Oracle.PracticeTest.1Z0-820.v2013-04 … · Review the ZFS dataset output that is displayed on your...

Oracle 1z0-820 Exam

Passing Score: 800Time Limit: 120 minFile Version: 1.0

http://www.gratisexam.com/

Exam A

QUESTION 1Identify the two security features incorporated in the Oracle Solaris 11 Cryptographic Framework.

A. Layer 5 IP address encryptions B. Internet protocol security C. Diffie-Kerberos coaxial key encryption D. Signed cryptographic plugins (providers) E. Kernel support for signed antivirus plugins

Correct Answer: DESection: (none)Explanation

Explanation/Reference:Explanation:

The framework enables providers of cryptographic services to have their servicesused by many consumers in the Oracle Solaris operating system. Another name for providers isplugins. The framework allows three types of plugins: * User-level plugins-Shared objects that provide services by using PKCS #11 libraries, such aspkcs11_softtoken.so.1. * Kernel-level plugins-Kernel modules that provide implementations of cryptographic algorithms insoftware, such as AES. Many of the algorithms in the framework are optimized for x86 with the SSE2 instruction set andfor SPARC hardware. * Hardware plugins-Device drivers and their associated hardware accelerators. The Niagara chips,the ncp and n2cp device drivers, are one example. A hardware accelerator offloads expensivecryptographic functions from the operating system. The Sun Crypto Accelerator 6000 board is oneexample. Reference: Oracle Solaris Cryptographic Framework http://docs.oracle.com/cd/E19963-01/html/821-1456/scf-10.html

QUESTION 2Review the ZFS dataset output that is displayed on your system:

Which four correctly describe the output?

A. /data/file4 has been added. B. The link /data/file3 has been added. C. /data/file3 has been renamed to /data/file13. D. /data/file4 has been modified and is now larger. E. /data/file1 has been deleted.

F. /data/file1 has been modified and is now smaller. G. /data/file5 has been modified. H. /data/file3 (a link) has been removed.

Correct Answer: ACEGSection: (none)Explanation


A: + Indicates the file/directory was added in the later dataset C:R Indicates the file/directory was renamed in the later dataset E: - Indicates the file/directory was removed in the later dataset G: M Indicates the file/directory was modified in the later dataset Note:Identifying ZFS Snapshot Differences (zfs diff) You can determine ZFS snapshot differences by using the zfs diff command. The following table summarizes the file or directory changes that are identified by the zfs diffcommand. File or Directory Change Identifier * File or directory is modified or file or directory link changed M * File or directory is present in the older snapshot but not in the newer snapshot — * File or directory is present in the newer snapshot but not in the older snapshot + * File or directory is renamed R

QUESTION 3Which five statements describe options available for installing the Oracle Solaris 11operating system using theinstallation media?

A. You can perform a text or LiveCD installation locally or over the network.B. The text Installer does not install the GNOME desktop. The GNOME desktop package must he

added after you have installed the operating system. C. The LiveCD Installation cannot be used to install multiple instances of Oracle Solaris. D. The LiveCD installer cannot be used if you need to preserve a specific Solaris Volume Table of

Contents (VTOC) slice in your current operating system. E. The LiveCD Installer is for x86 platforms only. F. The GUI installer cannot be used to upgrade your operating system from Solaris 10. G. If you are installing Oracle Solaris 11 on an x86-based system that will have more than one

operating system installed in it, you cannot partition your disk during the installation process. H. The LiveCD installer can be used for SPARC or x86 platforms.

Correct Answer: ABDFSection: (none)Explanation


A: If the network is setup to perform automated installations, you can perform a textinstallation over the network by setting up an install service on the network and selecting a textinstallation when the client system boots. B: After a fresh install of Solaris 11 express, only the console mode is activated. To add Gnome, simply do : $ sudo pkg install slim_install This will install additional packages that are not installed by default. D:The text installer advantages over the GUI installer include: *In addition to modifying partitions, the text installer enables you to create and modify VTOC sliceswithin the Solaris partition. F: How do I upgrade my Solaris 10 or lower systems to Solaris 11? Unfortunately, you CAN'T. There is no direct upgrade installer or other tool that will allow you toupgrade from earlier releases of Solaris to Solaris 11. This is primarily due to the vast changes inthe packaging mechanism in Solaris 10. Reference:Oracle Solaris 11 Information Library,Comparing Installation Options

QUESTION 4When setting up Automated Installer (AI) clients, an interactive tool can be used to generate a custom systemconfiguration profile. The profile will specify the time zone, data and time, user and root accounts, and nameservices used for an AI client installation. This interactive tool will prompt you to enter the client information andan SC profile (XML) will be created.Which interactive tool can be used to generate this question configuration?

A. sys-unconfig B. installadm set-criteria C. sysconfig create-profile D. installadm create-profile

Correct Answer: BSection: (none)Explanation


Use the installadm set-criteria command to update the client criteria associated withan AI manifest that you already added to a service using installadm add-manifest. Use the installadm add-manifest command to add a custom AI manifest to an install service. The value of manifest is a full path and file name with .xml extension. The manifest file contains anAI manifest (installation instructions). The manifest file can also reference or embed an SCmanifest (system configuration instructions).

QUESTION 5Review the zonestat command: zonestate - q physical - memory -R high -z -p -p “zones” 10 24h 60mSelect the option that correctly describes the information that is displayed by this command.

A. It is a sample of dbzone’s physical memory usage taken every hour over a 24-hour period. Only the top 10 samplings of peak memory usage are displayed. All other utilization data is eliminated.

B. It is a sample of dbzone’s CPU, virtual memory, and networking utilization.

Physical memory is executed from the report. The sampling is taken every 10 minutes over a 24-hour period and peak utilization id displayedeach hour.

C. It is a sample of dbzone’s CPU, virtual memory, and networking utilization. Physical memory is executed from the report. The sampling is taken every 10 minutes over a 24-hour period and displayed each hour.

D. It is a sample of dbzone’s physical memory usage taken every 10 seconds and 24-hour period. Only peak virtual memory usage and CPU utilization are displayed each hour. All other Utilization data is eliminated.

E. It is a sample of dbzone’s physical memory usage taken every 10 seconds and 24-hour period. Only peak memory usage is displayed each hour. All other utilization data is eliminated.

Correct Answer: DSection: (none)Explanation


* (Not A, B, C): interval (here 10 seconds): Specifies the length in seconds to pausebetween each interval report. * duration (here 24 h) * -R report[,report] (here high) Print a summary report. highPrint a summary report detailing the highest usage of each resource and zone during anyinterval of the zonestat utility invocation. Note: The zonestat utility reports on the cpu, memory, and resource control utilization of thecurrently running zones. Each zone's utilization is reported both as a percentage of systemresources and the zone's configured limits. The zonestat utility prints a series of interval reports at the specified interval. It optionally alsoprints one or more summary reports at a specified interval. The default output is a summary of cpu, physical, and virtual memory utilization. The -r option canbe used to choose detailed output for specific resources.

QUESTION 6You are configuring NFS on a server. Select the two statements that are true.

A. Resources listed in /etc/dfs/dfstab are automatically shared on boot up. B. A directory cannot be shared if a subdirectory below it is already shared. C. Renaming a share created with the zfs set share command is not supported. D. NFS and SMB protocols cannot be used simultaneously to share the same directory.

Correct Answer: ACSection: (none)Explanation


A: ZFS can automatically share file systems by setting the sharenfs property. Usingthis property, you do not have to modify the /etc/dfs/dfstab file when a new file system is shared.The sharenfs property is a comma-separated list of options to pass to the share command. The

value on is an alias for the default share options, which provides read/write permissions to anyone.The value off indicates that the file system is not managed by ZFS and can be shared throughtraditional means, such as the /etc/dfs/dfstab file. All file systems whose sharenfs property is notoff are shared during boot.

QUESTION 7You have already generated a 256-bit AES raw key and named the keystore file /mykey. You needto use the key to create an encrypted file system.Which command should you use to create a ZFS encrypted file system named pool1/encrypt usingthe /mykey keystore?


A. zfs create-oencryption = /mykey pool1/encrypt B. zfs create-oencryption = 256-ccm-okeysource = raw, file : ///my key pool1/encrypt C. zfs create-oencryption = AES keysource = /mykey pool1/encrypt D. zfs create-oencryption = on keystore = /mykey pool1/encrypt



Example: Encrypting a ZFS File System by Using a Raw Key In the following example, an aes-256-ccm encryption key is generated by using the pktoolcommand and is written to a file, /cindykey.file. # pktool genkey keystore=file outkey=/cindykey.file keytype=aes keylen=256 Then, the /cindykey.file is specified when the tank/home/cindy file system is created. # zfs create -o encryption=aes-256-ccm -o keysource=raw,file:///cindykey.file tank/home/cindys Reference: Oracle Solaris ZFS Administration Guide,Examples of Encrypting ZFS File Systems

QUESTION 8You need to set up an Oracle Solaris 11 host as an iSCSI target so that the host's disk can beaccessed over a storage network. The disk device is c3t4d0.Which six options describe the steps that need to be taken on this host to enable an iSCSI target?

A. Create a ZFS file system named iscsi/target. B. Create a zpool named iscsi with disk device c3t4d0 C. Create zfs volume named iscsi/target. D. Use the stmfadm command to create a LUN using /dev/zvol/rdsk/iscsi/target. E. Use the stmfadm command to create a LUN using iscsi/target. F. Use the stmfadm command to make the LUN viewable. G. Use the stmfadm command to make the volume viewable. H. Enable the svc:/network/iscsi/target:default Service.

I. Use the itadm command to create the iSCSI target.

Correct Answer: BCDFHISection: (none)Explanation


How to Create an iSCSI LUN The following steps are completed on the system that is providing the storage device. Example: target# zpool create sanpool mirror c2t3d0 c2t4d0 (C)2.Create a ZFS volume to be used as a SCSI LUN. (D)3. Create a LUN for the ZFS volume. Example: target# stmfadm create-lu /dev/zvol/rdsk/sanpool/vol1 Logical unit created: 600144F0B5418B0000004DDAC7C10001 4. Confirm that the LUN has been created. Example target# stmfadm list-lu LU Name: 600144F0B5418B0000004DDAC7C10001 (F) 5. Add the LUN view. This command makes the LUN accessible to all systems. target# stmfadm add-view 600144F0B5418B0000004DDAC7C10001 How to Create the iSCSI Target This procedure assumes that you are logged in to the local system will contains the iSCSI target. Note: The stmfadm command manages SCSI LUNs. Rather than setting a special iSCSI propertyon the ZFS volume, create the volume and use stmfadm to create the LUN. (H) 1. Enable the iSCSI target service. target# svcadm enable -r svc:/network/iscsi/target:default (I) 2. Create the iSCSI target. target# itadm create-target Reference: Oracle Solaris Administration: Devices and File Systems, Configuring iSCSI DevicesWith COMSTAR

QUESTION 9Identify the Automated Installer’s (AI) equivalent to jumpStart’s finish scripts and sysidcfg files.

A. Manifest files B. SMF system configuration profile files C. Installadm create-client D. IPS software package repository E. installadm create-service F. svccfg-s application/pkg/server setprop sysidcfg


Explanation/Reference:

Explanation:

Comparing sysidcfg File Keywords to System Configuration Profile Directives The following table compares sysidcfg file keywords with example AI system configuration profilespecifications. sysidcfg File Keyword System Configuration Profile Directives Etc. Reference:http://docs.oracle.com/cd/E23824_01/html/E21799/config-1.html

QUESTION 10You need to update an OS image on a client. The pkg publishers command displays the wrongpublisher with the wrong update: PUBLISHER TYPE STATUS URISolaris origin online http://pkg.oracle.com/solaris/releaseThe update is available on the updated publisher: PUBLISHER TYPE STATUS URISolaris origin online http://sysA.example.comSelect the option that describes the procedure used to update the OS image on the system fromthe updated publisher.

