Oracle.Testking.1z0-820.v2018-12-10.by.Brandon · Reference: Oracle Solaris 11 Express Image Packaging System Guide, Managing Package Publishers QUESTION 2 Alice is a user account

https://www.gratisexam.com/

1z0-820.exam.75q

Number: 1z0-820Passing Score: 800Time Limit: 120 min


1z0-820

Upgrade to Oracle Solaris 11 System Administrator


Exam A

QUESTION 1You need to update an OS image on a client. The pkg publishers command displays the wrong publisher with the wrong update: PUBLISHER TYPE STATUS URISolaris origin online http://pkg.oracle.com/solaris/release

The update is available on the updated publisher: PUBLISHER TYPE STATUS URISolaris origin online http://sysA.example.com

Select the option that describes the procedure used to update the OS image on the system from the updated publisher.

A. Copy the repository from the ISO image onto the local client.Configure the repository on the client by using the svccfg - s command so that the Solaris publisher is connected to the new repository.Refresh the application/pkg/server service.Issue the pkgrepo refresh command to refresh the repository catalog

B. Configure the publisher on the client using the svcfg - s command so that the Solaris publisher is connected to the repository at http://sysA.example.comRefresh the application/pkg/server service.Issue the pkgrepo refresh command to repository catalog

C. Use the pkg set-publisher command to change the URL of the publisher Solaris to http://sysA.example.com.Issue the pkg update command to update the OS image.

D. Add the new publisher http://sysA.example.com SolarisUse the pkg set-publisher command to set the publisher search order and place http://sysA.example.com of http://pkg.oracle.com/solaris/releaseIssue the pkg publisher command to view the publishers.Set the new publisher to sticky.Issue the pkg update command to update the OS image.

Correct Answer: CSection: (none)Explanation

Explanation/Reference:You can use the pkg set-publisher command to change a publisher URI.

Changing a Publisher Origin URI

To change the origin URI for a publisher, add the new URI and remove the old URI. Use the -g option to add a new origin URI. Use the -G option to remove the oldorigin URI.

# pkg set-publisher -g http://pkg.example.com/support \


-G http://pkg.example.com/release example.com

Note: You can use either the install or update subcommand to update a package.The install subcommand installs the package if the package is not already installed in the image. If you want to be sure to update only packages that are alreadyinstalled, and not install any new packages, then use the update subcommand.

Reference: Oracle Solaris 11 Express Image Packaging System Guide, Managing Package Publishers

QUESTION 2Alice is a user account used by Alice on a Solaris 11 system.sadmin is a role account on the same system.

Your task is to add the command /usr/sbin/cryptoadm to the Network management profile, so that Alice can execute it, while assuming the sadmin role.

Select the three activities necessary to accomplish this.


A. To the file /etc/security/prof_attr, add the line: Network Management: solaris:cmd:RO::/usr/sbin/cryptoadm:euid=0

B. To the file /etc/security/auth_attr, add the line:Network Management: solaris:cmd:RO::/usr/sbin/cryptoadm:euid=0

C. To the file /etc/security/exec_attr.d/local-entriies, add the line:Network Management: solaris:cmd:RO::/usr/sbin/cryptoadm:euid=0

D. Run the roles alice to ensure that alice may assume the role sadmin.

E. Run the command profiles sadmin to ensure that the role sadmin includes the network Management profile.

F. Run the command profiles alice to ensure that the Alice has permissions to access the Network management profile.

G. Run the command profiles “Network management” to ensure that the Network management profile includes the sadmin role.

Correct Answer: CDGSection: (none)Explanation

Explanation/Reference:C: /etc/security/exec_attr is a local database that specifies


the execution attributes associated with profiles. The exec_attr file can be used with other sources for execution profiles, including the exec_attr NIS map and NIS+ table.

A profile is a logical grouping of authorizations and commands that is interpreted by a profile shell to form a secure execution environment.

Incorrect answers: A: etc/security/prof_attr is a local source for execution profile names, descriptions, and other attributes of execution profiles. The prof_attr file can be used with otherprofile sources, including the prof_attr NIS map.

B: /etc/security/auth_attr is a local source for authorization names and descriptions. The auth_attr file can be used with other authorization sources, including theauth_attr NIS map and NIS+ table.An authorization is a right assigned to users that is checked by certain privileged programs to determine whether users can execute restricted functionality.

Reference: man exec_attr

QUESTION 3Select the two statements that correctly describe the operation of NWAM.

A. If a location is explicitly enabled, it remains active until explicitly changed.

B. Wireless security keys can be configured by using the nwammgr command.

C. NWAM stores profile information in /etc/ipadm/ipadm.conf and /etc/dladm/datalink.conf.

D. Multiple locations may be automatically activated in systems with multiple network interface cards.

E. Interface NCU Properties "float" and are automatically attached to the highest priority Link NCU Property.

F. If the DefaultFixed NCP is enabled, persistent configuration, stored in /etc/ipadm.conf and /etc/dladm/datalink.conf is used.

Correct Answer: ADSection: (none)Explanation

Explanation/Reference:A: Conditional and system locations can be manually activated, which means that the location remains active until explicitly disabled.D: A location comprises certain elements of a network configuration, for example a name service and firewall settings, that are applied together, when required. Youcan create multiple locations for various uses. For example, one location can be used when you are connected at the office by using the company intranet. Anotherlocation can be used at home when you are connected to the public Internet by using a wireless access point. Locations can be activated manually or automatically,according to environmental conditions, such as the IP address that is obtained by a network connection.


Incorrect answers:

Note: The Network Auto-Magic (NWAM) feature simplifies basic network configuration by automatically addressing basic Ethernet and WiFi configurations, such asconnecting to your wired or wireless network at startup and displaying notifications about the status of your currently active network connection from the desktop.NWAM is also designed to simplify some of the more complex networking tasks, such as the creation and management of system-wide network profiles, forexample, the configuration of name services, IP Filter and IP Security (IPsec).

Reference: Oracle Solaris Administration: Network Interfaces and NetworkVirtualization, Activating and Deactivating ProfilesReference: Oracle Solaris Administration: Network Interfaces and NetworkVirtualization,Creating and Managing Locations

QUESTION 4Consider the following rule file for use with the Basic Audit Reporting Tool (BART).

CHECK allIGNORE dirmtime

/etc/security/etc/noticesIGNORE contents

/export/homeIGNORE mtime size contents

/varCHECK


You are using BART to detect inappropriate changes to the file system.

Identify the two correct statements describing the attributes recorded.

A. /var/dhcp Attribute: size uid gid mode acl

B. /etc/hosts Attributes: size uid gid mode acl intime dest

C. /var/spool/mqueue Attribute: size uid gid mode acl dirmtime

D. /etc/security/exec_attr Attribute: size uid mode acl mtime devnode

E. /export/home/kate/.profile Attributes: uid gid mode acl dirmtime

F. /export/home/rick/.profile Attributes: size uid gid mode acl mtime contents

Correct Answer: DFSection: (none)Explanation

Explanation/Reference:D: According to line /etc/securityF: According to line /export/homeNot E: According to line IGNORE dirmtimeNote: In default mode, the bart compare command, as shown in the following example, checks all the files installed on the system, with the exception of modifieddirectory timestamps (dirmtime):


Note 2: The Basic Audit Reporting Tool (BART) feature of Oracle Solaris enables you to comprehensively validate systems by performing file-level checks of asystem over time. By creating BART manifests, you can easily and reliably gather information about the components of the software stack that is installed ondeployed systems.

BART is a useful tool for integrity management on one system or on a network of systems.

Reference: Oracle Solaris Administration: Security Services, BART Manifests, Rules Files, and Reports (Reference)

QUESTION 5The ZFS configuration on your server is:

Pool1 6.67G 31K /poolPool1/data 31K 31K /data


Select the three commands that you would use to 1. Create, 2. List, and 3. Delete a snapshot of the /data file system.

A. zfs snapshot pool1/data@now

B. zfs create snapshot pool1/data@now

C. zfs list -t snapshot

D. zfs list -t snapshot pool1/data

E. zfs destroy pool1/data@now

F. zfs destroy snapshot pool1/data@now

Correct Answer: ADESection: (none)Explanation

Explanation/Reference:A: Snapshots are created by using the zfs snapshot command, which takes as its only argument the name of the snapshot to create.D: You can list snapshots as follows:# zfs list -t snapshotE: Snapshots are destroyed by using the zfs destroy command. For example:

# zfs destroy tank/home/ahrens@now

QUESTION 6Which three Installation option allow for a "hands free" and "unattended'" Installation of the Solaris 11 environment?

A. Jumpstart

B. LiveCD

C. A text Installation over the network

D. An Automated Installation performed on an x86 client

E. An Automated Installation using media from a local DVD or USB drive

F. An Automated Installation using a networked repository

Correct Answer: DEFSection: (none)Explanation

Explanation/Reference:Oracle Solaris 11 uses Automated Installer (AI) for unattended installations.


Unattended installations are possible by placing the contents of the AI Image media (or ISO image contents from a download) on an AI server.

Incorrect answers:A: Jumpstart used for Solaris 10.B: LiveCD is used for hands-on installation.

Reference: Differences between Oracle Solaris 10 and 11 for System Administratorshttp://www.oracle.com/technetwork/server-storage/solaris11/overview/solaris-matrix-1549264.html

QUESTION 7You have been tasked with creating a dedicated virtual network between two local zones within a single system. In order to isolate the network traffic from otherzones on that system.

To accomplish this, you will create__________.

A. An ether stub

B. A virtual router

C. A virtual switch

D. A virtual bridge.

E. A virtual network interface

F. Nothing because a virtual switch is automatically created then the virtual network interfaces are created.

Correct Answer: ASection: (none)Explanation

Explanation/Reference:Etherstubs are pseudo ethernet NICs which are managed by the system administrator. You can create VNICs over etherstubs instead of over physical links. VNICsover an etherstub become independent of the physical NICs in the system. With etherstubs, you can construct a private virtual network that is isolated both from theother virtual networks in the system and from the external network. For example, you want to create a network environment whose access is limited only to yourcompany developers than to the network at large. Etherstubs can be used to create such an environment.

Note: Oracle Solaris 11 introduces a new and powerful network stack architecture which includes:

* Networking virtualization with virtual network interface cards (VNICs) and virtual switching (etherstubs)* Tight integration with zones* Network resource management - efficient and easy to manage integrated quality of service (QoS) to enforce bandwidth limit on VNICs and traffic flowsWe will be examini

Reference: Oracle Solaris Administration: Network Interfaces and Network Virtualization, Configuring Components of Network Virtualization in Oracle Solaris


QUESTION 8Which three options describe the purpose of the zonep2vchk command?

