Oracle Certkiller 1z0-820 v2015-03-25 by Aileen 75q

Certkiller 1z0-820 75q
Number: 1z0-820
Passing Score: 800
Time Limit: 120 min
File Version: 30.5
1z0-820
Upgrade to Oracle Solaris 11 System Administrator
This is the best VCE I ever made. Try guys and if any suggestion please update this.
www.vceplus.com - Download A+ VCE (latest) free Open VCE Exams - VCE to PDF Converter - VCE Exam Simulator - VCE Online - IT Certifications
Exam A
QUESTION 1
Identify the two security features incorporated in the Oracle Solaris 11 Cryptographic Framework.
A. Layer 5 IP address encryptions

B. Internet protocol security
C. Diffie-Kerberos coaxial key encryption
D. Signed cryptographic plugins (providers)
E. Kernel support for signed antivirus plugins
Correct Answer: DE
Section: (none)
Explanation
Explanation/Reference:
Explanation:
The framework enables providers of cryptographic services to have their services used by many consumers in the Oracle Solaris operating system.
Another name for providers is plugins. The framework allows three types of plugins:
* User-level plugins-Shared objects that provide services by using PKCS #11 libraries, such as pkcs11_softtoken.so.1.
* Kernel-level plugins-Kernel modules that provide implementations of cryptographic algorithms in software, such as AES.
Many of the algorithms in the framework are optimized for x86 with the SSE2 instruction set and for SPARC hardware.
* Hardware plugins-Device drivers and their associated hardware accelerators. The Niagara chips, the ncp and n2cp device drivers, are one example. A
hardware accelerator offloads expensive cryptographic functions from the operating system. The Sun Crypto Accelerator 6000 board is one example.
References:
QUESTION 2
Review the ZFS dataset output that is displayed on your system:
Which four correctly describe the output?
A. /data/file4 has been added.
B. The link /data/file3 has been added.
C. /data/file3 has been renamed to /data/file13.
D. /data/file4 has been modified and is now larger.
E. /data/file1 has been deleted.
F. /data/file1 has been modified and is now smaller.
G. /data/file5 has been modified.
H. /data/file3 (a link) has been removed.
Correct Answer: ACEG

Section: (none)
Explanation
Explanation:
A: + Indicates the file/directory was added in the later dataset
C:R Indicates the file/directory was renamed in the later dataset
E: - Indicates the file/directory was removed in the later dataset
G: M Indicates the file/directory was modified in the later dataset
Note:Identifying ZFS Snapshot Differences (zfs diff) You can determine ZFS snapshot differences by using the zfs diff command.
The following table summarizes the file or directory changes that are identified by the zfs diff command.
File or Directory Change Identifier

* File or directory is modified or file or directory link changed M
* File or directory is present in the older snapshot but not in the newer snapshot --
* File or directory is present in the newer snapshot but not in the older snapshot +
* File or directory is renamed
R
QUESTION 3
Which five statements describe options available for installing the Oracle Solaris 11operating system using the installation media?
A. You can perform a text or LiveCD installation locally or over the network.
B. The text Installer does not install the GNOME desktop. The GNOME desktop package must he added after you have installed the operating system.
C. The LiveCD Installation cannot be used to install multiple instances of Oracle Solaris.
D. The LiveCD installer cannot be used if you need to preserve a specific Solaris Volume Table of Contents (VTOC) slice in your current operating
system.
E. The LiveCD Installer is for x86 platforms only.
F. The GUI installer cannot be used to upgrade your operating system from Solaris 10.
G. If you are installing Oracle Solaris 11 on an x86-based system that will have more than one operating system installed in it, you cannot partition your
disk during the installation process.
H. The LiveCD installer can be used for SPARC or x86 platforms.
Correct Answer: ABDF

Section: (none)
Explanation
Explanation:
A: If the network is setup to perform automated installations, you can perform a text installation over the network by setting up an install service on the
network and selecting a text installation when the client system boots.
B: After a fresh install of Solaris 11 express, only the console mode is activated.
To add Gnome, simply do :
$ sudo pkg install slim_install
This will install additional packages that are not installed by default.
D:The text installer advantages over the GUI installer include:

*In addition to modifying partitions, the text installer enables you to create and modify VTOC slices within the Solaris partition.
F: How do I upgrade my Solaris 10 or lower systems to Solaris 11? Unfortunately, you CAN'T. There is no direct upgrade installer or other tool that will
allow you to upgrade from earlier releases of Solaris to Solaris 11. This is primarily due to the vast changes in the packaging mechanism in Solaris 10.
References:
QUESTION 4
When setting up Automated Installer (AI) clients, an interactive tool can be used to generate a custom system configuration profile. The profile will
specify the time zone, data and time, user and root accounts, and name services used for an AI client installation. This interactive tool will prompt you to
enter the client information and an SC profile (XML) will be created.
Which interactive tool can be used to generate this question configuration?
A. sys-unconfig
B. installadm set-criteria
C. sysconfig create-profile
D. installadm create-profile
Correct Answer: B
Section: (none)
Explanation
Explanation:
Use the installadm set-criteria command to update the client criteria associated with an AI manifest that you already added to a service using installadm
add-manifest.
Use the installadm add-manifest command to add a custom AI manifest to an install service.
The value of manifest is a full path and file name with .xml extension. The manifest file contains an AI manifest (installation instructions). The manifest
file can also reference or embed an SC manifest (system configuration instructions).
QUESTION 5
Review the zonestat command:
zonestate - q physical - memory -R high -z -p -p "zones" 10 24h 60m
Select the option that correctly describes the information that is displayed by this command.
A. It is a sample of dbzone's physical memory usage taken every hour over a 24-hour period.Only the top 10 samplings of peak memory usage are
displayed.All other utilization data is eliminated.
B. It is a sample of dbzone's CPU, virtual memory, and networking utilization.Physical memory is executed from the report.The sampling is taken every
10 minutes over a 24-hour period and peak utilization id displayed each hour.
C. It is a sample of dbzone's CPU, virtual memory, and networking utilization.Physical memory is executed from the report.The sampling is taken every
10 minutes over a 24-hour period and displayed each hour.
D. It is a sample of dbzone's physical memory usage taken every 10 seconds and 24-hour period.Only peak virtual memory usage and CPU utilization
are displayed each hour.All other Utilization data is eliminated.
E. It is a sample of dbzone's physical memory usage taken every 10 seconds and 24-hour period.Only peak memory usage is displayed each hour.All
other utilization data is eliminated.
Correct Answer: D
Section: (none)
Explanation
Explanation:
* (Not A, B, C): interval (here 10 seconds): Specifies the length in seconds to pause between each interval report.
* duration (here 24 h)
* -R report[,report] (here high)

