NEW QUESTION 1
You have already generated a 256-bit AES raw key and named the keystore file /mykey. You need to use the key to create an encrypted file system.
Which command should you use to create a ZFS encrypted file system named pool1/encrypt using the /mykey keystore?

• A. zfs create - o encryption = /mykey pool1/encrypt
• B. zfs create - o encryption = 256-ccm - o keysource = raw, file : ///my key pool1/encrypt
• C. zfs create - o encryption = AES keysource = /mykey pool1/encrypt
• D. zfs create - o encryption = on keystore = /mykey pool1/encrypt

Answer: B

Explanation: Example: Encrypting a ZFS File System by Using a Raw Key
In the following example, an aes-256-ccm encryption key is generated by using the pktool command and is written to a file, /cindykey.file.
# pktool genkey keystore=file outkey=/cindykey.file keytype=aes keylen=256
Then, the /cindykey.file is specified when the tank/home/cindy file system is created.
# zfs create -o encryption=aes-256-ccm -o keysource=raw, file:///cindykey.file tank/home/cindys

NEW QUESTION 2
Select the packet type that identifies members of the group and sends information to all the network interfaces in that group.

• A. Unicast
• B. Multicast
• C. Broadcast
• D. Bayesian
• E. Quality of Service Priority

Answer: B

Explanation: IPv6 defines three address types: unicast
Identifies an interface of an individual node.
multicast
Identifies a group of interfaces, usually on different nodes. Packets that are sent to the multicast address go to all members of the multicast group.
anycast
Identifies a group of interfaces, usually on different nodes. Packets that are sent to the anycast address go to the anycast group member node that is physically closest to the sender.

NEW QUESTION 3
You have a ZFS file system named /dbase/oral and you want to guarantee that 10 GB of storage space is available to that dataset for all data, snapshots, and clones.
Which option would you choose?

• A. zfs set refreservation=10g dbase/oral
• B. zfs set quota=10g dbase/oral
• C. zfs set refquota=10g dbase/oral
• D. zfs set reservation=10g dbase/oral

Answer: D

Explanation: A ZFS reservation is an allocation of disk space from the pool that is guaranteed to be available to a dataset. As such, you cannot reserve disk space for a dataset if that space is not currently available in the pool. The total amount of all outstanding, unconsumed reservations cannot exceed the amount of unused disk space in the pool. ZFS reservations can be set and displayed by using the zfs set and zfs get commands. For example:
# zfs set reservation=5G tank/home/bill
# zfs get reservation tank/home/bill NAME PROPERTY VALUE SOURCE
tank/home/bill reservation 5G local

NEW QUESTION 4
Consider the following rule file for use with the Basic Audit Reporting Tool (BART).
CHECK all IGNORE dirmtime
/etc/security
/etc/notices IGNORE contents
/export/home
IGNORE mtime size contents
/var CHECK
You are using BART to detect inappropriate changes to the file system. Identify the two correct statements describing the attributes recorded.

• A. /var/dhcp Attribute: size uid gid mode acl
• B. /etc/hosts Attributes: size uid gid mode acl intime dest
• C. /var/spool/mqueue Attribute: size uid gid mode acl dirmtime
• D. /etc/security/exec_attr Attribute: size uid mode acl mtime devnode
• E. /export/home/kate/.profile Attributes: uid gid mode acl dirmtime
• F. /export/home/rick/.profile Attributes: size uid gid mode acl mtime contents

Answer: DF

Explanation: D: According to line /etc/security F: According to line /export/home
Not E: According to line IGNORE dirmtime
Note: In default mode, the bart compare command, as shown in the following example, checks all the files installed on the system, with the exception of modified directory timestamps (dirmtime):
CHECK all IGNORE dirmtime
Note 2: The Basic Audit Reporting Tool (BART) feature of Oracle Solaris enables you to comprehensively validate systems by performing file-level checks of a system over time. By creating BART manifests, you can easily and reliably gather information about the components of the software stack that is installed on deployed systems.
BART is a useful tool for integrity management on one system or on a network of systems.

NEW QUESTION 5
Which two capabilities are provided by the OpenBoot PROM?

• A. a command to safely shut down the system
• B. hardware testing and initialization
• C. booting from a disk or network
• D. starting the GRUB loader

Answer: BC

Explanation: OpenBoot firmware is executed immediately after you turn on your system. The primary tasks of OpenBoot firmware are to:
* Test and initialize the system hardware (B)
* Determine the hardware configuration
*Boot the operating system from either a mass storage device or from a network (C)
*Provide interactive debugging facilities for testing hardware and software

NEW QUESTION 6
You are going to use the- Automated installer (AI) to install a non global zone named zone1. You have created a custom manifest for the non-global zone and named it zone1manifest
Which command will you use to add this custom manifest to the s11-sparc install service and associate this custom manifest with the non-global zone?