A. Used on a Solaris 10 global zone to access the system for problems before migrating that system to a Solaris 10 branded zone.

B. Used to access a Solaris 10 global zone for problems before migrating that zone to a Solaris 11 global zone

C. Used to create zonecfg template for a Solaris 10 global zone that that will be migrated to a solaris10 branded zone.

D. Used to migrate an Oracle Solaris 11 global zone to a non-global zone.

E. Used to migrate a Solaris 10 global zone to a non-global zone on the same server; the non-global zone can then be migrated to a Solaris 11 server as aSolaris10 branded zone.

Correct Answer: CDESection: (none)Explanation

Explanation/Reference:zonep2vchk- check a global zone's configuration for physical to virtual migration into non-global zone

The zonep2vchk utility is used to evaluate a global zone's configuration before the process of physical-to-virtual (p2v) migration into a non-global zone.The p2v process involves archiving a global zone (source), and then installing a non-global zone (target) using that archive

zonep2vchk serves two functions. First, it can be used to report issues on the source which might prevent a successful p2v migration. Second, it can output atemplate zonecfg, which can be used to assist in configuring the non-global zone target.zonep2vchk can be executed on a Solaris 10 or later global zone. To execute on Solaris 10, copy the zonep2vchkutility to the Solaris 10 source global zone.

When run on Solaris 10, a target release of S11 can be specified, which will check for p2v into a Solaris 10 Branded zone.

Reference: man zonep2vchk

QUESTION 9Your are troubleshooting network throughput on your server.

To confirm that the load balancing among aggregated links is functioning properly, you want to examine the traffic statistics on the links comprising the aggregation.

The correct command is ___________.



A. dlstat - aggr

B. dlstat show-aggr

C. dlstat show-link -r

D. dlstat show-link -aggr

E. dlstat show-phys -aggr

Correct Answer: BSection: (none)Explanation

Explanation/Reference:dlstat show-aggr [-r | -t] [-i interval] [-p] [ -o field[,...]] [-u R|K|M|G|T|P] [link]Display per-port statistics for an aggregation.

Incorrect answers:dlstat show-link [-r [-F] | -t] [-i interval] [-a] [-p] [ -o field[,...]] [-u R|K|M|G|T|P] [link]Display statistics for a link.

QUESTION 10You have set up the task.max-lwps resource control on your Solaris 11 system.

Which option describes how to configure the system so that syslogd notifies you when the resources control threshold value for the task.max-lwps resource hasbeen exceeded?

A. Use the rctladm command to enable the global action on the task.max-lwpa resource control.

B. Modify the /etc/syslog.conf file to activate system logging of all violations of task.max-lwps and then refresh then svc: /system/system-log:default service.

C. Activate system logging of all violations of task.max-lwpp in the /etc/rctldm.conf file and then execute the rctladm-u command.

D. Use the prct1 command to set the logging of all resource control violations at the time the task.max-lwps resource control is being setup.

E. Use the setrct1 command to set the logging of all resource control violations for the task.max-lwps resource control.

Correct Answer: ASection: (none)


Explanation

Explanation/Reference:rctladm - display and/or modify global state of system resource controls

The following command activates system logging of all violations of task.max-lwps.

# rctladm -e syslog task.max-lwps #

Reference: man rctladm

QUESTION 11You are troubleshooting the failure of a computer to mount an NFS file system hosted by a server (hostname mars) in the local area network.

Select the three commands that will enable you to identify the problem.

A. ping - s mars

B. cat /etc/vfstab

C. cat /etc/dfs/dfstab

D. sharemgr show -v

E. showmount -e mars

F. rpcinfo -s mars | egrep ‘nfs|mountd’

Correct Answer: AEFSection: (none)Explanation

Explanation/Reference:mount: mount-point /DS9 does not exist.To solve the mount point error condition, check that the mount point exists on the client. Check the spelling of the mount point on the command line or in the /etc/vfstab file (B) on the client, or comment outthe entry and reboot the system.

Note: The /etc/vfstab file lists all the file systems to be automatically mounted at system boot time, with the exception of the /etc/mnttab and /var/run file systems.

E: showmountThis command displays all clients that have remotely mounted file systems that are shared from an NFS server, or only the file systems that are mounted by clients,


or the shared file systems with the client access information. The command syntax is:

showmount [ -ade ] [ hostname ]

where -a prints a list of all the remote mounts (each entry includes the client name and the directory), -d prints a list of the directories that are remotely mounted byclients, -e prints a list of the files shared (or exported), and hostname selects the NFS server to gather the information from. If hostname is not specified the localhost is queried.

F: * mountd DaemonThis daemon handles file-system mount requests from remote systems and provides access control. The mountd daemon checks /etc/dfs/sharetab to determinewhich file systems are available for remote mounting and which systems are allowed to do the remote mounting.

* Commands for Troubleshooting NFS ProblemsThese commands can be useful when troubleshooting NFS problems.rpcinfo CommandThis command generates information about the RPC service that is running on a system.

Incorrect answers:A: not a network connectivity problemD: The sharemgr command configures share groups and the shares contained within them.

Reference: man showmount

QUESTION 12Which three options are valid methods of installing a Solaris 10 branded zone on a system running Oracle Solaris 11?

A. Use the V2V process to migrate an existing Solaris 8 or 9 non-global zone from a Solaris 10 system to a solaris10 branded zone.

B. Use the V2V process to migrate an existing Solaris 10 non global whole root zone from a Solaris 10 system to a solaris10 branded whole root zone.

C. Install a solaris10 branded zone directly from the Oracle Solaris 10 media.

D. Migrate an existing 64-bit Solaris 10 system to a solaris10 branded non-global zone using the P2V process.

E. Migrate an existing 32 bit Solaris10 system to a solaris10 branded non-global zone using the P2V process.

F. Use the V2V process to migrate an existing Solaris 10 non-global sparse root zone from a Solaris 10 system to a solaris10 branded sparse root zone.

Correct Answer: BDESection: (none)Explanation

Explanation/Reference:B: Due to change in package system (SRV4 to IPS) there is no direct upgrade from S10 to S11 one can use* P2Vconverting s10 physical system to solaris10 branded zone in s11 (32-bit or 64-bit)* V2V converting s10 native full root zone to solaris10 branded zone in s11 (B)


QUESTION 13Which command should you choose to display the current parameters for the FSS scheduler?

A. dispadmin - c FSS

B. prionctl -c FSS

C. dispadmin -c FSS -g

D. priocntl -c FSS -g


Explanation/Reference:The dispadmin command displays or changes process scheduler parameters while the system is running.

-c classSpecifies the class whose parameters are to be displayed or changed. Valid class values are: RT for the real-time class, TS for the time-sharing class, IA for theinter-active class, FSS for the fair-share class, and FX for the fixed-priority class. The time-sharing and inter-active classes share the same scheduler, so changesto the scheduling parameters of one will change those of the other.

-gGets the parameters for the specified class and writes them to the standard output.

Reference: man dispadmin

QUESTION 14This iron is displayed on the desktop of a laptop computer, which is running Oracle Solaris 11.

Which two statements describe the Information conveyed by this Icon?

A. NWAM is disabled.


B. NWAM is automatically configuring the network.

C. The wireless network card is manually configured and operational.

D. The wireless network card is manually configured but not operational.

E. The wireless network card is automatically configured and operational.

F. The wireless network card is automatically configured but not operational.

Correct Answer: BCSection: (none)Explanation

Explanation/Reference:B: The Network Status notification icon is only displayed on the desktop if you are using NWAM to automatically configure your network.C: All online (Wireless)Indicates all manually enabled connections in the enabled network profile are online and that the required number of connections in the enabled profile group (ifsuch a group exists) are online. The required number is the same as those described for the All online (Wired) status.Note that at least one online connection is wireless.

Reference: Oracle Solaris Administration: Network Interfaces and Network Virtualization , Checking the Status of Your Network Connection

QUESTION 15A local repository is available on this system and you need to enable clients to access this repository via HTTP. The repository information is:

PUBLISHER TYPE STATUS URIsolaris origin online http://sysA.example.com

Identify two of the steps that are required to make the local repository on this server available to the client via HTTP.

A. On the server: set the pkg/inst_root and pkg/readonly properties for the svc:/application/pkg/server:default service and enabled the service

B. On the server: set the sharefs property on the ZFS file system containing the IPS repository.

C. On the client: reset the origin for the solaris publisher.

D. On the client: set the pkg/inst_root and pkg/readonly properties for the svc:/application/server:default service enable the service.

E. On the client: start the pkg.depotd process.

Correct Answer: AC


Section: (none)Explanation

Explanation/Reference:A: Configure the Repository Server ServiceTo enable clients to access the local repository via HTTP, enable the application/pkg/serverService Management Facility (SMF) service.# svccfg -s application/pkg/server setprop pkg/inst_root=/export/repoSolaris11# svccfg -s application/pkg/server setprop pkg/readonly=true

Reference: Copying and Creating Oracle Solaris 11 Package Repositories, Configure the Repository Server Service

QUESTION 16In an effort to reduce storage space on your server, you would like to eliminate duplicate copies of data in your server’s ZFS file systems.

How do you specify that pool1/data should not contain duplicate data blocks (redundant data) on write operations?

A. zfs create - o compression=on pool1/data

B. zpool create -o deduplication =on pool1; zfs create pool1/data

C. zfs create - o deduplication=on pool1; zfs create pool1/data

D. zfs create - o dedupratio=2 pool1/data

E. zfs create - o dedup=on pool1/data

Correct Answer: ESection: (none)Explanation

Explanation/Reference:ZFS Deduplication PropertySolaris Express Community Edition, build 129: In this Solaris release, you can use the deduplication property to remove redundant data from your ZFS file systems.If a file system has the dedup property enabled, duplicate data blocks are removed synchronously. The result is that only unique data is stored and commoncomponents are shared between files.

You can enable this property as follows:

# zfs set dedup=on tank/home

QUESTION 17


When you issue the “gzip: zommand not found” message is displayed. You need to install the gzip utility on your system.

Which command would you use to check if the gzip utility is available from the default publisher for installation?

A. pkg info|grep gzip

B. pkg list SUNWgzip

C. pkg contents gzip

D. pkg search gzip

Correct Answer: DSection: (none)Explanation

Explanation/Reference:Searching for Packages

Use the pkg search command to search for packages whose data matches the specified pattern.

