Oracle Oracle Certifications 1Z0-821 Questions & Answers

• Question 101:

  The line

  set noexec_user_stack= l

  should be added to the /etc/system file to prevent an executable stack while executing user programs. What is the purpose of this?

  A. help prevent core dumps on program errors

  B. help programs to execute more quickly by keeping to their own memory space

  C. log any messages into the stack log

  D. help make buffer-overflow attacks more difficult

  Correct Answer: D

  How to Disable Programs From Using Executable Stacks Purpose: Prevent executable stack from

  overflowing.

  You must be in the root role.

  Edit the /etc/system file, and add the following line:

  set noexec_user_stack=1

  Reboot the system.

  # reboot

• Question 102:

  You have been tasked with creating a dedicated virtual network between two local zones within a single system, in order to isolate the network traffic from other zones on that system.

  To accomplish this, you will create_____.

  A. an ether stub

  B. virtual router

  C. a virtual bridge

  D. a virtual network interface

  E. nothing, because a virtual switch is automatically created when the virtual network interfaces are created

  Correct Answer: D

  First create a virtual switch, then create a virtual network interface.

• Question 103:

  When setting up Automated Installer (AI) clients, an interactive tool can be used to generate a custom system configuration profile. The profile will specify the time zone, data and time, user and root accounts, and name services used for an AI client installation. This interactive tool will prompt you to enter the client information and an SC profile (XML) will be created.

  Which interactive tool can be used to generate this question configuration?

  A. sys-unconfig

  B. installadm set-criteria

  C. sysconfig create-profile

  D. installadm create-profile

  Correct Answer: B

  Use the installadm set-criteria command to update the client criteria associated with an AI manifest that you already added to a service using installadm add-manifest.

  Use the installadm add-manifest command to add a custom AI manifest to an install service.

  The value of manifest is a full path and file name with .xml extension. The manifest file contains an AI manifest (installation instructions). The manifest file can also reference or embed an SC manifest (system configuration instructions).

• Question 104:

  Review the boot environment information displayed on your system:

  

  Which two options accurately describe the newBE boot environment?

  A. It cannot be destroyed.

  B. It cannot be activated.

  C. It cannot be renamed.

  D. You can create a snapshot of it.

  E. It is activated but unbootable.

  F. It has been deleted and will be removed at the next reboot.

  Correct Answer: BC

  If the boot environment is unbootable, it is marked with an exclamation point (!) in the Active column in the

  beadm list output.

  The beadm command restricts actions on unbootable boot environments as follows:

  You cannot activate an unbootable boot environment. (B) You cannot destroy a boot environment that is

  both unbootable and marked as active on reboot.

  You cannot create a snapshot of an unbootable boot environment. You cannot use an unbootable boot

  environment or boot environment snapshot with the -e option of beadm create.

  You cannot rename an unbootable boot environment. (C)

• Question 105:

  Which two statements are true concerning the creation of user accounts by using the useradd command?

  A. By default, it will create the user's home directory.

  B. New user accounts are unlocked but must change their password at their first login.

  C. New user accounts are in a pending activation state until a password is assigned to them.

  D. By default, a new group will be added for each new user account.

  E. By default, the UID of a new user account will be the next available number above the highest number currently assigned.

  F. By default, the UID of a new user account with be the lowest available unused number for nonsystem accounts.

  Correct Answer: CE

• Question 106:

  View the following information for a software package:

  

  Which command would you use to display this information for a software package that is not currently installed on your system?

  A. pkg list gzip

  B. pkg info -r gzip

  C. pkg search -1 gzip

  D. pkg verify -v gzip

  E. pkg contents gzip

  Correct Answer: B

  By default, the pkg info command only lists information about installed packages on the system; however, we can use a similar command to look up information about uninstalled packages, as shown in here: Example: Listing Information About an Uninstalled Package # pkg info -r php-52 Name: web/php-52 Summary: PHP Server 5.2 Description: PHP Server 5.2 Category: Development/PHP State: Not Installed Publisher: solaris Version: 5.2.17 Build Release: 5.11 Branch: 0.175.0.0.0.1.530 Packaging Date: Wed Oct 12 14:01:41 2011 Size: 44.47 MB FMRI: pkg://solaris/web/[email protected], 5.11-0.175.0.0.0.1.530:20111012T140141Z

  Note: pkg info command displays information about packages in a human-readable form. Multiple FMRI patterns may be specified; with no patterns, display information on all installed packages in the image.

  With -l, use the data available from locally installed packages. This is the default.

  With -r, retrieve the data from the repositories of the image's configured publishers. Note that you must specify one or more package patterns in this case.

• Question 107:

  On server A, you enter the following command to add a static route to serverA route -p add -host

  192.168.1.101 192.168.1.101 -static

  What is the purpose of this command?

  A. to temporarily bypass IP Filter rules

  B. to specify an IPMP target IP address to in.mpathd

  C. to specify routing to an adjacent network when in.rdisc is not used

  D. to specify routing to an adjacent network when in.routed is not used

  E. to ensure the IP address for serverB is not flushed from the ARP cache

  F. to optimize link aggregation using a direct connection between two systems

  Correct Answer: B

  Note: # route -p add -host destination-IP gateway-IP -static where destination-IP and gateway-IP are IPv4 addresses of the host to be used as a target.