A. Copy the repository from the ISO image onto the local client. Configure the repository on the client by using the svccfg-s command so that the Solaris publisheris connected to the new repository.Refresh the application/pkg/server service. Issue the pkgrepo refresh command to refresh the repository catalog

B. Configure the publisher on the client using the svcfg-s command so that the Solaris publisher isconnected to the repository at http://sysA.example.com Refresh the application/pkg/server service. Issuethe pkgrepo refresh command to repository catalog

C. Use the pkg set-publisher command to change the URL of the publisher Solaris tohttp://sysA.example.com. Issue the pkg update command to update the OS image.

D. Add the new publisher http://sysA.example.com Solaris Use the pkg set-publisher command to set the publisher search order and placehttp://sysA.example.com of http://pkg.oracle.com/solaris/release Issue the pkg publisher command to view the publishers. Set the new publisher to sticky. Issue the pkg update command to update the OS image.

Correct Answer: CSection: (none)Explanation


You can use the pkg set-publisher command to change a publisher URI. Changing a Publisher Origin URI To change the origin URI for a publisher, add the new URI and remove the old URI. Use the -goption to add a new origin URI. Use the -G option to remove the old origin URI. # pkg set-publisher -g http://pkg.example.com/support \ -Ghttp://pkg.example.com/release example.com

Note: You can use either the install or update subcommand to update a package. The install subcommand installs the package if the package is not already installed in the image. Ifyou want to be sure to update only packages that are already installed, and not install any newpackages, then use the update subcommand. Reference: Oracle Solaris 11 Express Image Packaging System Guide,Managing PackagePublishers

QUESTION 11alice is a user account used by Alice on a Solaris 11 system.sadmin is a role account on the same system.Your task is to add the command /usr/sbin/cryptoadm to the Network management profile, so thatAlice can execute it, while assuming the sadmin role.Select the three activities necessary to accomplish this.

A. To the file /etc/security/prof_attr, add the line: Network Management: solaris:cmd:RO::/usr/sbin/cryptoadm:euid=0

B. To the file /etc/security/auth_attr, add the line: Network Management: solaris:cmd:RO::/usr/sbin/cryptoadm:euid=0

C. To the file /etc/security/exec_attr.d/local-entriies, add the line: Network Management: solaris:cmd:RO::/usr/sbin/cryptoadm:euid=0

D. Run the roles alice to ensure that alice may assume the role sadmin. E. Run the command profiles sadmin to ensure that the role sadmin includes the network

Management profile. F. Run the command profiles alice to ensure that the Alice has permissions to access the Network

management profile. G. Run the command profiles “Network management” to ensure that the Network management

profile includes the sadmin role.

Correct Answer: CDGSection: (none)Explanation


C: /etc/security/exec_attr is a local database that specifies the execution attributes associated with profiles. The exec_attr file can be used with other sources for execution profiles, including the exec_attr NIS map and NIS+ table. A profile is a logical grouping of authorizations and commands that is interpreted by a profile shell to form a secure execution environment. Reference: man exec_attr

QUESTION 12Select the two statements that correctly describe the operation of NWAM.

A. If a location is explicitly enabled, it remains active until explicitly changed. B. Wireless security keys can be configured by using the nwammgr command. C. NWAM stores profile information in /etc/ipadm/ipadm.conf and /etc/dladm/datalink.conf. D. Multiple locations may be automatically activated in systems with multiple network interface cards.

E. Interface NCU Properties "float" and are automatically attached to the highest priority Link NCU Property. F. If the DefaultFixed NCP is enabled, persistent configuration, stored in /etc/ipadm.conf and

/etc/dladm/datalink.conf is used.

Correct Answer: ADSection: (none)Explanation


A: Conditional and system locations can be manually activated, which means that the location remains active until explicitly disabled. D: A location comprises certain elements of a network configuration, for example a name service and firewall settings, that are applied together, when required. You can create multiple locations for various uses. For example, one location can be used when you are connected at the office by using the company intranet. Another location can be used at home when you are connected to the public Internet by using a wireless access point. Locations can be activated manually or automatically, according to environmental conditions, such as the IP address that is obtained by a network connection.

Reference: Oracle Solaris Administration: Network Interfaces and NetworkVirtualization,Activatingand Deactivating Profiles Reference: Oracle Solaris Administration: Network Interfaces and NetworkVirtualization,Creatingand Managing Locations

QUESTION 13On server A, you enter the following command to add a static route to serverroute -p add -host 192.168.1.101 192.168.1.101 -staticWhat is the purpose of this command?

A. to temporarily bypass IP Filter rules B. to specify an IPMP target IP address to in.mpathd

C. to specify routing to an adjacent network when in.rdiscis not used D. to specify routing to an adjacent network when in.routed is not used E. to ensure the IP address for serverB is not flushed from the ARP cache F. to optimize link aggregation using a direct connection between two systems



Note:#route -p add -host destination-IP gateway-IP -static where destination-IP and gateway-IP are IPv4 addresses of the host to be used as a target. For example, you would type the following to specify the target system 192.168.10.137, which ison the same subnet as the interfaces in IPMP group itops0: $ route -p add -host 192.168.10.137 192.168.10.137 -static This new route will be automatically configured every time the system is restarted. If you want todefine only a temporary route to a target system for probe-based failure detection, then do not usethe -p option.

QUESTION 14Before booting test zone a non-global zone, you want to connect to the zone’s console so that youcan watch the boot process.Choose the command used to connect to testzone’s console.

A. zoneadm -C testzone B. zoneadm -console testzone C. zlogin -z testzone console D. zlogin -z testzone -C E. zlogin -C testzone F. zoneadm -testzone -c

Correct Answer: ESection: (none)Explanation


The following options are supported: -C Connects to the zone console. Connects to the zone console. Note: After you install a zone, you must log in to the zone to complete its application environment. Youmight log in to the zone to perform administrative tasks as well. Unless the -C option is used toconnect to the zone console, logging in to a zone using zlogin starts a new task. A task cannotspan two zones Reference: man zlogin

QUESTION 15Consider the following rule file for use with the Basic Audit Reporting Tool (BART).

CHECK allIGNORE dirmtime/etc/security/etc/noticesIGNORE contents/export/homeIGNORE mtime size contents/varCHECKYou are using BART to detect inappropriate changes to the file system.Identify the two correct statements describing the attributes recorded.

A. /var/dhcp Attribute: size uid gid mode acl B. /etc/hosts Attributes: size uid gid mode acl intime dest C. /var/spool/mqueue Attribute: size uid gid mode acl dirmtime D. /etc/security/exec_attr Attribute: size uid mode acl mtime devnode E. /export/home/kate/.profile Attributes: uid gid mode acl dirmtime F. /export/home/rick/.profile Attributes: size uid gid mode acl mtime contents

Correct Answer: DFSection: (none)Explanation


D: According to line /etc/security F: According to line /export/home Not E: According to line IGNORE dirmtime Note: In default mode, the bart compare command, as shown in the following example, checks allthe files installed on the system, with the exception of modified directory timestamps (dirmtime): CHECK all IGNORE dirmtime Note2: The Basic Audit Reporting Tool (BART) feature of Oracle Solaris enables you tocomprehensively validate systems by performing file-level checks of a system over time. Bycreating BART manifests, you can easily and reliably gather information about the components ofthe software stack that is installed on deployed systems. BART is a useful tool for integrity management on one system or on a network of systems. Reference: Oracle Solaris Administration: Security Services, BART Manifests, Rules Files, andReports (Reference)

QUESTION 16The ZFS configuration on your server is: Pool1 6.67G31K/poolPool1/data31K31K/dataSelect the three commands that you would use to 1. Create, 2. List, and 3. Delete a snapshot ofthe /data file system.

A. zfs snapshot pool1/data@nowB. zfs create snapshot pool1/data@now C. zfs list -t snapshot D. zfs list -t snapshot pool1/data

E. zfs destroy pool1/data@now F. zfs destroy snapshot pool1/data@now

Correct Answer: ADESection: (none)Explanation


A: Snapshots are created by using the zfs snapshot command, which takes as itsonly argument the name of the snapshot to create. D: You can list snapshots as follows: # zfs list -t snapshot E: Snapshots are destroyed by using the zfs destroy command. For example: # zfs destroy tank/home/ahrens@now

QUESTION 17Which three Installation option allow for a "hands free" and "unattended'" Installation of the Solaris 11environment?

A. Jumpstart B. LiveCD C. A text Installation over the network D. An Automated Installation performed on an x86 client E. An Automated Installation using media from a local DVD or USB drive F. An Automated Installation using a networked repository

Correct Answer: DEFSection: (none)Explanation


Oracle Solaris 11 usesAutomated Installer (AI) for unattended installations. Unattended installations are possible by placing the contents of the AI Image media (or ISO imagecontents from a download) on an AI server. Reference: Differences between Oracle Solaris 10 and 11 for System Administrators http://www.oracle.com/technetwork/server-storage/solaris11/overview/solaris-matrix-1549264.html

QUESTION 18You have been tasked with creating a dedicated virtual network between two local zones within asingle system. In order to isolate the network traffic from other zones on that system.To accomplish this, you will create__________.

A. An ether stub B. A virtual router C. A virtual switch D. A virtual bridge. E. A virtual network interface

F. Nothing because a virtual switch is automatically created then the virtual network interfaces are created.

Correct Answer: ASection: (none)Explanation


Etherstubs are pseudo ethernet NICs which are managed by the systemadministrator. You can create VNICs over etherstubs instead of over physical links. VNICs over anetherstub become independent of the physical NICs in the system. With etherstubs, you canconstruct a private virtual network that is isolated both from the other virtual networks in thesystem and from the external network. For example, you want to create a network environmentwhose access is limited only to your company developers than to the network at large. Etherstubscan be used to create such an environment. Note:Oracle Solaris 11 introduces a new and powerful network stack architecture which includes: * Networking virtualization with virtual network interface cards (VNICs) and virtual switching(etherstubs) * Tight integration with zones * Network resource management - efficient and easy to manage integrated quality of service(QoS) to enforce bandwidth limit on VNICs and traffic flows We will be examini Reference: Oracle Solaris Administration: Network Interfaces and Network Virtualization,Configuring Components of Network Virtualization in Oracle Solaris

QUESTION 19Which three options describe the purpose of the zonep2vchk command?

A. Used on a Solaris 10 global zone to access the system for problems before migrating thatsystem to a Solaris 10 branded zone.

B. Used to access a Solaris 10 global zone for problems before migrating that zone to a Solaris 11 globalzone

C. Used to create zonecfg template for a Solaris 10 global zone that that will be migrated to asolaris10 branded zone.

D. Used to migrate an Oracle Solaris 11 global zone to a non-global zone. E. Used to migrate a Solaris 10 global zone to a non-global zone on the same server; the non-

global zone can then be migrated to a Solaris 11 server as a Solaris10 branded zone.