• A. installadm create-profile -n s11-sparc -f /tmp/zone1manifest.xml - c
• B. installadm create-manifest -n s11-sparc -f /tmp/zone1manifest.xml -m
• C. installadm create-client -n s11-sparc -f /tmp/zone1manifest.xml -m zone1manifest -c zonename= “zone1”
• D. installadm create-service - n s11-sparc -f /tmp/zone1manifest.xml -m zone1manifest - c zonename=”zone1”

Answer: B

Explanation: installadm add-manifest
Associates manifests with a specific install service, thus making the manifests available on the network, independently from creating a service. When publishing a non-default manifest, it is required to associate criteria either via criteria entered on the command line (-c) or via a criteria XML file (-C).

NEW QUESTION 7
The following image properties are displayed on your system:

Which two options describe the boot environment policy property that is currently set for this image?

• A. All package operations are performed in a new BE set as active on the next boot.
• B. Do not create a new B
• C. The install, update, uninstall, or revert operation is not performed if a new BE is required.
• D. If a BE is created, do not set it as the active BE on the next boot
• E. A reboot is required for all package operations
• F. A reboot is not required after a package operation.
• G. For package operations that require a reboot, this policy creates a new BE set as active on the next boot.

Answer: DF

Explanation: Image properties described below.
* be-policy
Specifies when a boot environment is created during packaging operations. The following values are allowed:
/ default
Apply the default BE creation policy: create-backup.
/ always-new (D, F)
Require a reboot for all package operations (D) by performing them in a new BE set as active on the next boot (F). A backup BE is not created unless explicitly requested.
This policy is the safest, but is more strict than most sites need since no packages can be added without a reboot.

NEW QUESTION 8
View the Exhibit to inspect the boot environment Information displayed within a non global zone on your system.

Which two options describe the solaris-1 boot environment?

• A. The solaris-1 boot environment is not bootable.
• B. The solaris-1 boot environment is incomplete.
• C. The solaris-1 boot environment was created automatically when the non global zone was created.
• D. The solaris-1 boot environment was created in the non-global zone using the beadm create command.
• E. The solaris-1 boot environment is associated with a non active global zone boot environment.

Answer: AE

Explanation: A: The – of the Active Column indicates that this boot environment is inactive, and hence not bootable.
Note: The values for the Active column are as follows: R – Active on reboot.
N – Active now.
NR – Active now and active on reboot. “-” – Inactive.
“!” – Unbootable boot environments in a non-global zone are represented by an exclamation point.
http://docs.oracle.com/cd/E23824_01/html/E21801/unbootable.html#scrolltoc

NEW QUESTION 9
You need to set up a local package repository to serve 75 client systems. Multiple clients will being the package repository concurrently and you need to ensure that the local repository performs very well under this heavy load, especially during package intensive operations.
Which option would ensure the best performance of the repository during package-
intensive rations by multiple clients?

• A. Set up multipathing on the package repository server to distribute the network load multiple network interfaces.
• B. Deploy a second instance of the package repository server to run as a read writable mirror.
• C. Deploy a second instance of the package repository server to run as a read-only mirror.
• D. Deploy a second instance of the package repository server to run as a clone of the primary repository server.
• E. Deploy a package repository locally on each client.

Answer: A

NEW QUESTION 10
Which modification needs to be made to the Service Management Facility before you publish a new package to the IPS repository?

• A. The pkg.depotd must be disabled.
• B. The pkg/readonly property for the application/pkg/server service must be set to false.
• C. The Pkg/writabie_root property for the application/Pkg/server service must be set to true.
• D. The pkg/image.root property for the application/pkg/server service must be set to the location of the repository.

Answer: D

Explanation: pkg/image_root
(astring) The path to the image whose file information will be used as a cache for file data.

NEW QUESTION 11
You need to install the gzip software package on your system. Which command would you use to find the software package in the configured repository?

• A. pkg search gzip
• B. pkg info gzip
• C. pkg contents gzip
• D. pkginfo gzip
• E. yum list gzip

Answer: A

Explanation: Use the pkg search command to search for packages whose data matches the specified pattern.
Like the pkg contents command, the pkg search command examines the contents of packages. While the pkg contents command returns the contents, the pkg search command returns the names of packages that match the query.

NEW QUESTION 12
A change in your company’s security policy now requires an audit trial of all administrators assuming the sysadm role, capturing:
There are two command necessary to accomplish this change. One is a rolemod command. What is the other?

