Oracle Oracle Certifications 1Z0-821 Questions & Answers

• Question 141:

  In order to display the IP addresses of network interfaces, what command would you use?

  A. dladm

  B. ipconfig

  C. sves

  D. ipadm

  E. ipaddr

  Correct Answer: D

  'ipadm show-addr' displays all the configured addresses on the system.

  Example: # ipadm show-addr ADDROBJ TYPE STATE ADDR lo0/v4 static ok 127.0.0.1/8 lo0/v6 static ok ::1/128

• Question 142:

  User jack logs in to host solar in and issues the following command: jack@solaris:-$ ls .ssh

  id_dsa id_dsa.pub id_rsa id_rsa.pub known_hosts authorized_keys

  Which two are true?

  A. The id_rsa file contains the private key for rhosts-based host authentication.

  B. The id_dsa.pub file contains the Digital Signature Algorithm public key for the user jack.

  C. The id_rsa.pub file contains the Rivest Shamir Adelman public key for the host solaris.

  D. The authorized_keys file contains the private keys of remote users authorized to access jack's account on solaris.

  E. The known_hosts file contains the verified public keys of remote hosts known to be trusted.

  Correct Answer: AE

  A: You will see two files starting with id_rsa. id_rsa is the private key and id_rsa.pub is public key.

  E: The .ssh/known_hosts file

  In order to use public-key secure connection with other hosts (ssh, scp, sftp) there is a special directory, ~/ .ssh/, where passphrases and public keys are stored. Normally you wouldn't need to know the gory details, but from time to time a host will change its public key and then you have difficulty using ssh or scp with that host, and have to edit a file named known_hosts. If you try to ssh to another computer, but get an error message that warns about a changed or incorrect public key, then it is probably just a case of that host changing its public key. (It is possible, though usually not the case, that malicious hacking is involved.) Unless you actually suspect hacker involvement, you can edit the file ~/.ssh/known_hosts using your usual text editor (vi, emacs, nedit, or pico) and delete any line with the name of that host.

  Then when you try to ssh that host again, it will be like the first time ever; ssh will ask you if you want to accept a new public key, you type the whole word yes, and everything will proceed normally from there.

  Here is what a typical ~/.ssh/known_hosts file might contain. Note that newton is represented on two different lines:

  newton 1024 35 153438062610297067329638677441205712613292203533062535600064224677647442 245028855505387934431717435134842994423656065076260604296084868001730665 553662299156116414854701274715680961503198280525759778667306417179500370 189017139564144825610347509023078143132936185076849630461827976942220442 313116255293297021841 ucsub 1024 37 132170811640421742212085598383135714069016332111955003414250071326834884 018721183646445780180633494496866895830879394309011412231102757022090299 732775466435482517698989962531081214859205054227533597152962802400251809 883548442498002326460312850336779152617243800769119880843882425555806081 435017335194477605333 simpson 1024 41 840896920592494584403453622735282634536002054701576247765078766974814128 393752943151071629834843909016027026612791643752972116459602750267266908 365259665072736159491719667576217171370458928680504368847255632477925660 234893185547218857655484574619075125368470792976275806263534208879722192 77539015703446529603 newton, 128.138.249.8 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA0d7Aoure0toNJ+YMYi61QP2ka8m5x5ZQlT7obP8C K3eropfqsMPPY6uiyIh9vpiFX2r1LHcbx139+vG6HOtVvuS8+IfMDtawm3WQvRuOopz3vVy 5GtMwtaOgehsXoT930Ryev1bH5myPtWKlipITsOd2sX9k3tvjrmme4KCGGss=

• Question 143:

  Examine this command and its output: $ zfs list -r -t all tank Name USED AVAIL REFER MOUNTPOINT tank 2.41G 2.43G 32K /tank tank/database 2.41G 2.43G 2.41G /tank/database tank/[email protected] 20K - 2.00G ? Next you execute: # zfs destroy tank/database Which statement is true about the result of executing this command?

  A. It destroys the tank/database dataset.

  B. It destroys tank/database and all descendant datasets.

  C. It fails because the tank/[email protected] snapshot depends on the tank/database dataset.

  D. It fails because the tank/[email protected] clone depends on the tank/database dataset.

  E. It fails because the tank/database data set is not empty.

  Correct Answer: C

• Question 144:

  Oracle Solaris 11 limits access to the system with usernames and passwords.

  The usernames are held in ___________, and the passwords are held in ___________.

  Select the correct pair.

  A. /etc/security/policy.conf /etc/passwd

  B. /etc/passwd /etc/shadow

  C. /etc/security /etc/passwd

  D. /etc/shadow /etc/passwd

  Correct Answer: B

  The /etc/passwd file contains basic user attributes. This is an ASCII file that contains an entry for each user. Each entry defines the basic attributes applied to a user.