Print a summary report.
highPrint a summary report detailing the highest usage of each resource and zone during any interval of the zonestat utility invocation.
Note: The zonestat utility reports on the cpu, memory, and resource control utilization of the currently running zones. Each zone's utilization is reported
both as a percentage of system resources and the zone's configured limits.
The zonestat utility prints a series of interval reports at the specified interval. It optionally also prints one or more summary reports at a specified interval.
The default output is a summary of cpu, physical, and virtual memory utilization. The -r option can be used to choose detailed output for specific
resources.
QUESTION 6
You are configuring NFS on a server. Select the two statements that are true.
A. Resources listed in /etc/dfs/dfstab are automatically shared on boot up.

B. A directory cannot be shared if a subdirectory below it is already shared.
C. Renaming a share created with the zfs set share command is not supported.
D. NFS and SMB protocols cannot be used simultaneously to share the same directory.
Correct Answer: AC
Section: (none)
Explanation
Explanation:
A: ZFS can automatically share file systems by setting the sharenfs property. Using this property, you do not have to modify the /etc/dfs/dfstab file when
a new file system is shared. The sharenfs property is a comma-separated list of options to pass to the share command. The value on is an alias for the
default share options, which provides read/write permissions to anyone. The value off indicates that the file system is not managed by ZFS and can be
shared through traditional means, such as the /etc/dfs/dfstab file. All file systems whose sharenfs property is not off are shared during boot.
QUESTION 7
You have already generated a 256-bit AES raw key and named the keystore file /mykey. You need to use the key to create an encrypted file system.
Which command should you use to create a ZFS encrypted file system named pool1/encrypt using the /mykey keystore?
A. zfs create-oencryption = /mykey pool1/encrypt

B. zfs create-oencryption = 256-ccm-okeysource = raw, file : ///my key pool1/encrypt
C. zfs create-oencryption = AES keysource = /mykey pool1/encrypt
D. zfs create-oencryption = on keystore = /mykey pool1/encrypt
Correct Answer: B
Section: (none)
Explanation
Explanation:
Example: Encrypting a ZFS File System by Using a Raw Key
In the following example, an aes-256-ccm encryption key is generated by using the pktool command and is written to a file, /cindykey.file.
# pktool genkey keystore=file outkey=/cindykey.file keytype=aes keylen=256 Then, the /cindykey.file is specified when the tank/home/cindy file system is
created.
# zfs create -o encryption=aes-256-ccm -o keysource=raw,file:///cindykey.file tank/home/cindys References:
QUESTION 8
You need to set up an Oracle Solaris 11 host as an iSCSI target so that the host's disk can be accessed over a storage network. The disk device is
c3t4d0.
Which six options describe the steps that need to be taken on this host to enable an iSCSI target?
A. Create a ZFS file system named iscsi/target.

B. Create a zpool named iscsi with disk device c3t4d0
C. Create zfs volume named iscsi/target.
D. Use the stmfadm command to create a LUN using /dev/zvol/rdsk/iscsi/target.
E. Use the stmfadm command to create a LUN using iscsi/target.
F. Use the stmfadm command to make the LUN viewable.
G. Use the stmfadm command to make the volume viewable.
H. Enable the svc:/network/iscsi/target:default Service.
I. Use the itadm command to create the iSCSI target.
Correct Answer:
Section: (none)
Explanation
Answer: B,C,D,F,H,I
Explanation:
How to Create an iSCSI LUN
The following steps are completed on the system that is providing the storage device. Example: target# zpool create sanpool mirror c2t3d0 c2t4d0 (C)
2.Create a ZFS volume to be used as a SCSI LUN.
(D)3. Create a LUN for the ZFS volume.
Example:
target# stmfadm create-lu /dev/zvol/rdsk/sanpool/vol1 Logical unit created: 600144F0B5418B0000004DDAC7C10001
4. Confirm that the LUN has been created.

Example
target# stmfadm list-lu
LU Name: 600144F0B5418B0000004DDAC7C10001
(F) 5. Add the LUN view.

This command makes the LUN accessible to all systems.
target# stmfadm add-view 600144F0B5418B0000004DDAC7C10001 How to Create the iSCSI Target
This procedure assumes that you are logged in to the local system will contains the iSCSI target. Note: The stmfadm command manages SCSI LUNs.
Rather than setting a special iSCSI property on the ZFS volume, create the volume and use stmfadm to create the LUN.
(H) 1. Enable the iSCSI target service.

target# svcadm enable -r svc:/network/iscsi/target:default
(I) 2. Create the iSCSI target.

target# itadm create-target
References:
QUESTION 9
Identify the Automated Installer's (AI) equivalent to jumpStart's finish scripts and sysidcfg files.
A. Manifest files
B. SMF system configuration profile files
C. Installadm create-client
D. IPS software package repository
E. installadm create-service
F. svccfg-s application/pkg/server setprop sysidcfg
Correct Answer: B
Section: (none)
Explanation
Explanation:
Comparing sysidcfg File Keywords to System Configuration Profile Directives The following table compares sysidcfg file keywords with example AI
system configuration profile specifications.
sysidcfg File Keyword
System Configuration Profile Directives
Etc.
References:
QUESTION 10
You need to update an OS image on a client. The pkg publishers command displays the wrong publisher with the wrong update:
PUBLISHERTYPESTATUSURI
Solaris origin onlinehttp://pkg.oracle.com/solaris/release
The update is available on the updated publisher:

