Oracle Oracle Certifications 1Z0-821 Questions & Answers

• Question 221:

  Which files must be edited in order to set up logging of all failed login attempts?

  A. /etc/default/login, /var/adm/loginlog, /etc/syslog.conf

  B. /etc/default/login, /var/adm/authlog, /etc/syslog.conf

  C. /var/adm/loginlog, /var/adm/authlog, /etc/syslog.conf

  D. /etc/default/login, /var/adm/authlog, /var/adm/loginlog

  Correct Answer: B

  This procedure captures in a syslog file all failed login attempts.

  1.

  Set up the /etc/default/login file with the desired values for SYSLOG and SYSLOG_FAILED_LOGINS Edit the /etc/default/login file to change the entry. Make sure that SYSLOG=YES is uncommented.

  2.

  Create a file with the correct permissions to hold the logging information. Create the authlog file in the /var/adm directory.

  3.

  Edit the syslog.conf file to log failed password attempts. Send the failures to the authlog file.

• Question 222:

  User brian changes the permissions for db_data this command:

  chmod 4755 db_data

  What is true?

  A. db_data now has permissions rwsr-xr-x and can be deleted only by user brian.

  B. db_data now has permissions rwsr-xr-x and, if executed, will inn with the permissions of user brian.

  C. db_data now has permissions rwxr-sr-x and can be deleted only by members of the group owning it.

  D. The permissions for db_data cannot be determined, because the permissions prior to the change have not been specified.

  E. db_data must be an ordinary file, because special permissions cannot be set on a directory.

  Correct Answer: C

  Use the chmod command to change permissions for a file or directory. You must be the owner of a file or directory, or have root access, to change its permissions.

  Here we do not know if brian owns db_data.

  Note:

  Permission 7 full 6 read and write 5 read and execute 4 read only 3 write and execute 2 write only 1 execute only 0 none

  0 --- no permission 1 --x execute 2 -w- write 3 -wx write and execute 4 r-- read 5 r-x read and execute 6 rw- read and write 7 rwx read, write and execut

  Solaris: Solaris Advanced User's Guide

• Question 223:

  Which command would you use from the bash shell to determine the total amount of physical memory installed in your Solaris system (x86 and SPARC)?

  A. uname -a

  B. prtconf | grep -i memory

  C. sysdef | grep -i memory

  D. vmstat

  E. prtdiag | grep -i memory

  Correct Answer: B

  The prtconf command prints the system configuration information. The output includes the total amount of memory, and the configuration of system peripherals formatted as a device tree.

  If a device path is specified on the command line for those command options that can take a device path, prtconf will only display information for that device node.

• Question 224:

  You need to install the solaris-desktop group package. Which command would you use to list the set of packages included in that software group?

  A. pkg search

  B. pkg info

  C. pkginfo

  D. pkg contents

  Correct Answer: A

  Use the pkg search command to search for packages whose data matches the specified pattern.

  Like the pkg contents command, the pkg search command examines the contents of packages. While the

  pkg contents command returns the contents, the pkg search command returns the names of packages that

  match the query.

• Question 225:

  The core dump configuration in your non global zone is

  

  A user is running a process in a non-global zone (testzone) and the process crashes. The process information is:

  user126632618017:46:42pts/20:00/usr/bin/bash

  When the user's process crashes in testzone, a non-global zone, where will the core dump be saved?

  A. The file will be stored in the non-global zone's directory: /var/core/pprocess/core.hash.2663.

  B. The file will be saved in the global zone's directory: /var/core/core.bash.2663.

  C. A core file cannot be generated in a non-global zone because it shares the kernel with the global zone.

  D. The file will be stored in the global zone's directory: /var/core/pprocess/core.bash.2663.

  E. The file will be saved in non-global zone's directory: /var/core/core.bash.2663

  Correct Answer: E

  The line init core file pattern: /var/core/core.%f.%p will be used for the non-global process to determine the destination of the dump file.

  Note: When a process is dumping core, up to three core files can be produced: one in the per-process location, one in the system-wide global location, and, if the process was running in a local (non-global)

  zone, one in the global location for the zone in which that process was running.

• Question 226:

  What determines which bits in an IP address represent the subnet, and which represent the host?

  A. Subnet

  B. unicast

  C. netmask

  D. multicast

  E. broadcast

  Correct Answer: C

  A subnetwork, or subnet, is a logically visible subdivision of an IP network. The practice of dividing a network into two or more networks is called subnetting. The routing prefix of an address is written in a form identical to that of the address itself. This is called the network mask, or netmask, of the address. For example, a specification of the most-significant 18 bits of an IPv4 address, 11111111.11111111.11000000.00000000, is written as 255.255.192.0.

• Question 227:

  You need to set up an Oracle Solaris 11 host as an iSCSI target so that the host's disk can be accessed over a storage network. The disk device is c3t4d0.

  Which six options describe the steps that need to be taken on this host to enable an iSCSI target?