Like the pkg contents command, the pkg search command examines the contents of packages. While the pkg contents command returns the contents, the pkgsearch command returns the names of packages that match the query.

pkg searchsearch [-HIaflpr] [-o attribute ...] [-s repo_uri] query Search for matches to the query, and display the results. Which tokens are indexed are action-dependent, but may include content hashes and pathnames.

Note: pkg is the retrieval client for the image packaging system. With a valid configuration, pkg can be invoked to create locations for packages to be installed, called 'images', and install packages into those images. Packages are published by publishers, who may make their packages available at one or more repositories. pkg, then, retrieves packages from a publisher's repository and installs them into an image.

QUESTION 18The following information is displayed about the compress/zjp software package, which Is currently installed on this system:

NAME (PUBLISHER) VERSION IFOCompress/zip 3.1.2-0.175.0.0.0.0.537 if-


NAME VERSION DATE COMMENTCompress/zip 3.1 09 Dec 2011 04:50:38 EST None

Which statement describes the information that is displayed tor the compress/zip software package?

A. This package cannot be removed.

B. This package can be updated to a new version when the new version of the package becomes available.

C. This package cannot be updated.

D. This package can be updated to version 3.1.3 but not 3.2.

E. This package cannot be downgraded to version 3.1.1.


Explanation/Reference:An “f” in the F column indicates the package is frozen. If a package is frozen, you can only install or update to packages that match the frozen version.

Note: The “i” in the I column indicates that these packages are installed in this image.

References: Adding and Updating Oracle Solaris 11 Software Packages, Showing Package Install State Information

QUESTION 19You are setting up a local image packaging System (IPS) package repository on your Oracle Solaris 11 server. The information and specifications that you have areas follows:

The Oracle Solaris11 repository ISO image has been downloaded into the /repo directory (a zfs file system).

The current publisher is:

PUBLISHER TYPE STATUS URIsolaris origin online http://pkg.oracle.com/solaris/release/

You will be replacing the current publisher with:

PUBLISHER TYPE STATUS URIsolaris origin online http://solaris.example.com/

The location of the repository will be /export/IPS. This ZFS file system has already been created.

Among the steps you will perform is to set the publisher to the local repository by using the pkg set - publisher command.


Which six other steps are required to set up the local IPS package repository?


A. Perform an rsync on the ISO image to copy the files from the ISO image to the /export/IPS file system.

B. chmod 700 on/export/IPS

C. Use the svccfg command to set the pkg/inst_root property to export/IPS.

D. Use the svccfg command to set the pkg.inst_root property to /export/IPS.

E. Use the svccfg command to set the pkg/readonly property to the application/pkg/server service to true.

F. Use the svccfg command to set the pkg/readonly property for the application/pkg/server service false.

G. Refresh the application/pkg/server service with the svcadm refresh command.

H. Refresh the package repository with the pkgrep refresh command.

I. Enable the application /pkg/server service.

J. Run the pkhrepo rebuild command to rebuild the repository catalog.

Correct Answer: ABDEGISection: (none)Explanation

Explanation/Reference:B: Set the correct permissions.

Serving a Local Repository Using SMF1. First, create a ZFS file system to hold the repository.2. Next, make a local copy of the IPS repository file.3. Make the contents of the repository file available to the pkg.depotd(1M) server, using the lofiadm command to mount the ISO image. 4. (A) Copy the repository files to the ZFS file system you created. This will increase the performance of repository accesses and avoid the need to remount the .isoimage each time the system restarts. (Be sure to use /mnt/repo, not /mnt/repo/, so that you copy the repo directory and not just the files and subdirectories in therepo directory.)

# rsync -aP /mnt/repo /export/repo2010_11You can use the df command to confirm the copy:

5. Once the files are copied, unmount the image and deallocate the block device.


6. Now that your local copy is ready, use the svccfg command to configure the repository server service, specifying the location of your local repository andsetting readonly to true:

(D)# svccfg -s application/pkg/server setprop pkg/inst_root=/export/repo2010_11/repo(E)# svccfg -s application/pkg/server setprop pkg/readonly=true

7. Start the pkg.depotd repository service:

(G) # svcadm refresh application/pkg/server(I) # svcadm enable application/pkg/server

Reference: How I Created Local Package Repositorieshttp://www.oracle.com/technetwork/articles/servers-storage-admin/localrepositories-1377242.html

QUESTION 20View the exhibit to inspect the file system configuration on your server.

You department's backup policy is to perform a full backup to a remote system disk on Saturday.

On each weekday, you are to perform an incremental backup to the same remote system disk.Each incremental backup will contain only data that has been modified since the previous Saturday backup.

The server file systems must remain available at all times and can never be taken offline.

The backup must not only provide for the recovery of the most recent version of a file, but must also allow recovery of previous versions of a file.

Following your company policy, which two describe the correct procedure to be performed on each weekday for backing up the /data file system to a remote disknamed /remote/backup?


A. Remove the previous daily snapshot.zfs snapshot pool1/data@dailyzfs send - i pool1/data@sat pool1/data@daily > /remote/backup/full

B. Remove the previous daily snapshot.zfs snapshot pool1/data@dailyzfs send - i pool1/data#sat pool1/data@daily | zfs recv remote /backup/ ‘date ‘+%m%d%’

C. Remove the previous daily snapshot.zfs snapshot pool1/data@dailyzfs send - i pool1/data@sat pool1/data@daily > /remote/backup/daily

D. Remove the previous daily snapshot.zfs create - i pool1/data@sat pool1/data@dailyzfs send pool1/data@daily | zfs remote/backup


Explanation/Reference:You can use the zfs send command to send a copy of a snapshot stream and receive the snapshot stream in another pool on the same system or in another poolon a different system that is used to store backup data.

You can send incremental data by using the zfs send -i option.

For example:

host1# zfs send -i tank/dana@snap1 tank/dana@snap2 | zfs recv newtank/danaNote that the first argument (snap1) is the earlier snapshot and the second argument (snap2) is the later snapshot. In this case, the newtank/dana file system mustalready exist for the incremental receive to be successful.

The incremental snap1 source can be specified as the last component of the snapshot name. This shortcut means you only have to specify the name after the @sign for snap1, which is assumed to be from the same file system as snap2. For example:

host1# zfs send -i snap1 tank/dana@snap2 > zfs recv newtank/danaThis shortcut syntax is equivalent to the incremental syntax in the preceding example.

Reference: Oracle Solaris ZFS Administration Guide, Sending and Receiving ZFS Data

QUESTION 21The crash dump notification on your server is:


Documentation states that there should be two core files for each crash dump in the /var/crash directory named vmdump.0

Which command should you choose to display theses two files?

A. savecore -f vmdump.0

B. dumpadm uncompressed

C. gunzip vmdump.0

D. dumpadm -z off


Explanation/Reference:Decompress using savecore -f vmdump.0

savecore - save a crash dump of the operating system

-f dumpfile Attempt to save a crash dump from the specified file instead of from the system's current dump device. This option may be useful if the information stored on the dump device has been copied to an on-disk file by means of the dd(1M) command.

QUESTION 22ServerA contains two ISO images of a package repository named so1.repo.iso-a and so1.repo.iso-b respectively. You need to create a single local packagerepository on server that clients can connect to. The package repository will be stored on the /export/IPS file system and named repo. The preferred publisher willbe named solaris and the publisher URL will be http://serverA.example.com.


Which is the correct procedure to perform on ServerA to create the local Package repository?

A. cat so1.repo.iso-a sol.repo.iso-b > so1.full.isoMount the ISO image and use the rsync command to extract the contents of the ISO file to the /export/IPS file system.Set the pkg/inst_root property to /export/IPS/repo and the pkg/readonly property to true.Set the preferred publisher by using pkg set-publisher -Ghttp://pkg.oracle.com/solaris/release/ \-g http”//serverA.example.com/ solaris

B. cat so1.repo.iso-a so1.repo.iso-b > /export/IPS/repoSet the pkg/inst_root property to true and the pkg/readonly property to /export/IPSSet the preferred publisher by using pkg set-publisher -G http://serverA.example.com/ \-g http://pkg/oracle.com/solaris/rekease/solaris

C. cat so1.repo.iso-a so1.repo.iso-b > so1.full.isoMount the ISO image and use the rsync command to extract the contents of the ISO file to /export/IPS/repoSet the pkg/inst_root property to /export/IPS/repo and the pkg/readonly property to trueSet the preferred publisher by using pkg set-publisher solaris \-g http://pkg.oracle.com/

D. cat so1.repo,iso-a so1.repo.iso-b > /export/IPS/repo.isoMount the ISO image and copy the repo directory from the ISO image to /export/IPS/reposet the pkg/inst_root property and the pkg/readonly property to /export/IPS/reposet the preferred pkg/inst_root property by using pkg set-publisher - G http://serverA.example.com/ \- g http://pkg.oracle.com/solaris.com/release/- p solaris


Explanation/Reference:Concatenate the files into one file using the cat command.Make the contents of the repository .iso file available using the mount command.To increase the performance of repository accesses and to avoid the need to remount the .iso image each time the system restarts, copy the repository files from /mnt/repo/to a ZFS file system. You can do this copy with rsync or with tar.

Incorrect answers:A, C: The repository should be named repo (not so1.full.iso).B: Need to use mount to make the contents of the repository .iso file available.

Reference: Copying and Creating Oracle Solaris 11 Package Repositories, Copying a Repository From a File

QUESTION 23


You want to configure an iSCSI target device on your system.

Select the group package required to install this functionality on your system.

A. storage-server

B. solaris-small-server

C. storage-avs

D. storage-nas


Explanation/Reference:How to Create an iSCSI LUNThe disk volume provided by the server is referred to as the target. When the LUN is associated with an iSCSI target, it can be accessed by an iSCSI initiator.The following tasks are completed on the system that is providing the storage device.1. Install the COMSTAR storage server software.target# pkg install storage-serverEtc.

QUESTION 24The core dump configuration in your non global zone is

A user is running a process in a non-global zone (testzone) and the process crashes. The process information is:

user1 2663 2618 0 17:46:42 pts/2 0:00 /usr/bin/bash


When the user's process crashes in testzone, a non-global zone, where will the core dump be saved?

A. The file will be stored in the non-global zone's directory: /var/core/pprocess/core.hash.2663.

B. The file will be saved in the global zone's directory: /var/core/core.bash.2663.

C. A core file cannot be generated in a non-global zone because it shares the kernel with the global zone.

D. The file will be stored in the global zone's directory: /var/core/pprocess/core.bash.2663.

E. The file will be saved in non-global zone’s directory: /var/core/core.bash.2663

Correct Answer: ESection: (none)Explanation

Explanation/Reference:The line init core file pattern: /var/core/core.%f.%pwill be used for the non-global process to determine the destination of the dump file.