Correct Answer: CDESection: (none)Explanation


zonep2vchk - check a global zone's configuration for physical to virtual migration into non-global zone The zonep2vchk utility is used to evaluate a global zone's configuration before the process ofphysical-to-virtual (p2v) migration into a non-global zone. The p2v process involves archiving a global zone (source), and then installing a non-global zone(target) using that archive zonep2vchk serves two functions. First, it can be used to report issues on the source which might

prevent a successful p2v migration. Second, it can output a template zonecfg, which can be usedto assist in configuring the non-global zone target. zonep2vchk can be executed on a Solaris 10 or later global zone. To execute on Solaris 10, copythe zonep2vchkutility to the Solaris 10 source global zone. When run on Solaris 10, a target release of S11 can be specified, which will check for p2v into aSolaris 10 Branded zone. Reference: man zonep2vchk

QUESTION 20Your are troubleshooting network throughput on your server.To confirm that the load balancing among aggregated links is functioning properly, you want toexamine the traffic statistics on the links comprising the aggregation.The correct command is ___________.

A. dlstat-aggr B. dlstat show-aggrC. dlstat show-link-r D. dlstat show-link-aggr E. dlstat show-phys-aggr



dlstat show-aggr [-r | -t] [-i interval] [-p] [ -o field[,...]] [-u R|K|M|G|T|P] [link] Display per-port statistics for an aggregation.

QUESTION 21You have set up the task.max-lwps resource control on your Solaris 11 system.Which option describes how to configure the system so that syslogd notifies you when theresources control threshold value for the task.max-lwps resource has been exceeded?

A. Use the rctladm command to enable the global action on the task.max-lwpa resource control. B. Modify the /etc/syslog.conf file to activate system logging of all violations of task.max-lwps and

then refresh then svc: /system/system-log:default service. C. Activate system logging of all violations of task.max-lwpp in the /etc/rctldm.conf file and then

execute the rctladm-u command. D. Use the prct1 command to set the logging of all resource control violations at the time the

task.max-lwps resource control is being setup. E. Use the setrct1 command to set the logging of all resource control violations for the task.max-

lwps resource control.



rctladm - display and/or modify global state of system resource controls

The following command activates system logging of all violations of task.max-lwps. # rctladm -e syslog task.max-lwps # Reference: man rctladm

QUESTION 22You are troubleshooting the failure of a computer to mount an NFS file system hosted by a server(hostname mars) in the local area network. Select the three commands that will enable you to identify the problem.

A. ping-s mars B. cat /etc/vfstab C. cat /etc/dfs/dfstab D. sharemgr show -v E. showmount -e mars F. rpcinfo-s mars | egrep ‘nfs|mountd’

Correct Answer: BEFSection: (none)Explanation


B:The mount point Error. The following message appears during the boot processor in response toan explicit mount request and indicates a non-existent mount point. mount: mount-point /DS9 does not exist. To solve the mount point error condition, check that the mount point exists on the client. Check thespelling of the mount point on the command line or in the /etc/vfstab file (B) on the client, orcomment outthe entry and reboot the system. Note: The /etc/vfstab file lists all the file systems to be automatically mounted at system boot time,with the exception of the /etc/mnttab and /var/run file systems. E: showmount This command displays all clients that have remotely mounted file systems that are shared froman NFS server, or only the file systems that are mounted by clients, or the shared file systems withthe client access information. The command syntax is: showmount [ -ade ] [ hostname ] where -a prints a list of all the remote mounts (each entry includes the client name and thedirectory), -d prints a list of the directories that are remotely mounted by clients, -e prints a list ofthe files shared (or exported), and hostname selects the NFS server to gather the informationfrom. If hostname is not specified the local host is queried. F: * mountd Daemon This daemon handles file-system mount requests from remote systems and provides accesscontrol. The mountd daemon checks /etc/dfs/sharetab to determine which file systems areavailable for remote mounting and which systems are allowed to do the remote mounting. * Commands for Troubleshooting NFS Problems These commands can be useful when troubleshooting NFS problems. rpcinfo Command This command generates information about the RPC service that is running on a system.

Reference: man showmount

QUESTION 23You have been asked to troubleshoot the initial configuration of a virtual network connecting twolocal zones with the outside world.View the exhibit.

The commanddladm create-vnic -1 vswitch192.168.1 vnic1fails with the errordladm: invalid link name ‘vswitch192.168.1’What is the reason for this error?

A. The name vswitch192.168.1 is not legal. B. The zone must be specified with dladm create-vnic -z zone3 vnic1. C. The virtual interface must be specified with dladm create-vnic -z zone3 vnic1.D. The virtual interface must be created with ipadm create-vnic-1 switch192.168.1. E. The virtual switch must be created first with dladm create-etherstub vswitch192.168.1.



There is no data-link named vswitch192.168. We need to create an etherstub first. See Note and example below for details. Note: Create a VNIC in the system's global zone. # dladm create-vnic -l data-link vnic-name data-link is the name of the interface where the VNIC is to be configured. -l link, --link=link link can be a physical link or an etherstub.

vnic-name is the name that you want to give the VNIC. For example, to create a VNIC named vnic0 on interface e1000g0, you would type the following: # dladm create-vnic -l e1000g0 vnic0 Example: Creating a Virtual Network Without a Physical NIC First, create an etherstub with name stub1: # dladm create-etherstub stub1 Create two VNICs with names hello0 and test1 on the etherstub. This operation implicitly creates a virtual switch connecting hello0 and test1. # dladm create-vnic -l stub1 hello0 # dladm create-vnic -l stub1 test1 Reference: man dladm

QUESTION 24You want to deploy oracle Solaris 11 with the automated installer (AI). You need to make sure thatyour server and network meet the requirements for using AI.Choose the three options that describe; the requirements for using AI.

A. You can create only one manifest per install service. If you need more than one manifest,create multiple install services.

B. If two client machines have different architectures and need to be installed with the sameversion of the Oracle Solaris 11 OS, then create two AI manifests and a single Install service.

C. You need a separate install service for each different client architecture that you plan to install,and for each different version of the Oracle Solaris 11 OS that you plan to install on client systems.

D. If two client machines have different architectures and need to be installed with differentversions of the Oracle Solaris 11 OS, then create two AI manifests and two install services.

E. The install server needs to be able to access an Oracle Solaris Image Packaging System (IPS)software package repository; the clients do not.

F. The install server can be either an x86 machine or a SPARC machine.

Correct Answer: BEFSection: (none)Explanation


B: Note: You can create custom AI manifests for particular clients. Create a custom XML AI manifest file. This method is best suited to an environment where fewsystems require custom provisioning. Most systems to be installed have identical or similarhardware and will be provisioned identically. Write a script that dynamically creates an AI manifest for each client at installation time. Use thismethod to create a custom installation for each client, based on client characteristics discovered atinstallation time. E: AI Server Software Requirements include

Software package repository Ensure that the install server can access an IPS software package repository. AI requires theinstall/installadm package. F: Install Server Requirements Any system that meets these requirements can be used as an AI install server, including laptops,desktops, virtual machines, and enterprise servers. The install server can be either an x86machine or a SPARC machine. An x86 install server can install both SPARC and x86 clients, anda SPARC install server can install both SPARC and x86 clients.

QUESTION 25Which three options are valid methods of installing a Solaris 10 branded zone on a system runningOracle Solaris 11?

A. Use the V2V process to migrate an existing Solaris 8 or9non-global zone from a Solaris 10system to a solaris10 branded zone.

B. Use the V2V process to migrate an existing Solaris 10 non global whole root zone from aSolaris 10 system to a solaris10 branded whole root zone.

C. Install a solaris10 branded zone directly from the Oracle Solaris 10 media. D. Migrate an existing 64-bit Solaris 10 system to a solaris10 branded non-global zone using the P2Vprocess. E. Migrate an existing 32 bit Solaris10 system to a solaris10 branded non-global zone using the P2V process. F. Use the V2V process to migrate an existing Solaris 10 non-global sparse root zone from a

Solaris 10 system to a solaris10 branded sparse root zone.

Correct Answer: BDESection: (none)Explanation


B: Due to change in package system (SRV4 to IPS) there is no direct upgrade fromS10 to S11 one can use * P2Vconverting s10 physical system to solaris10 branded zone in s11 (32-bit or 64-bit) * V2V converting s10 native full root zone to solaris10 branded zone in s11 (B)

QUESTION 26Which command should you choose to display the current parameters for the FSS scheduler?

A. dispadmin - c FSS B. prionctl-c FSS C. dispadmin -c FSS -g D. priocntl-c FSS -g



The dispadmin command displays or changes process scheduler parameters whilethe system is running. -c class Specifies the class whose parameters are to be displayed or changed. Valid class values are: RTfor the real-time class, TS for the time-sharing class, IA for the inter-active class, FSS for the fair-share class, and FX for the fixed-priority class. The time-sharing and inter-active classes share the

same scheduler, so changes to the scheduling parameters of one will change those of the other. -g Gets the parameters for the specified class and writes them to the standard output. Reference: man dispadmin

QUESTION 27This iron is displayed on the desktop of a laptop computer, which is running Oracle Solaris 11.

Which two statements describe the Information conveyed by this Icon?

A. NWAM is disabled. B. NWAM is automatically configuring the network. C. The wireless network card is manually configured and operational. D. The wireless network card is manually configured but not operational. E. The wireless network card is automatically configured and operational. F. The wireless network card is automatically configured but not operational.

Correct Answer: BCSection: (none)Explanation


B: The Network Status notification icon is only displayed on the desktop if you areusing NWAM to automatically configure your network. C: All online (Wireless) Indicates all manually enabled connections in the enabled network profile are online and that therequired number of connections in the enabled profile group (if such a group exists) are online.The required number is the same as those described for the All online (Wired) status. Note that at least one online connection is wireless. Reference: Oracle Solaris Administration: Network Interfaces and Network Virtualization,Checkingthe Status of Your Network Connection

QUESTION 28A local repository is available on this system and you need to enable clients to access thisrepository via HTTP. The repository information is: PUBLISHER TYPE STATUS URIsolaris origin on line http://sysA.example.comIdentify two of the steps that are required to make the local repository on this server available tothe client via HTTP.

A. On the server: set the pkg/inst_root and pkg/readonly properties for the svc:/application/pkg/server:default serviceand enabled the service

B. On the server:

set the sharefs property on the ZFS file system containing the IPS repository. C. On the client:

reset the origin for the solaris publisher. D. On the client:

set the pkg/inst_root and pkg/readonly properties for the svc:/application/server:default serviceenable the service.

E. On the client: start the pkg.depotd process.

Correct Answer: AESection: (none)Explanation


A: Configure the Repository Server Service To enable clients to access the local repository via HTTP, enable the application/pkg/server Service Management Facility (SMF) service. # svccfg -s application/pkg/server setprop pkg/inst_root=/export/repoSolaris11 # svccfg -s application/pkg/server setprop pkg/readonly=true E: Use pkg.depotd to serve the repository to clients. Start the Repository Service Restart the pkg.depotd repository service. # svcadm refresh application/pkg/server # svcadm enable application/pkg/server To check whether the repository server is working, open a browser window on the localhost location. Reference:Copying and Creating OracleSolaris 11 Package Repositories, Configure theRepository Server Service

QUESTION 29In an effort to reduce storage space on your server, you would like to eliminate duplicate copies ofdata in your server’s ZFS file systems.How do you specify that pool1/data should not contain duplicate data blocks (redundant data) onwrite operations?

A. zfs create-ocompression=on pool1/data B. zpool create -odeduplication =on pool1; zfs create pool1/data C. zfs create-odeduplication=on pool1; zfs create pool1/data D. zfs create-odedupratio=2 pool1/data E. zfs create-odedup=on pool1/data



ZFS Deduplication Property Solaris Express Community Edition, build 129: In this Solaris release, you can use thededuplication property to remove redundant data from your ZFS file systems. If a file system hasthe dedup property enabled, duplicate data blocks are removed synchronously. The result is thatonly unique data is stored and common components are shared between files.

