Oracle 1Z0-820 Online Practice Questions and Exam Preparation

Oracle 1Z0-820 Online Questions & Answers

• Question 91:

  You are using this rule file with the Basic Audit Reporting Tool (BART) to detect inappropriate file system changes. CHECK all IGNORE dirmtime /etc/acct /etc/security /etc/notices IGNORE contents /export/home/alice IGNORE mtime size contents

  A/ar CHECK /var/tmp IGNORE all Identify the two correct statements describing the attributes recorded. (Choose two.)

  A. /var/spool/cron/crontabs Attributes: size uid gid mode acl
  B. /var/spool/croa'crontabs Attnbutes: size uid gid mode acl dirmtime
  C. /export/home/lesley/.bash_history Attributes: uid gid mode acl
  D. /export/home/sandra/.bash_history Attributes: uid gid mode dest
  E. /etc/security/prof_attr.d Attributes: uid gid mode acl dirmtime
  F. /etc/security/prof_attr.d Attributes: size uid gid mode acl devnode
  B. /var/spool/croa'crontabs Attnbutes: size uid gid mode acl dirmtime
  C. /export/home/lesley/.bash_history Attributes: uid gid mode acl

• Question 92:

  United States of America export laws include restrictions on cryptography. Identify the two methods with which these restrictions are accommodated in the Oracle Solaris 11 Cryptographic Framework.

  A. Corporations must utilize signed X.509 v3 certificates.
  B. A third-party provider object must be signed with a certificate issued by Oracle.
  C. Loadable kernel software modules must register using the Cryptographic Framework SPI.
  D. Third-party providers must utilize X.509 v3 certificates signed by trusted Root Certification Authorities.
  E. Systems destined for embargoed countries utilize loadable kernel software modules that restrict encryption to 64 bit keys.
  B. A third-party provider object must be signed with a certificate issued by Oracle.
  C. Loadable kernel software modules must register using the Cryptographic Framework SPI.

  ---

  B: Binary Signatures for Third-Party Software

  The elfsign command provides a means to sign providers to be used with the Oracle Solaris Cryptographic Framework. Typically, this command is run by the developer of a provider.

  The elfsign command has subcommands to request a certificate from Sun and to sign binaries. Another subcommand verifies the signature. Unsigned binaries cannot be used by the Oracle Solaris Cryptographic Framework. To sign one or

  more providers requires the certificate from Sun and the private key that was used to request the certificate.

  C: Export law in the United States requires that the use of open cryptographic interfaces be restricted. The Oracle Solaris Cryptographic Framework satisfies the current law by requiring that kernel cryptographic providers and PKCS #11

  cryptographic providers be signed.

  Reference: System Administration Guide: Security Services, Oracle Solaris Cryptographic Framework

• Question 93:

  For an Oracle Solaris 11 Automated Installation (Al), select the two properties that can be configured using System Configuration profiles (SC profiles). (Choose two.)

  A. IP address of the Al server
  B. passwords for user accounts
  C. target disk slice for installation
  D. NWAM active network configuration profile (NCP)
  E. IP address of the IPS (Image Packaging System) repository
  F. SI_MANIFEST_SCRIPT, which defines the URL of the manifest script
  B. passwords for user accounts
  F. SI_MANIFEST_SCRIPT, which defines the URL of the manifest script

• Question 94:

  You have been asked to troubleshoot the initial configuration of a virtual network connecting two local zones with the outside world. View the exhibit.

  

  The command dladm create-vnic -1 vswitch192.168.1 vnic1 fails with the error dladm: invalid link name `vswitch192.168.1' What is the reason for this error?

  A. The name vswitch192.168.1 is not legal.
  B. The zone must be specified with dladm create-vnic -z zone3 vnic1.
  C. The virtual interface must be specified with dladm create-vnic -z zone3 vnic1.
  D. The virtual interface must be created with ipadm create-vnic -1 switch192.168.1.
  E. The virtual switch must be created first with dladm create -etherstub vswitch192.168.1.
  E. The virtual switch must be created first with dladm create -etherstub vswitch192.168.1.

  ---

  There is no data-link named vswitch192.168.

  We need to create an etherstub first.

  See Note and example below for details.

  Note: Create a VNIC in the system's global zone.

  # dladm create-vnic -l data-link vnic-name

  data-link is the name of the interface where the VNIC is to be configured.

  -l link, --link=link

  link can be a physical link or an etherstub.

  vnic-name is the name that you want to give the VNIC.

  For example, to create a VNIC named vnic0 on interface e1000g0, you would type the following:

  # dladm create-vnic -l e1000g0 vnic0

  Example: Creating a Virtual Network Without a Physical NIC

  First, create an etherstub with name stub1:

  # dladm create-etherstub stub1

  Create two VNICs with names hello0 and test1 on the etherstub. This operation implicitly creates a virtual switch connecting hello0 and test1.