  A. Create a ZFS file system named iscsi/target.

  B. Create a zpool named iscsi with disk device c3t4d0

  C. Create zfs volume named iscsi/target.

  D. Use the stmfadm command to create a LUN using /dev/zvol/rdsk/iscsi/target.

  E. Use the stmfadm command to create a LUN using iscsi/target.

  F. Use the stmfadm command to make the LUN viewable.

  G. Use the stmfadm command to make the volume viewable.

  H. Enable the svc:/network/iscsi/target:default Service.

  I. Use the itadm command to create the iSCSI target.

  Correct Answer: BCDFHI

  How to Create an iSCSI LUN

  The following steps are completed on the system that is providing the storage device. Example: target#

  zpool create sanpool mirror c2t3d0 c2t4d0 (C)2. Create a ZFS volume to be used as a SCSI LUN.

  (D)3. Create a LUN for the ZFS volume.

  Example:

  target# stmfadm create-lu /dev/zvol/rdsk/sanpool/vol1 Logical unit created:

  600144F0B5418B0000004DDAC7C10001

  4. Confirm that the LUN has been created.

  Example

  target# stmfadm list-lu

  LU Name: 600144F0B5418B0000004DDAC7C10001

  (F) 5. Add the LUN view.

  This command makes the LUN accessible to all systems.

  target# stmfadm add-view 600144F0B5418B0000004DDAC7C10001

  How to Create the iSCSI Target

  This procedure assumes that you are logged in to the local system will contains the iSCSI target.

  Note: The stmfadm command manages SCSI LUNs. Rather than setting a special iSCSI property on the

  ZFS volume, create the volume and use stmfadm to create the LUN.

  (H)

  1. Enable the iSCSI target service.

  target# svcadm enable -r svc:/network/iscsi/target:default

  (I)

  2. Create the iSCSI target. target# itadm create-target

• Question 228:

  You have been asked to do an orderly shutdown on a process with a PID of 1234, with the kill command.

  Which command is best?

  A. kill -2 1234

  B. kill -15 1234

  C. kill -9 1234

  D. kill -1 1234

  Correct Answer: B

  On POSIX-compliant platforms, SIGTERM is the signal sent to a process to request its termination. The symbolic constant for SIGTERM is defined in the header file signal.h. Symbolic signal names are used because signal numbers can vary across platforms, however on the vast majority of systems, SIGTERM is signal #15.

  SIGTERM is the default signal sent to a process by the kill or killall commands. It causes the termination of a process, but unlike the SIGKILL signal, it can be caught and interpreted (or ignored) by the process. Therefore, SIGTERM is akin to asking a process to terminate nicely, allowing cleanup and closure of files. For this reason, on many Unix systems during shutdown, init issues SIGTERM to all processes that are not essential to powering off, waits a few seconds, and then issues SIGKILL to forcibly terminate any such processes that remain.

• Question 229:

  A user account must be a member of a primary group, and may also be a member of one or more secondary groups. What is the maximum total number of groups that one user can concurrently belong to?

  A. 15

  B. 16

  C. 17

  D. 63

  E. 64

  F. 65

  G. The number of groups one user can concurrently belong to is unlimited in Solaris 11.

  Correct Answer: B

  Each user belongs to a group that is referred to as the user's primary group. The GID number, located in

  the user's account entry within the /etc/passwd file, specifies the user's primary group.

  Each user can also belong to up to 15 additional groups, known as secondary groups. In the /etc/group

  file, you can add users to group entries, thus establishing the user's secondary group affiliations.

  Note (4 PSARC/2009/542):

  his project proposes changing the maximum value for NGROUPS_MAX from 32 to 1024 by changing the

  definition of NGROUPS_UMAX from 32 to 1024.

  The use for a larger number of groups is described in CR 4088757, particular in the case of Samba

  servers and ADS clients; the Samba servers map every SID to a Unix group. Users with more than 32

  groups SIDs are common. We've seen reports varying from "64 is enough", "128 is absolutely enough" and

  "we've users with more 190 group SIDS).

  NGROUPS_MAX as defined by different Unix versions are as follows (http://www.j3e.de/ngroups.html):

  Linux Kernel >= 2.6.3 65536

  Linux Kernel < 2.6.3 32

  Tru64 / OSF/1 32

  IBM AIX 5.2 64

  IBM AIX 5.3 ... 6.1 128

  OpenBSD, NetBSD, FreeBSD, Darwin (Mac OS X) 16

  Sun Solaris 7, 8, 9, 10 16 (can vary from 0-32)

  HP-UX 20

  IRIX 16 (can vary from 0-32)

  Plan 9 from Bell Labs 32

  Minix 3 0 (Minix-vmd: 16)

  QNX 6.4 8

• Question 230:

  The crash dump notification on your server is:

  

  Documentation states that there should be two core files for each crash dump in the /var/crash directory named vmdump.0

  Which command should you choose to display theses two files?

  A. savecore -f vmdump.0

  B. dumpadm uncompressed

  C. gunzip vmdump.0

  D. dumpadm -z off

  Correct Answer: A

  Decompress using savecore -f vmdump.0

  savecore - save a crash dump of the operating system

  -f dumpfile Attempt to save a crash dump from the specified file instead of from the system's current dump device. This option may be useful if the information stored on the dump device has been copied to an on-disk file by means of the dd(1M) command.