Oracle Oracle Certifications 1Z0-822 Questions & Answers

• Question 11:

  You are the primary administrator for a set of Oracle Solaris 11 servers. You noticed some changes to configuration files.

  You are concerned that someone may have unauthorized access or that an authorized user may be abusing the access privilege. You decide to track a set of security events across multiple servers. How will you configure the systems for

  this?

  A. Configure a centralized system-logging server and direct all servers to use it.

  B. Use audit-config to add the servers' host names to the audit_remote plug in.

  C. Add centralized NFS file systems to the /etc/security/audit_control file on each server.

  D. Modify the /etc/security/audit_startup file and add audit_remote logging on each server.

  Correct Answer: D

• Question 12:

  By default, which directory does the audit_binfile plug-in write log files in, and what is the maximum size of each log file?

  A. /var/adm/audit, 100 MB

  B. /var/audit, 100 MB

  C. /var/adm, no limit

  D. /var/audit, no limit

  E. /var/adm/audit, 16 EB

  Correct Answer: A

• Question 13:

  You are the primary administrator for a set of Oracle Solaris 11 servers. You noticed some changes to configuration files. Yon are concerned that someone may have unauthorized access cm that an authorized user may be abusing the access privilege. You want to track users of these systems to determine what tasks each user performs. Select the best way to gather this information.

  A. Solaris auditing

  B. the system/event service

  C. the system-logging service

  D. Basic Audit Reporting Tool

  E. System Extended Accounting

  Correct Answer: A

• Question 14:

  A contractor has been hired by you company to do some application-specific tuning. You are the administrator of the server that the contractor will be working on. You decide to enable Oracle Solaris Auditing. How will auditing help prevent misuse of the server?

  A. prevents attempts to bypass the protection mechanisms

  B. stops unauthorized activity

  C. acts as a deterrent

  D. prevents misuse

  Correct Answer: A

• Question 15:

  Which two statements are true regarding the audit_remote plugin and the audit service?

  A. audit_remote is not loaded by default.

  B. The standard service port defined by IANA is 16162.

  C. Audit records are sent to all configured remote hosts.

  D. The required GSS_API mechanism is kerberos_v5.

  E. The maximum number of audit records queued before sending is 100.

  Correct Answer: AD

• Question 16:

  Which three options will take precedence over one-another in a local zone that uses the Fair Share Scheduler?

  A. the global resource control zone.cpu-shares

  B. the global default scheduling class

  C. the local zone attribute scheduling-class

  D. the local zone attribute cpu-shares

  E. the scheduling class of the pool assigned to a zone

  Correct Answer: A

• Question 17:

  Examine the following information:

  

  Which statement describes the user auuser audit mask?

  A. All failed and successful lo events, all failed and successful am events will be logged, no ss events will be logged.

  B. All failed and successful lo events, all failed and successful am events and successful ss events will be logged.

  C. All failed and successful lo events, all failed and successful am events and failed ss events will be logged.

  D. All failed and successful lo events and all failed and successful ss events will be logged.

  Correct Answer: A

• Question 18:

  Which statement is true regarding an aggregation?

  A. Its member links must all have the same range of operating speeds.

  B. It can be called out by its link name or by its integer key.

  C. Its LACP mode sets the behavior to active or passive.

  D. Its default L2 policy is round-robin.

  Correct Answer: C

• Question 19:

  You configured IPMP on the system:

  

  Based on this information, select the correct conclusion.

  A. No default route is configured.

  B. in.mpathd cannot identify failed interfaces.

  C. There are no active interfaces in the group.

  D. There are three standby interfaces in the group.

  E. The property transitive-probing is false.

  Correct Answer: C

• Question 20:

  Which network component is the default target for IPMP probe-based Failure detection?

  A. the default router

  B. any nongateway system on the same subnet

  C. any group interface with a test address

  D. the first responder to the in.mpathd broadcast request

  Correct Answer: A