• A. auditconfig set policy=argv
• B. auditconfig -setpolicy +argv
• C. auditconfig -setflags lo, ex sysadm
• D. auditconfig set flags=lo, ex sysadm

Answer: B

Explanation: Audit Significant Events in Addition to Login/Logout (see step 2 below)
Use this procedure to audit administrative commands, attempts to invade the system, and other significant events as specified by your site security policy.
For all users and roles, add the AUE_PFEXEC audit event to their preselection mask.
# usermod -K audit_flags=lo, ps:no username
# rolemod -K audit_flags=lo, ps:no rolename
# auditconfig -setpolicy +argv
3- Record the environment in which audited commands are executed.
# auditconfig -setpolicy +arge
Note: [-t] -setpolicy [+|-]policy_flag[, policy_flag ...]
Set the kernel audit policy. A policy policy_flag is literal strings that denotes an audit policy. A prefix of + adds the policies specified to the current audit policies. A prefix of - removes the policies specified from the current audit policies. No policies can be set from a local zone unless the perzone policy is first set from the global zone.

NEW QUESTION 13
To inspect network interface net3, you enter the following commands:

What problem do you suspect? Assume the user is authorized and provided the correct password.

• A. The net3 interface hasn't been enabled yet.
• B. The net3 vnic hasn't been created.
• C. The net3/v4 ip object hasn't been configured.
• D. The net3 interface is not attached to a NIC or etherstub.

Answer: C

Explanation: The following command marks the address object net1/v4a up that was previously marked
down.
# ipadm up-addr net1/v4a

NEW QUESTION 14
Your are troubleshooting network throughput on your server.
To confirm that the load balancing among aggregated links is functioning properly, you want to examine the traffic statistics on the links comprising the aggregation.
The correct command is .

• A. dlstat - aggr
• B. dlstat show-aggr
• C. dlstat show-link -r
• D. dlstat show-link -aggr
• E. dlstat show-phys -aggr

Answer: B

Explanation: dlstat show-aggr [-r | -t] [-i interval] [-p] [ -o field[, ...]] [-u R|K|M|G|T|P] [link] Display per-port statistics for an aggregation.

NEW QUESTION 15
Review the zonestat command:
zonestate - q physical - memory -R high -z -p -p “zones” 10 24h 60m
Select the option that correctly describes the information that is displayed by this command.

• A. It is a sample of dbzone’s physical memory usage taken every hour over a 24-hour period.Only the top 10 samplings of peak memory usage are displaye
• B. All other utilization data is eliminated.
• C. It is a sample of dbzone’s CPU, virtual memory, and networking utilization.Physical memory is executed from the report.The sampling is taken every 10 minutes over a 24- hour period and peak utilization id displayed each hour.
• D. It is a sample of dbzone’s CPU, virtual memory, and networking utilization.Physical memory is executed from the report.The sampling is taken every 10 minutes over a 24- hour period and displayed each hour.
• E. It is a sample of dbzone’s physical memory usage taken every 10 seconds and 24-hour period.Only peak virtual memory usage and CPU utilization are displayed each hour.All other Utilization data is eliminated.
• F. It is a sample of dbzone’s physical memory usage taken every 10 seconds and 24-hour period.Only peak memory usage is displayed each hour.All other utilization data is eliminated.

Answer: D

Explanation: * (Not A, B, C): interval (here 10 seconds): Specifies the length in seconds to pause between each interval report.
* duration (here 24 h)
* -R report[, report] (here high) Print a summary report.
High Print a summary report detailing the highest usage of each resource and zone during any interval of the zonestat utility invocation.
Note: The zonestat utility reports on the cpu, memory, and resource control utilization of the currently running zones. Each zone's utilization is reported both as a percentage of system resources and the zone's configured limits.
The zonestat utility prints a series of interval reports at the specified interval. It optionally
also prints one or more summary reports at a specified interval.
The default output is a summary of cpu, physical, and virtual memory utilization. The -r option can be used to choose detailed output for specific resources.

NEW QUESTION 16
What is the output of the following command, if executed using the default shell for the root role account of a standard Live CD Install of Oracle Solaris 11?
echo '$SHELL'

• A. /usr/bin/bash
• B. /usr/bin/ksh
• C. $SHELL
• D. the PID for the current shell

Answer: C

Explanation: Single quotes are most strict. They prevent even variable expansion. Double quotes prevent wildcard expansion but allow variable expansion. For example:
#!/bin/sh echo $SHELL
echo "$SHELL"
echo '$SHELL' This will print:
/usr/bin/bash
/usr/bin/bash
$SHELL