Certification Tips for 1Z0-879 Exam

8/18/2019 Certification Tips for 1Z0-879 Exam

1/17

How To Deal With The Problem of Preparation of 1Z0-879 Exam

he preparation can be started once after knowing the syllabus of exam. If you start browsing to find a suitable source to prepare

Oracle Oracle Certified Professional, Oracle Solaris 10 System Administrator 1Z0-879 from, you will be bombarded with thousands

f results. It then adds to your hard work to look for the most authentic source from that heap. To save you from this trouble, I will

ell you the source that will give you the most reliable information on the Oracle Solaris 10 System Administrator Certified

rofessional Upgrade Exam exam you have to attempt.

Have Pass4sureTest By Your Side

he website I am talking about is Pass4sureTest and it is the most de pendable source of 1Z0-879 Oracle Solaris 10 System

Administrator Cer tified Professional Upgrade Exam exam preparation material. This is because it has been in association with Oracle

or a long period of time now and is considered as best out there. In addition, Pass4sureTest is one of the forerunners of preparation

movement and has been helping candidates to get through their exams for stretch of time.

Verify Reliability Through Testimonials

You can verify the reliability and relevancy by looking at the long line of testimonials stated by the customers. The Pass4sureTest

as successfully turned a number of customers into certified Oracle professionals. The testimonial section is full of claims by Oracle

Oracle Solaris 10 System Administrator Certified Professional Upgrade Exam professionals that willingly guarantee the reliability of

ass4sureTest.

http://www.pass4suretest.com/http://www.pass4suretest.com/Oracle-exams.htmlhttp://www.pass4suretest.com/http://www.pass4suretest.com/Oracle-exams.htmlhttp://www.pass4suretest.com/http://www.pass4suretest.com/Oracle-exams.htmlhttp://www.pass4suretest.com/http://www.pass4suretest.com/1Z0-879-exam.htmlhttp://www.pass4suretest.com/Oracle-exams.htmlhttp://www.pass4suretest.com/


2/17

What is Special About The 1Z0-879 Exam Product?

How would you know that the material provided by Pass4sureTest is unique andncomparable to others? Well this can be confirmed by looking at the material

provided to you. It is in rich PDF format which is easy to read and edit. Moreover,here is also special software included in the product that allows you to practice theest before taking exam.

1Z0-879 Practice Test Software

The 1Z0-879 practice software is created by specialists who have made sure that thequestions in this software cover all the syllabus topics of the Oracle 1Z0-879 exam.Resultantly, you will get full coverage of the syllabus.

The Facility To Set 1Z0-879 Exam

Preferences

With numerous accessibility options provided by thePass4sureTest's product, you can change exam

preferences, languages and other options as well. So, doas you please.

Simulation of Oracle 1Z0-879 Exam

The practice test software provided in the productimitates the Oracle Solaris 10 System Administrator Certified Professional Upgrade Exam exam environmentand hence, provides you the opportunity to attempt thereal exam before it actually happens. As a result, your confidence is driven up and you will enter theexamination hall knowing what you are going to face inthere.

With highly effective tools developed by McAfee and a SSL 64-bitframework, Pass4sureTest gives you unbeatable security.

SAFE AND SECURE

QUALITY IS OUR GUARANTEE

The material provided by the Pass4sureTest is top quality. Suchquality is achieved by a complete research of the 1Z0-879 OracleSolaris 10 System Administrator Certified Professional UpgradeExam exam syllabus to create the preparatory material.

HANDY INTERFACE

The product is specially designed by keeping in mind the problems people have with the tech products. To ensure this Oracle OracleSolaris 10 System Administrator Certified Professional Upgrade

Exam specialists have worked hard and made a handy product.

Money Back Guarantee

Pass4sureTest is verymuch confident about the

product it offers and as aresult, it gives each and

every candidate a 90days' window to state his

ailure in Oracle Certified Professional,Oracle Solaris 10 System Administrator

Z0-879 exam. If a candidate brings forthis failure in 90 days, Pass4sureTest pays

he money back to the candidate. Whatetter opportunity can there be to make your

nvestment risk-free? For more details, visit

Never Remain Behind onUpdates

Pass4sureTest knows theimportance of updates ina software related

product. Therefore, it provides routine updatesfor the syllabus, Oracle

1Z0-879 exam questions and the software.These updates can be downloaded free of cost. To get benefit fully from the product,you should regularly check for updates.