  # dladm create-vnic -l stub1 hello0

  # dladm create-vnic -l stub1 test1 Reference: man dladm

• Question 95:

  Select the five tasks that need to be performed on the Automated Installer (AI) install server before setting up the client.

  A. Create a local IPS repository on the AI Install server and start the repository server service, the publisher origin to the repository file.
  B. Set up a IP address on the AI install server.
  C. The DHCP server must be enabled on the install server and must provide the DHCP service for the clients.
  D. DHCP must be available on the network for the Install server and the clients, but the install server does not need to be the DHCP server.
  E. Download the AI boot image. The image must be the same version as the Oracle Solaris OS that you plan to install on the client.
  F. Download the text install image into the IPS repository.
  G. Install the AI installation tools.
  H. Create the AI install service. Specify the path to the AI network boot image ISO file and the path where the AI net image ISO file should be unpacked.
  I. Create the AI install service. Specify the path to the AI network boot image ISO file and the path to the IPS repository.
  B. Set up a IP address on the AI install server.
  D. DHCP must be available on the network for the Install server and the clients, but the install server does not need to be the DHCP server.
  F. Download the text install image into the IPS repository.
  G. Install the AI installation tools.
  I. Create the AI install service. Specify the path to the AI network boot image ISO file and the path to the IPS repository.

  ---

  B: Configure the AI install server to use a static IP address and default route.

  D: The create-service command can set up DHCP on the AI install server. If you want to set up a separate DHCP server or configure an existing DHCP server for use with AI. The DHCP server must be able to provide DNS information to the

  systems to be installed.

  E: An automated installation of a client over the network consists of the following high-level steps:

  1. The client system boots over the network and gets its network configuration and the location of the install server from the DHCP server.

  2. The install server provides a boot image to the client.

  3. Characteristics of the client determine which installation instructions and which system configuration instructions are used to install the client.

  4. The Oracle Solaris 11 OS is installed on the client, pulling packages from the package repository specified by the installation instructions in the AI install service.

  G: Install the AI tool set.

  Use the installadm create-service command to create an AI install service. Give the service a meaningful name, and specify the path where you want the service created. Specify the source of the network boot image (net image) package or

  ISO file.

  installadm create-service [-n svcname]

  [-s FMRI_or_ISO] [-d imagepath]

  -d imagepath

  The imagepath is the location of the new install service. The install-image/solaris-auto- install package is installed to this location, or the specified ISO file is expanded at this location.

  Reference: Installing Oracle Solaris 11 Systems, Create an AI Install Service

• Question 96:

  Select the two statements that correctly describe the operation of NWAM.

  A. If a location is explicitly enabled, it remains active until explicitly changed.
  B. Wireless security keys can be configured by using the nwammgr command.
  C. NWAM stores profile information in /etc/ipadm/ipadm.conf and /etc/dladm/datalink.conf.
  D. Multiple locations may be automatically activated in systems with multiple network interface cards.
  E. Interface NCU Properties "float" and are automatically attached to the highest priority Link NCU Property.
  F. If the DefaultFixed NCP is enabled, persistent configuration, stored in /etc/ipadm.conf and /etc/dladm/datalink.conf is used.
  A. If a location is explicitly enabled, it remains active until explicitly changed.
  D. Multiple locations may be automatically activated in systems with multiple network interface cards.

  ---

  A: Conditional and system locations can be manually activated, which means that the location remains active until explicitly disabled.

  D: A location comprises certain elements of a network configuration, for example a name service and firewall settings, that are applied together, when required. You can create multiple locations for various uses. For example, one location can be used when you are connected at the office by using the company intranet. Another location can be used at home when you are connected to the public Internet by using a wireless access point. Locations can be activated manually or automatically, according to environmental conditions, such as the IP address that is obtained by a network connection.

  

  Reference: Oracle Solaris Administration: Network Interfaces and NetworkVirtualization, Activating and Deactivating Profiles

  Reference: Oracle Solaris Administration: Network Interfaces and NetworkVirtualization,Creating and Managing Locations

• Question 97:

  After installing the OS, you boot the system and notice that the syslogd daemon is not accepting messages from remote systems.

  Which two options should you select to modify the syslogd daemon configuration so that it accepts syslog messages from remote systems? (Choose two.)

  A. svccfg -ssvc/system/system-log setprop start/exec="syslogd -t" Restart the syslogd daemon
  B. Set the following parameter in the /etc/syslogd.conf file: LOG_FROM_REMOTE=YES Restart the syslogd daemon
  C. svcadm enable svc:/system/system-log/config/log_from_remote Restart the syslogd daemon.
  D. svccfg -s svc /system/system-loq setprop config/log_from_remote=true Restart the syslogd daemon.
  E. Set the following parameter in the /etc/default/syslogd file: LOG_FROM_REMOTE=YES Restart the syslogd daemon
  D. svccfg -s svc /system/system-loq setprop config/log_from_remote=true Restart the syslogd daemon.
  E. Set the following parameter in the /etc/default/syslogd file: LOG_FROM_REMOTE=YES Restart the syslogd daemon

• Question 98:

  You created a new zpool. Now you need to migrate the existing ZFS file system from pool1/prod to pool2/prod.

