Oracle 1Z0-100 Online Practice Questions and Exam Preparation

Oracle 1Z0-100 Online Questions & Answers

• Question 121:

  Which three statements are true concerning the IPTABLES Oracle Linux firewall?

  A. The default rule table is filter.
  B. iptables has two main components: the kernel component netfilter and the command-line utility ipchains.
  C. Input, output, and forward are the rule tables associated with filter.
  D. PREROUTING, OUTPUT, and POSTROUTING are the chains associated with nat.
  E. The main rule chains are filter, nat, and mangle.
  F. The main rule tables are filter, nat, and mangle.
  A. The default rule table is filter.
  D. PREROUTING, OUTPUT, and POSTROUTING are the chains associated with nat.
  F. The main rule tables are filter, nat, and mangle.

  ---

  A: You need to specify the table and the chain for each firewall rule you create. There is an exception:

  Most rules are related to filtering, so iptables assumes that any chain that's defined without an associated table will be a part of the filter table. The filter table is therefore the default.

  D: Nat Network Address Translation

  PREROUTING

  Address translation occurs before routing. Facilitates the transformation of the destination IP address to be compatible with the firewall's routing table. Used with NAT of the destination IP address, also known as destination NAT or DNAT.

  POSTROUTING

  Address translation occurs after routing. This implies that there was no need to modify the destination IP address of the packet as in pre-routing. Used with NAT of the source IP address using either one-to-one or many-to-one NAT. This is

  known as source NAT, or SNAT.

  OUTPUT

  Network address translation for packets generated by the firewall. (Rarely used in SOHO environments)

  F: There are three tables in total. The first is the mangle table which is responsible for the alteration of quality of service bits in the TCP header. The second table is the filter queue which is responsible for packet filtering. It has three built-in

  chains in which you can place your firewall policy rules. The third table is the nat queue which is responsible for network address translation.

• Question 122:

  What happens if you reboot a Ksplice Uptrack-enabled system when the following conditions exist?

  1. The Internet is unreachable due to a failing router.

  2. The INSTALL_ON_REBOOT property is set to YES in /etc/uptrack/uptrack.conf.

  A. The Ksplice updates are applied early in the boot sequence despite the fact that the Internet is unreachable.
  B. The Ksplice updates are not applied during the boot sequence, but they will be applied as soon as the Internet becomes reachable again.
  C. The updates are not applied during the boot sequence and will not be applied after the Internet has become reachable again.
  D. The system waits in the boot sequence for the internet to become reachable again.
  E. The system boots to single-user mode.
  A. The Ksplice updates are applied early in the boot sequence despite the fact that the Internet is unreachable.

  ---

  *

  # Automatically install updates at boot time. If this is set, on # reboot into the same kernel, Uptrack will re- install the same set of # updates that were present before the reboot. install_on_reboot = yes

  *

  To install updates automatically at boot time, the following entry must appear in /etc/uptrack/uptrack.conf: install_on_reboot = yes

• Question 123:

  Examine the routing table:

  

  Which three statements are true concerning the routing of IP packets?

  A. Traffic to 192.168.180.180 is routed via eth1.
  B. Traffic to 192.168.180.240 is routed via eth1.
  C. Traffic to 192.168.0.42 is routed via eth2.
  D. Traffic to 192.168.42.42 is routed via eth2.
  E. Traffic to 192.168.42.42 is routed via eth0.
  F. Traffic to 192.168.180.180 is routed via eth0.
  B. Traffic to 192.168.180.240 is routed via eth1.
  D. Traffic to 192.168.42.42 is routed via eth2.

• Question 124:

  The default locations and paths used by logwatch are:

  /etc/logwatch/conf /user/share/logwatch/default.conf /user/share/logwatch/dist.conf

  Which three statements are true logwatch installation and configuration?

  A. After installing logwatch, no configuration is required to produce reports from system logs.
  B. After installing logwatch, the /usr/share/logwatch/dist.conf directory will not exist because it is optional.
  C. After installing logwatch, you must create /etc/logwatch/conf to produce reports from system logs.
  D. After installing logwatch, all the default directories continue to exist.
  E. To produce a report from the previous day's logs, the - - range yesterday parameter must be specified.
  F. Running /usr/sbin/logwatch produces a report of the previous day's log files.
  A. After installing logwatch, no configuration is required to produce reports from system logs.
  B. After installing logwatch, the /usr/share/logwatch/dist.conf directory will not exist because it is optional.
  C. After installing logwatch, you must create /etc/logwatch/conf to produce reports from system logs.

• Question 125:

  The dailyrun.sh shell script run by the user hr on a daily basis suddenly returns an error.

  You investigate this by running the commands manually as user hr and discovered that this line of shell cod is responsible:

  1s als > /home/prodrun/files.1st

  Bash: files.1st:cannot overwrite existing file

  What is the cause of this error?

  A. The hr user has no write permissions on the /home/prodrun/files.1st file.
  B. The hr user has no write permissions on the /home/prodrun directory.
  C. The dailyrun.sh shell script has the setuid bit turned off.
  D. The hr user environment has set on the noclobber option.
  B. The hr user has no write permissions on the /home/prodrun directory.