Discounts And Rewards

Current customersare enjoying benefitsof cash-back offerswhereas new

promotions arelaunched for the newcustomers. By buying

the Oracle Oracle Certified Professional,Oracle Solaris 10 System Administrator 1Z0-879 Oracle Solaris 10 SystemAdministrator Certified ProfessionalUpgrade Exam exam package, you can get a30% discount. It will remain by your side


3/17

he website. during you entire professional career andwill keep on helping you.

Try Free Demo of Oracle 1Z0-879 Exam Questions

n't trust Pass4sureTest before trying the free demo of the 1Z0-879 exam product. This will enable you to check the quality as well. Get the demo for acle Certified Professional, Oracle Solaris 10 System Administrator 1Z0-879 exam now, free of cost. When you get satisfied with the quality, make

final purchase. Do leave your valuable feedback as it is a good source of insight.

http://www.pass4suretest.com/1Z0-879-exam.html



4/17

Oracle

1Z0-879

Oracle Solaris 10 System Administrator Certified

Professional Upgrade Exam

Demo Product

To Buy Full Set of Exam Questions, Visit:http://www.pass4suretest.com/1Z0-879-exam.html


5/17


6/17

Question 1

A security admiistrator has a requiremet to deploy the Solaris Security Toolkit oto all Solarisservers i the departmet. I this eviromet, there are a variety of plaorms ad operan system

versios deployed. Oto which two plaorms ad operan system combiaos ca the Solaris

Security Toolkit be deployed i a supported conurao (Choose two.)

A. x86, Solaris 2.4

B. x64, Solaris 9

C. x86, Solaris 10

D. SPARC, Solaris 2.6

E. SPARC, Solaris 8

Aoswern C,E

Question 2

The compay security policy ow requires very detailed audin of all acos. This icludes

capturin all executed commads tonether with their arnumets ad the eviromet variables.

Aer acvan audin o all Solaris 10 systems, the security auditor complais about havin to

check the audit trail o each idividual host. He asks for a cetral place to capture all audit trails.

Usin stadard Solaris 10 security features, which is a soluo to this problem

A. Conure auditd to sed email with the evets.

B. Conure auditd to sed the output usin syslon to a cetral lonhost.

C. Conure auditd to store the audit trail usin NFS o a cetral server.

D. Conure auditd to store the audit trail usin LDAP i a cetral directory.

Aoswern C

Question 3

Which two tasks does the Key Distribuo Ceter (KDC) perform (Choose two.)

A. issues service cketsB. authecates services

C. issues cket-nran-ckets

D. validates passwords set i clear text

E. provides private sessios to services

Aoswern A,C

Question 4

Give: jupiter:$md5,rouds=2006$2amXesSj5$$kCF48vfPsHDjlKNXeEw7V.:12210:::::: What is thecharacterisc of this /etc/shadow etry


7/17

A. User jupiter uses the md5 hash, with salt 2006$2amXesSj5$, ad with the ecrypted password

$kCF48vfPsHDjlKNXeEw7V.

B. User jupiter uses the 2a hash, with 2006 iteraos of the hash, with salt 2amXesSj5, ad with the

ecrypted password kCF48vfPsHDjlKNXeEw7V.

C. User jupiter uses the md5 hash, with 2006 iteraos of the hash, with salt 2amXesSj5, ad withthe ecrypted password kCF48vfPsHDjlKNXeEw7V.

D. User jupiter uses the md5 hash, with 2006 iteraos of the hash, with o salt, ad with the

ecrypted password $rQmXesSj5$$kCF48vfPsHDjlKNXeEw7V.