Note: When a process is dumping core, up to three core files can be produced: one in the per-process location, one in the system-wide global location, and, if theprocess was running in a local (non-global) zone, one in the global location for the zone in which that process was running.

Reference: man coreadm

QUESTION 25You create a flash archive of the Solaris 10 global zone on the serves named sysA. The archive name is s10-system.flar, and it is stored on a remote server namedbackup_server.

On sysA, you create a Solaris 10 branded zone named s10-zone.

You want to use the flash archive, located On" /net/bactup_servers/10-system.flar, to install the Operating system in the s10-zone zone.

Which command do you choose to install the s10-system.flar archive in the Solaris 10 branded zone (s10-zone)?

A. zoneadm -z s10 -zone install - a /net/backup_server/s10-system.flar -u

B. zonecfg -z s10 -zone install - a /net/backup_server/s10-system.flar -u

C. zoneadm - z s10 -zone clone - s /net/backup_server/s10-system.flar

D. zone cfg - a s10-zone create - t SUNWsolaris10\</net/backup_server/s10-system.flar


E. zonecfg -z s10-zone install -f /net/backup/backup_server/s10-system.flar


Explanation/Reference:The zoneadm command is the primary tool used to install and administer non-global zones. Operations using the zoneadm command must be run from the globalzone on the target system.

How to Install the solaris10 Branded ZoneA configured solaris10 branded zone is installed by using the zoneadm command with the install subcommand.

Example: global# zoneadm -z s10-zone install -a /net/machine_name/s10-system.flar –u

Reference: System Administration Guide: Oracle Solaris Zones, Oracle Solaris 10 Containers, and Resource Management, Install the solaris10 Branded Zone

QUESTION 26How should you permanently restrict the non-global zone testzone so that it does not use more than 20 CPU shares while it is running?

A. While configuring the zone, add this entry:add rct1set name = capped.cpu-sharesadd value (priv = privileged, limit = 20, action = none)endexit

B. While configuring the zone, add this entry: add rct1set name= zone.cpu-sharesadd value (priv=privileged, limit=20, action=none)endexitfrom command line, enter: # dispadmin - d FSS

C. From the command line enter: #prct1 -n zone.cpu-shares - r - v 20 - i zone testzone

D. From the command line, enter:#prct1 - n zone.cpu-shares - v 80 - r - i zone global

Correct Answer: CSection: (none)


Explanation

Explanation/Reference:The prctl utility allows the examination and modification of the resource controls associated with an active process, task, or project on the system. It allows accessto the basic and privileged limits and the current usage on the specified entity.

How to Change the zone.cpu-shares Value in a Zone DynamicallyThis procedure can be used in the global zone or in a non-global zone.

1. Be superuser, or have equivalent authorizations.For more information about roles, see Configuring and Using RBAC (Task Map) in System Administration Guide: Security Services.

2. Use the prctl command to specify a new value for cpu-shares.# prctl -n zone.cpu-shares -r -v value -i zone zonenameidtype is either the zonename or the zoneid. value is the new value.

Note: project.cpu-sharesNumber of CPU shares granted to a project for use with the fair share scheduler

Reference: man prtcl

QUESTION 27You display the IP Interface information with ipmpstat - i

Which two characteristics are indicated by characters that may be included in the FLAGS column?

A. default route

B. IP forwarding enabled

C. allocated to global zone

D. unusable due to being inactive

E. nominated to send/receive IPv4 multicast for its IPMP group

Correct Answer: DESection: (none)Explanation

Explanation/Reference:The ipmpstat command concisely displays information about the IPMP subsystem. It supports five different output modes, each of which provides a different view ofthe IPMP subsystem (address, group, interface, probe, and target), described below.

-iDisplay IP interface information (“interface” output mode).


Interface ModeInterface mode displays the state of all IP interfaces that are tracked by in.mpathd on the system. The following output field is one of the supported:

FLAGSAssorted information about the IP interface:i(D) Unusable due to being INACTIVE.sMarked STANDBY.m(E) Nominated to send/receive IPv4 multicast for its IPMP group.bNominated to send/receive IPv4 broadcast for its IPMP group.MNominated to send/receive IPv6 multicast for its IPMP group.dUnusable due to being down.hUnusable due to being brought OFFLINE by in.mpathd because of a duplicate hardware address.

Reference: man ipmpstat

QUESTION 28You are going to use the- Automated installer (AI) to install a non global zone named zone1. You have created a custom manifest for the non-global zone andnamed it zone1manifest

Which command will you use to add this custom manifest to the s11-sparc install service and associate this custom manifest with the non-global zone?

A. installadm create-profile -n s11-sparc -f /tmp/zone1manifest.xml - c

B. installadm create-manifest -n s11-sparc -f /tmp/zone1manifest.xml -m

C. installadm create-client -n s11-sparc -f /tmp/zone1manifest.xml -m zone1manifest -c zonename= “zone1”

D. installadm create-service - n s11-sparc -f /tmp/zone1manifest.xml -m zone1manifest - c zonename=”zone1”


Explanation/Reference:installadm add-manifest


Associates manifests with a specific install service, thus making the manifests available on the network, independently from creating a service. When publishing a non-default manifest, it is required to associate criteria either via criteria entered on the command line (-c) or via a criteria XML file (-C).

Incorrect answers:C: installadm create-clientAccomplishes optional setup tasks for a specified client, in order to provide custom client settings that vary from the default settings used by the installadm create-service command.

D: installadm create-serviceCreates an install service.

The command provides the following functionality: - Takes an AI ISO image (<srcimage>), unpacks it, and sets up a net image in a target directory (<targetdir>. The net image enables client installations. - Creates an install service and makes it available on the network.

Reference: installadm

QUESTION 29Identify the correctly matching pair of equivalent functionality of JumpStart and Automated installer (AI).

A. JumpStart: begin script AI: package repository

B. JumpStart: setup_serverAI: installadm create-service

C. JumpStart: add_Install_clientAI: SMF system configuration profile files

D. JumpStart: finish scripts and sysidsfg filesAI: manifest files

Correct Answer: B



Explanation/Reference:JumpStart: Use the setup_install_server(1M) command.AI: Use the installadm create-service command.

Incorrect answers:A: JumpStart: begin scriptcorresponds to AI: the derived manifests mechanism.

Reference: Transitioning From Oracle Solaris 10 JumpStart to Oracle Solaris 11 Automated Installer, Similarities and Differences Between JumpStart and AI

QUESTION 30You are setting up an automated installer (AI) install server and issue the following command:

installadm create-service -n prod_ai -s /repo/prod_ai.iso \-i 192.168.1.100 -c 5 -d /export/repo

Which four options describe the install server that you have configured?

A. The service name is prod_ai.

B. DHCP base IP address is 192.168.1.100

C. The initial IP address for the install clients will be 192.168.1.100. This IP address is temporary. After the client is booted, it will use IP addresses in the followingrange: 192.168.1.101-105.

D. Five IP addresses are allocated for DHCP clients, starting with 192.168.1.100.

E. The Install server will support up to five clients.

F. The AI net image ISO file is located in /repo/prod and the net image ISO will be unpacked in /export/repo.

G. The AI net image ISO file is located in /repo/repo and is named /repo/prod/_ai.iso.

Correct Answer: ABDFSection: (none)Explanation

Explanation/Reference:A: -n <svcname> Uses this install service name instead of default service name.

B: -i <dhcp_ip_start>


Sets up a new DHCP server. The IP addresses, starting from dhcp_address_start, are set up.D: -c <count_of_ipaddr> Sets up a total number of IP addresses in the DHCP table equal to the value of the count_of_ipaddr. The first IP address is the value of dhcp_ip_start that is provided by the -i option.

F: -s <srcimage> Specifies location of AI ISO image to use for setting up the install service.

<targetdir> Required: Specifies location to set up net image.

Reference: man installadm

QUESTION 31Your mentor suggests using the dladm rename-link command to rename the network datalinks.

What are the two advantages of following this advice?

A. It can clarify which network interface has what purpose.

B. It can simplify specifying the network interface with the dladm modify-aggr command.

C. It can simplify specifying the network interface with the dladm modify-bridge command.

D. It can simplify IP filter rule changes if the network interface is replaced with a different type.

E. It can prevent accidental deletion of the network interface with the dladm delete-phys command.

F. It can prevent accidental deletion of the network interface configuration with the ipadm delete-addr command.

Correct Answer: AESection: (none)Explanation

Explanation/Reference:A: To rename the bge0 link to mgmt0, enter the following command:

# dladm rename-link bge0 mgmt0

E: Consider that the bge0 device, whose link was named mgmt0 as shown in the previous example, needs to be replaced with a ce0 device because of a hardware


failure. The bge0 NIC is physically removed, and replaced with a new ce0 NIC. To associate the newly added ce0 device with the mgmt0 configuration previouslyassociated with bge0, enter the following command:

# dladm rename-link ce0 mgmt0

Note: How to Rename a Datalink

Use this procedure if you want to change a datalink name to a customized name. For example, some of the datalinks in upgraded system might have retainedlegacy hardware-based names and you want to change these names to generic ones.

Note: dladm rename-link [-R root-dir] link new-linkRename link to new-link. This is used to give a link a meaningful name, or to associate existing link configuration such as link properties of a removed device with anew device.

QUESTION 32You are asked to troubleshoot networking issues on an unfamiliar system.

Select the correct command to display what network devices are installed.

A. ifconfig -a

B. dladm show-dev

C. dladm show-phys

D. dladm show-ether

E. netadm show-dev

F. netadm show-ether


Explanation/Reference:dladm show-devShows information for all devices or the specified device.

Reference: man dladm

QUESTION 33The core dump configuration for your system is:


A user is running a process in the global zone and the process crashes. The process information is: User1 2663 2618 0 17:46:42 pts/2 0:00 /usr/bin/bash

The server host name is: zeus

What will the per-process core file be named?

A. core.bash.2663.global

B. core.bash.2663.zeus

C. /var/core/core.bash.2663

D. /var/core/core.bash.2663.global


Explanation/Reference:Note the first line:global core file pattern: /globalcore/core.%f.%p

The program name is bashThe runtime process ID is 2663

Note: By default, the global core dump is disabled. You need to use the coreadm command with the -e global option to enable it. The -g option causes thecommand to append the program name(%f) and the runtime process ID (%p) to the core file name.