You can enable this property as follows: # zfs set dedup=on tank/home

QUESTION 30When you issue the “gzip: zommand not found” message is displayed. You need to install the gziputility on your system.Which command would you use to check if the gzip utility is available from the default publisher forinstallation?

A. pkg info|grep gzip B. pkg list SUNWgzip C. pkg contents gzip D. pkg search gzip



Searching for Packages Use the pkg search command to search for packages whose data matches the specified pattern. Like the pkg contents command, the pkg search command examines the contents of packages.While the pkg contents command returns the contents, the pkg search command returns thenames of packages that match the query. pkg search search [-HIaflpr] [-o attribute ...] [-s repo_uri] query Search for matches to the query, and display the results. Which tokens are indexed are action-dependent, but may include content hashes and pathnames. Note: pkg is the retrieval client for the image packaging system. With a valid configuration, pkg can be invoked to create locations for packages to be installed, called 'images', and install packages into those images. Packages are published by publishers, who may make their packages available at one or more repositories. pkg, then, retrieves packages from a publisher's repository and installs them into an image.

QUESTION 31The following information is displayed about the compress/zjp software package, which Iscurrently installed on this system:NAME (PUBLISHER)VERSIONIFOCompress/zip3.1.2-0.175.0.0.0.0.537if-NAMEVERSIONDATECOMMENTCompress/zip3.109 Dec 2011 04:50:38 ESTNoneWhich statement describes the information that is displayed tor the compress/zip software package?

A. This package cannot be removed. B. This package can be updated to a new version when the new version of the package becomes available. C. This package cannot be updated. D. This package can be updated to version 3.1.3 but not 3.2.

E. This package cannot be downgraded to version 3.1.1.



An “f” in the F column indicates the package is frozen. If a package is frozen, you can only installor update to packages that match the frozen version. Note:The “i” in the I column indicates that these packages are installed in this image. References: Adding and Updating Oracle Solaris 11 Software Packages, Showing Package InstallState Information

QUESTION 32View the Exhibit.

The file came from your Automated Installer (AI) install server. The file is ____________.

A. an AI SC profile for non-global zones B. the default AI config file for non-global zones C. the default AI manifest for non-global zones D. a custom AI manifest



ai_manifest - Automated installation manifest file format Synopsis /usr/share/install/ai.dtd.1 Some customizations have been made, such as the selection of specific locales. Reference: Oracle Solaris 11 Installation Man Pages

QUESTION 33You are setting up a local image packaging System (IPS) package repository on your OracleSolaris 11 server. The information and specifications that you have are as follows: The Oracle Solaris11 repository ISO image has been downloaded into the /repo directory (a zfs file system).The current publisher is: PUBLISHERTYPESTATUSURIsolarisoriginonlinehttp://pkg.oracle.com/solaris/release/You will be replacing the current publisher with: PUBLISHERTYPESTATUSURIsolarisoriginonlinehttp://solaris.example.com/The location of the repository will be /export/IPS. This ZFS file system has already been created. Among the steps you will perform is to set the publisher to the local repository by using the pkg set - publisher command.Which six other steps are required to set up the local IPS package repository?

A. Perform an rsync on the ISO image to copy the files from the ISO image to the /export/IPS file system. B. chmod 700 on/export/IPS C. Use the svccfg command to set the pkg/inst_root property to export/IPS. D. Use the svccfg command to set the pkg.inst_root property to /export/IPS. E. Use the svccfg command to set the pkg/readonly property to the application/pkg/server service to true. F. Use the svccfg command to set the pkg/readonly property for the application/pkg/server service false. G. Refresh the application/pkg/server service with the svcadm refresh command. H. Refresh the package repository with the pkgrep refresh command. I. Enable the application /pkg/server service. J. Run the pkhrepo rebuild command to rebuild the repository catalog.

Correct Answer: ABDEGISection: (none)Explanation


B: Set the correct permissions. Serving a Local Repository Using SMF 4. (A) Copy the repository files to the ZFS file system you created. This will increase theperformance of repository accesses and avoid the need to remount the .iso image each time thesystem restarts. (Be sure to use /mnt/repo, not /mnt/repo/, so that you copy the repo directory andnot just the files and subdirectories in the repo directory.) # rsync -aP /mnt/repo /export/repo2010_11 You can use the df command to confirm the copy: 5.Once the files are copied, unmount the image and deallocate the block device. 6. Now that your local copy is ready, use the svccfg command to configure the repository serverservice, specifying the location of your local repository and setting readonly to true:

(D)#svccfg -s application/pkg/server setprop pkg/inst_root=/export/repo2010_11/repo (E)#svccfg -s application/pkg/server setprop pkg/readonly=true 7. Start the pkg.depotd repository service: (G) #svcadm refresh application/pkg/server (I)#svcadm enable application/pkg/server Reference: How I Created Local Package Repositories http://www.oracle.com/technetwork/articles/servers-storage-admin/localrepositories-1377242.html

QUESTION 34View the exhibit to inspect the file system configuration on your server.

You department's backup policy is to perform a full backup to a remote system disk on Saturday.On each weekday, you are to perform an incremental backup to the same remote system disk.Each incremental backup will contain only data that has been modified since the previousSaturday backup.The server file systems must remain available at all times and can never be taken offline.The backup must not only provide for the recovery of the most recent version of a file, but mustalso allow recovery of previous versions of a file.Following your company policy, which two describe the correct procedure to be performed on eachweekday for backing up the /data file system to a remote disk named /remote/backup?

A. Remove the previous daily snapshot. zfs snapshot pool1.data@daily zfs send-i pool1/data@sat pool1/data@daily > /remote/backup/full

B. Remove the previous daily snapshot. zfs snapshot pool1.data@daily zfs send-i pool1/data#sat pool1/data@daily | zfs recv remote /backup/ ‘date ‘+%m%d%’

C. Remove the previous daily snapshot. zfs snapshot pool1.data@daily zfs send-i pool1/data@sat pool1/data@daily > /remote/backup/daily

D. Remove the previous daily snapshot. zfs create-i pool1/data@sat pool1/data@daily zfs send pool1/data@daily | zfs remote/backup



You can use the zfs send command to send a copy of a snapshot stream andreceive the snapshot stream in another pool on the same system or in another pool on a differentsystem that is used to store backup data.

You can send incremental data by using the zfs send -i option. For example: host1# zfs send -i tank/dana@snap1 tank/dana@snap2 | zfs recv newtank/dana Note that the first argument (snap1) is the earlier snapshot and the second argument (snap2) isthe later snapshot. In this case, the newtank/dana file system must already exist for theincremental receive to be successful. The incremental snap1 source can be specified as the last component of the snapshot name. Thisshortcut means you only have to specify the name after the @ sign for snap1, which is assumedto be from the same file system as snap2. For example: host1# zfs send -i snap1 tank/dana@snap2 > zfs recv newtank/dana This shortcut syntax is equivalent to the incremental syntax in the preceding example. Reference: Oracle Solaris ZFS Administration Guide, Sending and Receiving ZFS Data

QUESTION 35The crash dump notification on your server is:

Documentation states that there should be two core files for each crash dump in the /var/crashdirectory named vmdump.0Which command should you choose to display theses two files?

A. savecore-f vmdump.0 B. dumpadm uncompressed C. gunzip vmdump.0 D. dumpadm-z off



Decompress using savecore -f vmdump.0 savecore - save a crash dump of the operating system -fdumpfileAttempt to save a crash dump from the specified file instead of from the system's current dump device. This option may be useful if the information stored on the dump device has been copied to an on-disk file by means of thedd(1M)command.

QUESTION 36After installing the OS, you boot the system and notice that the syslogd daemon is not accepting

messages from remote systems.Which two options should you select to modify the syslogd daemon configuration so that it acceptsmessages from remote systems?

A. svccfg-s svc:/system/system-log setprop start/exec= “syslogd-t” Restart the syslogd daemon.

B. Set the following parameter in the /etc/syslogd.conf file: LOG_FROM_REMOTE= YES Restart the syslogd daemon.

C. svcadm enable svc:/system/system-log/config/log_from_remote Restart the syslogd daemon.

D. svccfg-s svc:/system/system-log setprop config/log_from_remote=true Restart the syslogd daemon.

E. Set the following parameter in the /etc/default/syslogd file: LOG_FROM_REMOTE=YES Restart the syslogd daemon.

Correct Answer: BDSection: (none)Explanation


B: The /etc/default/syslogd file contains the following default parameter settings.See FILES. LOG_FROM_REMOTE Specifies whether remote messages are logged. LOG_FROM_REMOTE=NO is equivalent to the -t command-line option. The default value for LOG_FROM_REMOTE is YES.

QUESTION 37You need to migrate a UFS file system named /production_ufs to a ZFS file system named/production_ufs. The /production_ufs file system cannot be taken down or be out of productionduring the migration, and the current /production_ufs file system must remain active until the/ptoduction_zfs file system is copied and ready.Which method allows you to meet both requirements?1. Copy live data from /production_ufs to /production_zfs while /production_ufs is in use.2. When the copy is complete, /production_zfs will contain an up-to date copy of /production_ufs

A. Create a snapshot of the UFS file system. Create the new ZFS file system. Use cpio to copy data from the snapshot to the new ZFS file system.

B. Create a new Boot Environment. Create the ZFS file system. Use lucreate -m to copy data from the Current UFS file system to the new ZFS file system.

C. Mirror the existing UFS file system by using SVM. After both submissions are in sync, migrate one of the submissions to a ZFS file System by usingLive Upgrade.

D. Create the new ZFS file system by using zfs create import to import data from the existing UFSfile system into the new ZFS file system

E. Create the new zfs file system by using the zfs create -oshadow.



Migrating Data With ZFS Shadow Migration ZFS shadow migration is a tool you can use to migrate data from an existing file system to a newfile system. A shadow file system is created that pulls data from the original source as necessary. You can use the shadow migration feature to migrate file systems as follows: * A local or remote ZFS file system to a target ZFS file system * A local or remote UFS file system to a target ZFS file system Shadow migration is a process that pulls the data to be migrated: * Create an empty ZFS file system. * Set the shadow property on an empty ZFS file system, which is the target (or shadow) filesystem, to point to the file system to be migrated. For example: # zfs create -o shadow=nfs://system/export/home/ufsdata users/home/shadow2 * Data from file system to be migrated is copied over to the shadow file system. Reference: Transitioning From Oracle Solaris 10 to Oracle Solaris 11, Migrating Data With ZFSShadow Migration

QUESTION 38View the Exhibit to inspect the file system configuration on your server.

Your department's backup policy is to perform a full backup to remote system disk on Saturday.On each weekday, you are to perform an incremental backup to the same remote system disk.Each incremental backup will contain only data that has been modified since the previousSaturday backup.The server file systems must remain available at all times and can never be taken offline. Thebackup must not only provide for the recovery of the most recent version of a file, but must alsoallow recovery of previous versions of a file.Following your company policy, which two describe the correct procedure to be performed onSaturday for backing tip the /data file system to a remote disk named /remote/backup?