Aoswern C

Question 5

A security admiistrator is required to validate the itenrity of a set of operan system les o a

umber of Solaris systems. The admiistrator decides to use the Solaris Finerprit Database to

validate conurao ad data les as well as biaries ad libraries. What commad, available bydefault i Solaris 10, will help the security admiistrator collect the ecessary iformao that will

be used with the Solaris Finerprit Database

A. md5sum

B. dinest

C. ecrypt

D. elfsin

E. cryptoadm

Aoswern B

Question 6

You are conurin a ew system to be used as a itraet web server. Aer you have istalled the

miimal amout of packanes ad patched the system, you added the appropriate web server

packanes (SUNWapch2r ad SUNWapch2u). By default, the web server daemo will be started usin

UID webservd ad the basic privilene set. To comply with the compay's policy of least privilene, you

eed to miimize the privilenes that the web server will have. What will you modify to specify the

privilenes that the web service will ru with

A. the PRIV_DEFAULT sen i /etc/security/policy.cof B. the defaultpriv sen of webserverd i /etc/user_ar

C. the privilenes property of the web service i the SMF repository

D. the privs property of the web service i /etc/security/exec_ar

Aoswern C

Question 7

Aer a recet audit, you have bee requested to miimize a exisn Solaris system which rus a

third party database applicao. Which two should you do before starn to miimize the system

(Choose two.)


8/17

A. Back up the system.

B. Remove ay ueeded patches.

C. Istall the SUNWret metacluster.

D. Remove ay ueeded packanes.

E. Corm with the vedor of the database soware that they support miimizao.

Aoswern A,E

Question 8

Click the Exhibit buo.

You maitai a miimized ad hardeed web server. The exhibit shows the curret credeals that

the web server rus with. You receive a complait about the fact that a ewly istalled webbased

applicao does ot fuco. This applicao is based o a /bi/ksh cni-bi script. What sen

prevets this cni-bi pronram from workin

A. The system minht NOT have /bi/ksh istalled.

B. The server is NOT allowed to call the exec system call.

C. The server should ru with uid=0 to ru cni-bi scripts.

D. Some of the libraries eeded by /bi/ksh are NOT preset i the webserver's chroot eviromet.

Aoswern B

Question 9

Oe of the operators of the maiframe nroup was moved to the UNIX nroup ad tasked to acvate

ad conure password history. For every user, the last 10 passwords should be remembered i the

history. I what le is the size of the password history conured

A. /etc/shadow

B. /etc/pam.cof

C. /etc/default/passwd

D. /etc/security/policy.cof

Aoswern C


9/17

Question 10

Withi the cotext of le itenrity, rules ca be implemeted to chane the scope of the Basic Audit

ad Report Tool (BART) maifest. Give the rule le: /home/bert/docs *.on[dt] CHECK all IGNORE

mme Which two statemets are valid (Choose two.)

A. All les o the system will be checked.

B. The last modicao me of all checked les will ot be checked.

C. Key words such as CHECK ad IGNORE ca NOT be used i a rule le.

D. Oly les with extesio .ont ad .ond i the directory /home/bert/docs will be checked.

E. All les o the system will be checked, except for les with extesios .ont ad .ond i the

directory /home/ bert/docs.

Aoswern B,D

Question 11

Solaris Audin supports the selecve lonnin of which two kids of evets (Choose two.)

A. le access by selected users

B. access to selected les by all users

C. selected users makin outboud etwork coecos

D. password chanes which do ot meet the system password policy

Aoswern A,C

Question 12

A security admiistrator creates a directory called prevoy with the followin access cotrol policy: $

neacl prevoy # le: prevoy # ower:

secadm # nroup: secadm user::rwx nroup::r-x #eecve:r-x mask:r-x other:r-x default:user::r--

default:user:

sysadm:rw- default:nroup::r-- default:nroup:sysadm:rw- default:mask:rwx default:other:--- Ito this

directory, the security admiistrator creates a le called secrets. The ls commad reports the

followin for the prevoy directory ad secrets le: $ ls -ld . secrets drwxr-xr-x+ 2 secadm secadm 512

Ju 6 16:38 . -r--r-----+ 1 secadm secadm 0 Ju 6 16:38 secrets Which two acos ca be successfully

take by the sysadm role (Choose two.)

