Oracle 1Z0-881 Online Practice Questions and Exam Preparation

Oracle 1Z0-881 Online Questions & Answers

• Question 1:

  Your organization wants to deploy a third party network monitoring tool. A requirement for deploying this tool is that it runs with as few privileges as possible. The tool needs access to /dev/ip which is listed as: crw-rw-rw- 1 root sys 3, 0 Jun 5

  09:11

  /dev/ip When the tool is run as the unprivileged user monitor, it fails to open /dev/ip. How do you find out what privileges are needed?

  A. Run the tool as root.
  B. Look at /dev/loginperm.
  C. Look at the device policy for /dev/ip.
  D. Look at monitor's authorizations with auths monitor.
  C. Look at the device policy for /dev/ip.

• Question 2:

  Click the Exhibit button.

  

  One step in the hardening process is to examine the user accounts and determine what steps need to be taken to tighten access to the system. As part of this process, an administrator executes the command passwd -sa. Which three statements are true about the configured accounts? (Choose three.)

  A. User uucp can run cron jobs.
  B. User uucp can NOT run cron jobs.
  C. User charlie is NOT in production.
  D. User charlie has no password set.
  E. User webservd can run cron jobs.
  F. User webservd can NOT run cronjobs.
  A. User uucp can run cron jobs.
  D. User charlie has no password set.
  F. User webservd can NOT run cronjobs.

• Question 3:

  A company has produced several inhouse applications that have to deal with authentication using passwords. The Solaris systems have been reconfigured to use the password history checking option. What is the impact of this change for their applications?

  A. All applications automatically benefit from the new password history checking.
  B. Only privilege aware applications will benefit from the password history checking.
  C. Every application has to be changed to call the new functions for password history checking.
  D. Applications which use the PAM framework will automatically use password history checking.
  D. Applications which use the PAM framework will automatically use password history checking.

• Question 4:

  A security administrator creates a directory called prevoy with the following access control policy: $ getfacl prevoy # file: prevoy # owner:

  secadm # group: secadm user::rwx group::r-x #effective:r-x mask:r-x other:r-x default:user::r-- default:user:

  sysadm:rw- default:group::r-- default:group:sysadm:rw- default:mask:rwx default:other:--- Into this directory, the security administrator creates a file called secrets. The ls command reports the following for the prevoy directory and secrets file: $ ls -ld . secrets drwxr-xr-x+ 2 secadm secadm 512 Jun 6 16:38 . -r--r-----+ 1 secadm secadm 0 Jun 6 16:38 secrets

  Which two actions can be successfully taken by the sysadm role? (Choose two.)

  A. The sysadm role can read the secrets file.
  B. The sysadm role can write to the secrets file.
  C. The sysadm role can remove the secrets file.
  D. The sysadm role can create new files under the prevoy directory.
  E. The sysadm role can change the Access Control Lists of the prevoy directory.
  A. The sysadm role can read the secrets file.
  B. The sysadm role can write to the secrets file.

• Question 5:

  An administrator has been tasked with the installation of 20 systems. The systems will be identical and are located both on the local network and on remote networks, although all of the hardware is network accessible. Which installation method is best suited for this task?

  A. a WAN Boot installation
  B. a DVD interactive installation
  C. a JumpStart interactive installation
  D. cloning hard drives and shipping them
  A. a WAN Boot installation

• Question 6:

  A security administrator has been asked to construct a Solaris Security Toolkit security profile (that is, driver) to enable Solaris Auditing. If the security administrator starts with the secure.driver profile, which Finish script must be added to enable Solaris Auditing?

  A. enable-bsm.fin
  B. install-bsm.fin
  C. enable-auditing.fin
  D. install-auditing.fin
  A. enable-bsm.fin

• Question 7:

  The Solaris 10 cryptographic framework provides user-level commands to encrypt files. A combination of commands is reported below: # tar cvf - /data | encrypt -a arcfour - k /tmp/key -o /tmp/backup Which two statements are true? (Choose two.)

  A. The key can NOT be a file.
  B. The backup will be an encrypted file.
  C. arcfour is NOT a valid encryption algorithm.
  D. The tar command invocation is NOT correct.
  E. The /data directory is backed up and encrypted.
  B. The backup will be an encrypted file.
  E. The /data directory is backed up and encrypted.

• Question 8:

  Given: booting kernel Which feature of Solaris has generated the record?

  A. Solaris Auditing
  B. Solaris Boot Manager
  C. Solaris syslog daemon
  D. Service Management Facility
  E. Basic Audit and Report Tool (BART)
  A. Solaris Auditing

• Question 9:

  Which two tasks can you perform using the Audit facility? (Choose two.)

  A. generate an overview of CPU usage by users
  B. generate an overview of disk space occupied by a particular user
  C. generate an overview of which users recently changed their password
  D. generate an overview of the network bandwith in use by a particular user
  E. generate an overview of all the applications executed by a particular user
  C. generate an overview of which users recently changed their password
  E. generate an overview of all the applications executed by a particular user

• Question 10:

  An application that you are installing needs to be able to run the snoop command, which normally requires root access. Which two Solaris features could you use to allow this application to run without giving it full root access to your system? (Choose two.)

  A. Solaris Zones
  B. Kerberos-enabled snoop
  C. Trusted Extensions snoop
  D. Process Rights Management
  E. Role Based Access Control (RBAC)
  D. Process Rights Management
  E. Role Based Access Control (RBAC)