Oracle 1Z0-881 Online Practice Questions and Exam Preparation

Oracle 1Z0-881 Online Questions & Answers

• Question 11:

  An administrator is required to minimize an installed Solaris system. Which command is used to query which packages are installed?

  A. pkgrm
  B. ps -ef
  C. pkgadm
  D. pkginfo
  E. svcs -xv
  D. pkginfo

• Question 12:

  You have been asked to grant the user ennovy, a member of the staff group, read and write access to the file /app/notes which has the following properties: ls -l /app/notes -rw-rw---- 1 root app 0 Jun 6 15:11 /app/notes Which options will NOT grant the user the ability to read and write the file?

  A. usermod -G app ennovy
  B. setfacl -m user:ennovy:rw- /app/notes
  C. setfacl -m group:staff:rw- /app/notes
  D. usermod -K defaultpriv=basic,file_dac_read,file_dac_write ennovy
  D. usermod -K defaultpriv=basic,file_dac_read,file_dac_write ennovy

• Question 13:

  After returning from training, the security administrator is getting asked by his coworkers about the features of Solaris auditing. He starts with some basic information. Which three statements are correct? (Choose three.)

  A. Auditing is a new feature of Solaris 10.
  B. Auditing can be configured for each zone.
  C. Auditing can be configured for an individual user.
  D. Auditing can be configured for each individual file.
  E. Auditing can be used to record logins and logouts.
  B. Auditing can be configured for each zone.
  C. Auditing can be configured for an individual user.
  E. Auditing can be used to record logins and logouts.

• Question 14:

  The Solaris 10 cryptographic framework provides user-level commands to encrypt files. A combination of commands is reported below: # tar cvf- /data | encrypt -a arcfour -k /tmp/key -o /tmp/backup Which two statements are true? (Choose two.)

  A. The key can NOT be a file.
  B. The backup will be an encrypted file.
  C. arcfour is NOT a valid encryption algorithm.
  D. The tar command invocation is NOT correct.
  E. The /data directory is backed up and encrypted.
  B. The backup will be an encrypted file.
  E. The /data directory is backed up and encrypted.

• Question 15:

  You have been asked to grant the user ennovy, a member of the staff group, readand write access to the file /app/notes which has the following properties: ls -l /app/notes -rw-rw---- 1 root app 0 Jun 6 15:11 /app/notes Which options will NOT grant the user the ability to read and write the file?

  A. usermod -G app ennovy
  B. setfacl -m user:ennovy:rw- /app/notes
  C. setfacl -m group:staff:rw- /app/notes
  D. usermod -K defaultpriv=basic,file_dac_read,file_dac_write ennovy
  D. usermod -K defaultpriv=basic,file_dac_read,file_dac_write ennovy

• Question 16:

  A system administrator is new to the Solaris cryptographic framework. During minimization and hardening, the system administrator discovered a running /usr/lib/crypto/kcfd and disabled this daemon. To verify the integrity of a Solaris binary, the system administrator is comparing the MD5 checksum of a binary with the information from the Solaris Fingerprint Database at SunSolve. To get the local checksum, he is using the command digest. What will happen when executing this command?

  A. The command will fail with an error.
  B. The command will run as usual and provide the MD5 sum.
  C. The command will run but won't be able to use any installed crypto accelerator hardware (if installed).
  D. The command will run slower because the kernel function can't be accessed, and the userland implementation (libmd5.so.1) will be used.
  A. The command will fail with an error.

• Question 17:

  A user started the ssh-agent followed by the ssh-add command. Afterwards the user connects to a remote system by using the ssh command. What will this ssh command do?

  A. It requires the user to enter their pass-phrase.
  B. It generates new keys from the user's pass-phrase.
  C. It allows the user to authenticate through the GSS-API.
  D. It authenticates without asking for the user's pass-phrase.
  D. It authenticates without asking for the user's pass-phrase.

• Question 18:

  A security administrator creates a directory called prevoy with the following access control policy:

  $ getfacl prevoy # file: prevoy # owner:

  secadm # group: secadm user::rwx group::r-x #effective:r-x mask:r-x other:r-x default:user::r-- default:user:

  sysadm:rw- default:group::r-- default:group:sysadm:rw- default:mask:rwx default:other:--- Into this directory, the security administrator creates a file called secrets. The ls command reports the following for the prevoy directory and secrets file: $ ls -ld . secrets drwxr-xr-x+ 2 secadm secadm 512 Jun 6 16:38 . -r--r-----+ 1 secadm secadm

  0 Jun 6 16:38 secrets

  Which two actions can be successfully taken by the sysadm role? (Choose two.)

  A. The sysadm role can read the secrets file.
  B. The sysadm role can write to the secrets file.
  C. The sysadm role can remove the secrets file.
  D. The sysadm role can create new files under the prevoy directory.
  E. The sysadm role can change the Access Control Lists of the prevoy directory.
  A. The sysadm role can read the secrets file.
  B. The sysadm role can write to the secrets file.

• Question 19:

  You are configuring a new system to be used as an intranet web server. After you have installed the minimal amount of packages and patched the system, you added the appropriate web server packages (SUNWapch2r and SUNWapch2u). By default, the web server daemon will be started using UID webservd and the basic privilege set. To comply with the company's policy of least privilege, you need to minimize the privileges that the web server will have. What will you modify to specify the privileges that the web service will run with?

  A. the PRIV_DEFAULT setting in /etc/security/policy.conf
  B. the defaultpriv setting of webserverd in /etc/user_attr
  C. the privileges property of the web service in the SMF repository
  D. the privs property of the web service in /etc/security/exec_attr
  C. the privileges property of the web service in the SMF repository

• Question 20:

  Which IPsec mechanism provides confidentiality for network traffic?

  A. AH
  B. IKE
  C. ESP
  D. SKIP
  C. ESP