Solaris originonlinehttp://sysA.example.com
Select the option that describes the procedure used to update the OS image on the system from the updated publisher.
A. Copy the repository from the ISO image onto the local client.Configure the repository on the client by using the svccfg-s command so that the Solaris
publisher is connected to the new repository.Refresh the application/pkg/server service.Issue the pkgrepo refresh command to refresh the repository
catalog
B. Configure the publisher on the client using the svcfg-s command so that the Solaris publisher is connected to the repository at http://
sysA.example.comRefresh the application/pkg/server service.Issuethe pkgrepo refresh command to repository catalog
C. Use the pkg set-publisher command to change the URL of the publisher Solaris to http://sysA.example.com.Issue the pkg update command to
update the OS image.
D. Add the new publisher http://sysA.example.com SolarisUse the pkg set-publisher command to set the publisher search order and place http://
sysA.example.com of http://pkg.oracle.com/solaris/releaseIssue the pkg publisher command to view the publishers.Set the new publisher to
sticky.Issue the pkg update command to update the OS image.
Correct Answer: C
Section: (none)
Explanation
Explanation:
You can use the pkg set-publisher command to change a publisher URI.
Changing a Publisher Origin URI
To change the origin URI for a publisher, add the new URI and remove the old URI. Use the -g option to add a new origin URI. Use the -G option to
remove the old origin URI.
# pkg set-publisher -g http://pkg.example.com/support \ -Ghttp://pkg.example.com/release example.com
Note: You can use either the install or update subcommand to update a package. The install subcommand installs the package if the package is not
already installed in the image. If you want to be sure to update only packages that are already installed, and not install any new packages, then use the
update subcommand.
References:
QUESTION 11
alice is a user account used by Alice on a Solaris 11 system.
sadmin is a role account on the same system.
Your task is to add the command /usr/sbin/cryptoadm to the Network management profile, so that Alice can execute it, while assuming the sadmin role.
Select the three activities necessary to accomplish this.
A. To the file /etc/security/prof_attr, add the line:Network Management:

solaris:cmd:RO::/usr/sbin/cryptoadm:euid=0
B. To the file /etc/security/auth_attr, add the line:Network Management:
C. To the file /etc/security/exec_attr.d/local-entriies, add the line:Network Management:
D. Run the roles alice to ensure that alice may assume the role sadmin.
E. Run the command profiles sadmin to ensure that the role sadmin includes the network Management profile.
F. Run the command profiles alice to ensure that the Alice has permissions to access the Network management profile.
G. Run the command profiles "Network management" to ensure that the Network management profile includes the sadmin role.
Correct Answer: CDG

Section: (none)
Explanation
Explanation:
C: /etc/security/exec_attr is a local database that specifies the execution attributes associated with profiles. The exec_attr file can be used with other
sources for execution profiles, including the exec_attr NIS map and NIS+ table.
A profile is a logical grouping of authorizations and commands that is interpreted by a profile shell to form a secure execution environment.
References:
QUESTION 12
Select the two statements that correctly describe the operation of NWAM.
A. If a location is explicitly enabled, it remains active until explicitly changed.
B. Wireless security keys can be configured by using the nwammgr command.
C. NWAM stores profile information in /etc/ipadm/ipadm.conf and /etc/dladm/datalink.conf.
D. Multiple locations may be automatically activated in systems with multiple network interface cards.
E. Interface NCU Properties "float" and are automatically attached to the highest priority Link NCU Property.
F. If the DefaultFixed NCP is enabled, persistent configuration, stored in /etc/ipadm.conf and /etc/dladm/datalink.conf is used.
Correct Answer: AD
Section: (none)
Explanation
Explanation:
A: Conditional and system locations can be manually
activated, which means that the location remains active until explicitly disabled.
D: A location comprises certain elements of a network configuration, for example a name service and firewall settings, that are applied together, when
required. You can create multiple locations for various uses. For example, one location can be used when you are connected at the office by using the
company intranet. Another location can be used at home when you are connected to the public Internet by using a wireless access point. Locations can
be activated manually or automatically, according to environmental conditions, such as the IP address that is obtained by a network connection.
References:
QUESTION 13
On server A, you enter the following command to add a static route to serverA route -p add -host 192.168.1.101 192.168.1.101 -static
What is the purpose of this command?
A. to temporarily bypass IP Filter rules

B. to specify an IPMP target IP address to in.mpathd
C. to specify routing to an adjacent network when in.rdiscis not used
D. to specify routing to an adjacent network when in.routed is not used
E. to ensure the IP address for serverB is not flushed from the ARP cache
F. to optimize link aggregation using a direct connection between two systems
Correct Answer: B
Section: (none)
Explanation
Explanation:
Note:#route -p add -host destination-IP gateway-IP -static where destination-IP and gateway-IP are IPv4 addresses of the host to be used as a target.
For example, you would type the following to specify the target system 192.168.10.137, which is on the same subnet as the interfaces in IPMP group
itops0:
$ route -p add -host 192.168.10.137 192.168.10.137 -static This new route will be automatically configured every time the system is restarted. If you
want to define only a temporary route to a target system for probe-based failure detection, then do not use the -p option.
QUESTION 14
Before booting test zone a non-global zone, you want to connect to the zone's console so that you can watch the boot process.
Choose the command used to connect to testzone's console.
A. zoneadm-C testzone
B. zoneadm-console testzone
C. zlogin-z testzone console
D. zlogin-z testzone-C
E. zlogin-Ctestzone
F. zoneadm-testzone-c
Correct Answer: E
Section: (none)
Explanation
Explanation:
The following options are supported:
-C
Connects to the zone console. Connects to the zone console.
Note:
After you install a zone, you must log in to the zone to complete its application environment. You might log in to the zone to perform administrative tasks
as well. Unless the -C option is used to connect to the zone console, logging in to a zone using zlogin starts a new task. A task cannot span two zones
References:
QUESTION 15
Consider the following rule file for use with the Basic Audit Reporting Tool (BART).
CHECK all
IGNORE dirmtime
/etc/security
/etc/notices
IGNORE contents
/export/home
IGNORE mtime size contents
/var
CHECK
You are using BART to detect inappropriate changes to the file system.
Identify the two correct statements describing the attributes recorded.
A. /var/dhcp Attribute: size uid gid mode acl