A. On Saturday: zfs snapshot pool1/data@sat zfs send pool1/data@sat > /remote/backup/full

B. On Saturday: zfs create snapshotpool1/data@sat zfs send pool1/data@sat | zfs recv remote/backup/ ‘date’ ‘+%m%d%y’

C. On Saturday: zfs create snapshotpool1/data@sat zfs send pool1/data@sat > /remote/backup/full

D. On Saturday:zfs create snapshotpool1/data@sat zfs send pool1/data@sat | zfsrecv remote/backup



You can use the zfs send command to send a copy of a snapshot stream andreceive the snapshot stream in another pool on the same system or in another pool on a differentsystem that is used to store backup data. You can send incremental data by using the zfs send -i option. For example: host1# zfs send -i tank/dana@snap1 tank/dana@snap2 | zfs recv newtank/dana Note that the first argument (snap1) is the earlier snapshot and the second argument (snap2) isthe later snapshot. In this case, the newtank/dana file system must already exist for theincremental receive to be successful. The incremental snap1 source can be specified as the last component of the snapshot name. Thisshortcut means you only have to specify the name after the @ sign for snap1, which is assumedto be from the same file system as snap2. For example: host1# zfs send -i snap1 tank/dana@snap2 > zfs recv newtank/dana This shortcut syntax is equivalent to the incremental syntax in the preceding example. Reference: Oracle Solaris ZFS Administration Guide, Sending and Receiving ZFS Data

QUESTION 39Select the five tasks that need to be performed on the Automated Installer (AI) install server beforesetting up the client.

A. Create a local IPS repository on the AI Install server and start the repository server service, thepublisher origin to the repository file.

B. Set up a IP address on the AI install server. C. The DHCP server must be enabled on the install server and must provide the DHCP service for

the clients. D. DHCP must be available on the network for the Install server and the clients, but the install

server does not need to be the DHCP server. E. Download the AI boot image. The image must be the same version as the Oracle Solaris OS

that you plan to install on the client. F. Download the text install image into the IPS repository.G. Install the AI installation tools. H. Create the AI install service.Specify the path to the AI network boot image ISO file and the path

where the AI net image ISO file should be unpacked. I. Create the AI install service. Specify the path to the AI network boot image ISO file and the path

to the IPS repository.

Correct Answer: BDFGISection: (none)Explanation


B:Configure the AI install server to use a static IP address and default route. D: The create-service command can set up DHCP on the AI install server. If you want to set up aseparate DHCP server or configure an existing DHCP server for use with AI. The DHCP servermust be able to provide DNS information to the systems to be installed. E: An automated installation of a client over the network consists of the following high-level steps:

1. The client system boots over the network and gets its network configuration and the location ofthe install server from the DHCP server. 2. The install server provides a boot image to the client. 3. Characteristics of the client determine which installation instructions and which systemconfiguration instructions are used to install the client. 4. The Oracle Solaris 11 OS is installed on the client, pulling packages from the packagerepository specified by the installation instructions in the AI install service. G: Install the AI tool set. Use the installadm create-service command to create an AI install service. Give the service ameaningful name, and specify the path where you want the service created. Specify the source ofthe network boot image (net image) package or ISO file. installadm create-service [-n svcname] [-s FMRI_or_ISO] [-d imagepath] -d imagepath The imagepath is the location of the new install service. The install-image/solaris-auto-install package is installed to this location, or the specified ISO file is expanded at this location. Reference: Installing Oracle Solaris 11 Systems, Create an AI Install Service


QUESTION 40ServerA contains two ISO images of a package repository named so1.repo.iso-a and so1.repo.iso-b respectively. You need to create a single local package repository on server that clients canconnect to. The package repository will be stored on the /export/IPS file system and named repo.The preferred publisher will be named solaris and the publisher URL will behttp://serverA.example.com.Which is the correct procedure to perform on ServerA to create the local Package repository?

A. cat so1.repo.iso-a sol.repo.iso-b > so1.full.iso Mount the ISO image and use the rsync command to extract the contents of the ISO file to the/export/IPS file system. Set the pkg/inst_root property to /export/IPS/repo and the pkg/readonly property to true. Set the preferred publisher by using pkg set-publisher-G http://pkg.oracle.com/solaris/release/ \ -g http”//serverA.example.com/ solaris

B. cat so1.repo.iso-a so1.repo.iso-b > /export/IPS/repo Set the pkg/inst_root property to true and the pkg/readonly property to /export/IPS Set the preferred publisher by using pkg set-publisher-G http://serverA.example.com/ \ -g http://pkg/oracle.com/solaris/rekease/solaris

C. cat so1.repo.iso-a so1.repo.iso-b > so1.full.iso Mount the ISO image and use the rsync command to extract the contents of the ISO file to/export/IPS/repo Set the pkg/inst_root property to /export/IPS/repo and the pkg/readonly property to true Set the preferred publisher by using pkg set-publisher solaris \ -g http://pkg.oracle.com/

D. cat so1.repo,iso-a so1.repo.iso-b > /export/IPS/repo.iso Mount the ISO image and copy the repo directory from the ISO image to /export/IPS/repo set the pkg/inst_root property and thepkg/readonly property to /export/IPS/repo set the preferred pkg/inst_root property by using pkg set-publisher-G http://serverA.example.com/ \ -g http://pkg.oracle.com/solaris.com/release/-p solaris



Concatenate the files into one file using the cat command. Make the contents of the repository .iso file available using the mount command. To increase the performance of repository accesses and to avoid the need to remountthe .iso image each time the system restarts, copy the repository files from /mnt/repo/to a ZFS filesystem. You can do this copy with rsync or with tar. Reference: Copying and Creating Oracle Solaris 11 Package Repositories, Copying a RepositoryFrom a File

QUESTION 41You want to configure an iSCSI target device on your system.Select the group package required to install this functionality on your system.

A. storage-server B. solaris-small-server C. storage-avs D. storage-nas



How to Create an iSCSI LUN The disk volume provided by the server is referred to as the target. When the LUN is associatedwith an iSCSI target, it can be accessed by an iSCSI initiator. The following tasks are completed on the system that is providing the storage device. 1. Install the COMSTAR storage server software. target# pkg install storage-server Etc.

QUESTION 42The core dump configuration in your non global zone is

A user is running a process in a non-global zone (testzone) and the process crashes. The process informationis: user126632618017:46:42pts/20:00/usr/bin/bashWhen the user's process crashes in testzone, a non-global zone, where will the core dump be saved?

A. The file will be stored in the non-global zone's directory: /var/core/pprocess/core.hash.2663. B. The file will be saved in the global zone's directory: /var/core/core.bash.2663. C. A core file cannot be generated in a non-global zone because it shares the kernel with the global zone. D. The file will be stored in the global zone's directory: /var/core/pprocess/core.bash.2663. E. The file will be saved in non-global zone’s directory: /var/core/core.bash.2663



The line init core file pattern: /var/core/core.%f.%p will be used for the non-global process to determine the destination of the dump file. Note: When a process is dumping core, up to three core files can be produced: one in the per-process location, one in the system-wide global location, and, if the process was running in a local(non-global) zone, one in the global location for the zone in which that process was running. Reference: man coreadm

QUESTION 43You create a flash archive of the Solaris 10 global zone on the serves named sysA. The archivename is s10-system.flar, and it is stored on a remote server named backup_server.On sysA, you create a Solaris 10 branded zone named s10-zone.You want to use the flash archive, located On" /net/bactup_servers/10-system.flar, to install theOperating system in the s10-zone zone.Which command do you choose to install the s10-system.flar archive in the Solaris 10 branded zone (s10-zone)?

A. zoneadm-z s10-zone install-a /net/backup_server/s10-system.flar-u B. zonecfg-z s10-zone install-a /net/backup_server/s10-system.flar-u C. zoneadm-z s10-zone clone-s /net/backup_server/s10-system.flar D. zone cfg-a s10-zone create-t SUNWsolaris10\

</net/backup_server/s10-system.flar E. zonecfg-z s10-zone install-f /net/backup/backup_server/s10-system.flar



The zoneadm command is the primary tool used to install and administer non-globalzones. Operations using the zoneadm command must be run from the global zone on the targetsystem.

How to Install the solaris10 Branded Zone A configured solaris10 branded zone is installed by using the zoneadm command with the installsubcommand. Example: global# zoneadm -z s10-zone install -a /net/machine_name/s10-system.flar –u Reference: System Administration Guide: Oracle Solaris Zones, Oracle Solaris 10 Containers, andResource Management, Install the solaris10 Branded Zone

QUESTION 44How should you permanently restrict the non-global zone testzone so that it does not use morethan 20 CPU shares while it is running?

A. While configuring the zone, add this entry: add rct1 set name = capped.cpu-shares add value (priv = privileged, limit = 20, action = none) end exit

B. While configuring the zone, add this entry: add rct1 set name= zone.cpu-shares add value (priv=privileged, limit=20, action=none) end exit from command line, enter: # dispadmin-d FSS

C. From the command line enter: #prct1-n zone.cpu-shares-r-v 20-i zone testzone

D. From the command line, enter: #prct1-n zone.cpu-shares-v 80-r-i zone global



The prctl utility allows the examination and modification of the resource controlsassociated with an active process, task, or project on the system. It allows access to the basic andprivileged limits and the current usage on the specified entity. How to Change the zone.cpu-shares Value in a Zone Dynamically This procedure can be used in the global zone or in a non-global zone. For more information about roles, see Configuring and Using RBAC (Task Map) in SystemAdministration Guide: Security Services. # prctl -n zone.cpu-shares -r -vvalue-i zonezonename idtype is either the zonename or the zoneid. value is the new value. Note:project.cpu-shares Number of CPU shares granted to a project for use with the fair share scheduler Reference: man prtcl

QUESTION 45You display the IP Interface information with ipmpstat - iWhich two characteristics are indicated by characters that may be included in the FLAGS column?

A. default route B. IP forwarding enabled C. allocated to global zone D. unusable due to being inactive E. nominated to send/receive IPv4 multicast for its IPMP group



The ipmpstat command concisely displays information about the IPMP subsystem. Itsupports five different output modes, each of which provides a different view of the IPMPsubsystem (address, group, interface, probe, and target), described below. -i Display IP interface information (“interface” output mode). Interface Mode Interface mode displays the state of all IP interfaces that are tracked by in.mpathd on the system.The following output field is one of the supported: FLAGS Assorted information about the IP interface: i (D) Unusable due to being INACTIVE. s Marked STANDBY. m (E) Nominated to send/receive IPv4 multicast for its IPMP group. b Nominated to send/receive IPv4 broadcast for its IPMP group. M Nominated to send/receive IPv6 multicast for its IPMP group. d Unusable due to being down. h Unusable due to being brought OFFLINE by in.mpathd because of a duplicate hardware address. Reference: man ipmpstat

QUESTION 46You are going to use the- Automated installer (AI) to install a non global zone named zone1. Youhave created a custom manifest for the non-global zone and named it zone1manifestWhich command will you use to add this custom manifest to the s11-sparc install service andassociate this custom manifest with the non-global zone?

A. installadm create-profile-n s11-sparc-f /tmp/zone1manifest.xml-c B. installadm create-manifest-n s11-sparc-f /tmp/zone1manifest.xml-m C. installadm create-client-n s11-sparc-f /tmp/zone1manifest.xml-m zone1manifest-c zonename=“zone1” D. installadm create-service-n s11-sparc-f /tmp/zone1manifest.xml-m zone1manifest-c zonename=”zone1”

Correct Answer: BSection: (none)

Explanation


installadm add-manifest Associates manifests with a specific install service, thus making the manifests available on the network, independently from creating a service. When publishing a non-default manifest, it is required to associate criteria either via criteria entered on the command line (-c) or via a criteria XML file (-C). Reference: installadm

QUESTION 47Identify the correctly matching pair of equivalent functionality of JumpStart and Automated installer (AI).

