Oracle Oracle Certifications 1Z0-821 Questions & Answers

• Question 201:

  Consider the following rule file for use with the Basic Audit Reporting Tool (BART). CHECK all

  IGNORE dirmtime

  /etc/security

  /etc/notices

  IGNORE contents

  /export/home

  IGNORE mtime size contents

  /var

  CHECK

  You are using BART to detect inappropriate changes to the file system.

  Identify the two correct statements describing the attributes recorded.

  A. /var/dhcp Attribute: size uid gid mode acl

  B. /etc/hosts Attributes: size uid gid mode acl intime dest

  C. /var/spool/mqueue Attribute: size uid gid mode acl dirmtime

  D. /etc/security/exec_attr Attribute: size uid mode acl mtime devnode

  E. /export/home/kate/.profile Attributes: uid gid mode acl dirmtime F. /export/home/rick/.profile Attributes: size uid gid mode acl mtime contents

  Correct Answer: DF

  D: According to line /etc/security

  F: According to line /export/home Not E: According to line IGNORE dirmtime Note: In default mode, the bart compare command, as shown in the following example, checks all the files installed on the system, with the exception of modified directory timestamps (dirmtime):

  CHECK all IGNORE dirmtime Note 2: The Basic Audit Reporting Tool (BART) feature of Oracle Solaris enables you to comprehensively validate systems by performing file-level checks of a system over time. By creating BART manifests, you can easily and reliably gather information about the components of the software stack that is installed on deployed systems.

  BART is a useful tool for integrity management on one system or on a network of systems.

• Question 202:

  You have connected a new printer at a fixed IP address.

  It appears to work correctly most of the time, but at other times does not respond.

  You suspect that the assigned address may not be unique within the network.

  What command will be useful to confirm this?

  A. arp

  B. netstat

  C. ipadm show-if

  D. dladm show-addr

  E. ipadm show-addr

  Correct Answer: E

  'ipadm show-addr' displays all the configured addresses on the system.

  Example: # ipadm show-addr ADDROBJ TYPE STATE ADDR lo0/v4 static ok 127.0.0.1/8 lo0/v6 static ok ::1/128

• Question 203:

  User jack makes use of the bash shell; his home directory is/export/home/jack. What is the correct setting of umask, and where should it be set, to allow jack to create a shell script using the vi editor, that is executable by default?

  A. It is not possible to make a script executable without using the chmod command.

  B. umask value of 0002 set in /etc/profile

  C. umask value of 0002 set in /export/home/jack/.bashrc

  D. umask value of 0722 set in /etc/profile

  E. umask value of 0722 set In /export/home/jack/.bashrc

  Correct Answer: B

  The user file-creation mode mask (umask) is use to determine the file permission for newly created files. It can be used to control the default file permission for new files. It is a four- digit octal number. You can setup umask in /etc/bashrc or /etc/profile file for all users. By default most Unix distro set it to 0022 (022) or 0002 (002).

  1.

  The default umask 002 used for normal user. With this mask default directory permissions are 775 and default file permissions are 664.

  2.

  The default umask for the root user is 022 result into default directory permissions are 755 and default file permissions are 644.

  3.

  For directories, the base permissions are (rwxrwxrwx) 0777 and for files they are 0666 (rw-rw-rw). In short,

  1.

  A umask of 022 allows only you to write data, but anyone can read data.

  2.

  A umask of 077 is good for a completely private system. No other user can read or write your data if umask is set to 077.

  3.

  A umask of 002 is good when you share data with other users in the same group. Members of your group can create and modify data files; those outside your group can read data file, but cannot modify it. Set your umask to 007 to completely exclude users who are not group members.

• Question 204:

  The following information is displayed for the svc:/network/ssh service:

  

  Which describes the minimum set of commands to be executed to bring the svc: /network/ssh: default service back online?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  E. Option E

  F. Option F

  G. Option G

  Correct Answer: C

• Question 205:

  The current ZFS configuration on server is:

  

  You need to backup the /data file system while the file system is active.

  Select the option that creates a full backup of the /data file system and stores the backup on server in the pool named backup.

  A. Mount -F nfs system: /backup / mntzfs snapshot pool/data@monday>/mnt/Monday

  B. Mount -F nfs systemB: /backup/mntzfs snapshot pool1/data@Mondayzfs clone pool1/data@monday/ mnt/Monday

  C. Zfs send pool1/data@Monday | ssh system zfs recv backup/monday

  D. Zfs snapshot pool1/data@Monday | ssh system zfs recv backup/monday

  Correct Answer: C

  http://docs.oracle.com/cd/E23823_01/html/819-5461/ghzvz.html

• Question 206:

  Given the following output of the zpool status command:

  

  Identify the correct statement regarding pool1's configuration.

  A. Data written to pool1 will be stripped across four disk components.

  B. The rsdz1-0 and c3t640 components are submirrors of pool1.

  C. Data will only be stripped across the three disks in rsidz configuration.

  D. The configuration is a bug in Solaris 11; it cannot be created by an administrator.

  Correct Answer: B

• Question 207:

  Before booting testzone, a non-global zone, you want to connect to the zone's console so that you can watch the boot process.