Reference: Core Dump Management on the Solaris OS

QUESTION 34Identify three options that describe the new Oracle Solaris 11 zone features.



A. There are boot environments for zones.

B. Administrators can delegate common administration tasks by using RBAC.

C. Oracle Solaris 11 supports Solaris 8, 9, and 10 branded zones.

D. You can migrate a physical Solaris 10 system and its non-global zones to a solaris10 branded zone running on an Oracle Solaris 11 system.

E. It is possible to change the host ID of a zone.

Correct Answer: ABDSection: (none)Explanation

Explanation/Reference:A: The beadm utility includes support for creating and administering non-global zone boot environments.Note: A boot environment is a bootable instance of the Oracle Solaris operating system image plus any other application software packages installed into thatimage. System administrators can maintain multiple boot environments on their systems, and each boot environment can have different software versions installed.B: Role-based access control (RBAC) is a security feature for controlling user access to tasks that would normally be restricted to the root role. By applying securityattributes to processes and to users, RBAC can divide up superuser capabilities among several administrators.

Incorrect answers:C: Oracle Solaris 11 supports Solaris 10 branded zones only.

QUESTION 35You run the command dlstat show-link -r.

Select the two correct statements regarding the information displayed in the INTRS column.

A. No value is listed for virtual network interfaces.

B. A value of 0 is listed for virtual interfaces and ether stubs.

C. The number of Interrupts is listed, which indicates network efficiency.

D. A number equal to the number of transmitted Ethernet frames is listed for physical links.

E. The number of packets that were interrupted by a collision is listed, which may indicate hardware problems.

Correct Answer: CE



Explanation/Reference:In this output, the statistics for interrupt (INTRS) are significant. Low interrupt numbers indicate greater efficiency in performance. If the interrupt numbers are high,then you might need to add more resources to the specific link.

Example: # dlstat -r -i 1 LINK IPKTS RBYTES INTRS POLLS CH<10 CH10-50 CH>50e1000g0 101.91K 32.86M 87.56K 14.35K 3.70K 205 5 nxge1 9.61M 14.47G 5.79M 3.82M 379.98K 85.66K 1.64K vnic1 8 336 0 0 0 0 0e1000g0 0 0 0 0 0 0 0 nxge1 82.13K 123.69M 50.00K 32.13K 3.17K 724 24 vnic1 0 0 0 0 0 0 0...

Note: dlstat show-link [-r [-F] | -t] [-i interval] [-a] [-p] [ -o field[,...]] [-u R|K|M|G|T|P] [link]Display statistics for a link.

Note: dlstat show-link [-r [-F] | -t] [-i interval] [-a] [-p] [ -o field[,...]] [-u R|K|M|G|T|P] [link]Display statistics for a link.

-rDisplay receive-side statistics only. Includes bytes and packets received, hardware and software drops, and so forth.

List of supported RX fields:

linkiusedbyibytesipktsintrspollshdrops: hardware dropssdrops: software drops (owing to bandwidth enforcement)ch<10: number of packet chains of length < 10ch10-50: number of packet chains of length between 10 and 50ch>50: number of packet chains of length > 50


Incorrect answers:Not A, not B: Example:Display rx side statistics

# dlstat -r LINK IPKTS IBYTES INTRS POLLS HDRPS SDRPS CH<10 CH10-50 CH>50 UTIL e1000g0 21.2K 2.1M 22.3K 78.0 0.0 0.0 57.0 0.0 0.0 0.0% nxge0 24.5M 13.6G 0.8K 10.7M 0.0 0.0 0.3M 2.96M 32.5K 0.0% vnic1 24.5M 13.6G 0.8K 10.7M 0.0 0.0 0.3M 2.96M 32.5K 0.0%

Reference: man dlstat

QUESTION 36You need to set up a local package repository to serve 75 client systems. Multiple clients will being the package repository concurrently and you need to ensure thatthe local repository performs very well under this heavy load, especially during package intensive operations.

Which option would ensure the best performance of the repository during package-intensive rations by multiple clients?

A. Set up multipathing on the package repository server to distribute the network load multiple network interfaces.

B. Deploy a second instance of the package repository server to run as a read writable mirror.

C. Deploy a second instance of the package repository server to run as a read-only mirror.

D. Deploy a second instance of the package repository server to run as a clone of the primary repository server.

E. Deploy a package repository locally on each client.


Explanation/Reference:

QUESTION 37View the Exhibit and review the zpool and ZFS configuration information from your system.


Identify the correct procedure for breaking the /prod_data mirror, removing c4t0d0 and c4t2d0, and making the data on c4t0d0and c4t2d0 accessible under thedev_data mount point.

A. zpool split pool1 pool2 c4t0d0 c4t2d0zpool import pool2zfs set mountpoint = /dev_data pool2/prod_data

B. zpool detach pool1 pool2zpool attach pool2


zfs set mountpoint=/dev_data pool2/prod_data

C. zpool split pool1/prod_data -n pool2/dev_datazfs set mountpoint = /dev_data pool2/prod_data

D. zpool split pool1 pool2 c4t0d0 c4t2d0zpool import pool2


Explanation/Reference: In this Solaris release, you can use the zpool split command to split a mirrored storage pool, which detaches a disk or disks in the original mirrored pool to createanother identical pool.After the split operation, import the new pool.

Reference: Oracle Solaris ZFS Administration Guide, Creating a New Pool By Splitting a Mirrored ZFS Storage Pool

QUESTION 38Which modification needs to be made to the Service Management Facility before you publish a new package to the IPS repository?

A. The pkg.depotd must be disabled.

B. The pkg/readonly property for the application/pkg/server service must be set to false

C. The pkg/writable_root property for the application/pkg/server service must be set to true.

D. The pkg/image_root property for the application/pkg/server service must be set to the location of the repository.


Explanation/Reference:pkg/image_root(astring) The path to the image whose file information will be used as a cache for file data.

Incorrect answers:A: pkg.depotd is the depot server for the image packaging system. It provides network access to the data contained within a package repository. Clients that do notsupport direct access to a repository through the file system, or for which network access is the only available or preferred method of transport, typically use thepackage depot.B: pkg/readonly(boolean) Sets whether modifying operations, such as those initiated by pkgsend(1), are disabled. Retrieval operations are still available. This property cannot be true whenthe pkg/mirror property is true. The default value is true.


C: pkg/writable_root(astring) The file system path to a directory to which the program has write access. This is used with the -readonly option to enable the depot server to create files,such as search indexes, without needing write access to the package information.

Reference: man pkg.depotd

QUESTION 39United States of America export laws include restrictions on cryptography.

Identify the two methods with which these restrictions are accommodated in the Oracle Solaris 11 Cryptographic Framework.

A. Corporations must utilize signed X.509 v3 certificates.

B. A third-party provider object must be signed with a certificate issued by Oracle.

C. Loadable kernel software modules must register using the Cryptographic Framework SPI.

D. Third-party providers must utilize X.509 v3 certificates signed by trusted Root Certification Authorities.

E. Systems destined for embargoed countries utilize loadable kernel software modules that restrict encryption to 64 bit keys.


Explanation/Reference:B: Binary Signatures for Third-Party SoftwareThe elfsign command provides a means to sign providers to be used with the Oracle Solaris Cryptographic Framework. Typically, this command is run by thedeveloper of a provider.

The elfsign command has subcommands to request a certificate from Sun and to sign binaries. Another subcommand verifies the signature. Unsigned binariescannot be used by the Oracle Solaris Cryptographic Framework. To sign one or more providers requires the certificate from Sun and the private key that was usedto request the certificate.

C: Export law in the United States requires that the use of open cryptographic interfaces be restricted. The Oracle Solaris Cryptographic Framework satisfies thecurrent law by requiring that kernel cryptographic providers and PKCS #11 cryptographic providers be signed.

Reference: System Administration Guide: Security Services, Oracle Solaris Cryptographic Framework

QUESTION 40You are setting up a local IPS package repository on your Oracle Solaris11 server: solaris.example.com.

You want to point the existing local IPS publisher to the new local IPS repository located in /repo.

These are the stops that you have followed:


1. Download and rsync the contents of the Oracle Solaris11 repository ISO image to the /repo directory.2. Configure the repository server service properties. The svcprop command display, the IPS related properties:

pkg/inst_root astring/repopkg/readonly Boolean true

The 1s command displays the contents of the /repo directory:

#ls/repoPkg5.repository publisher

The svcs publisher command shows the svc: /application/pkg/server: default service is online.

The pkg publisher command shows the svc: /application/pkg/server: default service is online.

The pkg publisher command still displays: PUBLISHER TYPE STATUS URIsolaris origin online http://pkg.oracle.com/solaris/release/

Which steps needs to be performed to set the local IPS publisher to the local IPS repository/repo?

A. Issue the pkgrepo refresh -s command to refresh the repository.

B. Restart the svc:/application/pkg/server:default service.

C. pkg set-publisher command to set the new repository location.

D. Issue the pkgrepo rebuild command to rebuild the repository.

E. Issue the pkgrepo set command to set the new repository location.


Explanation/Reference:Set the Publisher Origin To the File Repository URITo enable client systems to get packages from your local file repository, you need to reset the origin for the solaris publisher. Execute the following command oneach client:

Example: # pkg set-publisher -G '*' -M '*' -g /net/host1/export/repoSolaris11/ solaris

Reference: Oracle Solaris 11 Information Library, Set the Publisher Origin To the File Repository URI


QUESTION 41New features wore added to ZFS in Oracle Solaris11. Your justification to upgrade from Solaris10 to oracle Solaris11 is that it will be possible to take advantage ofthe enhancements that were made to ZFS.

Identify the three ZFS functions and features that are included in Oracle Solaris 11, but not in Solaris 10.

A. Encrypted ZFS datasets

B. Ability for ZFS to detect and remove redundant data from the tile system

C. Shadow Data Migration

D. Ability to split a mirrored ZFS storage pool

E. Ability to use ZFS on the boot drive and boot to a ZFS root file system.

F. elimination of the swap file system when using ZFS on the root disk

Correct Answer: ABESection: (none)Explanation

Explanation/Reference:A: ZFS encryption was introduced in ZFS Pool Version Number 30, Solaris Nevada b149.Filesystem encryption since Solaris 11 ExpressB: Deduplication was introduced in ZFS Pool Version Number 21, Solaris Nevada b128.E: Booting From a ZFS Root File SystemBoth SPARC based and x86 based systems use the new style of booting with a boot archive, which is a file system image that contains the files required forbooting. When a system is booted from a ZFS root file system, the path names of both the boot archive and the kernel file are resolved in the root file system that isselected for booting.