B. /etc/hosts Attributes: size uid gid mode acl intime dest
C. /var/spool/mqueue Attribute: size uid gid mode acl dirmtime
D. /etc/security/exec_attr Attribute: size uid mode acl mtime devnode
E. /export/home/kate/.profile Attributes: uid gid mode acl dirmtime
F. /export/home/rick/.profile Attributes: size uid gid mode acl mtime contents
Correct Answer: DF
Section: (none)
Explanation
Explanation:
D: According to line /etc/security
F: According to line /export/home
Not E: According to line IGNORE dirmtime
Note: In default mode, the bart compare command, as shown in the following example, checks all the files installed on the system, with the exception of
modified directory timestamps (dirmtime):
CHECK all
IGNORE dirmtime
Note2: The Basic Audit Reporting Tool (BART) feature of Oracle Solaris enables you to comprehensively validate systems by performing file-level
checks of a system over time. By creating BART manifests, you can easily and reliably gather information about the components of the software stack
that is installed on deployed systems.
BART is a useful tool for integrity management on one system or on a network of systems.
References:
QUESTION 16
The ZFS configuration on your server is:
Pool1 6.67G31K/pool
Pool1/data31K31K/data
Select the three commands that you would use to 1. Create, 2. List, and 3. Delete a snapshot of the /data file system.
A. zfs snapshot pool1/data@now

B. zfs create snapshot pool1/data@now
C. zfs list -t snapshot
D. zfs list -t snapshot pool1/data
E. zfs destroy pool1/data@now
F. zfs destroy snapshot pool1/data@now
Correct Answer: ADE

Section: (none)
Explanation
Explanation:
A: Snapshots are created by using the zfs snapshot command, which takes as its only argument the name of the snapshot to create.
D: You can list snapshots as follows:
# zfs list -t snapshot
E: Snapshots are destroyed by using the zfs destroy command. For example:
# zfs destroy tank/home/ahrens@now
QUESTION 17
Which three Installation option allow for a "hands free" and "unattended'" Installation of the Solaris 11 environment?
A. Jumpstart
B. LiveCD
C. A text Installation over the network
D. An Automated Installation performed on an x86 client
E. An Automated Installation using media from a local DVD or USB drive
F. An Automated Installation using a networked repository
Correct Answer: DEF

Section: (none)
Explanation
Explanation:
Oracle Solaris 11 usesAutomated Installer (AI) for unattended installations.
Unattended installations are possible by placing the contents of the AI Image media (or ISO image contents from a download) on an AI server.
References:
QUESTION 18
You have been tasked with creating a dedicated virtual network between two local zones within a single system. In order to isolate the network traffic
from other zones on that system.
To accomplish this, you will create__________.
A. An ether stub
B. A virtual router
C. A virtual switch
D. A virtual bridge.
E. A virtual network interface
F. Nothing because a virtual switch is automatically created then the virtual network interfaces are created.
Correct Answer: A
Section: (none)
Explanation
Explanation:
Etherstubs are pseudo ethernet NICs which are managed by the system administrator. You can create VNICs over etherstubs instead of over physical
links. VNICs over an etherstub become independent of the physical NICs in the system. With etherstubs, you can construct a private virtual network that
is isolated both from the other virtual networks in the system and from the external network. For example, you want to create a network environment
whose access is limited only to your company developers than to the network at large. Etherstubs can be used to create such an environment.
Note:Oracle Solaris 11 introduces a new and powerful network stack architecture which includes:
* Networking virtualization with virtual network interface cards (VNICs) and virtual switching (etherstubs)
* Tight integration with zones
* Network resource management - efficient and easy to manage integrated quality of service (QoS) to enforce bandwidth limit on VNICs and traffic flows
We will be examini
References:
QUESTION 19
Which three options describe the purpose of the zonep2vchk command?
A. Used on a Solaris 10 global zone to access the system for problems before migrating that system to a Solaris 10 branded zone.
B. Used to access a Solaris 10 global zone for problems before migrating that zone to a Solaris 11 global zone
C. Used to create zonecfg template for a Solaris 10 global zone that that will be migrated to a solaris10 branded zone.
D. Used to migrate an Oracle Solaris 11 global zone to a non-global zone.
E. Used to migrate a Solaris 10 global zone to a non-global zone on the same server; the non- global zone can then be migrated to a Solaris 11 server
as a Solaris10 branded zone.
Correct Answer: CDE

