Oracle 1Z0-881 Online Practice Questions and Exam Preparation

Oracle 1Z0-881 Online Questions & Answers

• Question 191:

  After using the Solaris Security Toolkit on a system, some of your users have complained that they are no longer able to connect to the system through telnet. Which option will allow users to connect to the system without impacting security?

  A. Re-enable the telnet service.
  B. Re-enable the telnet service, but force users to use IP Filter.
  C. Leave telnet disabled and suggest that users use SSH instead.
  D. Re-enable the telnet service, but force users to use Kerberos passwords.
  C. Leave telnet disabled and suggest that users use SSH instead.

• Question 192:

  To comply with new security guidelines, your company requires you to implement a new password policy that performs stricter checks on new passwords than those performed by Solaris. Which Solaris subsystem can you consider extending?

  A. Solaris PAM
  B. Solaris /usr/bin/passwd
  C. Solaris User Rights Management
  D. Solaris Cryptographic Framework
  A. Solaris PAM

• Question 193:

  On a system with these settings in audit_control: dir:/var/audit flags:lo,ex,nt naflags:na minfree:20 Which will NOT be a factor in the size of the audit trail generated by the system?

  A. the audit policy settings
  B. the number of active users
  C. the settings in audit_user
  D. the settings in audit_event
  E. the amount of memory in the system
  E. the amount of memory in the system

• Question 194:

  Which two components are part of the Solaris Cryptographic Framework? (Choose two.)

  A. single sign-on capabilities
  B. encryption and decryption
  C. random number generation
  D. Kerberos principle generation
  B. encryption and decryption
  C. random number generation

• Question 195:

  Which item in the list would be specifically required for a VPN compared to a mode without encryption?

  A. Authentication Header (AH)
  B. Internet Key Exchange (IKE)
  C. Encapsulating Security Payload (ESP)
  D. Streams Control Transmission Protocol (SCTP)
  C. Encapsulating Security Payload (ESP)

• Question 196:

  Which prints out all world-writable files?

  A. find / -perm -a=w -print
  B. find / -perm -o=w -print
  C. find / -perm -u=w -print
  D. find / -perm -a=777 -print
  B. find / -perm -o=w -print

• Question 197:

  You have taken over administration of a web server which is connected to the Internet. The server was installed using a minimized installation of Solaris, and has been hardened using the Solaris Security Toolkit. Which statement is correct?

  A. smpatch can be used to apply relevant patches.
  B. Solaris Security Toolkit will apply new patches as required.
  C. Only the kernel patch is required, because it has been minimized.
  D. Regular patching of the system is NOT required, because it has been hardened.
  A. smpatch can be used to apply relevant patches.

• Question 198:

  Which statement is true about applying Solaris patches to zones?

  A. Patches are NOT applicable to sparse root zones.
  B. You have to install a patch in each zone using zlogin.
  C. Non-global zone administrators can install patches themselves.
  D. The global zone administrator can only administer patches in the global zone.
  E. When you add a patch to the global zone, it is by default added to all non-global zones.
  E. When you add a patch to the global zone, it is by default added to all non-global zones.

• Question 199:

  Click the Exhibit button.

  

  What is the significance of the output generated by the jass-check-sum command?

  A. The two files were deleted since the last Solaris Security Toolkit run.
  B. The two files were created since the last Solaris Security Toolkit run.
  C. The two files were modified since the last Solaris Security Toolkit run.
  D. The two files were archived since the last Solaris Security Toolkit run.
  C. The two files were modified since the last Solaris Security Toolkit run.

• Question 200:

  A new security related patch has been released for the Solaris OS. This patch needs to be applied to the system that functions as your web server. The web server is configured to run in a non- global zone. Can you just use patch add to apply the patch to the global zone to update the web server zone?

  A. No, you need to shut down the web server zone first.
  B. Yes, patches will be automatically applied to all zones.
  C. No, you need to apply the patch to the web server zone separately.
  D. Yes, but you must make sure that the web server zone is booted first.
  B. Yes, patches will be automatically applied to all zones.