  /etc/shadow file stores actual password in encrypted format for user's account with additional properties related to user password i.e. it stores secure user account information. All fields are separated by a colon (:) symbol. It contains one entry per line for each user listed in /etc/passwd file.

• Question 145:

  The following image properties are displayed on your system: Which two options describe the boot environment policy property that is currently set for this image?

  

  A. All package operations are performed in a new BE set as active on the next boot.

  B. Do not create a new BE. The install, update, uninstall, or revert operation is not performed if a new BE is required.

  C. If a BE is created, do not set it as the active BE on the next boot

  D. A reboot is required for all package operations

  E. A reboot is not required after a package operation.

  F. For package operations that require a reboot, this policy creates a new BE set as active on the next boot.

  Correct Answer: DF

  Image properties described below.

  * be-policy Specifies when a boot environment is created during packaging operations. The following values are allowed: / default Apply the default BE creation policy: create-backup.

  / always-new (D, F)

  Require a reboot for all package operations (D) by performing them in a new BE set as active on the next

  boot (F). A backup BE is not created unless explicitly requested. This policy is the safest, but is more strict

  than most sites need since no packages can be added without a reboot.

• Question 146:

  Which two statements are true concerning the network stack on Oracle Solaris 11?

  A. Hardware network interfaces and datalinks have a one-to-one relationship.

  B. IP addresses are assigned to datalinks.

  C. A single IP interface can have either an IPv4 address or an IPv6 address but not both.

  D. A single IP interface can have both an IPv4 address and an IPv6 address.

  E. A single datalink can have only one IP interface.

  Correct Answer: AD

• Question 147:

  You are troubleshooting a newly installed desktop Oracle Solaris 11 system with a single network interface. From this system, you can connect to other systems within the company intranet, but cannot access any external services (such as websites and email), even when using IP addresses.

  Examining the routing table confirms that the default route to 192.168.1.1 is missing. DHCP is not used at this site. Which two commands will temporarily mid permanently configure the default route?

  A. ipadm set-gateway 192.168.1.1

  B. route add default 192.168.1.1

  C. ipadm set-default 192.168.1.1

  D. dladm route-add -d 192.168.1.1

  E. echo 192.168.1.1 >/etc/gateway

  F. echo 192.168.1.1 >/etc/defaultrouter

  Correct Answer: BF

  B: Setting the default route on Solaris is easy. If you are trying to just set the route temporarily you can use the route command:

  Route add default

  Example:

  Route add default 192.168.1.1

  Note: Route command manipulates the kernel routing tables. Routing is the process of forwarding a packet from one computer to another. It is based on the IP address in the IP packet header and netmask.

  F: If you want the route to be persisted when you reboot the system, you will need to set the route in the / etc/defaultrouter file.

  /etc/defaultrouter Example: Echo 192.168.1.1 > /etc/defaultrouter

• Question 148:

  Which option would you choose to display the kernel revision level for your operating system?

  A. cat. /etc/release

  B. uname -a

  C. pkg info kernel

  D. banner (issued from the OpenBoot Prom)

  E. cat /etc/motd

  Correct Answer: B

• Question 149:

  The global zone has 8 CPUS. YOU suspect that one of your non global /ones, dbzone, is consuming all of the CPU resources.

  Which command would you use to view the CPU utilization for all of the zones to confirm this?

  A. Run from the global zone:prstat -Z

  B. Run from each zonezlogin mpstat

  C. Run from the global zone:zonestar -r summary

  D. Run from the global zone:rctladm -1

  E. Run from the global zone:prctl -i

  Correct Answer: A

  If you're logged on to the system, you can run prstat -Z to generate a summary of cpu/memory utilization by zone.

• Question 150:

  In a default standalone installation of Oracle Solaris 11, what is the default minimum length in characters of a user password, and where is the minimum password length defined?

  A. Default minimum length is 8, and is defined in /etc/default/password.

  B. Default minimum length is 6, and is defined in /etc/default/password.

  C. Default minimum length is 8, and is defined in /etc/shadow.

  D. Default minimum length is 6, and is defined in /etc/shadow.

  E. Default minimum length is 8, and is defined in /usr/sadm/defadduser.

  F. Default minimum length is 6, and is defined in /usr/sadm/defadduser.

  Correct Answer: B

  By default, the passwd command assumes a minimum length of six characters. You can use the PASSLENGTH default in the /etc/defaults/passwd files to change that by setting the minimum number of characters that a user's password must contain to some other number.