A. JumpStart: begin script AI: package repository

B. JumpStart: setup_server AI: installadm create-service

C. JumpStart: add_Install_client AI: SMF system configuration profile files

D. JumpStart: finish scripts and sysidsfg files AI: manifest files



JumpStart:Use the setup_install_server(1M) command. AI: Use the installadm create-service command. Reference: Transitioning From Oracle Solaris 10 JumpStart to Oracle Solaris 11 AutomatedInstaller, Similarities and Differences Between JumpStart and AI

QUESTION 48You are setting up an automated installer (AI) install server and issue the following command: installadm create-service -n prod_ai -s /repo/prod_ai.iso \-i 192.168.1.100 -c 5 -d /export/repoWhich four options describe the install server that you have configured?

A. Theservicename is prod_ai. B. DHCP base IP address is 192.168.1.100 C. The initial IP address for the install clients will be 192.168.1.100. This IP address is temporary.

After the client is booted, it will use IP addresses in the following range:192.168.1.101-105. D. Five IP addresses are allocated for DHCP clients, starting with 192.168.1.100. E. The Install server will support up to five clients. F. The AI net image ISO file is located in /repo/prod and the net image ISO will be unpacked in

/export/repo. G. The AI net image ISO file is located in /repo/repo and is named /repo/prod/_ai.iso.

Correct Answer: ABDFSection: (none)Explanation


A:-n <svcname> Uses this install service name instead of default service name. B: -i <dhcp_ip_start> Sets up a new DHCP server. The IP addresses, starting from dhcp_address_start, are set up. D: -c <count_of_ipaddr> Sets up a total number of IP addresses in the DHCP table equal to the value of the count_of_ipaddr. The first IP address is the value of dhcp_ip_start that is provided by the -i option. F: -s <srcimage> Specifies location of AI ISO image to use for setting up the install service. <targetdir> Required: Specifies location to set up net image. Reference: man installadm

QUESTION 49Your mentor suggests using the dladm rename-link command to rename the network datalinks. What are the two advantages of following this advice?

A. It can clarify which network interface has what purpose. B. It can simplify specifying the network interface with the dladm modify-aggrcommand.C. It can simplify specifying the network interface with the dladmmodify-bridge command. D. Itcan simplify IP filter rule changes if the network interface is replaced with a different type. E. It can prevent accidental deletion of the network interface with the dladm delete-phys command. F. It can prevent accidental deletion of the network interface configuration with the ipadm delete-addr

command.

Correct Answer: AESection: (none)Explanation


A: To rename the bge0 link to mgmt0, enter the following command: # dladm rename-link bge0 mgmt0 E: Consider that the bge0 device, whose link was named mgmt0 as shown in the previousexample, needs to be replaced with a ce0 device because of a hardware failure. The bge0 NIC is

physically removed, and replaced with a new ce0 NIC. To associate the newly added ce0 devicewith the mgmt0 configuration previously associated with bge0, enter the following command: # dladm rename-link ce0 mgmt0 Note: How to Rename a Datalink Use this procedure if you want to change a datalink name to a customized name. For example,some of the datalinks in upgraded system might have retained legacy hardware-based names andyou want to change these names to generic ones. Note: dladm rename-link [-R root-dir] link new-link Rename link to new-link. This is used to give a link a meaningful name, or to associate existinglink configuration such as link properties of a removed device with a new device.

QUESTION 50You are asked to troubleshoot networking issues on an unfamiliar system.Select the correct command to display what network devices are installed.

A. ifconfig -a B. dladm show-dev C. dladm show-phys D. dladm show-ether E. netadm show-dev F. netadm show-ether



dladm show-dev Shows information for all devices or the specified device. Reference: man dladm

QUESTION 51The core dump configuration for your system is:

A user is running a process in the global zone and the process crashes. The process information is: User1 2663 2618 0 17:46:42 pts/2 0:00 /usr/bin/bashThe server host name is: zeusWhat will the per-process core file be named?

A. core.bash.2663.global

B. core.bash.2663.zeus C. /var/core/core.bash.2663 D. /var/core/core.bash.2663.global



Note the first line: global core file pattern: /globalcore/core.%f.%p The program name is bash The runtime process ID is 2663 Note:By default, the global core dump is disabled. You need to use the coreadm command withthe -e global option to enable it. The -g option causes the command to append the programname(%f) and the runtime process ID (%p) to the core file name. Reference: Core Dump Management on the Solaris OS

QUESTION 52Select two statements that correctly describe the capabilities of the Distribution Constructor.

A. ISO images for use with the Automated Installer (AI) can be created. B. Bootable USB images can be created for SPARC and x86 architectures. C. A single installation server can be used to create ISO images for SPARC and x86 architectures. D. Checkpoints can be used to pause the build, allowing scripts to run that modify the resulting ISO Image. E. A single Installation server can be used to create ISO images for Solaris 10 and Solaris11 operating

systems.



A:You can use the distribution constructor to create the following types of OracleSolaris images: * (A) x86 or SPARC ISO Image for Automated Installations * Oracle Solaris x86 live CD image * x86 or SPARC Oracle Solaris text installer image * x86 Oracle Solaris Virtual Machine Note: You can use the distribution constructor to build custom Oracle Solaris images. Then, youcan use the images to install the Oracle Solaris software on individual systems or multiplesystems. You can, also, use the distribution constructor to create Virtual Machine (VM) imagesthat run the Oracle Solaris operating system. D: Checkpointing Options You can use the options provided in the distro_const command to stop and restart the buildprocess at various stages in the image-generation process, in order to check and debug the imagethat is being built. This process of stopping and restarting during the build process is calledcheckpointing.

Reference: Oracle Solaris 11 Express Distribution Constructor Guide, What are the Componentsin the Distribution Constructor?

QUESTION 53The current ZFS configuration on serverA is: Pool1c3t2d0c3t3d0Pool2c3t4d0c3t5d0The ZFS configuration on serverB is: Pool1mirror-0c3t2d0c3t3d0mirror-1c3t4d0c3t5d0You need to change serverA’s ZFS configuration to match serverB’s configuration. Which option should you choose to modify the configuration on serverA so that it matchesserverB’s configuration?

A. zpool destroy pool2 zpool attach pool1 c3t4d0 ct3t5d0

B. zpool destroy pool2 zpool attach pool1 c3t2d0 c3t2d0 c3t4d0 c3t5d

C. zpool destroy pool2 zpool add pool1 c3t4d0 c3t5d0

D. zpool destroy pool2zpool mirror pool1 pool2

E. zpool destroy pool2 zpool attach pool1 c3t2d0 c3t4d0 zpool attach pool1 c3t3d0 c3t5d0

F. zpool destroy pool1 zpool destroy pool2 zpool create pool1 mirror c3t2d0 c3t3d0 c3t4d0 c3t5d0

Correct Answer: FSection: (none)Explanation


Wedestroy both pools. Then we recreate the mirror. Note: zpool attach [-f] pool device new_device Attaches new_device to an existing zpool device. The existing device cannot be part of a raidzconfiguration. If device is not currently part of a mirrored configuration, device automaticallytransforms into a two-way mirror of device and new_device. If device is part of a two-way mirror,attaching new_device creates a three-way mirror, and so on. In either case, new_device begins toresilver immediately. Reference: man zpool

QUESTION 54

Which three statements accurately describe the Automated Installation (AI) client?

A. If the AI client does not match any criteria to use a custom manifest or script, the default manifest is used. B. If the AI client does not match any criteria to use a custom manifest or script, the automated installation

borts. C. Any manifest or script in a service can be designated to be the default for that service. D. Only the default.xmlfile is used as the default AT client manifest. E. If a client system does not use any SC profile, then an interactive tool opens on that client at

first boot after that client installation to complete the configuration of that client. F. If a client system does not use any SC profile, then the install server will use the default SC profile.

Correct Answer: ADESection: (none)Explanation


A: Each client uses one and only one AI manifest to complete its installation. The AImanifest is selected for a client according to the following algorithm: * If no custom AI manifests are defined for this install service, the default AI manifest is used. Thedefault AI manifest is not associated with any client criteria etc. D: When you create a new install service,install_service_image_path/auto_install/manifest/default.xml is the initial default AI manifest forthat install service. E: Each client can use any number of system configuration profiles. If a client system does not useany configuration profile, then an interactive tool opens on that client at first boot after that clientinstallation to complete the configuration of that client. Reference: Installing Oracle Solaris 11 Systems, Customizing Installations

QUESTION 55You are going to create live zones on you server. Disk space is critical on this server so you needto reduce the amount of disk space required for these zones. Much of the data required for each ofthese zones is identical, so you want to eliminate the duplicate copies of data and store only datathat is unique to each zone.Which two options provide a solution for eliminating the duplicate copies of data that is commonbetween all of these zones?

A. Create the zones by using sparse root zones. B. Set the dedup property to on and the dedupratio to at least 1.5 for thezpool.

Create a separate ZFS file system for each zone in the zpool. C. Put all of the zones in the same ZFS file system and set the dedupratio property for the ZFS file

system to at least 1.5. D. Put all of the zones in the same ZFS file system and set the dedup property for the file system to on. E. Put each zone in a separate ZFS file system within the same zpool.

Set thededupproperty to on for each ZFS file system.


Explanation/Reference:

Explanation:

In Oracle Solaris 11, you can use the deduplication (dedup) property to removeredundant data from your ZFS file systems. If a file system has the dedup property enabled,duplicate data blocks are removed synchronously. The result is that only unique data is stored,and common components are shared between files.

QUESTION 56Solaris 11 includes a redesigned software packaging model: the Image Packaging system.Which three describe advantages of the Image Packaging System over the previous Solaris 10SVR4 packaging model?

A. Eliminates patching of the software package B. Makes the patching process more efficient with less downtime C. Eliminates OS version upgrade D. Allows for the installation of the OS without a local DVD or installation server E. Allows the use of a repository mirror to speed up package operation F. Allows users to publish their own software package in a software repository

Correct Answer: ADFSection: (none)Explanation


A: In contrast to the SVR4 packaging model used in earlier Oracle Solaris releases,IPS eliminates the need for patching.

QUESTION 57You have Solaris 11 system with a host name of sysA and it uses LDAP as a naming service. You have created a flash archive of sysA and you want to migrate this system to an OracleSolaris11 server, Solaris10 branded zone. The zone Status on the Oracle Solaris 11 server is:- zone10 incomplete/zone/zone1solaris10exc1Select the option that will force the non-global zone to prompt you for a host name and nameservice the first time it is booted.

A. Use zonecfg to change the zonename before booting the system for the first time B. Use the-u option with the zoneadm-z zone10 attach command. C. Use the-u option with the zoneadn-z zone10 install command. D. Remove the sysidcfg file from the <zonepath>/root directory before booting the non-global zone.



Oracle Solaris 10 branded zones – Oracle Solaris 10 Zones provide an OracleSolaris 10 environment on Oracle Solaris 11. You can migrate an Oracle Solaris 10 system orzone to a solaris10 zone on an Oracle Solaris 11 system in the following ways: * Create a zone archive and use the archive to create an s10zone on the Oracle Solaris 11system. This option applies in the current scenario.

Example of command to Install the Oracle Solaris 10 non-global zone. s11sysB# zoneadm -z s10zone install -u -a /pond/s10archive/s10.flar * Detach the zone from the Oracle Solaris 10 system and attach the zone on the Oracle Solaris 11zone. The zone is halted and detached from its current host. The zonepath is moved to the targethost, where it is attached. Note: install [-x nodataset] [brand-specific options] A subcommand of the zoneadm. Install the specified zone on the system. This subcommand automatically attempts to verify first. Itrefuses to install if the verify step fails. -u uuid-match Unique identifier for a zone, as assigned by libuuid(3LIB). If this option is present and theargument is a non-empty string, then the zone matching the UUID is selected instead of the onenamed by the -z option, if such a zone is present. Reference: Oracle Solaris 11 Information Library, Transitioning an Oracle Solaris 10 Instance toan Oracle Solaris 11 System

QUESTION 58You upgraded your server to Oracle Solaris 11 and you imported zpool (pool1) that was created inSolaris 10. You need to create an encrypted ZFS file system in pool1, but first you need to makesure that your server supports ZFS encryption.Which four statements are true for support of ZFS encryption?

