Oracle 1Z0-821 Online Practice Questions and Exam Preparation

Oracle 1Z0-821 Online Questions & Answers

• Question 221:

  Which two capabilities are provided by the OpenBoot PROM?

  A. a command to safely shut down the system
  B. hardware testing and initialization
  C. booting from a disk or network
  D. starting the GRUB loader
  B. hardware testing and initialization
  C. booting from a disk or network

  ---

  OpenBoot firmware is executed immediately after you turn on your system. The primary tasks of OpenBoot firmware are to:

  *

  Test and initialize the system hardware (B)

  *

  Determine the hardware configuration *Boot the operating system from either a mass storage device or from a network (C) *Provide interactive debugging facilities for testing hardware and software

• Question 222:

  You need to migrate a UFS file system named /production_ufs to a ZFS file system named /production_ufs. The /production_ufs file system cannot be taken down or be out of production during the migration, and the current /production_ufs file system must remain active until the /ptoduction_zfs file system is copied and ready.

  Which method allows you to meet both requirements?

  1.

  Copy live data from /production_ufs to /production_zfs while /production_ufs is in use.

  2.

  When the copy is complete, /production_zfs will contain an up-to date copy of /production_ufs

  A. Create a snapshot of the UFS file system. Create the new ZFS file system. Use cpio to copy data from the snapshot to the new ZFS file system.
  B. Create a new Boot Environment. Create the ZFS file system. Use lucreate -m to copy data from the Current UFS file system to the new ZFS file system.
  C. Mirror the existing UFS file system by using SVM.After both submissions are in sync, migrate one of the submissions to a ZFS file System by using Live Upgrade.
  D. Create the new ZFS file system by using zfs create import to import data from the existing UFS file system into the new ZFS file system
  E. Create the new zfs file system by using the zfs create -o shadow.
  E. Create the new zfs file system by using the zfs create -o shadow.

  ---

  Migrating Data With ZFS Shadow Migration

  ZFS shadow migration is a tool you can use to migrate data from an existing file system to a new file system. A shadow file system is created that pulls data from the original source as necessary.

  You can use the shadow migration feature to migrate file systems as follows:

  *

  A local or remote ZFS file system to a target ZFS file system

  *

  A local or remote UFS file system to a target ZFS file system Shadow migration is a process that pulls the data to be migrated:

  *

  Create an empty ZFS file system.

  *

  Set the shadow property on an empty ZFS file system, which is the target (or shadow) file system, to point to the file system to be migrated.

  For example:

  # zfs create -o shadow=nfs://system/export/home/ufsdata users/home/shadow2

  *

  Data from file system to be migrated is copied over to the shadow file system.

• Question 223:

  You have a ZFS file system named /dbase/oral and you want to guarantee that 10 GB of storage space is available to that dataset for all data, snapshots, and clones. Which option would you choose?

  A. zfs set refreservation=10g dbase/oral
  B. zfs set quota=10g dbase/oral
  C. zfs set refquota=10g dbase/oral
  D. zfs set reservation=10g dbase/oral
  D. zfs set reservation=10g dbase/oral

  ---

  A ZFS reservation is an allocation of disk space from the pool that is guaranteed to be available to a dataset. As such, you cannot reserve disk space for a dataset if that space is not currently available in the pool. The total amount of all outstanding, unconsumed reservations cannot exceed the amount of unused disk space in the pool. ZFS reservations can be set and displayed by using the zfs set and zfs get commands. For example:

  # zfs set reservation=5G tank/home/bill # zfs get reservation tank/home/bill NAME PROPERTY VALUE SOURCE tank/home/bill reservation 5G local

• Question 224:

  You have a ticket from a new user on the system, indicating that he cannot log in to his account. The information in the ticket gives you both the username and password. The ticket also shows that the account was set up three days ago.

  As root, you switch users to this account with the following command:

  su ?newuser

  You do not get an error message.

  You then run 1s -1a and see the following files:

  local1.cshrc local1.login local1.profile .bash_history .bashrc .profile

  As root, you grep the /etc/passwd file and the /etc/shadow file for this username, with these results:

  /etc/passwd contains newuser:x:60012:10:/home/newuser:/usr/bin/bash

  /etc/shadow contains newuser:UP: : : : :10: :

  As root, what is your next logical step?

  A. Usermod -f 0
  B. passwd newuser
  C. mkdir /home/newuser
  D. useradd -D
  B. passwd newuser

  ---

  The content of the /etc/shadow document indicates that the newuser account has no password.

  We need to add a password.

  The passwd utility is used to update user's authentication token(s).

  D: Here the user account already exist. There is no need to create it.

  When invoked without the -D option, the useradd command creates a new user account using the values specified on the command line plus the default values from the system. Depending on command line options, the useradd command will update system files and may also create the new user's home directory and copy initial files.

• Question 225:

  Which option displays the result of running the zfs list command?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

  ---

  The zfs list command provides an extensible mechanism for viewing and querying dataset information.

  You can list basic dataset information by using the zfs list command with no options. This command displays the names of all datasets on the system and the values of their used, available, referenced, and mountpoint properties. For more information about these properties, see Introducing ZFS Properties.

  For example:

  # zfs list NAME USED AVAIL REFER MOUNTPOINT pool 476K 16.5G 21K /pool pool/clone 18K 16.5G 18K /pool/clone pool/home 296K 16.5G 19K /pool/home pool/home/marks 277K 16.5G 277K /pool/home/marks pool/home/marks@snap 0 - 277K pool/test 18K 16.5G 18K /test

• Question 226:

  Which three of the components could be used in a ZFS storage pool, but are not recommended configurations?