  You have these requirements:

  1.

  Users must have access to the data during the migration, so you cannot shutdown the file system while the migration takes place.

  2.

  Because you want to copy the data as quickly as possible, you need to increase the server resources devoted to the ZFS migration.

  Which method would you use to modify the ZFS shadow migration daemon defaults to increase the concurrency and overall speed of migration?

  A. Svccfg - s filesystem/shadowd:default setprop config_params/shadow_threads=integer: 16 end svcadm refresh filesystem/shadowd: default
  B. Specify the -b option with the zfs create command and increase the value of
  C. Use the -o -volblocksize=option with the zfs create command and increase the value of the default .
  D. Svccfg -s filesystem/zfs: default setprop config_params/shadow_threads = integer: 16 end svcadm refresh filesystem/zfs:default
  A. Svccfg - s filesystem/shadowd:default setprop config_params/shadow_threads=integer: 16 end svcadm refresh filesystem/shadowd: default

  ---

  shadowd is a daemon that provides background worker threads to migrate data for a shadow migration. A shadow migration gradually moves data from a source file system into a new "shadow" file system. Users can access and change their

  data within the shadow file system while migration is occurring.

  The shadowd service is managed by the service management facility, smf(5). Administrative actions on this service, such as enabling, disabling, or requesting restart, can be performed using svcadm(1M). The service's status can be queried

  using the svcs(1) command.

  The svccfg(1M) command can be used to manage the following parameter related to shadowd:

  config_params/shadow_threads

  Note: Oracle Solaris 11: In this release, you can migrate data from an old file system to a new file system while simultaneously allowing access and modification of the new file system during the migration process.

  Setting the shadow property on a new ZFS file system triggers the migration of the older data. The shadow property can be set to migrate data from the local system or a remote system with either of the following values:

  file:///path

  nfs://host:path

  Reference: man shadowd

• Question 99:

  Review the zonestat command:

  zonestate - q physical - memory -R high -z -p -p "zones" 10 24h 60m

  Select the option that correctly describes the information that is displayed by this command.

  A. It is a sample of dbzone's physical memory usage taken every hour over a 24-hour period. Only the top 10 samplings of peak memory usage are displayed. All other utilization data is eliminated.
  B. It is a sample of dbzone's CPU, virtual memory, and networking utilization. Physical memory is executed from the report. The sampling is taken every 10 minutes over a 24-hour period and peak utilization id displayed each hour.
  C. It is a sample of dbzone's CPU, virtual memory, and networking utilization. Physical memory is executed from the report. The sampling is taken every 10 minutes over a 24-hour period and displayed each hour.
  D. It is a sample of dbzone's physical memory usage taken every 10 seconds and 24-hour period. Only peak virtual memory usage and CPU utilization are displayed each hour. All other Utilization data is eliminated.
  E. It is a sample of dbzone's physical memory usage taken every 10 seconds and 24-hour period. Only peak memory usage is displayed each hour. All other utilization data is eliminated.
  D. It is a sample of dbzone's physical memory usage taken every 10 seconds and 24-hour period. Only peak virtual memory usage and CPU utilization are displayed each hour. All other Utilization data is eliminated.

  ---

  *

  (Not A, B, C): interval (here 10 seconds): Specifies the length in seconds to pause between each interval report.

  *

  duration (here 24 h)

  * -R report[,report] (here high)

  Print a summary report.

  high Print a summary report detailing the highest usage of each resource and zone during any interval of the zonestat utility invocation.

  Note: The zonestat utility reports on the cpu, memory, and resource control utilization of the currently running zones. Each zone's utilization is reported both as a percentage of system resources and the zone's configured limits.

  The zonestat utility prints a series of interval reports at the specified interval. It optionally also prints one or more summary reports at a specified interval. The default output is a summary of cpu, physical, and virtual memory utilization. The -r option can be used to choose detailed output for specific resources.

• Question 100:

  The resource control in your zone is:

  rcll

  name: zone.cpu-shares

  value: (pnv=phvJleged,limit=20,aclion=none)

  When you boot the zone, this message is displayed:

  WARNING: The zone.cpu-shares rctl is set but FSS is not the default scheduling class for this zone. FSS will be used for processes in the zone but to get the full benefit of FSS, it should be the default scheduling class. Which option will resolve this issue?

  A. in the global zone, run this command to change the process scheduler for the global zone dispadmin -d FSS
  B. in the non-global zone, run this command to change the process scheduler for this specific zone: dispadmin -d FSS
  C. Change the zone resource control to: value: (priv=privileged,limit=20,action=none,default)
  D. Use svccfg to modify the general/scheduler property in the svc:/system/zones:default service: svccfg -s system/zones:default editprop general/scheduler=FSS
  D. Use svccfg to modify the general/scheduler property in the svc:/system/zones:default service: svccfg -s system/zones:default editprop general/scheduler=FSS