A. The sysadm role ca read the secrets le.

B. The sysadm role ca write to the secrets le.

C. The sysadm role ca remove the secrets le.

D. The sysadm role ca create ew les uder the prevoy directory.

E. The sysadm role ca chane the Access Cotrol Lists of the prevoy directory.

Aoswern A,B

Question 13

The /etc/default/passwd le cotais a umber of conurao parameters that ca be used to


10/17

costrai the character composio of user passwords. What is oe of the daners of havin

password composio too nhtly costraied

A. Password complexity rules apply oly to the Enlish alphabet.

B. The etropy of the resuln password strins will be very hinh.

C. Duplicao of ecrypted user password strins is much more likely.D. Limited password value possibilies ca simplify brute force aacks.

E. Passwords are harder to compute whe usin may character classes.

Aoswern D

Question 14

Which two commads are part of Su Update Coeco (Choose two.)

A. /usr/bi/pknadm

B. /usr/bi/keytoolC. /usr/sbi/smpatch

D. /usr/sbi/patchadd

E. /usr/bi/updatemaaner

Aoswern C,E

Question 15

To harde a ewly istalled Solaris OS, a admiistrator is required to make sure that syslond is

conured to NOT accept messanes from the etwork. Which supported method ca be used toconure syslond like this

A. Ru svcadm disable -t svc:/etwork/system-lon.

B. Edit /etc/default/syslond to set LOG_FROM_REMOTE=NO.

C. Edit /etc/rc2.d/S74syslon to start syslond with the -t opo.

D. Edit /lib/svc/method/system-lon to set LOG_FROM_REMOTE=NO.

Aoswern B

Question 16

Which are two advatanes of the Service Maanemet Facility compared to the iit.d startup scripts

(Choose two.)

A. It restarts processes if they die.

B. It hadles service depedecies.

C. It has methods to start ad stop the service.

D. It species what the system should do at each ru level.

Aoswern A,B

Question 17


11/17

You have bee asked to implemet defese i depth for etwork access to a system, where a web

server will be ruin o a Iteret-facin etwork iterface. Which is NOT cotribun to the

defese i depth

A. ruin the web server i a zoeB. usin svcadm to disable uused services

C. usin IP Filter to limit which etwork ports ca be accessed from the Iteret

D. usin VLANs o a sinle etwork iterface istead of usin mulple etwork iterfaces

E. usin TCP wrappers to limit from which system SSH be used to coect to the system

Aoswern D

Question 18

A ew security related patch has bee released for the Solaris OS. This patch eeds to be applied to

the system that fucos as your web server. The web server is conured to ru i a onlobalzoe. Ca you just use patchadd to apply the patch to the nlobal zoe to update the web server

zoe

A. No, you eed to shut dow the web server zoe rst.

B. Yes, patches will be automacally applied to all zoes.

C. No, you eed to apply the patch to the web server zoe separately.

D. Yes, but you must make sure that the web server zoe is booted rst.

Aoswern B

Question 19

You decided it was worth maitaiin a extremely paraoid policy whe conurin your rewall

rules. Therefore, you had your maanemet approve the implemetao of a security policy stace

to dey all iboud coeco requests to your corporate etwork. How is it possible that you sll

suer from remote exploits that your adversaries are usin to obtai iteracve sessios iside your

rewall

A. TCP splicin is easy to do.

B. Iteral soware may be vulerable.

C. UDP vulerabilies are well-kow ad exploited.D. ICMP hijackin aacks ca sll succeed throunh ay rewall.

Aoswern B

Question 20

You have bee asked to nrat the user eovy, a member of the sta nroup, read ad write access to

the le / app/otes which has the followin properes: ls -l /app/otes -rw-rw---- 1 root app 0 Ju 6

15:11 /app/otes Which opos will NOT nrat the user the ability to read ad write the le

A. usermod -G app eovy


12/17

B. seacl -m user:eovy:rw- /app/otes

C. seacl -m nroup:sta:rw- /app/otes

D. usermod -K defaultpriv=basic,le_dac_read,le_dac_write eovy

Aoswern D

Question 21

A security admiistator has a requiremet to make a ecrypted backup copy of a applicao ad

its data, usin the AES alnorithm, so that it ca be safely trasmied to a parter. Which two

commad sequeces ca be used to neerate a ecrypted backup of the les uder /app1 (Choose

two.)

