Oracle Oracle Certifications 1Z0-821 Questions & Answers

• Question 131:

  What is the result of executing the following command?

  svcs -d svc:/network/ssh:default

  A. disables the svc:/network/ssh:default service

  B. displays the services that svc: /network/ssh:default is dependent on

  C. displays the services that are dependent on the svc: /network/ssh:default service

  D. deletes the svc: /network/ssh:default service

  Correct Answer: B

  The svcs command displays information about service instances as recorded in the service configuration repository.

  -d Lists the services or service instances upon which the given service instances depend.

• Question 132:

  Identify three options that describe the new Oracle Solaris 11 zone features.

  A. There are boot environments for zones.

  B. Administrators can delegate common administration tasks by using RBAC.

  C. Oracle Solaris 11 supports Solaris 8, 9, and 10 branded zones.

  D. You can migrate a physical Solaris 10 system and its non-global zones to a solaris10 branded zone running on an Oracle Solaris 11 system.

  E. It is possible to change the host ID of a zone.

  Correct Answer: ABD

  A: The beadm utility includes support for creating and administering non-global zone boot environments. Note: A boot environment is a bootable instance of the Oracle Solaris operating system image plus any other application software packages installed into that image. System administrators can maintain multiple boot environments on their systems, and each boot environment can have different software versions installed.

  B: Role-based access control (RBAC) is a security feature for controlling user access to tasks that would normally be restricted to the root role. By applying security attributes to processes and to users, RBAC can divide up superuser capabilities among several administrators.

• Question 133:

  You have been tasked with creating a dedicated virtual network between two local zones within a single system. In order to isolate the network traffic from other zones on that system.

  To accomplish this, you will create__________.

  A. An ether stub

  B. A virtual router

  C. A virtual switch

  D. A virtual bridge.

  E. A virtual network interface

  F. Nothing because a virtual switch is automatically created then the virtual network interfaces are created.

  Correct Answer: A

  Etherstubs are pseudo ethernet NICs which are managed by the system administrator. You can create VNICs over etherstubs instead of over physical links. VNICs over an etherstub become independent of the physical NICs in the system. With etherstubs, you can construct a private virtual network that is isolated both from the other virtual networks in the system and from the external network. For example, you want to create a network environment whose access is limited only to your company developers than to the network at large. Etherstubs can be used to create such an environment.

  Note: Oracle Solaris 11 introduces a new and powerful network stack architecture which includes:

  *

  Networking virtualization with virtual network interface cards (VNICs) and virtual switching (etherstubs)

  *

  Tight integration with zones

  *

  Network resource management - efficient and easy to manage integrated quality of service (QoS) to enforce bandwidth limit on VNICs and traffic flows

• Question 134:

  A change in your company's security policy now requires an audit trial of all administrators assuming the sysadm role, capturing:

  There are two command necessary to accomplish this change. One is a rolemod command. What is the other?

  A. auditconfig set policy=argv

  B. auditconfig -setpolicy +argv

  C. auditconfig -setflags lo, ex sysadm

  D. auditconfig set flags=lo, ex sysadm

  Correct Answer: B

  Audit Significant Events in Addition to Login/Logout (see step 2 below) Use this procedure to audit administrative commands, attempts to invade the system, and other significant events as specified by your site security policy.

  For all users and roles, add the AUE_PFEXEC audit event to their preselection mask.

  # usermod -K audit_flags=lo, ps:no username # rolemod -K audit_flags=lo, ps:no rolename # auditconfig -setpolicy +argv 3- Record the environment in which audited commands are executed. # auditconfig -setpolicy +arge

  Note: [-t] -setpolicy [+|-]policy_flag[, policy_flag ...] Set the kernel audit policy. A policy policy_flag is literal strings that denotes an audit policy. A prefix of + adds the policies specified to the current audit policies. A prefix of - removes the policies specified from the current audit policies. No policies can be set from a local zone unless the perzone policy is first set from the global zone.

• Question 135:

  Given:

  file1 and file2 are text files.

  dir1 and dir2 are directories.

  Which two commands will be successful?

  A. cp dir1 dir1

  B. cp dir1 file1

  C. cp file? dir1

  D. cp file. dir1

  E. cp file% dir2

  F. cp file1 file2 dir1

  Correct Answer: CF

  C: Here the wildcard character ? is used (Matches any single character).

  file1 and file2 will be copied into dir1

  F: the two files file1 and file2 are copied into directoy dir1.

  Note: cp - copy files and directories

  Copy SOURCE to DEST, or multiple SOURCE(s) to DIRECTORY.

  Cp has three principal modes of operation. These modes are inferred from the type and count of arguments presented to the program upon invocation.

  *

  When the program has two arguments of path names to files, the program copies the contents of the first file to the second file, creating the second file if necessary.

  *

  When the program has one or more arguments of path names of files and following those an argument of a path to a directory, then the program copies each source file to the destination directory, creating any files not already existing.