A. The encrypted file system must have been created in Oracle Solaris11. To encrypt a ZFS filesystem from a previous version of Solaris, upgrade the zpool and create a new encrypted ZFS filesystem into the encrypted ZFS file system.

B. If you plan to create an encrypted file system in an existing zpool, the zpool must be upgradedto ZFS version 30.

C. ZFS encryption is integrated with the ZFS command set and no additional packages need to be installed. D. ZFS encryption requires that the ZFS Dataset Encryption package be installed. E. If you plan to create an encrypted file system in an existing zpool, the pool must be upgraded to

ZFS version 21, minimum. F. Encryption is supported at the pool or dataset (file system) level. G. Encryption is supported at the pool level only for every file system in the pool will be encrypted. H. You cannot create an encrypted file system in a zpool that was created prior to oracle

Solaris11. Create a new zpool in Solaris11, create an encrypted ZFS file system in the new zpool,and move or copy the data from the existing file system into the new encrypted file system.

Correct Answer: ABCFSection: (none)Explanation


A (not H): You can use your existing storage pools as long as they are upgraded.You have the flexibility of encrypting specific file systems. B(not E): Can I enable encryption on an existing pool? Yes, the pool must be upgraded to pool version 30 to allow encrypted ZFS file systems andvolumes. C(not D): ZFS encryption is integrated with the ZFS command set.Like other ZFS operations,

encryption operations such as key changes and rekey are performed online. F (not G): Encryption is the process in which data is encoded for privacy and a key is needed bythe data owner to access the encoded data. You can set an encryption policy when a ZFS datasetis created, but the policy cannot be changed. Reference: Oracle Solaris ZFS Administration Guide, Encrypting ZFS File Systems

QUESTION 59Identify three options that describe the new Oracle Solaris 11 zone features.

A. There are boot environments for zones. B. Administrators can delegate common administration tasks by using RBAC. C. Oracle Solaris 11 supports Solaris 8, 9, and 10 branded zones. D. You can migrate a physical Solaris 10 system and its non-global zones to a solaris10 branded

zone running on an Oracle Solaris 11 system. E. It is possible to change the host ID of a zone.

Correct Answer: ABDSection: (none)Explanation


A:The beadm utility includes support for creating and administering non-global zoneboot environments. Note: A boot environment is a bootable instance of the Oracle Solaris operating system imageplus any other application software packages installed into that image. System administratorscanmaintain multiple boot environments on their systems, and each boot environment can havedifferent software versions installed. B: Role-based access control (RBAC) is a security feature for controlling user access to tasks thatwould normally be restricted to the root role. By applying security attributes to processes and tousers, RBAC can divide up superuser capabilities among several administrators.

QUESTION 60You run the command dlstat show-link -r.Select the two correct statements regarding the information displayed in the INTRS column.

A. No value is listed for virtual network interfaces. B. A value of 0 is listed for virtual interfaces and ether stubs. C. The number of Interrupts is listed, which indicates network efficiency. D. A number equal to the number of transmitted Ethernet frames is listed for physical links. E. The number of packets that were interrupted by a collision is listed, which may indicate hardware problems.

Correct Answer: CESection: (none)Explanation


In this output, the statistics for interrupt (INTRS) are significant. Low interruptnumbers indicate greater efficiency in performance. If the interrupt numbers are high, then youmight need to add more resources to the specific link. Example: # dlstat -r -i 1

LINK IPKTS RBYTES INTRS POLLS CH<10 CH10-50 CH>50 e1000g0 101.91K 32.86M 87.56K 14.35K 3.70K 205 5 nxge1 9.61M 14.47G 5.79M 3.82M 379.98K 85.66K 1.64K vnic1 8 336 0 0 0 0 0 e1000g0 0 0 0 0 0 0 0 nxge1 82.13K 123.69M 50.00K 32.13K 3.17K 724 24 vnic1 0 0 0 0 0 0 0 Note:dlstat show-link [-r [-F] | -t] [-i interval] [-a] [-p] [ -o field[,...]] [-u R|K|M|G|T|P] [link] Display statistics for a link. -r Display receive-side statistics only. Includes bytes and packets received, hardware and softwaredrops, and so forth. List of supported RX fields: link iusedby ibytes ipkts intrs polls hdrops: hardware drops sdrops: software drops (owing to bandwidth enforcement) ch<10: number of packet chains of length < 10 ch10-50: number of packet chains of length between 10 and 50 ch>50: number of packet chains of length > 50 Reference: man dlstat

QUESTION 61You need to set up a local package repository to serve 75 client systems. Multiple clients will beingthe package repository concurrently and you need to ensure that the local repository performsvery well under this heavy load, especially during package intensive operations.Which option would ensure the best performance of the repository during package-intensiverations by multiple clients?

A. Set up multipathing on the package repository server to distribute the network load multiplenetwork interfaces.

B. Deploy a second instance of the package repository server to run as a read writable mirror. C. Deploy a second instance of the package repository server to run asa read-only mirror. D. Deploy a second instance of the package repository server to run as a clone of the primary

repository server. E. Deploy a package repository locally on each client.



QUESTION 62View the Exhibit and review the zpool and ZFS configuration information from your system.

Identify the correct procedure for breaking the /prod_data mirror, removing c4t0d0 and c4t2d0, andmaking the data on c4t0d0and c4t2d0 accessible under the dev_data mount point.

A. zpool split pool1 pool2 c4t0d0 c4t2d0 zpool import pool2 zfs set mountpoint = /dev_data pool2/prod_data

B. zpool detach pool1 pool2 zpool attach pool2 zfs set mountpoint=/dev_data pool2/prod_data

C. zpool split pool1/prod_data-n pool2/dev_data zfs set mountpoint = /dev_data pool2/prod_data

D. zpool split pool1 pool2 c4t0d0 c4t2d0 zpool import pool2



In this Solaris release, you can use the zpool split command to split a mirroredstorage pool, which detaches a disk or disks in the original mirrored pool to create anotheridentical pool. After the split operation, import the new pool. Reference: Oracle Solaris ZFS Administration Guide, Creating a New Pool By Splitting a MirroredZFS Storage Pool

QUESTION 63Which modification needs to be made to the Service Management Facility before you publish anew package to the IPS repository?

A. The pkg.depotd must be disabled. B. The pkg/readonly property for the application/pkg/server service must be set tofalse C. The pkg/writable_root property for the application/pkg/server service must be set to true.

D. The pkg/image_root property for the application/pkg/server service must be set to the location of therepository.



pkg/image_root (astring) The path to the image whose file information will be used as a cache for file data. Reference: man pkg.depotd

QUESTION 64United States of America export laws include restrictions on cryptography.Identify the two methods with which these restrictions are accommodated in the Oracle Solaris 11Cryptographic Framework.

A. Corporations must utilize signed X.509 v3 certificates. B. A third-party provider object must be signed with a certificate issued by Oracle. C. Loadable kernel software modules must register using the Cryptographic Framework SPI. D. Third-party providers must utilize X.509 v3 certificates signed by trusted Root Certification Authorities.E. Systems destined for embargoed countries utilize loadable kernel software modules that restrict encryption

to 64 bit keys.



B: Binary Signatures for Third-Party Software The elfsign command provides a means to sign providers to be used with the Oracle SolarisCryptographic Framework. Typically, this command is run by the developer of a provider. The elfsign command has subcommands to request a certificate from Sun and to sign binaries.Another subcommand verifies the signature. Unsigned binaries cannot be used by the OracleSolaris Cryptographic Framework. To sign one or more providers requires the certificate from Sunand the private key that was used to request the certificate. C: Export law in the United States requires that the use of open cryptographic interfaces berestricted. The Oracle Solaris Cryptographic Framework satisfies the current law by requiring thatkernel cryptographic providers and PKCS #11 cryptographic providers be signed. Reference: System Administration Guide: Security Services, Oracle Solaris CryptographicFramework

QUESTION 65You are setting up a local IPS package repository on your Oracle Solaris11 server: solaris.example.com.You want to point the existing local IPS publisher to the new local IPS repository located in /repo.These are the stops that you have followed: 1. Download and rsync the contents of the Oracle Solaris11 repository ISO image to the /repo directory.2. Configure the repository server service properties. The svcprop command display, the IPSrelated properties:

pkg/inst_root astring/repopkg/readonly Boolean trueThe 1s command displays the contents of the /repo directory: #ls/repoPkg5.repository publisherThe svcs publisher command shows the svc: /application/pkg/server: default service is online.The pkg publisher command shows the svc: /application/pkg/server: default service is online.The pkg publisher command still displays: PUBLISHERTYPESTATUSURIsolarisoriginonlinehttp://pkg.oracle.com/solaris/release/Which steps needs to be performed to set the local IPS publisher to the local IPS repository/repo?

A. Issue the pkgrepo refresh-s command to refresh the repository. B. Restart thesvc:/application/pkg/server:default service. C. pkg set-publisher command to set the new repository location. D. Issue the pkgrepo rebuild command to rebuild the repository. E. Issue the pkgrepo set command to set the new repository location.



Set the Publisher Origin To the File Repository URI To enable client systems to get packages from your local file repository, you need to reset theorigin for the solaris publisher. Execute the following command on each client: Example: # pkg set-publisher -G '*' -M '*' -g /net/host1/export/repoSolaris11/ solaris Reference: Oracle Solaris 11 Information Library, Set the Publisher Origin To the File RepositoryURI

QUESTION 66New features wore added to ZFS in Oracle Solaris11. Your justification to upgrade from Solaris10 to oracleSolaris11 is that it will be possible to take advantage of the enhancements that were made to ZFS.Identify the three ZFS functions and features that are included in Oracle Solaris 11, but not in Solaris 10.

A. Encrypted ZFS datasets B. Ability for ZFS to detect and remove redundant data from the tile system C. Shadow Data Migration D. Ability to split a mirrored ZFS storage pool E. Ability to use ZFS on the boot drive and boot to a ZFS root file system. F. elimination of the swap file system when using ZFS on the root disk

Correct Answer: ABESection: (none)Explanation


A:ZFS encryption was introduced in ZFS Pool Version Number 30, Solaris Nevadab149. Filesystem encryption since Solaris 11 Express

B: Deduplication was introduced in ZFS Pool Version Number 21, Solaris Nevada b128. E: Booting From a ZFS Root File System Both SPARC based and x86 based systems use the new style of booting with a boot archive,which is a file system image that contains the files required for booting. When a system is bootedfrom a ZFS root file system, the path names of both the boot archive and the kernel file areresolved in the root file system that is selected for booting. Reference: Oracle Solaris ZFS Administration Guide, Booting From a ZFS Root File System

QUESTION 67You are troubleshooting the Oracle Solaris11 Automated Installer (AI), which is not connectingwith the IPS software repository.Which three steps will help determine the cause of DNS name resolution failure?

A. Verify the contents of /etc/resolve.conf. B. Run netstat-nr to verify the routing to the DNS server. C. Ping the IP address of the IPS server to verify connectivity. D. On the installation server, verify that the menu.1st file for the client points to a valid boot arc hive. E. Run df-k to verify that the boot directory containing the boot archive is loopback mounted under

/etc/netboot. F. Run the command /sbin/dhcpinfo DNSserv to ensure that the DHCP server providing the DNS

server information.