Section: (none)
Explanation
Explanation:
zonep2vchk
- check a global zone's configuration for physical to virtual migration into non-global zone
The zonep2vchk utility is used to evaluate a global zone's configuration before the process of physical-to-virtual (p2v) migration into a non-global zone.
The p2v process involves archiving a global zone (source), and then installing a non-global zone (target) using that archive
zonep2vchk serves two functions. First, it can be used to report issues on the source which might prevent a successful p2v migration. Second, it can
output a template zonecfg, which can be used to assist in configuring the non-global zone target. zonep2vchk can be executed on a Solaris 10 or later
global zone. To execute on Solaris 10, copy the zonep2vchkutility to the Solaris 10 source global zone.
When run on Solaris 10, a target release of S11 can be specified, which will check for p2v into a Solaris 10 Branded zone.
References:
QUESTION 20
Your are troubleshooting network throughput on your server.
To confirm that the load balancing among aggregated links is functioning properly, you want to examine the traffic statistics on the links comprising the
aggregation.
The correct command is ___________.
A. dlstat-aggr
B. dlstat show-aggr
C. dlstat show-link-r
D. dlstat show-link-aggr
E. dlstat show-phys-aggr
Correct Answer: B
Section: (none)
Explanation
Explanation:
dlstat show-aggr [-r | -t] [-i interval] [-p] [ -o field[,...]] [-u R|K|M|G|T|P] [link] Display per-port statistics for an aggregation.
QUESTION 21
You have set up the task.max-lwps resource control on your Solaris 11 system.
Which option describes how to configure the system so that syslogd notifies you when the resources control threshold value for the task.max-lwps
resource has been exceeded?
A. Use the rctladm command to enable the global action on the task.max-lwpa resource control.
B. Modify the /etc/syslog.conf file to activate system logging of all violations of task.max-lwps and then refresh then svc: /system/system-log:default
service.
C. Activate system logging of all violations of task.max-lwpp in the /etc/rctldm.conf file and then execute the rctladm-u command.
D. Use the prct1 command to set the logging of all resource control violations at the time the task.max-lwps resource control is being setup.
E. Use the setrct1 command to set the logging of all resource control violations for the task.max- lwps resource control.
Correct Answer: A
Section: (none)
Explanation
Explanation:
rctladm - display and/or modify global state of system resource controls
The following command activates system logging of all violations of task.max-lwps.
# rctladm -e syslog task.max-lwps

#
References:
QUESTION 22
You are troubleshooting the failure of a computer to mount an NFS file system hosted by a server (hostname mars) in the local area network.
Select the three commands that will enable you to identify the problem.
A. ping-s mars
B. cat /etc/vfstab
C. cat /etc/dfs/dfstab
D. sharemgr show -v
E. showmount -e mars
F. rpcinfo-s mars | egrep `nfs|mountd'
Correct Answer: BEF

Section: (none)
Explanation
Explanation:
B:The mount point Error. The following message appears during the boot process or in response toan explicit mount request and indicates a non-
existent mount point.
mount: mount-point /DS9 does not exist.
To solve the mount point error condition, check that the mount point exists on the client. Check the spelling of the mount point on the command line or in
the /etc/vfstab file (B) on the client, or comment outthe entry and reboot the system.
Note: The /etc/vfstab file lists all the file systems to be automatically mounted at system boot time, with the exception of the /etc/mnttab and /var/run file
systems.
E: showmount
This command displays all clients that have remotely mounted file systems that are shared from an NFS server, or only the file systems that are
mounted by clients, or the shared file systems with the client access information. The command syntax is:
showmount [ -ade ] [ hostname ]
where -a prints a list of all the remote mounts (each entry includes the client name and the directory), -d prints a list of the directories that are remotely
mounted by clients, -e prints a list of the files shared (or exported), and hostname selects the NFS server to gather the information from. If hostname is
not specified the local host is queried.
F: * mountd Daemon
This daemon handles file-system mount requests from remote systems and provides access control. The mountd daemon checks /etc/dfs/sharetab to
determine which file systems are available for remote mounting and which systems are allowed to do the remote mounting.
* Commands for Troubleshooting NFS Problems
These commands can be useful when troubleshooting NFS problems.
rpcinfo Command
This command generates information about the RPC service that is running on a system.
References:
QUESTION 23
You have been asked to troubleshoot the initial configuration of a virtual network connecting two local zones with the outside world.
View the exhibit.
The command
dladm create-vnic -1 vswitch192.168.1 vnic1
fails with the error
dladm: invalid link name `vswitch192.168.1'
What is the reason for this error?
A. The name vswitch192.168.1 is not legal.

B. The zone must be specified withdladm create-vnic -z zone3 vnic1.
C. The virtual interface must be specified withdladm create-vnic -z zone3 vnic1.
D. The virtual interface must be created withipadm create-vnic-1 switch192.168.1.
E. The virtual switch must be created first withdladm create-etherstub vswitch192.168.1.
Correct Answer: E
Section: (none)
Explanation
Explanation:
There is no data-link named vswitch192.168.
We need to create an etherstub first.
See Note and example below for details.
Note: Create a VNIC in the system's global zone.
# dladm create-vnic -l data-link vnic-name

data-link is the name of the interface where the VNIC is to be configured.
-l link, --link=link
link can be a physical link or an etherstub.
vnic-name is the name that you want to give the VNIC.
For example, to create a VNIC named vnic0 on interface e1000g0, you would type the following:
# dladm create-vnic -l e1000g0 vnic0
Example: Creating a Virtual Network Without a Physical NIC
First, create an etherstub with name stub1:
# dladm create-etherstub stub1
Create two VNICs with names hello0 and test1 on the etherstub. This operation implicitly creates a virtual switch connecting hello0 and test1.
# dladm create-vnic -l stub1 hello0

# dladm create-vnic -l stub1 test1
References:
QUESTION 24
You want to deploy oracle Solaris 11 with the automated installer (AI). You need to make sure that your server and network meet the requirements for
using AI.
Choose the three options that describe; the requirements for using AI.
A. You can create only one manifest per install service. If you need more than one manifest, create multiple install services.
B. If two client machines have different architectures and need to be installed with the same version of the Oracle Solaris 11 OS, then create two AI
manifests and a single Install service.
C. You need a separate install service for each different client architecture that you plan to install, and for each different version of the Oracle Solaris 11
OS that you plan to install on client systems.
D. If two client machines have different architectures and need to be installed with different versions of the Oracle Solaris 11 OS, then create two AI
manifests and two install services.
E. The install server needs to be able to access an Oracle Solaris Image Packaging System (IPS) software package repository; the clients do not.
F. The install server can be either an x86 machine or a SPARC machine.
Correct Answer: BEF