Reference: Oracle Solaris ZFS Administration Guide, Booting From a ZFS Root File System

QUESTION 42You are troubleshooting the Oracle Solaris11 Automated Installer (AI), which is not connecting with the IPS software repository.

Which three steps will help determine the cause of DNS name resolution failure?

A. Verify the contents of /etc/resolve.conf.

B. Run netstat -nr to verify the routing to the DNS server.

C. Ping the IP address of the IPS server to verify connectivity.

D. On the installation server, verify that the menu.1st file for the client points to a valid boot arc hive.

E. Run df -k to verify that the boot directory containing the boot archive is loopback mounted under /etc/netboot.


F. Run the command /sbin/dhcpinfo DNSserv to ensure that the DHCP server providing the DNS server information.

Correct Answer: ABFSection: (none)Explanation

Explanation/Reference:Check DNS* (A) Check whether DNS is configured on your client by verifying that a non-empty /etc/resolv.conf file exists.* (F) If /etc/resolv.conf does not exist or is empty, check that your DHCP server is providing DNS server information to the client:# /sbin/dhcpinfo DNSservIf this command returns nothing, the DHCP server is not set up to provide DNS server information to the client. Contact your DHCP administrator to correct thisproblem.* (B) If an /etc/resolv.conf file exists and is properly configured, check for the following possible problems and contact your system administrator for resolution:

** The DNS server might not be resolving your IPS repository server name.** No default route to reach the DNS server exists.

Reference: Installing Oracle Solaris 11 Systems, Client Installation Fails

QUESTION 43You created a new zpool. Now you need to migrate the existing ZFS file system from pool1/prod to pool2/prod.

You have these requirements: 1. Users must have access to the data during the migration, so you cannot shutdown the file system while the migration takes place.2. Because you want to copy the data as quickly as possible, you need to increase the server resources devoted to the ZFS migration.

Which method would you use to modify the ZFS shadow migration daemon defaults to increase the concurrency and overall speed of migration?

A. Svccfg - s filesystem/shadowd:defaultsetprop config_params/shadow_threads=integer: 16endsvcadm refresh filesystem/shadowd: default

B. Specify the -b <blocksize> option with the zfs create command and increase the value of <blocksize>

C. Use the -o -volblocksize=<blocksize>option with the zfs create command and increase the value of the default <blocksize>.

D. Svccfg -s filesystem/zfs: defaultsetprop config_params/shadow_threads = integer: 16endsvcadm refresh filesystem/zfs:default

Correct Answer: A



Explanation/Reference:shadowd is a daemon that provides background worker threads to migrate data for a shadow migration. A shadow migration gradually moves data from a sourcefile system into a new “shadow” file system. Users can access and change their data within the shadow file system while migration is occurring.

The shadowd service is managed by the service management facility, smf(5). Administrative actions on this service, such as enabling, disabling, or requestingrestart, can be performed using svcadm(1M). The service's status can be queried using the svcs(1) command.

The svccfg(1M) command can be used to manage the following parameter related to shadowd:

config_params/shadow_threads

Note: Oracle Solaris 11: In this release, you can migrate data from an old file system to a new file system while simultaneously allowing access and modification ofthe new file system during the migration process.

Setting the shadow property on a new ZFS file system triggers the migration of the older data. The shadow property can be set to migrate data from the localsystem or a remote system with either of the following values:

file:///pathnfs://host:path

Reference: man shadowd

QUESTION 44The current ZFS configuration on server is:


You need to backup the /data file system while the file system is active.Select the option that creates a full backup of the /data file system and stores the backup on server in the pool named backup.

A. Mount -F nfs system: /backup / mntzfs snapshot pool/data@monday>/mnt/Monday

B. Mount -F nfs systemB: /backup/mntzfs snapshot pool1/data@Mondayzfs clone pool1/data@monday/mnt/Monday

C. Zfs send pool1/data@Monday | ssh system zfs recv backup/monday

D. Zfs snapshot pool1/data@Monday | ssh system zfs recv backup/monday


Explanation/Reference:Example (assuming there exists a snapshot ‘tank/test@1).Full backupNow let’s do a full initial backup from the ‘tank/test@1 snapshot:# zfs send tank/test@1 | zfs receive tank/testback

QUESTION 45You are creating a non-global zone on your system.


Which option assigns a zpool to a non-global zone, and gives the zone administrator permission to create zfs file system in that zpool?

A. While creating the non-global zone, make the following entry: add deviceset match=/dev/rdsk/c4t0d0endBoot the zone and log in the zone as root. Create the zpool: zpool create pool2 c4t0d0In the non-global zone, root can now create ZFS file system in the pool2 zpool

B. In the global zone, create the zpool: global# zpool create pool2 c4t1d0While creating the no-global zone, make the following entry: add datasetset name=pool2endadd fsset dir=pool1set special=pool1set type=zfspool1endBoot the zone, log in the zone as root, and create the zfs file system in the pool2 zpool.

C. In the global zone, create the zpool:global#zpool create pool2 c4t1d0While creating the global zone, make the following entry: add datasetset name=pool2endBoot the zone, log in to the zone as root and create the zfs file systems in the pool2 zpool.

D. In the global zone, create the zpool and the ZFS file systems that you want to use in the non-global zone: global#zpool create pool2 c4t1d0global#zfs create pool2/dataWhile creating the non-global zone, make the following entry for each ZFS file system that you want to make available in the zone: add fsset dir=/dataset special=pool2/dataset type=zfsend

E. Create the zpool in the global zone: global#zpool create pool2 c4t1d0Boot the non-global zone, log in to the zone as root, and issue this command to delegate ZFS permissions to root:


non-global zone# zfs allow root create , destroy, mount pool2Log in to the non-global zone create ZFS file systems in the pool2 zpool.


Explanation/Reference:Reference: Oracle Solaris ZFS Administration Guide, Adding ZFS File Systems to a Non-Global Zone

QUESTION 46A change in your company’s security policy now requires an audit trial of all administrators assuming the sysadm role, capturing:

Executed commands, including optionsLogins and logouts

There are two command necessary to accomplish this change. One is a rolemod command. What is the other?

A. auditconfig set policy=argv

B. auditconfig -setpolicy +argv

C. auditconfig -setflags lo, ex sysadm

D. auditconfig set flags=lo, ex sysadm


Explanation/Reference:Audit Significant Events in Addition to Login/Logout (see step 2 below)Use this procedure to audit administrative commands, attempts to invade the system, and other significant events as specified by your site security policy.

1. Audit all uses of privileged commands by users and roles.For all users and roles, add the AUE_PFEXEC audit event to their preselection mask.

# usermod -K audit_flags=lo,ps:no username# rolemod -K audit_flags=lo,ps:no rolename

2. Record the arguments to audited commands.# auditconfig -setpolicy +argv3- Record the environment in which audited commands are executed.# auditconfig -setpolicy +arge

Note: [-t] -setpolicy [+|-]policy_flag[,policy_flag ...]


Set the kernel audit policy. A policy policy_flag is literal strings that denotes an audit policy. A prefix of + adds the policies specified to the current audit policies. Aprefix of - removes the policies specified from the current audit policies. No policies can be set from a local zone unless the perzone policy is first set from the globalzone.

Incorrect answers:A: No subcommand set policy.C: -setflags audit_flagsSet the default user audit preselection flags; see audit_flags(5). The default preselection flags are combined with the user's specific audit flags to form the user'saudit preselection mask.D: No subcommand set flags.

Reference: Oracle Solaris 11 Security Guidelines, Audit Significant Events in Addition to Login/Logout

QUESTION 47You are to create a ZFS file system with the following specifications:

lzjb compression enabledcannot consume more than 2 GB from the storage poolredundant data at the block level eliminatedmounted as /data

Which command creates the desired file system?

A. zfs create -оmountpoint=/data,compression=on,algorithm=lzjb,deduplication=on,quota=2g /pool1/data

B. zfs create -o mountpoint=/data compression=on algorithm=lzjb deduplication=on quota=2g pool1/data

C. zfs create -o mountpoint=/data -о compression=on -o dedup=on -o quota=2g pool1/data

D. zfs create -o mountpoint=/data -o compression=on -o algorithm=lzjb -o deduplication=on -o quota=2g pool1/data

E. zfs create pool1/datazfs set mountpoint=/data,quota=2g,dedup=on,compression=on /pool1/data



QUESTION 48Select the two correct descriptions of the configuration of a default installation of Oracle Solaris 11. (Choose two.)


A. The root account no longer exists.

B. Access to the root account is restricted by RBAC.

C. The Solaris Management Console GUI (SMC) can be used to assign the root role to a user.

D. telnet, ftp, and other services are disabled for network access, but root can log in by using SSH.

E. Any logged in user, who knows the password for the root account, can modify the system configuration.

F. usermod -R +root alice will allow user alice to assume the role of root to modify the system configuration.

Correct Answer: BESection: (none)Explanation


QUESTION 49The resource control in your zone is:

rctl:name : zone.cpu-sharesvalue: (priv=privileged,limit=20,action=none)

When you boot the zone, this message is displayed:

WARNING: The zone.cpu-shares rctl is set but FSS is not the default scheduling class for this zone. FSS will be used forprocesses in the zone but to get the full benefit of FSS, it should be the default scheduling class.

Which option will resolve this issue?

A. In the global zone, run this command to change the process scheduler for the global zone:dispadmin -d FSS

B. In the non-global zone, run this command to change the process scheduler for this specific zone: dispadmin -d FSS

C. Change the zone resource control to:value: (priv=privileged,limit=20,action=none,default)

D. Use svccfg to modify the general/scheduler property in the svc:/system/zones:default service:svccfg -s system/zones:default editprop general/scheduler=FSS

Correct Answer: DSection: (none)


Explanation


QUESTION 50Which three are true of a solaris10 branded zone running on an Oracle Solaris 11 system? (Choose three.)

A. If there are any native non-global zones on the system that you want to migrate, these zones will be migrated into non-global zones on the Solaris 11 system.

B. The non-global zone must reside on its own ZFS dataset; only ZFS is supported.

C. The non-global zone can reside on a ZFS dataset or a UFS file system.

D. The solaris10 branded zone can be either a sparse or a whole root non-global zone model.

E. The default is the exclusive-IP type.

F. When migrated from a stand-alone Solaris system to a solaris10 branded zone, the host ID changes to the host ID of the new machine. The zone cannot beconfigured to use the host ID of the original system.