  Choose the command used xo connect to testzone's console.

  A. zoneadm ?C testzone

  B. zoneadm ?console testzone

  C. zlogin ?z testzone console

  D. zlogin ?z testzone ?C

  E. zlogin ?C testzone

  F. zoneadm ?z testzone ?C

  Correct Answer: E

• Question 208:

  The default publisher on your system is:

  

  You want to update the Oracle Solaris 11 environment on your system, but you are not able to connect this system to the Internet to access the default Oracle repository. A repository has been created on your local network and is named http://server1.example.com.

  Which command would you choose to connect your system to the local repository?

  A. pkg publisher to specify the new publisher

  B. pkg set-publisher to set the stickiness on the http://server1.example.com publisher and unset stickiness for http://pkg.oracle.com/solaris/release

  C. pkg add-publisher to add the new publisher

  D. pkg set-publisher to set the origin for the publisher

  Correct Answer: D

  Solaris 11 Express makes it pretty easy to set up a local copy of the repository. A common reason folks

  need access to a local repository is because their system is not connected to the Internet.

  Tthe pkg set-publisher command can be used to for example add a publisher or to enable or disable a

  publisher.

  Note: Example Adding a Publisher

  Use the -g option to specify the publisher origin URI.

  # pkg set-publisher -g http://pkg.example.com/release example.com

  Example Specifying the Preferred Publisher

  Use the -P option to specify a publisher as the preferred publisher. The specified publisher moves to the

  top of the search order. You can specify the -P option when you add a publisher or you can modify an

  existing publisher.

  # pkg set-publisher -P example.com

  Example Enabling or Disabling a Publisher

  Use the -d option to disable a publisher. The preferred publisher cannot be disabled. A disabled publisher

  is not used in package operations such as list and install. You can modify the properties of a disabled

  publishers.

  Use the -e option to enable a publisher.

  # pkg set-publisher -d example2.com

• Question 209:

  Select the five tasks that need to be performed on the Automated Installer (AI) install server before setting up the client.

  A. Create a local IPS repository on the AI Install server and start the repository server service, the publisher origin to the repository file.

  B. Set up a IP address on the AI install server.

  C. The DHCP server must be enabled on the install server and must provide the DHCP service for the clients.

  D. DHCP must be available on the network for the Install server and the clients, but the install server does not need to be the DHCP server.

  E. Download the AI boot image. The image must be the same version as the Oracle Solaris OS that you plan to install on the client.

  F. Download the text install image into the IPS repository.

  G. Install the AI installation tools.

  H. Create the AI install service. Specify the path to the AI network boot image ISO file and the path where the AI net image ISO file should be unpacked.

  I. Create the AI install service. Specify the path to the AI network boot image ISO file and the path to the IPS repository.

  Correct Answer: BDFGI

  B: Configure the AI install server to use a static IP address and default route.

  D: The create-service command can set up DHCP on the AI install server. If you want to set up a separate DHCP server or configure an existing DHCP server for use with AI. The DHCP server must be able to provide DNS information to the systems to be installed.

  E: An automated installation of a client over the network consists of the following high-level steps:

  1.

  The client system boots over the network and gets its network configuration and the location of the

  install server from the DHCP server.

  2.

  The install server provides a boot image to the client.

  3.

  Characteristics of the client determine which installation instructions and which system configuration

  instructions are used to install the client.

  4.

  The Oracle Solaris 11 OS is installed on the client, pulling packages from the package repository

  specified by the installation instructions in the AI install service.

  G: Install the AI tool set.

  Use the installadm create-service command to create an AI install service. Give the service a meaningful

  name, and specify the path where you want the service created. Specify the source of the network boot

  image (net image) package or ISO file.

  installadm create-service [-n svcname] [-s FMRI_or_ISO] [-d imagepath]

  -d imagepath The imagepath is the location of the new install service. The install-image/solaris-auto- install package is installed to this location, or the specified ISO file is expanded at this location.

• Question 210:

  Select the two statements that correctly describe the operation of NWAM.

  A. If a location is explicitly enabled, it remains active until explicitly changed.

  B. Wireless security keys can be configured by using the nwammgr command.

  C. NWAM stores profile information in /etc/ipadm/ipadm.conf and /etc/dladm/datalink.conf.

  D. Multiple locations may be automatically activated in systems with multiple network interface cards.

  E. Interface NCU Properties "float" and are automatically attached to the highest priority Link NCU Property.

  F. If the DefaultFixed NCP is enabled, persistent configuration, stored in /etc/ipadm.conf and /etc/dladm/ datalink.conf is used.

  Correct Answer: AD

  A: Conditional and system locations can be manually activated, which means that the location remains active until explicitly disabled.

  D: A location comprises certain elements of a network configuration, for example a name service and firewall settings, that are applied together, when required. You can create multiple locations for various uses. For example, one location can be used when you are connected at the office by using the company intranet. Another location can be used at home when you are connected to the public Internet by using a wireless access point. Locations can be activated manually or automatically, according to environmental conditions, such as the IP address that is obtained by a network connection.