• Question 126:

  Match the following symbolic notations of the file permissions with their numeric values: 1) - - - S - - - - - - a) 5000 2) - - - - - - S - - - b) 4100 3) - - - - - - - - - - t c) 7101 4) - - - S - - - - - T d) 1001 5) - - - S - - S - - t e) 7040 6) S - - S r - - - T f) 2010

  A. 1-d, 2-f, 3-b, 4-e, 5-c, 6-a
  B. 1-b, 2-f, 3-d, 4-a, 5-c, 6-e
  C. 1-f, 2-a, 3-c, 4-b, 5-e, 6-d
  D. 1-b, 2-d, 3-f, 4-a, 5-e, 6-c
  C. 1-f, 2-a, 3-c, 4-b, 5-e, 6-d

• Question 127:

  Which two software packages are prerequisites for enabling the configuration and use of a Network information Service (Nis) client?

  A. nis-tools
  B. slapi-nis
  C. ypbind
  D. nisserv
  E. nisbind
  F. yp-tools
  C. ypbind
  E. nisbind

  ---

  C: ypbind finds the server for NIS domains and maintains the NIS binding information. The client (normaly the NIS routines in the standard C library) could get the information over RPC from ypbind or read the binding files.

  E: Setting up a NIS master server:

  Required packages: yp-tools ypbind ypserv portmap

• Question 128:

  Which two actions should be completed when the firstboot utility runs under runlevel 5 in Oracle Linux?

  A. Agreeing to the license agreement
  B. Registering for software updated
  C. Creating a nonadministrative user
  D. setting the current date and time to be synchronized with an NTP server
  E. Configuring the dtrace facility
  A. Agreeing to the license agreement
  D. setting the current date and time to be synchronized with an NTP server

  ---

  Performing FirstBoot Configuration Tasks

  FirstBoot runs only after an initial installation and guides you through the various remaining configuration tasks.

  1.

  Click Forward to display the License Information window.

  2.

  Select Yes, I agree to the license agreement, and click Forward to display the Set Up Software Updates window.

  3.

  If your system has an active network connection, you can register your system with the Unbreakable Linux Network (ULN) and subscribe the system to software and Ksplice updates. Click Forward to display the Create User window.

  4.

  Create a non-administrative user account. If you have an existing IPA, LDAP, Kerberos, NIS, or Winbind user database, click Use Network Login to configure the system to obtain user account information from the network server. Click Advanced if you want to specify the user's home directory or user ID.

  Click Forward to display the Date and Time window.

  5.

  Set the current date and time. You can choose to synchronize the system's date and time from an NTP server. Click Forward to display the Kdump window.

  6.

  If required, enable the Kdump kernel crash dump mechanism and configure the amount of memory to reserve for it. If your system crashes, Kdump captures information that assists in determining the cause of the crash.

  Click Finish to complete FirstBoot configuration and display the graphical login screen

• Question 129:

  Which two steps should be performed to permit using SSH, SCP, or SFTP commands by the ORACLE account on the host FAROUT to the oracle account on the host WAYOUT without supplying a password?

  A. The oracle account user on host FAROUT must issue an ssh-keygen command to generate public and private key files in the ~ oracle/.ssh directory FAROUT.
  B. The oracle account user on the host WAYOUT must issue an ssh-keygen command to generate public and private key files in the ~/oracle.ssh directory on WAYOUT.
  C. The Oracle account user on host FAROUT must add the contents of ~/oracle/.ssh/id_dsa.pub or ~/ oracle/.ssh/is_rsa.pub file to the ~/oracle/.ssh/authorized_keys file on host WAYOUT.
  D. The Oracle account user on host WAYOUT must add the contents of ~/oracle/.ddh/id_dsa or ~/oracle/ .ssh/id_rsa.pub file to the ~/oracle/.ssh/authorized_keys file on host FAROUT.
  E. The oracle account user on host WAYOUT must set the permissions on the ~/oracle/.ssh/ authorized_keys file to 644.
  F. The Oracle account user on host FAROUT must set the permissions in ~/oracle/.ssh/authorized_keys file 644.
  B. The oracle account user on the host WAYOUT must issue an ssh-keygen command to generate public and private key files in the ~/oracle.ssh directory on WAYOUT.
  F. The Oracle account user on host FAROUT must set the permissions in ~/oracle/.ssh/authorized_keys file 644.

• Question 130:

  Which three statements are true concerning the use of keys generated by the ssh-keygen command? (Choose three.)

  A. dsa keys must be protected by a passphrase
  B. dsa keys are supported by version 2 of the ssh protocol
  C. rsa keys are supported by version 2 of the ssh protocol
  D. rsa keys are supported by version 1 of the ssh protocol
  E. dsa keys are supported by version 1 of the ssh protocol
  F. rsa keys must be protected by a passphrase
  B. dsa keys are supported by version 2 of the ssh protocol
  D. rsa keys are supported by version 1 of the ssh protocol
  F. rsa keys must be protected by a passphrase