G. A sparse root zone cannot be converted into a solaris10 branded zone.

H. The solaris10 branded zone cannot be an NFS server.

Correct Answer: BEHSection: (none)Explanation


QUESTION 51You have a Solaris 10 system with a host name of sysA and it uses LDAP as a naming service. You have created a flash archive of sysA and you want to migratethis system to an Oracle Solaris 11 server as a solaris10 branded zone. The zone status on the Oracle Solaris 11 server is:

- zone10 incomplete /zone/zone1 solaris10 excl

Select the option that will force the non-global zone to prompt you for a host name and name service the first time it is booted.



A. Use zonecfg to change the zonename before booting the system for the first time.

B. Use the -u option with the zoneadm -z zone10 attach command.

C. Use the -u option with the zoneadm -z zone10 install command.

D. Remove the sysidcfg file from the <zonepath>/root directory before booting the non-global zone.



QUESTION 52The current ZFS configuration on your server is:

pool1 200K 3.91G 31K /pool1pool1/data 31K 3.91G 31K /data

Your backup policy states that you are to perform a full backup of /data on Sunday and incremental backups on Monday through Saturday. Each incremental willback up only the data that has been created or modified since the Sunday backup was started. The file systems must be available to users at all times and the datawill be backed up to tape.

Which option should you choose for the Wednesday backup?

A. On Sundayzfs snapshot pool1/data@sundayzfs send pool1/data@sunday > /dev/rmt/0On Wednesdayzfs snapshot pool1/data@wednesday

zfs send -i pool1/data@sunday pool1/data@wednesday > /dev/rmt/0

B. On Sundayzfs snapshot pool1/data@sunday > /dev/rmt/0On Wednesdayzfs snapshot -i pool1/data@wednesday >/dev/rmt/0

C. On Sundayzfs snapshot pool1/data@sundayzfs send pool1/data@sunday > /dev/rmt/0On Wednesdayzfs snapshot pool1/data@wednesdayzfs send -i pool1/data@wednesday pool1/data@sunday > /dev/rmt/0


D. On Sundayzfs snapshot pool1/data@sundayzfs send pool1/data@sunday > /dev/rmt/0On Wednesdayzfs snapshot pool1/data@wednesdayzfs send -i pool1/data@wednesday > /dev/rmt/0

E. On Sundayzfs snapshot pool1/data@sundayzfs send pool1/data@sunday | zfs recv> /dev/rmt/0On Wednesdayzfs snapshot pool1/data@wednesdayzfs send -i pool1/data@sunday pool1/data@wednesday|zfs recv > /dev/rmt/0



QUESTION 53View the Exhibit to inspect the boot environment information displayed within a non-global zone on your system.


Which two options describe the solaris-1 boot environment? (Choose two.)

A. The solaris-1 boot environment is not bootable.

B. The solaris-1 boot environment is incomplete.

C. The solaris-1 boot environment was created automatically when the non-global zone was created.

D. The solaris-1 boot environment was created in the non-global zone using the beadm create command.

E. The solaris-1 boot environment is associated with a non-active global zone boot environment.

Correct Answer: AESection: (none)Explanation


QUESTION 54On SystemA, you are troubleshooting a new installation of a virtual network. Local zones cannot connect with external systems.


View the Exhibit.

Logged in to zone1 of SystemA, you can successfully ping 172.16.0.40 and 172.16.0.42, but there is no response from any systems on the 192.168.1.xnetwork.

Similarly, logged in to zone2 of SystemA, you can successfully ping 172.16.0.40 and 172.16.0.41, but there is no response from any systems on the192.168.1.x network.

However, logged in to the global zone of SystemA, you can successfully ping 172.16.0.41 and 172.16.0.42, as well as 192.168.1.21 and 192.168.1.22.


Identify two possible explanations. (Choose two.)

A. forwarding=on has not been configured for SystemA and SystemB.

B. forwarding=on has not been configured for the global zone of SystemA.

C. There are missing entries for SystemA and SystemB in /etc/inet/hosts.

D. forwarding=on has not been configured for zone1 and zone2 of SystemA.

E. ARP table entries on SystemA and SystemB are incomplete for vnic1 and vnic2.

F. SystemB and SystemC require a static route to the 172.16.0.x network via 192.168.1.20.

Correct Answer: BESection: (none)Explanation


QUESTION 55View the Exhibit, a file named testzone.cfg:


Select the command that will use the information in this file to create a new zone named testzone2.

A. zonecfg -z testzone2 < testzone.cfg

B. zonecfg -z testzone2 import testzone.cfg

C. zoneadm -z testzone2 clone testzone.cfg

D. zonecfg -z testzone2 -f testzone.cfg



QUESTION 56After installing the OS, you boot the system and notice that the syslogd daemon is not accepting messages from remote systems.Which two options should you select to modify the syslogd daemon configuration so that it accepts syslog messages from remote systems? (Choose two.)


A. svccfg -s svc:/system/system-log setprop start/exec=”syslogd -t”

Restart the syslogd daemon.

B. Set the following parameter in the /etc/syslogd.conf file: LOG_FROM_REMOTE=YESRestart the syslogd daemon.

C. svcadm enable svc:/system/system-log/config/log_from_remote


D. svccfg -s svc:/system/system-loq setprop config/log_from_remote=true


E. Set the following parameter in the /etc/default/syslogd file: LOG_FROM_REMOTE=YESRestart the syslogd daemon.

Correct Answer: DESection: (none)Explanation


QUESTION 57You need to set up a local package repository to serve 75 client systems. Multiple clients will be accessing the package repository concurrently and you need toensure that the local repository performs very well under this heavy load, especially during package-intensive operations.Which option would ensure the best performance of the repository during package-intensive operations by multiple clients?

A. Set up multipathing on the package repository server to distribute the network load across multiple network interfaces.

B. Deploy a second instance of the package repository server to run as a read-writable mirror.

C. Deploy a second instance of the package repository server to run as a read-only mirror.

D. Deploy a second instance of the package repository server to run as a clone of the primary repository server.

E. Deploy a package repository locally on each client.



QUESTION 58Review the output from a ZFS file system:


NAME PROPERTY VALUE SOURCEpool1/encrypt encryption aes-256-ccm local

pool1/encrypt keysource raw,file:///mykey local

You need to recreate the pool1/encrypt file system exactly as it is listed above. Which two commands can you use to recreate the pool1/encrypt filesystem? (Choose two.)

A. pktool genkey keystone=file outkey=/mykey keytype=aes keylen=256

B. genkey pktool keystore=file outkey=/mykey keytype=aes keylen=256

C. zfs create -o encryption=aes-256-ccm -o keysource=raw,file://mykey pool1/encrypt

D. zfs create -o encryption=aes-256-ccm -o keysource=raw,file:///mykey pool1/encrypt

E. zfs create -o encryption=aes-256-ccm -o keysource=raw,file:///mykey source=local pool1/encrypt



QUESTION 59For an Oracle Solaris 11 Automated Installation (AI), select the two properties that can be configured using System Configuration profiles (SC profiles). (Choosetwo.)

A. IP address of the AI server

B. passwords for user accounts

C. target disk slice for installation

D. NWAM active network configuration profile (NCP)

E. IP address of the IPS (Image Packaging System) repository

F. SI_MANIFEST_SCRIPT, which defines the URL of the manifest script

Correct Answer: BFSection: (none)Explanation



QUESTION 60When you issue the gzip command, the “gzip: command not found” message is displayed. You need to install the gzip utility on your system.

Which command would you use to check if the gzip utility is available from the default publisher for installation?

A. pkg info|grep gzip

B. pkg list SUNWgzip

C. pkg contents gzip

D. pkg search gzip



QUESTION 61You are using this rule file with the Basic Audit Reporting Tool (BART) to detect inappropriate file system changes.


/etc/acct/etc/security/etc/noticesIGNORE contents

/export/home/aliceIGNORE mtime size contents

/varCHECK

/var/tmpIGNORE all

Identify the two correct statements describing the attributes recorded. (Choose two.)

A. /var/spool/cron/crontabs Attributes: size uid gid mode acl

B. /var/spool/cron/crontabs Attributes: size uid gid mode acl dirmtime


C. /export/home/lesley/.bash_history Attributes: uid gid mode acl

D. /export/home/sandra/.bash_history Attributes: uid gid mode dest

E. /etc/security/prof_attr.d Attributes: uid gid mode acl dirmtime

F. /etc/security/prof_attr.d Attributes: size uid gid mode acl devnode



QUESTION 62View the Exhibit and review the zpool and ZFS configuration information from your system.


Identify the correct procedure for breaking the /prod_data mirror, removing c4t0d0 and c4t2d0, and making the data on c4t0d0 and c4t2d0 accessible under


the /dev_data mount point.

A. zpool split pool1 pool2 c4t0d0 c4t2d0zpool import pool2zfs set mountpoint=/dev_data pool2/prod_data

B. zpool detach pool1 pool2zpool attach pool2zfs set mountpoint=/dev_data pool2/prod_data

C. zfs split pool1/prod_data -n pool2/dev_datazfs set mountpoint=/dev_data pool2/prod_data

D. zpool split pool1 pool2 c4t0d0 c4t2d0zpool import pool2



QUESTION 63You create a flash archive of the Solaris 10 global zone on the server named sysA. The archive name is s10—system.flar, and it is stored on a remote servernamed backup_server.

On sysA, you create a Solaris 10 branded zone named s10-zone.

You want to use the flash archive, located on /net/backup_servers/10-system.flar, to install the operating system in the s10-zone zone.

Which command do you choose to install the s10-system.flar archive in the Solaris 10 branded zone (s10-zone)?

A. zoneadm -z sl0-zone install -a /net/backup_server/sl0-system.flar -u

B. zonecfg -z sl0-zone install -a /net/backup_server/s10-system.flar -u

C. zoneadm -z s10-zone clone -s /net/backup_server/sl0-system.flar

D. zonecfg -a s10-zone create -t SUNWsolaris10 \< /net/backup_server/s10-system.flar

E. zonecfg -z s10-zone install -f /net/backup_server/sl0-system.flar




QUESTION 64You need to update an OS image on a client. The pkg publisher command displays the wrong publisher with the wrong update:

PUBLISHER TYPE STATUS URIsolaris origin online http://pkg.oracle.com/solaris/release

The update is available on this updated publisher:

PUBLISHER TYPE STATUS URIsolaris origin online http://sysA.example.com

Select the option that describes the procedure used to update the OS image on this system from the updated publisher.