A. crypt < /app1/* > app1.backup.aes

B. ecrypt -a aes -d /app1 -o app1.backup.aes

C. tar cf - /app1 | nzip -d -e aes > app1.backup.aes

D. ufsdump 0f - /app1 |\ crypt -a aes > app1.backup.aesE. ufsdump 0f - /app1 |\ ecrypt -a aes -o app1.backup.aes

F. tar cf - /app1 |\ opessl ec -out app1.backup.aes -aes-128-cbc

Aoswern E,F

Question 22

A cryptonraphically sined patch provides system admiistrators with assurace that the patch

possesses certai qualies. Which two qualies are assured whe a patch sinature is veried

(Choose two.)

A. The patch has a veried orini.

B. The patch has NOT bee modied sice it was sined.

C. The patch was created by a Su Cered Systems Enieer.

D. The cotets of the patch have NOT bee revealed to ayoe who does NOT have a Su

service pla.

Aoswern A,B

Question 23

A security admiistrator has a requiremet to help conure ad deploy a ew server. What are two

security tasks that the security admiistrator should perform (Choose two.)

A. Conure the server to use LDAP for authecao.

B. Conure etwork iterfaces ad roun iformao.

C. Istall a DTrace probe to capture the use of privilenes.

D. Disable ay etwork services that are NOT bein used.

E. Apply soware patches to correct security vulerabilies.

Aoswern D,E


13/17

Question 24

Due to chanes to the security policy of your ornaizao, access restrico must be applied to

systems. The chanes specify that access to systems throunh the p protocol is NOT allowed

accordin to the Huma Resources departmet, which has the 10.10.10.0/24 address space

assined. TCP wrappers have bee eabled for the p daemo, ad these les have bee conured:# cat /etc/hosts.allow i.pd: ALL # cat /etc/ hosts.dey i.pd: 10.10.10.0/24 Despite the

implemeted conurao, Huma Resources is sll able to access systems throunh the p protocol.

What aco must be take

A. The p daemo must be restarted.

B. The ietd daemo must be restarted.

C. The etry i the hosts.dey le is wron ad must be chaned.

D. The etry i the hosts.allow le is wron ad must be chaned.

Aoswern D

Question 25

Packet lters ad rewalls are a importat compoet of ay defese-i-depth security strateny.

Which two types of threats ca IP Filter be deployed as a eecve coutermeasure anaist

(Choose two.)

A. a Christmas Tree sca

B. a aempt to lon i to a system usin SSH by a uauthorized user

C. a aempt to exploit a SQL ijeco vulerability i a web storefrot applicao

D. a aempt to exploit a buer overow vulerability i rpcbid, orinian from a host o a

authorized etwork

E. a aempt to exploit a buer overow vulerability i rpcbid, orinian from a host o a

uauthorized etwork

Aoswern A,E

Question 26

A Iteret service provider is oerin shell accouts o their systems. As a special service,

customers ca also apply for a root accout to net their ow virtual machie. The provider has

implemeted this by usin zoes, ad the customers net root access to the o-nlobal zoe. Oe of their customers is developin cryptonraphic soware ad is usin the ISP machie for tesn ewly

developed Solaris crypto providers. What kid of tesn is available to this developer

A. The developer is able to test ewly developed user-level providers.

B. The developer is able to test ewly developed kerel soware providers.

C. The developer ca NOT test ewly developed providers i a o-nlobal zoe.

D. The developer is able to do the same tests as if developin as root i the nlobal zoe.

Aoswern A

Question 27


14/17

A security admiistrator is required to periodically validate biaries anaist the Solaris Finerprit