Section: (none)
Explanation
Explanation:
B:
Note: You can create custom AI manifests for particular clients. Create a custom XML AI manifest file. This method is best suited to an environment
where few systems require custom provisioning. Most systems to be installed have identical or similar hardware and will be provisioned identically.
Write a script that dynamically creates an AI manifest for each client at installation time. Use this method to create a custom installation for each client,
based on client characteristics discovered at installation time.
E: AI Server Software Requirements include

Software package repository
Ensure that the install server can access an IPS software package repository. AI requires the install/installadm package.
F: Install Server Requirements

Any system that meets these requirements can be used as an AI install server, including laptops, desktops, virtual machines, and enterprise servers.
The install server can be either an x86 machine or a SPARC machine. An x86 install server can install both SPARC and x86 clients, and a SPARC
install server can install both SPARC and x86 clients.
Note: To install clients over the network, AI requires a separate system to be an install server. On the install server, create an AI install service to provide
a net image and instructions for installing the Oracle Solaris 11 OS on different clients.
QUESTION 25
Which three options are valid methods of installing a Solaris 10 branded zone on a system running Oracle Solaris 11?
A. Use the V2V process to migrate an existing Solaris 8 or9non-global zone from a Solaris 10 system to a solaris10 branded zone.
B. Use the V2V process to migrate an existing Solaris 10 non global whole root zone from a Solaris 10 system to a solaris10 branded whole root zone.
C. Install a solaris10 branded zone directly from the Oracle Solaris 10 media.
D. Migrate an existing 64-bit Solaris 10 system to a solaris10 branded non-global zone using the P2Vprocess.
E. Migrate an existing 32 bit Solaris10 system to a solaris10 branded non-global zone using the P2V process.
F. Use the V2V process to migrate an existing Solaris 10 non-global sparse root zone from a Solaris 10 system to a solaris10 branded sparse root
zone.
Correct Answer: BDE

Section: (none)
Explanation
Explanation:
B: Due to change in package system (SRV4 to IPS) there is no direct upgrade from S10 to S11 one can use
* P2Vconverting s10 physical system to solaris10 branded zone in s11 (32-bit or 64-bit)
* V2V converting s10 native full root zone to solaris10 branded zone in s11 (B)
QUESTION 26
Which command should you choose to display the current parameters for the FSS scheduler?
A. dispadmin - c FSS
B. prionctl-c FSS
C. dispadmin -c FSS -g
D. priocntl-c FSS -g
Correct Answer: C
Section: (none)
Explanation
Explanation:
The dispadmin command displays or changes process scheduler parameters while the system is running.
-c class
Specifies the class whose parameters are to be displayed or changed. Valid class values are: RT for the real-time class, TS for the time-sharing class,
IA for the inter-active class, FSS for the fair-share class, and FX for the fixed-priority class. The time-sharing and inter-active classes share the same
scheduler, so changes to the scheduling parameters of one will change those of the other.
-g
Gets the parameters for the specified class and writes them to the standard output.
References:
QUESTION 27
This iron is displayed on the desktop of a laptop computer, which is running Oracle Solaris 11.
Which two statements describe the Information conveyed by this Icon?
A. NWAM is disabled.
B. NWAM is automatically configuring the network.
C. The wireless network card is manually configured and operational.
D. The wireless network card is manually configured but not operational.
E. The wireless network card is automatically configured and operational.
F. The wireless network card is automatically configured but not operational.
Correct Answer: BC
Section: (none)
Explanation
Explanation:
B: The Network Status notification icon is only displayed on the desktop if you are using NWAM to automatically configure your network.
C: All online (Wireless)
Indicates all manually enabled connections in the enabled network profile are online and that the required number of connections in the enabled profile
group (if such a group exists) are online. The required number is the same as those described for the All online (Wired) status. Note that at least one
online connection is wireless.
References:
QUESTION 28
A local repository is available on this system and you need to enable clients to access this repository via HTTP. The repository information is:
solarisoriginonlinehttp://sysA.example.com
Identify two of the steps that are required to make the local repository on this server available to the client via HTTP.
A. On the server:set the pkg/inst_root and pkg/readonly properties for the svc:/application/pkg/server:default service and enabled the service
B. On the server:set the sharefs property on the ZFS file system containing the IPS repository.
C. On the client:reset the origin for the solaris publisher.
D. On the client:set the pkg/inst_root and pkg/readonly properties for the svc:/application/server:default service enable the service.
E. On the client:start the pkg.depotd process.
Correct Answer: AE
Section: (none)
Explanation
Explanation:
A: Configure the Repository Server Service
To enable clients to access the local repository via HTTP, enable the application/pkg/server Service Management Facility (SMF) service.
# svccfg -s application/pkg/server setprop pkg/inst_root=/export/repoSolaris11 # svccfg -s application/pkg/server setprop pkg/readonly=true
E: Use pkg.depotd to serve the repository to clients.