A. Copy the repository from the ISO image onto the local client.Configure the repository on the client by using the svccfg -s command so that the solaris publisher is connected to the new repository.Refresh the application/pkg/server service.Issue the pkgrepo refresh command to refresh the repository catalog.

B. Configure the publisher on the client using the svccfg -s command so that the solaris publisher is connected to the repository at http://sysA.example.com.Refresh the application/pkg/server service.Issue the pkgrepo refresh command to refresh the repository catalog.

C. Use the pkg set-publisher command to change the URL of the publisher solaris to http://sysA.example.com.Issue the pkg update command to update the OS Image.

D. Add the new publisher http://sysA.example.com solaris.Use the pkg set-publisher command to set the publisher search order and place http://sysA.example.com ahead of http://pkg.oracle.com/solaris/release.Issue the pkg publisher command to view the publishers.Set the new publisher to sticky.Issue the pkg update command to update the OS image.



QUESTION 65You are planning the configuration for IPMP (IP Multipathing).


Best practice dictates that you must ensure that there is at least one neighbor on each subnet that responds to ICMP echo request probes to detect link failure.Which two of the following statements are true regarding the link failure detection process? (Choose two.)

A. By default, in.mpathd selects the default router as the only test partner.

B. The default failure detection time is 60 seconds (12 consecutive probes).

C. Without test partners, in.mpathd cannot detect the failure of a subinterface.

D. Arbitrary hosts on the subnet are detected by sending an “all hosts” (224.0.0.1) multicast packet.

E. Arbitrary hosts on the subnet are detected by sending an “all routers” (224.0.0.2) multicast packet.

F. Arbitrary hosts on the subnet are detected by examining the ARP cache (Internet-to-MAC address translation table).

Correct Answer: BDSection: (none)Explanation

Explanation/Reference:Reference: https://docs.oracle.com/cd/E19120-01/open.solaris/819-6990/gfxbm/index.html

QUESTION 66The rctladm command reports the following:

# rctladm |grep task.max.lwpstask.max-lwps syslog=notice [ count ]

Which of the following correctly describes the system configuration?

A. A message will be logged with syslogd when the number of notice messages generated by the resource control threshold meets or exceeds the valuespecified with [count].

B. A message will be logged with sysloqd when the number of violations generated by the resource control threshold meets or exceeds the value specified with[count].

C. The global resource control monitoring for the task.max-lwps resource control has been enabled and syslog messaging for that resource control has beenset to notice. However, because the [count] value has not been specified, there is no threshold set for the resource to monitor. The configuration to monitorthe task.max-lwps resource control is incomplete.

D. The global resource control monitoring for the task.max-lwps resource control has been enabled. syslog messaging for that resource control has been setto notice.




QUESTION 67View the Exhibit, and review the zpool and ZFS configuration information from your system.

The application development team requested an up-to-date copy of the data from the /prod_data file system. You decide to give the team one of the disk drivescontaining the data by breaking the mirror, removing the disk c4t1d0 and mounting c4t1d0 under a new mount point named /dev_data.Identify the correct procedure for breaking the mirror, removing c4t1d0, and making the data on that drive accessible under the /dev_data mount point.

A. zfs destroy pool1/prod_datazfs create pool1/prod_data c4t1d0zfs create pool1/dev_data c4t1d0

B. zfs split pool1/prod_datazfs mount -F zfs pool1/dev_data c4t1d0

C. zpool split pool1 pool2zpool import pool2zfs set mountpoint=/dev_data pool2/prod_data

D. zpool split pool1/prod_data -n pool2/dev_datazpool import -o mountpoint=/dev_data pool2/dev_data

E. zfs split pool1/prod_data -n pool2/dev_datazfs set mountpoint=/dev_data pool2/dev_data




QUESTION 68Which three methods of delivering a package are provided by the Image Package System (IPS)? (Choose three.)

A. Publish to a local file-based repository.

B. Publish as an SVR4 package.

C. Publish to a remote HTTP-based repository.

D. Convert to a .p5p package archive.

E. Convert to a SVR4 package archive.

F. Publish as a .tar archive.

G. Publish as a directory on a USB or DVD drive.

H. Publish as a Linux RPM package.

Correct Answer: ABCSection: (none)Explanation

Explanation/Reference:Reference: https://docs.oracle.com/cd/E36784_01/html/E36856/pkgdelivery.html

QUESTION 69You are using AI to install a new system. You have added the following information to the AI manifest:

<configuration type=”zone” name=”dbzone”

source=”http://sysA.example.com/zone_cfg/zone.cfg”/>

Which statement is true with regard to the zone.cfg file?

A. The zone.cfg file is a text file in a zonecfg export format.

B. The zone.cfg file is an AI manifest that specifies how the zone is to be installed.

C. The zone.cfg file is an XML file in a form suitable for use as a command file for the zonecfg command.

D. The zone.cfg file is an SC profile with keywords that are specific for configuring a zone as part of the installation process.

E. It is an XML configuration file from the /etc/zone directory. It will be used as a profile for the zone. It specifies the zonename, zonepath, and other zonecfgparameters.

Correct Answer: ASection: (none)


Explanation


QUESTION 70You need to remove the gzip software package.

Before you remove the package, you want to create a backup of the operating environment.

Which IPS command should you use?

A. Use the pkg remove command with the --require-backup-be option.

B. Use the beadm create command to create a new boot environment.Use the pkg remove command to remove the gzip package from the current boot environment.

C. Use the luucreate command to create a new boot environment.Use the pkgrm command to remove the gzip package from the current boot environment.

D. Use the pkg uninstall command with the --backup-be-name option.



QUESTION 71Solaris 11 includes a redesigned software packaging model: the Image Packaging System.

Which three describe advantages of the Image Packaging System over the previous Solaris 10 SVR4 packaging model? (Choose three.)

A. eliminates patching of the software package

B. makes the patching process more efficient with less downtime

C. eliminates OS version upgrade

D. allows for the installation of the OS without a local DVD or installation server

E. allows the use of a repository mirror to speed up package operation

F. allows users to publish their own software package in a software repository

Correct Answer: AEF




QUESTION 72Identify two correct statements about the Distribution Constructor. (Choose two.)

A. Customs scripts can be used to modify the resulting ISO image created.

B. An Image Packaging System (IPS) software repository server is required during installation from an ISO image.

C. Manifest files contain the specifications for the contents and parameters of the ISO images to be created.

D. ISO images can be created that dual boot, supporting both x86 and SPARC architectures with a single image.

E. ISO images for installation of a variety of Oracle Solaris versions and hardware architectures can be created by a single installation server.

Correct Answer: ACSection: (none)Explanation


QUESTION 73ServerA contains two ISO images of a package repository, named sol.repo.iso-a and sol.repo.iso-b respectively. You need to create a single localpackage repository on serverA that clients can connect to. The package repository will be stored in the /export/IPS file system and named repo. The preferedpublisher will be named solaris and the publisher URL will be http://serverA.example.com.

Which is correct procedure to perform on ServerA to create the local package repository?

A. cat sol.repo.iso-a sol.repo.iso-b > sol.fill.iso

Mount the ISO image and use the rsync command to extract the contents of the ISO file to the /export/IPS file system.Set the pkg/inst_root property to /export/IPS/repo and the pkg/readonly property to true.Set the preferred publisher by using pkg set-publisher -Ghttp://pkg.oracle.com/solaris/release/ \-g http://serverA.example.com/ solaris

B. cat sol.repo.iso-a sol.repo.iso-b > /export/IPS/repo

Set the pkg/inst_root property to true and the pkg/readonly property to /export/IPSSet the preferred publisher by using pkg set-publisher -G http://serverA.example.com/ \-g http://pkg.oracle.com/solaris/release/ solaris


C. cat sol.repo.iso-a sol.repo.iso-b > sol.full.iso

Mount the ISO image and use the rsync command to extract the contents of the ISO file to /export/IPS/repoSet the pkg/inst_root property to /export/IPS/repo and the pkg/readonly property to trueSet the preferred publisher by using pkg set-publisher solaris \-g http://serverA.example.com/

D. cat sol.repo.iso-a sol.repo.iso-b > /export/IPS/repo.iso

Mount the ISO image and copy the repo directory from the ISO image to /export/IPS/repoSet the pkg/inst_root property and the pkg/readonly property to /export/IPS/repoSet the preferred publisher by using pkg set-publisher -G http://serverA.example.com/ \-g http://pkg.oracle.com/solaris/release/ -p solaris


Explanation/Reference:http://pkg.oracle.com/solaris/release/

QUESTION 74You upgraded your server to Oracle Solaris 11 and you imported а zpool (pool1) that was created in Solaris 10. You need to create an encrypted ZFS file systemin pool1, but first you need to make sure that your server supports ZFS encryption.

Which four statements are true for support of ZFS encryption?

A. The encrypted file system must have been created in Oracle Solaris 11. To encrypt a ZFS file system from a previous version of Solaris, upgrade the zpool andcreate a new encrypted ZFS file system in that zpool. Finally, move or copy the data from the existing ZFS file system into the new encrypted ZFS file system.

B. If you plan to create an encrypted file system in an existing zpool, the zpool must be upgraded to ZFS version 30, minimum.

C. ZFS encryption is integrated with the ZFS command set and no additional packages need to be installed.

D. ZFS encryption requires that the ZFS Dataset Encryption package be installed.

E. If you plan to create an encrypted file system in an existing zpool, the zpool must be upgraded to ZFS version 21, minimum.

F. Encryption is supported at the pool or dataset (file system) level.

G. Encryption is supported at the pool level only and every file system in the pool will be encrypted.

H. You cannot create an encrypted file system in a zpool that was created prior to Oracle Solaris 11.Create a new zpool in Solaris 11, create an encrypted ZFS file system in the new zpool, and move or copy the data from the existing file system into the newencrypted file system.

Correct Answer: ABCFSection: (none)Explanation



QUESTION 75You are using Wireshark or snoop to observe network traffic, by using the observability node /dev/net/bridgeA. The bridge was created with:dladm create-bridge -1 net1 -1 net2 bridgeA

The captured packets are those __________.

A. sent, prior to VLAN tag modifications

B. received, after VLAN tag modifications

C. received, prior to VLAN tag modifications

D. sent and received, after VLAN tag modifications




Documents

Oracle.Testking.1z0-820.v2018-12-10.by.Brandon · Reference: Oracle Solaris 11 Express Image Packaging System Guide, Managing Package Publishers QUESTION 2 Alice is a user account