  *

  When the program's arguments are the path names to two directories, cp copies all files in the source directory to the destination directory, creating any files or directories needed. This mode of operation requires an additional option flag, typically r, to indicate the recursive copying of directories. If the destination directory already exists, the source is copied into the destination, while a new directory is created if the destination does not exist.

• Question 136:

  alice is a user account used by Alice on a Solaris 11 system.

  sadmin is a role account on the same system.

  Your task is to add the command /usr/sbin/cryptoadm to the Network management profile, so that Alice can execute it, while assuming the sadmin role.

  Select the three activities necessary to accomplish this.

  A. To the file /etc/security/prof_attr, add the line: Network Management: solaris:cmd:RO::/usr/sbin/ cryptoadm:euid=0

  B. To the file /etc/security/auth_attr, add the line:Network Management: solaris:cmd:RO::/usr/sbin/ cryptoadm:euid=0

  C. To the file /etc/security/exec_attr.d/local-entriies, add the line:Network Management: solaris:cmd:RO::/ usr/sbin/cryptoadm:euid=0 D. Run the roles alice to ensure that alice may assume the role sadmin.

  E. Run the command profiles sadmin to ensure that the role sadmin includes the network Management profile.

  F. Run the command profiles alice to ensure that the Alice has permissions to access the Network management profile.

  G. Run the command profiles "Network management" to ensure that the Network management profile includes the sadmin role.

  Correct Answer: CDG

  C: /etc/security/exec_attr is a local database that specifies the execution attributes associated with profiles. The exec_attr file can be used with other sources for execution profiles, including the exec_attr NIS map and NIS+ table.

  A profile is a logical grouping of authorizations and commands that is interpreted by a profile shell to form a secure execution environment.

• Question 137:

  Which two statements are true when updating Solaris 11 from one Support Respository Update (SRU) to another SRU by using the pkg update command?

  A. By default, the pkg update command automatically creates a backup Boot Environment whenever the kernel is affected by the update.

  B. By default, the pkg update command automatically creates a new Boot Environment whenever the kernel is affected by the update.

  C. The pkg update command can only be used to update to a newer SRU.

  D. The pkg update command can be used to update to a newer or older SRU.

  E. By default, the pkg update command always updates Solaris 11 to the first SRU that was released after the Current SRU.

  F. The pkg update command can only be performed while running in the single-user milestone.

  Correct Answer: BC

• Question 138:

  The core dump configuration for your system is:

  

  A user is running a process in the global zone and the process crashes. The process information is:

  User1 2663 2618 0 17:46:42 pts/2 0:00 /usr/bin/bash The server host name is: zeus What will the per-process core file be named?

  A. core.bash.2663.global

  B. core.bash.2663.zeus

  C. /var/core/core.bash.2663

  D. /var/core/core.bash.2663.global

  Correct Answer: C

  Note the first line:

  global core file pattern: /globalcore/core.%f.%p

  The program name is bash

  The runtime process ID is 2663

  Note: By default, the global core dump is disabled. You need to use the coreadm command with the -e

  global option to enable it. The -g option causes the command to append the program name(%f) and the

  runtime process ID (%p) to the core file name.

• Question 139:

  You create a flash archive of the Solaris 10 global zone on the serves named sysA. The archive name is s10-system.flar, and it is stored on a remote server named backup_server.

  On sysA, you create a Solaris 10 branded zone named s10-zone.

  You want to use the flash archive, located On" /net/bactup_servers/10-system.flar, to install the Operating system in the s10-zone zone.

  Which command do you choose to install the s10-system.flar archive in the Solaris 10 branded zone (s10zone)?

  A. zoneadm -z s10 -zone install - a /net/backup_server/s10-system.flar -u

  B. zonecfg -z s10 -zone install - a /net/backup_server/s10-system.flar -u

  C. zoneadm - z s10 -zone clone - s /net/backup_server/s10-system.flar

  D. zone cfg - a s10-zone create - t SUNWsolaris10\

  E. zonecfg -z s10-zone install -f /net/backup/backup_server/s10-system.flar

  Correct Answer: A

  The zoneadm command is the primary tool used to install and administer non-global zones. Operations using the zoneadm command must be run from the global zone on the target system.

  How to Install the solaris10 Branded Zone A configured solaris10 branded zone is installed by using the zoneadm command with the install subcommand.

  Example: global# zoneadm -z s10-zone install -a /net/machine_name/s10-system.flar -u

• Question 140:

  Your server has a ZFS storage pool that is configured as follows: The server has two spare 146-GB disk drives: c3t5d0 c3t6d0

  

  You need to add more space to the pool1 storage pool. Which command would add more mirrored storage to the pool1 storage pool?

  A. zpool add pool1 mirror c3t5d0 c3t6d0

  B. zpool attach pool1 mirror c3t5d0 c3t6d0

  C. zpool attach pool1 c3r3d0 c3r5d0; zpool attach pool1 c3r4d0 c3r6d0

  D. zpool add pool1 c3r3d0 c3r5d0; zpool add pool1 c3r4d0 c3r6d0

  Correct Answer: A