Oracle 1Z0-881 Online Practice Questions and Exam Preparation

Oracle 1Z0-881 Online Questions & Answers

• Question 281:

  After receiving the results from a recent security compliance evaluation, a security administrator was told to ensure that every user has to change their password regularly. After enabling password aging in the /etc/default/passwd file, the

  security administrator finds that existing local users are still not being forced to change their password. What is the reason for this?

  A. Users have disabled password aging for their own accounts.
  B. The password aging capability does NOT apply to local users.
  C. Password aging is made active after a user's next password change.
  D. The /etc/default/passwd file is NOT consulted for password aging.
  E. The /etc/user_attr file has been configured to prevent password aging.
  C. Password aging is made active after a user's next password change.

• Question 282:

  Which two are concerned with security threats? (Choose two.)

  A. integrity
  B. scalability
  C. performance
  D. confidentiality
  A. integrity
  D. confidentiality

• Question 283:

  In which location is the signature for a signed binary found?

  A. the ELF header
  B. a trailer attached to the file
  C. stored in a system database
  D. added to the binary at compile time
  E. created and stored in memory at system boot
  A. the ELF header

• Question 284:

  A security administrator has a requirement to enable password aging on a server. After configuring the maximum age for a user's password, the security administrator forces all of the users to change their passwords at next login. The administrator also configures password history to prevent users from simply reusing their last two passwords. What is wrong with this approach?

  A. Nothing. This approach will work as expected.
  B. Users will now no longer be able to log in to the system.
  C. Users will be able to circumvent the password aging policy.
  D. Users will be able to circumvent the password history policy.
  E. Users will NOT be able to change their password at next login.
  D. Users will be able to circumvent the password history policy.

• Question 285:

  Given: $ ppriv -s I-proc_exec $$ What is the result of this command?

  A. The shell process can no longer execute programs
  B. New commands started by the shell can no longer execute programs.
  C. The command fails because an ordinary user cannot execute this command.
  D. There is no noticible effect because the Inheritable set is NOT used by a process.
  B. New commands started by the shell can no longer execute programs.

• Question 286:

  It is corporate practice to use the Solaris Security Toolkit on all Sun systems. This has been sucessfully done for years, and the administrators are experienced with the tool. Starting with Solaris 10, the company now also uses Solaris zones. Which two statements regarding Solaris Security Toolkit are correct? (Choose two.)

  A. All minimization and hardening is done from the global zone.
  B. The Solaris Security Toolkit should be run in the non-global zone after installation.
  C. Configuration of the global zone does not impact hardening of the non-global zone.
  D. Hardening and auditing with the Solaris Security Toolkit can be done within each individual zone.
  B. The Solaris Security Toolkit should be run in the non-global zone after installation.
  D. Hardening and auditing with the Solaris Security Toolkit can be done within each individual zone.

• Question 287:

  Solaris Auditing supports the selective logging of which two kinds of events? (Choose two.)

  A. file access by selected users
  B. access to selected files by all users
  C. selected users making outbound network connections
  D. password changes which do not meet the system password policy
  A. file access by selected users
  C. selected users making outbound network connections

• Question 288:

  Which three items are the most relevant when trying to prevent resource exhaustion attacks? (Choose three.)

  A. pools
  B. zones
  C. groups
  D. signals
  E. projects
  F. resource controls
  A. pools
  E. projects
  F. resource controls

• Question 289:

  Which two commands are part of Sun Update Connection? (Choose two.)

  A. /usr/bin/pkgadm
  B. /usr/bin/keytool
  C. /usr/sbin/smpatch
  D. /usr/sbin/patchadd
  E. /usr/bin/updatemanager
  C. /usr/sbin/smpatch
  E. /usr/bin/updatemanager

• Question 290:

  What type of condition does Basic Audit and Report Tool (BART) allow you to detect?

  A. unauthorized attempts to log in to a system
  B. when a file has been modified, compared with a known baseline
  C. a dictionary password attack, executed by attempting to log in through SSH
  D. when a user attempts to assume a role which has NOT been assigned to that user
  E. when users have chosen passwords which do NOT comply with system password policy
  B. when a file has been modified, compared with a known baseline