  A. A file on a UFS file system
  B. A Veritas Volume Manager (VxVM) volume
  C. A LUN In a hardware RAID array
  D. A disk slice from an SMI labeled disk
  E. A Solaris Volume Manager (SVM) volume
  F. An EFI labeled disk
  A. A file on a UFS file system
  B. A Veritas Volume Manager (VxVM) volume
  E. A Solaris Volume Manager (SVM) volume

  ---

  A: ZFS also allows you to use UFS files as virtual devices in your storage pool. This feature is aimed primarily at testing and enabling simple experimentation, not for production use. The reason is that any use of files relies on the underlying file system for consistency. If you create a ZFS pool backed by files on a UFS file system, then you are implicitly relying on UFS to guarantee correctness and synchronous semantics. However, files can be quite useful when you are first trying out ZFS or experimenting with more complicated layouts when not enough physical devices are present. All files must be specified as complete paths and must be at least 64 Mbytes in size.

  B, E: You can construct logical devices for ZFS using volumes presented by software- based volume managers, such as Solaris Volume Manager (SVM) or Veritas Volume Manager (VxVM). However, these configurations are not recommended. While ZFS functions properly on such devices, less-than-optimal performance might be the result.

• Question 227:

  You have been tasked with creating a dedicated virtual network between two local zones within a single system, in order to isolate the network traffic from other zones on that system. To accomplish this, you will create_____.

  A. an ether stub
  B. virtual router
  C. a virtual bridge
  D. a virtual network interface
  E. nothing, because a virtual switch is automatically created when the virtual network interfaces are created
  D. a virtual network interface

  ---

  First create a virtual switch, then create a virtual network interface.

• Question 228:

  A user account must be a member of a primary group, and may also be a member of one or more secondary groups. What is the maximum total number of groups that one user can concurrently belong to?

  A. 15
  B. 16
  C. 17
  D. 63
  E. 64
  F. 65
  G. The number of groups one user can concurrently belong to is unlimited in Solaris 11.
  B. 16

  ---

  Each user belongs to a group that is referred to as the user's primary group. The GID number, located in the user's account entry within the /etc/passwd file, specifies the user's primary group.

  Each user can also belong to up to 15 additional groups, known as secondary groups. In the /etc/group file, you can add users to group entries, thus establishing the user's secondary group affiliations.

  Note (4 PSARC/2009/542):

  his project proposes changing the maximum value for NGROUPS_MAX from 32 to 1024 by changing the definition of NGROUPS_UMAX from 32 to 1024.

  The use for a larger number of groups is described in CR 4088757, particular in the case of Samba servers and ADS clients; the Samba servers map every SID to a Unix group. Users with more than 32 groups SIDs are common. We've seen

  reports varying from "64 is enough", "128 is absolutely enough" and "we've users with more 190 group SIDS).

  NGROUPS_MAX as defined by different Unix versions are as follows (http://www.j3e.de/ngroups.html):

  Linux Kernel >= 2.6.3 65536

  Linux Kernel < 2.6.3 32

  Tru64 / OSF/1 32

  IBM AIX 5.2 64

  IBM AIX 5.3 ... 6.1 128

  OpenBSD, NetBSD, FreeBSD, Darwin (Mac OS X) 16

  Sun Solaris 7, 8, 9, 10 16 (can vary from 0-32)

  HP-UX 20

  IRIX 16 (can vary from 0-32)

  Plan 9 from Bell Labs 32

  Minix 3 0 (Minix-vmd: 16)

  QNX 6.4 8

• Question 229:

  Identify the two security features incorporated in the Oracle Solaris 11 Cryptographic Framework.

  A. Layer 5 IP address encryptions
  B. Internet protocol security
  C. Diffie-Kerberos coaxial key encryption
  D. Signed cryptographic plugins (providers)
  E. Kernel support for signed antivirus plugins
  D. Signed cryptographic plugins (providers)
  E. Kernel support for signed antivirus plugins

  ---

  The framework enables providers of cryptographic services to have their services used by many consumers in the Oracle Solaris operating system. Another name for providers is plugins. The framework allows three types of plugins:

  *

  User-level plugins - Shared objects that provide services by using PKCS #11 libraries, such as pkcs11_softtoken.so.1.

  *

  Kernel-level plugins - Kernel modules that provide implementations of cryptographic algorithms in software, such as AES. Many of the algorithms in the framework are optimized for x86 with the SSE2 instruction set and for SPARC hardware.

  *

  Hardware plugins - Device drivers and their associated hardware accelerators. The Niagara chips, the ncp and n2cp device drivers, are one example. A hardware accelerator offloads expensive cryptographic functions from the operating system. The Sun Crypto Accelerator 6000 board is one example.

• Question 230:

  The su command by default makes an entry into the log file for every su command attempt.

  The following is a single line from the file:

  SU 12/18 23:20 + pts/1 user1-root

  What does the + sign represent?

  A. unsuccessful attempt
  B. successful attempt
  C. The attempt was from a pseudo terminal, and not the console.
  D. The attempt was from a user that is in the adm group, same as root.
  E. Time zone is not set.
  B. successful attempt

  ---

  The sulog file, /var/adm/sulog, is a log containing all attempts (whether successful or not) of the su command. An entry is added to the sulog file every time the su command is executed. The fields in sulog are: date, time, successful (+) or unsuccessful (-), port, user executing the su command, and user being switched to. In the preceding example, all su attempts were successful, except for the attempt on 2/23 at 20:51, when user pete unsuccessfully attempted to su to user root.

  Look for entries where an unauthorized user has used the command inappropriately. The following entry shows a successful (indicated by +) su from user userid to root.

  SU 03/31 12:52 + pts/0 -root