Oracle 1Z0-881 Online Practice Questions and Exam Preparation

Oracle 1Z0-881 Online Questions & Answers

• Question 121:

  The Solaris 10 cryptographic framework provides a set of end user commands. One of these new commands allows the encryption and decryption of a file. In encryption, a file named clear_file with this utility gives this error: # encrypt -a 3des -k 3_des.key -i clear_file -o encrypt_file encrypt: failed to generate a key: CKR_ATTRIBUTE_VALUE_INVALID What is the cause?

  A. The key length in 3_des.key is wrong.
  B. The file clear_file is too big to be encrypted.
  C. The encryption key can NOT be stored in a file.
  D. The 3des algorithm can NOT be used to encrypt a file.
  A. The key length in 3_des.key is wrong.

• Question 122:

  Which of the descriptions is a high-level overview of how Kerberos works?

  A. In a Kerberos environment, a user authenticates once to each service.
  B. In a Kerberos environment, a user authenticates once to a central authority.
  C. In a Kerberos environment, a user needs to type a password for each service.
  D. In a Kerberos environment, a user authenticates once to any service of its choosing and is then preauthenticated for all other services.
  B. In a Kerberos environment, a user authenticates once to a central authority.

• Question 123:

  User saturn runs a program that consumes all of the system's memory while continuously spawning a new program. You decide to terminate all of saturn's programs to put a stop to this. What command should you use?

  A. kill -u saturn
  B. pkill -U saturn
  C. pstop -U saturn
  D. kill `ps -U saturn -o pid`
  B. pkill -U saturn

• Question 124:

  Before a security administrator modifies the default privilege list used for a SMF start or stop method, it is important to first determine which privileges are actually needed by that service. Which three utilities determine what privileges are used by a program or service? (Choose three.)

  A. ppriv
  B. truss
  C. pfexec
  D. dtrace
  E. svcadm
  A. ppriv
  B. truss
  D. dtrace

• Question 125:

  In which Solaris OS subsystem is User Rights Management implemented?

  A. Process Privileges
  B. Mandatory Access Control
  C. Service Management Facility
  D. Discretionary Access Control
  E. Role Based Access Control (RBAC)
  E. Role Based Access Control (RBAC)

• Question 126:

  The security administrator has been tasked to design a minimally installed centralized logging server. The administrator needs to examine the packages included in the Solaris installation clusters to determine which metacluster will be the best starting installation for the planned configuration. In which file on the installation DVD can the adminstratior find the packages associated with each metacluster?

  A. mountpoint /.cdtoc
  B. mountpoint /.install_config
  C. mountpoint /Solaris_10/Product/.clustertoc
  D. mountpoint /Solaris_10/Product/.packagetoc
  C. mountpoint /Solaris_10/Product/.clustertoc

• Question 127:

  Your company is running a DNS test server on the internal network. Access to this server must be blocked by using IP Filter. The administrator prefers that this access control is not obvious to someone trying to contact the server from the outside. Which rule implements the access control but hides the use of IP Filter to the outside?

  A. pass in quick on eri0 from 192.168.0.0/24 to any
  B. block in quick proto udp from any to any port = 53
  C. pass out quick on eri0 proto icmp from 192.168.1.2 to any keep state
  D. block return-icmp(port-unr) in proto udp from any to 192.168.1.2 port = 53
  D. block return-icmp(port-unr) in proto udp from any to 192.168.1.2 port = 53

• Question 128:

  The digital signature of a patch provides an integrity check of the patch. Which is a requirement for signed patches?

  A. The system administrator needs to sign the patch.
  B. All patches need to be signed by Sun Microsystems.
  C. Signed patches need to be downloaded through SSL.
  D. Vendors can sign patches only with approval from Sun Microsystems.
  E. The system administrator can specify which Certification Authorities are trusted for signed patches.
  E. The system administrator can specify which Certification Authorities are trusted for signed patches.

• Question 129:

  What is the minimum requirement to be able to use Solaris zones?

  A. Solaris zones require a SPARC system.
  B. Solaris zones require a network interface.
  C. Solaris zones require the SUNWCuser metacluster.
  D. Solaris zones require the fair share sheduler (FSS).
  E. Solaris zones require at least two CPUs (or two cores).
  C. Solaris zones require the SUNWCuser metacluster.

• Question 130:

  Your employer has acquired a number of systems as a part of an acquisition of another company. You suspect that a number of the systems might have been hacked, so you want to remove any malicious software that might have been installed by the hacker. The systems have not previously had the Solaris Security Toolkit software used on them. Which would remove any software installed by the hacker?

  A. Run Solaris Security Toolkit in audit mode, and remove anything it detects.
  B. Reinstall Solaris on the system, and run Solaris Security Toolkit after installation.
  C. Run Solaris Security Toolkit with the undo option, and then re-run it in normal mode.
  D. Boot the system from CD-ROM and run Solaris Security Toolkit in standalone mode.
  B. Reinstall Solaris on the system, and run Solaris Security Toolkit after installation.