Oracle 1Z0-881 Online Practice Questions and Exam Preparation

Oracle 1Z0-881 Online Questions & Answers

• Question 81:

  The security administrator has created a Basic Audit and Report Tool (BART) control manifest for the /etc directory. A test manifest is created about one hour later, and the two manifests are compared. The administrator checks all attributes for the files in /etc. Which event will NOT be reported by comparing the two manifests with BART?

  A. A file link was removed.
  B. A file was added to the directory.
  C. Permissions on a file were changed.
  D. Permissions on a file were changed and then restored.
  E. A file was examined using vi, edited, restored to original, and saved.
  D. Permissions on a file were changed and then restored.

• Question 82:

  For security reasons, one of the services your department provides has to be run in a separate zone. Which three of the zone's properties can differ from the global zone? (Choose three.)

  A. the zone's IP address
  B. the zone's system time
  C. the zone's domain name
  D. the zone's root password
  E. the zone's kernel patch level
  A. the zone's IP address
  C. the zone's domain name
  D. the zone's root password

• Question 83:

  A security administrator has a requirement to deploy the Solaris Security Toolkit onto all Solaris servers in the department. In this environment, there are a variety of platforms and operating system versions deployed. Onto which two platforms and operating system combinations can the Solaris Security Toolkit be deployed in a supported configuration? (Choose two.)

  A. x86, Solaris 2.4
  B. x64, Solaris 9
  C. x86, Solaris 10
  D. SPARC, Solaris 2.6
  E. SPARC, Solaris 8
  C. x86, Solaris 10
  E. SPARC, Solaris 8

• Question 84:

  Which three are useful tools to monitor the integrity of a system? (Choose three.)

  A. bart
  B. logadm
  C. elfsign
  D. cryptoadm
  E. Solaris Fingerprint Database
  A. bart
  C. elfsign
  E. Solaris Fingerprint Database

• Question 85:

  Which action can a system administrator with the solaris.smf.modify.sendmail authorization execute?

  A. svcadm enable sendmail
  B. svcadm refresh sendmail
  C. svcadm disable sendmail
  D. svccfg -s sendmail listprop
  D. svccfg -s sendmail listprop

• Question 86:

  The /etc/default/passwd file contains a number of configuration parameters that can be used to constrain the character composition of user passwords. What is one of the dangers of having password composition too tightly constrained?

  A. Password complexity rules apply only to the English alphabet.
  B. The entropy of the resulting password strings will be very high.
  C. Duplication of encrypted user password strings is much more likely.
  D. Limited password value possibilities can simplify brute force attacks.
  E. Passwords are harder to compute when using many character classes.
  D. Limited password value possibilities can simplify brute force attacks.

• Question 87:

  A user needs to be able to mount the file system located on a USB memory stick on a workstation. How can you allow the user to mount and unmount this file system when required?

  A. Give the user write access to /etc/vfstab.
  B. Give the user write access to /etc/mnttab.
  C. Assign the user the sys_mount privilege for the file system.
  D. Enable and configure the automount daemon (automountd).
  E. Enable and configure the volume management daemon (vold).
  E. Enable and configure the volume management daemon (vold).

• Question 88:

  An NFSv4 client has a user jupiter from domain example.com. The NFS server is in the ficticious.com domain and knows the user as jupiter as well. How would the server treat requests made by the client?

  A. The server accepts the requests by the client as jupiter.
  B. The server rejects a subset of the requests made by the client.
  C. The server would reject all remote procedure call (RPC) requests.
  D. The server would map the user to nobody and accepts its requests.
  D. The server would map the user to nobody and accepts its requests.

• Question 89:

  The Key Distribution Center (KDC) is a central part of the Kerberos authentication system. How should the system running the KDC be configured?

  A. It should be a hardened, minimized system.
  B. It should be a hardened, non-networked system.
  C. The KDC implementation employs cryptography and can therefore run securely on an ordinary multi-user system.
  D. For improved security, users must log in to the KDC before authenticating themselves, so it must be a multiuser system.
  A. It should be a hardened, minimized system.

• Question 90:

  When configuring the Internet Key Exchange (IKE) daemon, which two exchanges can system administrators choose to do? (Choose two.)

  A. shared secret keys
  B. public keying material
  C. public key certiticates
  D. private key certificates
  E. shared key certificates
  A. shared secret keys
  C. public key certiticates