  For example, you would type the following to specify the target system 192.168.10.137, which is on the same subnet as the interfaces in IPMP group itops0:

  $ route -p add -host 192.168.10.137 192.168.10.137 -static This new route will be automatically configured every time the system is restarted. If you want to define only a temporary route to a target system for probe-based failure detection, then do not use the -p option.

• Question 108:

  Which best describes the svc:/system/boot-config service?

  A. It is used to change the milestone on a system.

  B. It is used to set the default run level of the system.

  C. It provides the parameters used to set the system to automatically perform a fast or slow reboot.

  D. When the service is enabled, the system performs a fast reboot by default; when it is disable the system performs a slow reboot by default.

  Correct Answer: C

  Starting with the Oracle Solaris 11 Express release, Fast Reboot is supported on the SPARC platform, as well as the x86 platform. On both platforms, this feature is controlled by the SMF and implemented through a boot configuration service, svc:/system/boot- config. The boot-config service provides a means for setting or changing the default boot configuration parameters.

  The fastreboot_default property of the boot-config service enables an automatic fast reboot of the system when either the reboot or the init 6 command is used. When the config/fastreboot_default property is set to true the system automatically performs a fast reboot, without the need to use the reboot -f command. By default, this property's value is set to false on the SPARC platform and to true on the x86 platform.

• Question 109:

  You run the command dlstat show-link -r.

  Select the two correct statements regarding the information displayed in the INTRS column.

  A. No value is listed for virtual network interfaces.

  B. A value of 0 is listed for virtual interfaces and ether stubs.

  C. The number of Interrupts is listed, which indicates network efficiency.

  D. A number equal to the number of transmitted Ethernet frames is listed for physical links.

  E. The number of packets that were interrupted by a collision is listed, which may indicate hardware problems.

  Correct Answer: CE

  In this output, the statistics for interrupt (INTRS) are significant. Low interrupt numbers indicate greater

  efficiency in performance. If the interrupt numbers are high, then you might need to add more resources to

  the specific link.

  Example:

  # dlstat -r -i 1

  LINK IPKTS RBYTES INTRS POLLS CH<10 CH10-50 CH>50

  e1000g0 101.91K 32.86M 87.56K 14.35K 3.70K 205 5

  nxge1 9.61M 14.47G 5.79M 3.82M 379.98K 85.66K 1.64K

  vnic1 8 336 0 0 0 0 0

  e1000g0 0 0 0 0 0 0 0

  nxge1 82.13K 123.69M 50.00K 32.13K 3.17K 724 24

  vnic1 0 0 0 0 0 0 0

  Note: dlstat show-link [-r [-F] | -t] [-i interval] [-a] [-p] [ -o field[, ...]] [-u R|K|M|G|T|P] [link] Display statistics

  for a link.

  -r

  Display receive-side statistics only. Includes bytes and packets received, hardware and software drops,

  and so forth.

  List of supported RX fields:

  link

  iusedby

  ibytes

  ipkts

  intrs

  polls hdrops: hardware drops sdrops: software drops (owing to bandwidth enforcement) ch<10: number of packet chains of length < 10 ch10-50: number of packet chains of length between 10 and 50 ch>50: number of packet chains of length > 50

• Question 110:

  You want to install the openldap software package to a now boot environment for testing before introducing the now software package to the production environment. What option describes the correct procedure to:

  1) create a new BE named nowBE

  2) install the software to that new BE only

  A. pkg install --newBE openldap

  B. pkg install --be-nama newBE openldap

  C. beadm create newBEbeadm mount newBE /mntpkg -R /mnt update openldap

  D. beadm create newBEbeadm activate newBEpkg install openldap

  Correct Answer: D

  If you want to create a backup of an existing boot environment, for example, prior to modifying the original boot environment, you can use the beadm command to create and mount a new boot environment that is a clone of your active boot environment. This clone is listed as an alternate boot environment in the GRUB menu for x86 systems or in the boot menu for SPARC systems.

  When you clone a boot environment by using the beadm create command, all supported zones in that boot environment are copied into the new boot environment.

  How to Create a Boot Environment

  1.

  Become the root role.

  2.

  Create the boot environment.

  # beadm create BeName

  BeName is a variable for the name of the new boot environment. This new boot environment is inactive.

  3.

  (Optional) Use the beadm mount command to mount the new boot environment.

  # beadm mount BeName mount-point

  Note: If the directory for the mount point does not exist, the beadm utility creates the directory, then mounts the boot environment on that directory.

  If the boot environment is already mounted, the beadm mount command fails and does not remount the boot environment at the newly specified location.

  4. (Optional) Activate the boot environment.

  # beadm activate BeName

  BeName is a variable for the name of the boot environment to be activated.

  On reboot, the newly active boot environment is displayed as the default selection in the x86 GRUB menu or the SPARC boot menu.