Correct Answer: ABFSection: (none)Explanation


Check DNS * (A) Check whether DNS is configured on your client by verifying that a non-empty/etc/resolv.conf file exists. * (F) If /etc/resolv.conf does not exist or is empty, check that your DHCP server is providing DNSserver information to the client: # /sbin/dhcpinfo DNSserv If this command returns nothing, the DHCP server is not set up to provide DNS server informationto the client. Contact your DHCP administrator to correct this problem. * (B) If an /etc/resolv.conf file exists and is properly configured, check for the following possibleproblems and contact your system administrator for resolution: **The DNS server might not be resolving your IPS repository server name. **No default route to reach the DNS server exists. Reference: Installing Oracle Solaris 11 Systems, Client Installation Fails

QUESTION 68You created a new zpool. Now you need to migrate the existing ZFS file system from pool1/prod topool2/prod.You have these requirements: 1. Users must have access to the data during the migration, so you cannot shutdown the filesystem while the migration takes place.2. Because you want to copy the data as quickly as possible, you need to increase the serverresources devoted to the ZFS migration.Which method would you use to modify the ZFS shadow migration daemon defaults to increasethe concurrency and overall speed of migration?

A. Svccfg-s filesystem/shadowd:default setprop config_params/shadow_threads=integer: 16 end svcadm refresh filesystem/shadowd: default

B. Specify the-b <blocksize> option with the zfs create command and increase the value of<blocksize>

C. Use the-o -volblocksize=<blocksize>option with the zfs create command and increase the valueof the default <blocksize>.

D. Svccfg-s filesystem/zfs: default setprop config_params/shadow_threads = integer: 16 end svcadm refresh filesystem/zfs:default



shadowd is a daemon that provides background worker threads to migrate data fora shadow migration. A shadow migration gradually moves data from a source file system into anew “shadow” file system. Users can access and change their data within the shadow file systemwhile migration is occurring. The shadowd service is managed by the service management facility, smf(5). Administrativeactions on this service, such as enabling, disabling, or requesting restart, can be performed usingsvcadm(1M). The service's status can be queried using the svcs(1) command. The svccfg(1M) command can be used to manage the following parameter related to shadowd: config_params/shadow_threads Note: Oracle Solaris 11: In this release, you can migrate data from an old file system to a new filesystem while simultaneously allowing access and modification of the new file system during themigration process. Setting the shadow property on a new ZFS file system triggers the migration of the older data. Theshadow property can be set to migrate data from the local system or a remote system with eitherof the following values: file:///path nfs://host:path Reference: man shadowd

QUESTION 69The current ZFS configuration on server is:

You need to backup the /data file system while the file system is active.Select the option that creates a full backup of the /data file system and stores the backup onserver in the pool named backup.

A. Mount-F nfs system: /backup / mnt zfs snapshot pool/data@monday>/mnt/Monday

B. Mount-F nfs systemB: /backup/mnt zfs snapshot pool1/data@Monday zfs clone pool1/data@monday/mnt/Monday

C. Zfs send pool1/data@Monday | ssh system zfs recv backup/monday D. Zfs snapshot pool1/data@Monday | ssh system zfs recv backup/monday



Example (assuming there exists a snapshot ‘tank/test@1). Full backup Now let’s do a full initial backup from the ‘tank/test@1 snapshot: # zfs send tank/test@1 | zfs receive tank/testback

QUESTION 70You are creating a non-global zone on your system.Which option assigns a zpool to a non-global zone, and gives the zone administrator permission tocreate zfs file system in that zpool?

A. While creating the non-global zone, make the following entry: add device set match=/dev/rdsk/c4t0d0 end Boot the zone and log in the zone as root. Create the zpool: zpool create pool2 c4t0d0In the non-global zone, root can now create ZFS file system in the pool2 zpool

B. In the global zone, create the zpool: global# zpool create pool2 c4t1d0 While creating the no-global zone, make the following entry: add dataset set name=pool2 end add fs set dir=pool1

set special=pool1 set type=zfspool1 end Boot the zone, log in the zone as root, and create the zfs file system in the pool2 zpool.

C. In the global zone, create the zpool: global#zpool create pool2 c4t1d0 While creating the global zone, make the following entry: add dataset set name=pool2 end Boot the zone, log in to the zone as root and create the zfs file systems in the pool2 zpool.

D. In the global zone, create the zpool and the ZFS file systems that you want to use in the non-global zone: global#zpool create pool2 c4t1d0 global#zfs create pool2/data While creating the non-global zone, make the following entry for each ZFS file system that youwant to make available in the zone: add fs set dir=/data set special=pool2/data set type=zfs end

E. Create the zpool in the global zone: global#zpool create pool2 c4t1d0 Boot the non-global zone, log in to the zone as root, and issue this command to delegate ZFSpermissions to root: non-global zone# zfs allow root create , destroy, mount pool2 Log in to the non-global zone create ZFS file systems in the pool2 zpool.



You can add a ZFS file system to a non-global zone by using the zonecfgcommand's add fs subcommand. In the following example, a ZFS file system is added to a non-global zone by a global zoneadministrator from the global zone: # zonecfg -z zion zonecfg:zion> add fs zonecfg:zion:fs> set type=zfs zonecfg:zion:fs> set special=tank/zone/zion zonecfg:zion:fs> set dir=/export/shared zonecfg:zion:fs> end Reference: Oracle Solaris ZFS Administration Guide, Adding ZFS File Systems to a Non-GlobalZone

QUESTION 71A change in your company’s security policy now requires an audit trial of all administratorsassuming the sysadm role, capturing: Executed commands, including options Logins and logouts There are two command necessary to accomplish this change. One is a rolemod command. What is the other?

A. auditconfig set policy=argv

B. auditconfig-setpolicy +argv C. auditconfig-setflags lo, ex sysadm D. auditconfig set flags=lo, ex sysadm



Audit Significant Events in Addition to Login/Logout (see step 2 below) Use this procedure to audit administrative commands, attempts to invade the system, and othersignificant events as specified by your site security policy. For all users and roles, add the AUE_PFEXEC audit event to their preselection mask. # usermod -K audit_flags=lo,ps:no username # rolemod -K audit_flags=lo,ps:no rolename # auditconfig -setpolicy +argv 3- Record the environment in which audited commands are executed. # auditconfig -setpolicy +arge Note: [-t] -setpolicy [+|-]policy_flag[,policy_flag ...] Set the kernel audit policy. A policy policy_flag is literal strings that denotes an audit policy. Aprefix of + adds the policies specified to the current audit policies. A prefix of - removes thepolicies specified from the current audit policies. No policies can be set from a local zone unlessthe perzone policy is first set from the global zone. Reference: Oracle Solaris 11 Security Guidelines, Audit Significant Events in Addition toLogin/Logout

QUESTION 72Your task is to convert a JumpStart sysidcfg file to an Automated Installer (AI) sc_profile.xml file, using js2ai.Select two unsupported items that will require changes.

A. terminal = zterms B. name_service-NTS+ C. timezone=US/pacific D. system_locale=en_US E. network_interface=PRIMARY F. root_password=rJmvLUXM10cU



A: terminal The js2ai tool does not perform any translation. Make sure the terminal type speciied in the sysidcfg ile is supported in Oracle Solaris 11. D: system_locale The js2ai tool does not perform any translation. Make sure the locale specified in the sysidcfg ile is supported in Oracle Solaris 11.

Reference: Overview of Installation Options, Comparing sysidcfg File Keywords to SC ProileDirectives

QUESTION 73The COMSTAR framework provides support for the iSCSI protocol.Select three options that correctly describe the COMSTAR framework.

A. iSCSIdevices can be used as dump devices. B. SCSI commands are carried over IP networks and enable you to mount disk devices from

across the network onto your local system. C. Large amounts of data can be transferred over an IP network with very little network degradation. D. COMSTAR allows you to convert any Solaris11 host into a SCSI target device that can be

accessed over a storage network. E. One IP port can handle multiple ISCSI target devices.

Correct Answer: BDESection: (none)Explanation


B: By carrying SCSI commands over IP networks, the iSCSI protocol enables you toaccess block devices from across the network as if they were connected to the local system.COMSTAR provides an easier way to manage these iSCSI target devices. D: Common Multiprotocol SCSI TARget, or COMSTAR, a software framework that enables you toconvert any Oracle Solaris 11 host into a SCSI target device that can be accessed over a storagenetwork by initiator hosts. E: One IP port can handle multiple iSCSI target devices. Reference: Oracle Solaris Administration: Devices and File Systems, Configuring Storage DevicesWith COMSTAR

QUESTION 74View the Exhibit to inspect the boot environment Information displayed within a non global zone on your system.

Which two options describe the solaris-1 boot environment?

A. The solaris-1 boot environment is not bootable. B. The solaris-1 boot environment is incomplete. C. The solaris-1 boot environment was created automatically when the non global zone was created. D. The solaris-1 boot environment was created in the non-global zone using the beadm create command. E. The solaris-1 boot environment is associated with a non active global zone boot environment.



A: The – of the Active Column indicates that this boot environment is inactive, andhence not bootable. Note: The values for the Active column are as follows: R – Active on reboot. N – Active now. NR – Active now and active on reboot. “-” – Inactive. “!” – Unbootable boot environments in a non-global zone are represented by an exclamation point. D: beadm create Creates a new boot environment name, beName. Note: beadm list Lists information about the existing boot environment, which is beName, or lists information for allboot environments if beName is not provided. Note: Using beadm Utility (Tasks) You can use the beadm utility to create and manage snapshots and clones of your bootenvironments. Note the following distinctions relevant to boot environment administration: * A snapshot is a read-only image of a dataset or boot environment at a given point in time. Asnapshot is not bootable. * A boot environment is a bootable Oracle Solaris environment, consisting of a root dataset and,optionally, other datasets mounted underneath it. Exactly one boot environment can be active at atime. * A clone of a boot environment is created by copying another boot environment. A clone isbootable. Reference: Creating and Administering Oracle Solaris 11 Boot Environments

QUESTION 75You are using AI to install a new system. You have added to following information to the AI manifest: <configuration type= “zone” name= “dbzone”source = “http://sysA.example.com/zone_cfg/zone.cfg”/>Which statement is true with regard to the zone.cfg?

A. The zone.cfg file is text file in a zonecfg export format. B. The zone.cfg file is an AI manifest that specifies how the zone is to be installed. C. The zone.cfg file is an xml file in a form suitable for use as a command file for the zonecfg command. D. The zone.cfg file is an SC profile with keywords that are specific for configuring a as part of the installation

process. E. It is am xml configuration file from the /etc/zone directory. It will be used as a profile for the

zone. It specifies the zonename, zonepath, and other zonecfg parameters.

Correct Answer: B

Section: (none)Explanation


The configuration element supports non-global zone configurations. When installinga global zone system, the zone configurations specified in the AI manifest are used to install non-global zones onto the system after the global zone has been installed The configuration element has the following attributes: type The type of configuration to install. The only type supported by AI is zone. name A name given to the configuration. This name must be unique across all configuration elements inan AI manifest. For configurations of type zone, this name is also used as the zonename for thezone. source The location from which AI downloads the configuration file for this configuration element. Thevalue can be an HTTP or FILE URI specification. For configurations of type zone, this value shouldpoint to a zone configuration file as produced from the zonecfg export command. Reference: man ai_manifest


Oracle.PracticeTest.1Z0-820.v2013-04 … · Review the ZFS dataset output that is displayed on your...

Documents

Transcript of Oracle.PracticeTest.1Z0-820.v2013-04 … · Review the ZFS dataset output that is displayed on your...