Start the Repository Service
Restart the pkg.depotd repository service.
# svcadm refresh application/pkg/server
# svcadm enable application/pkg/server
To check whether the repository server is working, open a browser window on the localhost location.
References:
QUESTION 29
In an effort to reduce storage space on your server, you would like to eliminate duplicate copies of data in your server's ZFS file systems.
How do you specify that pool1/data should not contain duplicate data blocks (redundant data) on write operations?
A. zfs create-ocompression=on pool1/data

B. zpool create -odeduplication =on pool1; zfs create pool1/data
C. zfs create-odeduplication=on pool1; zfs create pool1/data
D. zfs create-odedupratio=2 pool1/data
E. zfs create-odedup=on pool1/data
Correct Answer: E
Section: (none)
Explanation
Explanation:
ZFS Deduplication Property
Solaris Express Community Edition, build 129: In this Solaris release, you can use the deduplication property to remove redundant data from your ZFS
file systems. If a file system has the dedup property enabled, duplicate data blocks are removed synchronously. The result is that only unique data is
stored and common components are shared between files.
You can enable this property as follows:
# zfs set dedup=on tank/home
QUESTION 30
When you issue the "gzip: zommand not found" message is displayed. You need to install the gzip utility on your system.
Which command would you use to check if the gzip utility is available from the default publisher for installation?
A. pkg info|grep gzip

B. pkg list SUNWgzip
C. pkg contents gzip
D. pkg search gzip
Correct Answer: D
Section: (none)
Explanation
Explanation:
Searching for Packages
Use the pkg search command to search for packages whose data matches the specified pattern.
Like the pkg contents command, the pkg search command examines the contents of packages. While the pkg contents command returns the contents,
the pkg search command returns the names of packages that match the query.
pkg search
search [-HIaflpr] [-o attribute ...] [-s repo_uri] query Search for matches to the query, and display the results. Which tokens are indexed are action-
dependent, but may include content hashes and pathnames.
Note: pkg is the retrieval client for the image packaging system. With a valid configuration, pkg can be invoked to create locations for packages to be
installed, called 'images', and install packages into those images. Packages are published by publishers, who may make their packages available at one
or more repositories. pkg, then, retrieves packages from a publisher's repository and installs them into an image.
QUESTION 31
The following information is displayed about the compress/zjp software package, which Is currently installed on this system:
NAME (PUBLISHER)VERSIONIFO
Compress/zip3.1.2-0.175.0.0.0.0.537if-
NAMEVERSIONDATECOMMENT
Compress/zip3.109 Dec 2011 04:50:38 ESTNone
Which statement describes the information that is displayed tor the compress/zip software package?
A. This package cannot be removed.

B. This package can be updated to a new version when the new version of the package becomes available.
C. This package cannot be updated.
D. This package can be updated to version 3.1.3 but not 3.2.
E. This package cannot be downgraded to version 3.1.1.
Correct Answer: B
Section: (none)
Explanation
Explanation:
An "f" in the F column indicates the package is frozen. If a package is frozen, you can only install or update to packages that match the frozen version.
Note:The "i" in the I column indicates that these packages are installed in this image.
References: Adding and Updating Oracle Solaris 11 Software Packages, Showing Package Install State Information
QUESTION 32
View the Exhibit.
The file came from your Automated Installer (AI) install server. The file is ____________.
A. an AI SC profile for non-global zones

B. the default AI config file for non-global zones
C. the default AI manifest for non-global zones
D. a custom AI manifest
Correct Answer: D
Section: (none)
Explanation
Explanation:
ai_manifest
- Automated installation manifest file format
Synopsis
/usr/share/install/ai.dtd.1
Some customizations have been made, such as the selection of specific locales.
References:
QUESTION 33
You are setting up a local image packaging System (IPS) package repository on your Oracle Solaris 11 server. The information and specifications that
you have are as follows:
The Oracle Solaris11 repository ISO image has been downloaded into the /repo directory (a zfs file system).
The current publisher is:
solarisoriginonlinehttp://pkg.oracle.com/solaris/release/
You will be replacing the current publisher with:
solarisoriginonlinehttp://solaris.example.com/
The location of the repository will be /export/IPS. This ZFS file system has already been created.
Among the steps you will perform is to set the publisher to the local repository by using the pkg set - publisher command.
Which six other steps are required to set up the local IPS package repository?
A. Perform an rsync on the ISO image to copy the files from the ISO image to the /export/IPS file system.
B. chmod 700 on/export/IPS
C. Use the svccfg command to set the pkg/inst_root property to export/IPS.
D. Use the svccfg command to set the pkg.inst_root property to /export/IPS.
E. Use the svccfg command to set the pkg/readonly property to the application/pkg/server service to true.
F. Use the svccfg command to set the pkg/readonly property for the application/pkg/server service false.
G. Refresh the application/pkg/server service with the svcadm refresh command.
H. Refresh the package repository with the pkgrep refresh command.
I. Enable the application /pkg/server service.
J. Run the pkhrepo rebuild command to rebuild the repository catalog.
Correct Answer:
Section: (none)
Explanation
Answer: A,B,D,E,G,I
Explanation:
B: Set the correct permissions.
Serving a Local Repository Using SMF

4. (A) Copy the repository files to the ZFS file system you created. This will increase the performance of repository accesses and avoid the need to
remount the .iso image each time the system restarts. (Be sure to use /mnt/repo, not /mnt/repo/, so that you copy the repo directory and not just the files
and subdirectories in the repo directory.)
# rsync -aP /mnt/repo /export/repo2010_11

You can use the df command to confirm the copy:
5.Once the files are copied, unmount the image and deallocate the block device.
6. Now that your local copy is ready, use the svccfg command to configure the repository server service, specifying the location of your local repository
and setting readonly to true:
(D)#svccfg -s application/pkg/server setprop pkg/inst_root=/export/repo2010_11/repo (E)#svccfg -s application/pkg/server setprop pkg/readonly=true
7. Start the pkg.depotd repository service:

