Oracle 1Z0-881 Online Practice Questions and Exam Preparation

Oracle 1Z0-881 Online Questions & Answers

• Question 211:

  The Solaris 10 cryptographic framework provides user-level commands to encrypt files. A combination of commands is reported below: # tar cvf - /data | encrypt -a arcfour -k /tmp/key -o /tmp/backup Which two statements are true? (Choose two.)

  A. The key can NOT be a file.
  B. The backup will be an encrypted file.
  C. arcfour is NOT a valid encryption algorithm.
  D. The tar command invocation is NOT correct.
  E. The /data directory is backed up and encrypted.
  B. The backup will be an encrypted file.
  E. The /data directory is backed up and encrypted.

• Question 212:

  Click the Exhibit button.

  

  What is the significance of the output generated by the jass-check-sum command?

  A. The two files were deleted since the last Solaris Security Toolkit run.
  B. The two files were created since the last Solaris Security Toolkit run.
  C. The two files were modified since the last Solaris Security Toolkit run.
  D. The two files were archived since the last Solaris Security Toolkit run.
  C. The two files were modified since the last Solaris Security Toolkit run.

• Question 213:

  Which three are examples of network security mechanisms? (Choose three.)

  A. IPsec
  B. syslog
  C. Kerberos
  D. TCP Wrappers
  E. Network File System
  F. Basic Security Module
  G. Role Based Access Control (RBAC)
  A. IPsec
  C. Kerberos
  D. TCP Wrappers

• Question 214:

  You want to know when, by whom, and how privileges are used on one of your systems. How can you get that information?

  A. by enabling Solaris Auditing
  B. by using the ppriv command
  C. by creating the file /etc/priv_debug
  D. by adding an audit.debug entry in /etc/syslog.conf
  A. by enabling Solaris Auditing

• Question 215:

  A web server administrator must configure an Apache 2 web server to start as the user webservd. The web server administrator has been assigned the "Service Operator" rights profile. While attempting to set the SMF service property start/ user, the web server administrator receives the following error message:

  $ /usr/sbin/svccfg -s svc:/network/http:apache2 svc:/network/http:apache2> setprop start/user = astring:

  webservd Permission Denied.

  Why does this error occur?

  A. The Apache 2 web server must be started only as root.
  B. Only the superuser is permitted to change SMF property values.
  C. The administrator needs the solaris.smf.manage authorization.
  D. The start/user property does NOT exist for the Apache 2 service.
  C. The administrator needs the solaris.smf.manage authorization.

• Question 216:

  During a recent security audit, it was noted that a number of users within an organization regularly share their password details with other users, even though this is specifically forbidden in the Security Policy. Which step can be taken to reduce the incidence of password sharing?

  A. configure PAM to disable sharing of accounts
  B. enable strict password enforcement using Kerberos
  C. migrate all authentication to an LDAP server with SASL
  D. educate users that sharing passwords is against policy
  E. enable Solaris auditing to audit the lo (login, logout) class
  D. educate users that sharing passwords is against policy

• Question 217:

  Which describes the capabilities of the crypt command?

  A. It uses a weaker encryption algorithm than DES.
  B. It uses the DES encryption algorithm, which uses a 64-bit key.
  C. It uses the AES encryption algorithm, which uses a 128-bit key.
  D. It uses the 3DES encryption algorithm, which uses a 168-bit key.
  A. It uses a weaker encryption algorithm than DES.

• Question 218:

  Which IPsec mechanism provides confidentiality for network traffic?

  A. AH
  B. IKE
  C. ESP
  D. SKIP
  C. ESP

• Question 219:

  Which statement concerning the output of a Solaris Security Toolkit run is true?

  A. Output can be sent to the terminal, sent to the syslog facility, and sent to a log file.
  B. Output can be sent to the terminal, sent as an email message, and sent to a log file.
  C. Output can be sent to the terminal, sent to a log file, and sent as a system event.
  D. Output can be sent to the terminal, sent as an SNMP trap, and sent to the syslog facility.
  E. Output can be sent as an email message, sent to a log file, and sent to Solaris auditing.
  B. Output can be sent to the terminal, sent as an email message, and sent to a log file.

• Question 220:

  Which is a security concern when using IPsec encrypted tunnels?

  A. data may be encrypted twice
  B. attacker's actions may be concealed
  C. incompatible IPsec vendor applications
  D. compatibility problems with client-side applications
  B. attacker's actions may be concealed