Oracle 1Z0-881 Online Practice Questions and Exam Preparation

Oracle 1Z0-881 Online Questions & Answers

• Question 21:

  Which two message digest algorithms are shipped with Solaris 10, unmodified? (Choose two.)

  A. 3des_mac
  B. aes_hmac
  C. md5_hmac
  D. sha1_hmac
  E. sha256_mac
  C. md5_hmac
  D. sha1_hmac

• Question 22:

  Which two are concerned with security threats? (Choose two.)

  A. integrity
  B. scalability
  C. performance
  D. confidentiality
  A. integrity
  D. confidentiality

• Question 23:

  Which command is used to configure auditing to track all arguments to an executed command?

  A. audit -c ex +argv
  B. audit -setpolicy -c ex
  C. auditconfig -setpolicy +cnt
  D. auditconfig -setpolicy +argv
  D. auditconfig -setpolicy +argv

• Question 24:

  During the installation of your database server db, you disabled telnet access to it by running inetadm -d telnet, because your company security policy prohibits unencrypted access to the systems. You also added a default deny access policy: # cat /etc/hosts.deny ALL: ALL Now a legacy application running on the legacy server needs access to the db server, using telnet, and you have been asked to implement the changes. Which three steps do you have to take to enable telnet on db and restrict access to it, so that only traffic from legacy is allowed? (Choose three.)

  A. inetadm -e telnet
  B. svcadm enable telnet
  C. inetadm -M tcp_wrapper=TRUE
  D. inetadm -m telnet tcp_wrapper=TRUE
  E. inetadm -m telnet tcp_wrapper=legacy
  F. Add in.telnetd:legacy to /etc/hosts.deny.
  G. Add in.telnetd: legacy to /etc/hosts.allow.
  H. svcprop -s telnet setprop inetd/tcp_wrappers=TRUE
  A. inetadm -e telnet
  D. inetadm -m telnet tcp_wrapper=TRUE
  G. Add in.telnetd: legacy to /etc/hosts.allow.

• Question 25:

  Packet filters and firewalls are an important component of any defense-in-depth security strategy. Which two types of threats can IP Filter be deployed as an effective countermeasure against? (Choose two.)

  A. a Christmas Tree scan
  B. an attempt to log in to a system using SSH by an unauthorized user
  C. an attempt to exploit a SQL injection vulnerability in a web storefront application
  D. an attempt to exploit a buffer overflow vulnerability in rpcbind, originating from a host on an authorized network
  E. an attempt to exploit a buffer overflow vulnerability in rpcbind, originating from a host on an unauthorized network
  A. a Christmas Tree scan
  E. an attempt to exploit a buffer overflow vulnerability in rpcbind, originating from a host on an unauthorized network

• Question 26:

  In which Solaris OS subsystem is User Rights Management implemented?

  A. Process Privileges
  B. Mandatory Access Control
  C. Service Management Facility
  D. Discretionary Access Control
  E. Role Based Access Control (RBAC)
  E. Role Based Access Control (RBAC)

• Question 27:

  The security policy of your organization specifies that systems have to be hardened. In which case do systems have to be re-hardened?

  A. after auditing
  B. after a reboot
  C. after patching
  D. after a backup
  C. after patching

• Question 28:

  An administrator has applied patch 120543-02 to a server. Unfortunately, this patch is causing compatibility problems with one of the core applications running on that server. The patch needs to be backed out to solve the application problems. Which command performs the uninstallation of this patch?

  A. pkgrm 120543-02
  B. patchadm -d 120543-02
  C. patchremove 120543-02
  D. smpatch remove -i 120543-02
  E. rm -rf /var/sadm/patch/120543-02
  D. smpatch remove -i 120543-02

• Question 29:

  Your company has implemented a policy that states that accounts should become unavailable if they have not been used in 21 days. How is account inactivity calculated in Solaris if no naming service is used?

  A. an entry in the /var/adm/lastlog file
  B. the last user entry in the /var/adm/wtmpx file
  C. the password timestamp in the /etc/shadow file
  D. the number of days since the user's last password change
  A. an entry in the /var/adm/lastlog file

• Question 30:

  Click the Task button.

  Place each Kerberos concept next to the correct definition.

  Drag and drop question. Drag the items to the proper locations.

  Select and Place: