publisher to the new local IPS repository located in /repo. These

  are the steps that you have followed:

  1 Download and rsync the contents of the Oracle Solaris 11 repository ISO image to the /repo directory.

  2. Configure the repository server service properties. The svcprop command displays the IPS-related properties: pkg/inst_root astnng /repo pkg/readonly boolean true The Is command displays the contents of the /repo directory: #ls /repo

  pkg5 repository publisher

  The svcs command shows the svc:/application/pkg/server:default service is online.

  The pkg publisher command still displays:

  PUBLISHERTYPESTATUSURI solarisoriQinonlinehttp://DkQ.Qracle.conVsolaris/release/

  Which step needs to be performed to set the local IPS publisher to the local IPS repository /repo?

  A. issue the pkgrepo refresh -s command to refresh the repository.

  B. Restart the svc:/application/pkg/server:default service.

  C. issue the pkg set-publisher command to set the new repository location.

  D. issue the pkgrepo rebuild command to rebuild the repository.

  E. issue the pkgrepo set command to set the new repository location-

  Correct Answer: E

• Question 109:

  A local repository is available on this system and you need to enable clients to access this repository via HTTP. The repository information is:

  PUBLISHERTYPESTATUSURI

  solarisoriginonlinehttp://sysA.example.com

  Identify two of the steps that are required to make the local repository on this server available to the client via HTTP.

  A. On the server: set the pkg/inst_root and pkg/readonly properties for the svc:/application/pkg/server:default service and enabled the service

  B. On the server: set the sharefs property on the ZFS file system containing the IPS repository.

  C. On the client: reset the origin for the solaris publisher.

  D. On the client: set the pkg/inst_root and pkg/readonly properties for the svc:/application/server:default service enable the service.

  E. On the client: start the pkg.depotd process.

  Correct Answer: AC

  Explanation: A: Configure the Repository Server Service To enable clients to access the local repository

  via HTTP, enable the application/pkg/server Service Management Facility (SMF) service.

  # svccfg -s application/pkg/server setprop pkg/inst_root=/export/repoSolaris11 # svccfg -s application/pkg/

  server setprop pkg/readonly=true

  Reference: Copying and Creating Oracle Solaris 11 Package Repositories, Configure the Repository

  Server Service

• Question 110:

  You are using AI to install a new system. You have added to following information to the AI manifest:

  source = "http://sysA.example.com/zone_cfg/zone.cfg"/>

  Which statement is true with regard to the zone.cfg?

  A. The zone.cfg file is text file in a zonecfg export format.

  B. The zone.cfg file is an AI manifest that specifies how the zone is to be installed.

  C. The zone.cfg file is an xml file in a form suitable for use as a command file for the zonecfg command.

  D. The zone.cfg file is an SC profile with keywords that are specific for configuring a as part of the installation process.

  E. It is am xml configuration file from the /etc/zone directory. It will be used as a profile for the zone. It

  specifies the zonename, zonepath, and other zonecfg parameters.

  Correct Answer: B

  Explanation: The configuration element supports non-global zone configurations. When installing a global

  zone system, the zone configurations specified in the AI manifest are used to install non-global zones onto

  the system after the global zone has been installed

  The configuration element has the following attributes:

  type

  The type of configuration to install. The only type supported by AI is zone.

  name

  A name given to the configuration. This name must be unique across all configuration elements in an AI

  manifest. For configurations of type zone, this name is also used as the zonename for the zone.

  source

  The location from which AI downloads the configuration file for this configuration element. The value can

  be an HTTP or FILE URI specification. For configurations of type zone, this value should point to a zone

  configuration file as produced from the zonecfg export command.

  Reference: man ai_manifest