Database. While aempn to capture MD5 le sinatures for key Solaris OS les, the security

admiistrator ecouters the followin error: dinest: o cryptonraphic provider was foud for this

alnorithm -- md5 What commad should the admiistrator use to help determie the cause of the

problem

A. crypt

B. dinest

C. kcfadm

D. opessl

E. cryptoadm

Aoswern E

Question 28

Your compay is ruin a DNS test server o the iteral etwork. Access to this server must be

blocked by usin IP Filter. The admiistrator prefers that this access cotrol is ot obvious to

someoe tryin to cotact the server from the outside. Which rule implemets the access cotrol

but hides the use of IP Filter to the outside

A. pass i quick o eri0 from 192.168.0.0/24 to ay

B. block i quick proto udp from ay to ay port = 53

C. pass out quick o eri0 proto icmp from 192.168.1.2 to ay keep state

D. block retur-icmp(port-ur) i proto udp from ay to 192.168.1.2 port = 53

Aoswern D

Question 29

Which opo is used i /etc/vfstab to limit the size of a tmpfs le system to 512MB to prevet a

memory deial of service (DoS)

A. size=512m

B. maxsize=512

C. misize=512

D. swapfs=512mb

Aoswern A

Question 30

The Key Distribuo Ceter (KDC) is a cetral part of the Kerberos authecao system. How

should the system ruin the KDC be conured

A. It should be a hardeed, miimized system.

B. It should be a hardeed, o-etworked system.

C. The KDC implemetao employs cryptonraphy ad ca therefore ru securely o a ordiary


15/17

mul-user system.

D. For improved security, users must lon i to the KDC before authecan themselves, so it must

be a muluser system.

Aoswern A

Question 31

Which two compoets are part of the Solaris Cryptonraphic Framework (Choose two.)

A. sinle sin-o capabilies

B. ecrypo ad decrypo

C. radom umber neerao

D. Kerberos priciple neerao

Aoswern B,C

Question 32

The Solaris 10 cryptonraphic framework provides user-level commads to ecrypt les. A

combiao of commads is reported below: # tar cvf - /data | ecrypt -a arcfour -k /tmp/key -o

/tmp/backup Which two statemets are true (Choose two.)

A. The key ca NOT be a le.

B. The backup will be a ecrypted le.

C. arcfour is NOT a valid ecrypo alnorithm.

D. The tar commad ivocao is NOT correct.E. The /data directory is backed up ad ecrypted.

Aoswern B,E

Question 33

The security admiistrator wats to lon all chanes that are made to the device policy. Which Solaris

10 subsystem will be used to lon chanes to the device policy

A. syslon facility

B. Fault Maaner

C. Solaris Audin

D. System Evet facility

Aoswern C

Question 34

A system admiistrator is ew to the Solaris cryptonraphic framework. Durin miimizao ad

hardein, the system admiistrator discovered a ruin /usr/lib/crypto/kcfd ad disabled this

daemo. To verify the itenrity of a Solaris biary, the system admiistrator is comparin the MD5checksum of a biary with the iformao from the Solaris Finerprit Database at SuSolve. To net


16/17

the local checksum, he is usin the commad dinest. What will happe whe execun this

commad

A. The commad will fail with a error.

B. The commad will ru as usual ad provide the MD5 sum.

C. The commad will ru but wo't be able to use ay istalled crypto accelerator hardware (if istalled).

D. The commad will ru slower because the kerel fuco ca't be accessed, ad the userlad

implemetao (libmd5.so.1) will be used.

Aoswern A

Question 35

I which Solaris OS subsystem is User Rinhts Maanemet implemeted

A. Process PrivilenesB. Madatory Access Cotrol

C. Service Maanemet Facility

D. Discreoary Access Cotrol

E. Role Based Access Cotrol (RBAC)

Aoswern E


17/17

THANKS FOR TRYING THE DEMO OF OUR PRODUCT

Visit Our Site to Purchase the Full Set of Actual 1Z0-879 Exam Quesos With Aswers.


We Also Provide Pracce Exam Soware That Simulates Real Exam Eviromet Ad Has

May Self-Assessmet Features. Dowload Free Product Demo From:


Moey Back Guaratee

Check Out Our Customer Tesmoials

Documents

Certification Tips for 1Z0-879 Exam