(G) #svcadm refresh application/pkg/server
(I)#svcadm enable application/pkg/server
References:
QUESTION 34
View the exhibit to inspect the file system configuration on your server.
You department's backup policy is to perform a full backup to a remote system disk on Saturday.
On each weekday, you are to perform an incremental backup to the same remote system disk. Each incremental backup will contain only data that has
been modified since the previous Saturday backup.
The server file systems must remain available at all times and can never be taken offline.
The backup must not only provide for the recovery of the most recent version of a file, but must also allow recovery of previous versions of a file.
Following your company policy, which two describe the correct procedure to be performed on each weekday for backing up the /data file system to a
remote disk named /remote/backup?
A. Remove the previous daily snapshot.zfs snapshot pool1.data@dailyzfs send-i pool1/data@sat pool1/data@daily > /remote/backup/full
B. Remove the previous daily snapshot.zfs snapshot pool1.data@dailyzfs send-i pool1/data#sat pool1/data@daily | zfs recv remote /backup/ `date `+%
m%d%'
C. Remove the previous daily snapshot.zfs snapshot pool1.data@dailyzfs send-i pool1/data@sat pool1/data@daily > /remote/backup/daily
D. Remove the previous daily snapshot.zfs create-i pool1/data@sat pool1/data@dailyzfs send pool1/data@daily | zfs remote/backup
Correct Answer: BC
Section: (none)
Explanation
Explanation:
You can use the zfs send command to send a copy of a snapshot stream and receive the snapshot stream in another pool on the same system or in
another pool on a different system that is used to store backup data.
You can send incremental data by using the zfs send -i option.
For example:
host1# zfs send -i tank/dana@snap1 tank/dana@snap2 | zfs recv newtank/dana Note that the first argument (snap1) is the earlier snapshot and the
second argument (snap2) is the later snapshot. In this case, the newtank/dana file system must already exist for the incremental receive to be
successful.
The incremental snap1 source can be specified as the last component of the snapshot name. This shortcut means you only have to specify the name
after the @ sign for snap1, which is assumed to be from the same file system as snap2. For example:
host1# zfs send -i snap1 tank/dana@snap2 > zfs recv newtank/dana This shortcut syntax is equivalent to the incremental syntax in the preceding
example.
References:
QUESTION 35
The crash dump notification on your server is:
Documentation states that there should be two core files for each crash dump in the /var/crash directory named vmdump.0
Which command should you choose to display theses two files?
A. savecore-f vmdump.0
B. dumpadm uncompressed
C. gunzip vmdump.0
D. dumpadm-z off
Correct Answer: A
Section: (none)
Explanation
Explanation:
Decompress using savecore -f vmdump.0
savecore - save a crash dump of the operating system
-fdumpfileAttempt to save a crash dump from the specified file instead of from the system's
current dump device. This option may be use-
ful if the information stored on the dump
device has been copied to an on-disk file by
means of thedd(1M)command.
QUESTION 36
After installing the OS, you boot the system and notice that the syslogd daemon is not accepting messages from remote systems.
Which two options should you select to modify the syslogd daemon configuration so that it accepts messages from remote systems?
A. svccfg-s svc:/system/system-log setprop start/exec= "syslogd-t"Restart the syslogd daemon.

B. Set the following parameter in the /etc/syslogd.conf file: LOG_FROM_REMOTE= YESRestart the syslogd daemon.
C. svcadm enable svc:/system/system-log/config/log_from_remoteRestart the syslogd daemon.
D. svccfg-s svc:/system/system-log setprop config/log_from_remote=trueRestart the syslogd daemon.
E. Set the following parameter in the /etc/default/syslogd file:
LOG_FROM_REMOTE=YESRestart the syslogd daemon.
Correct Answer: BD
Section: (none)
Explanation
Explanation:
B: The /etc/default/syslogd file contains the following default parameter settings. See FILES.
LOG_FROM_REMOTE
Specifies whether remote messages are logged. LOG_FROM_REMOTE=NO is equivalent to the -t command-line option. The default value for
LOG_FROM_REMOTE is YES.
QUESTION 37
You need to migrate a UFS file system named /production_ufs to a ZFS file system named /production_ufs. The /production_ufs file system cannot be
taken down or be out of production during the migration, and the current /production_ufs file system must remain active until the /ptoduction_zfs file
system is copied and ready.
Which method allows you to meet both requirements?
1. Copy live data from /production_ufs to /production_zfs while /production_ufs is in use.

2. When the copy is complete, /production_zfs will contain an up-to date copy of /production_ufs
A. Create a snapshot of the UFS file system.Create the new ZFS file system.Use cpio to copy data from the snapshot to the new ZFS file system.
B. Create a new Boot Environment.Create the ZFS file system.Use lucreate -m to copy data from the Current UFS file system to the new ZFS file
system.
C. Mirror the existing UFS file system by using SVM.After both submissions are in sync, migrate one of the submissions to a ZFS file System by using
Live Upgrade.
D. Create the new ZFS file system by using zfs create import to import data from the existing UFS file system into the new ZFS file system
E. Create the new zfs file system by using the zfs create -oshadow.
Correct Answer: E
Section: (none)
Explanation
Explanation:
Migrating Data With ZFS Shadow Migration
ZFS shadow migration is a tool you can use to migrate data from an existing file system to a new file system. A shadow file system is created that pulls
data from the original source as necessary.
You can use the shadow migration feature to migrate file systems as follows:
* A local or remote ZFS file system to a target ZFS file system
* A local or remote UFS file system to a target ZFS file system
Shadow migration is a process that pulls the data to be migrated:

* Create an empty ZFS file system.
* Set the shadow property on an empty ZFS file system, which is the target (or shadow) file system, to point to the file system to be migrated.
For example:
# zfs create -o shadow=nfs://system/export/home/ufsdata users/home/shadow2
* Data from file system to be migrated is copied over to the shadow file system.
References:
QUESTION 38
View the Exhibit to inspect the file system configuration on your server.
Your department's backup policy is to perform a full backup to remote system disk on Saturday.
On each weekday, you are to perform an incremental backup to the same remote system disk.
Each incremental backup will contain only data that has been modified since the previous Saturday backup.
The server file systems must remain available at all times and can never be taken offline. The backup must not only provide for the recovery of the most
recent version of a file, but must also allow recovery of previous versions of a file.
Following your company policy, which two describe the correct procedure to be performed on Saturday for backing tip the /data file system to a remote
disk named /remote/backup?
A. On Saturday:zfs snapshot pool1/data@satzfs send pool1/data@sat > /remote/backup/full

B. On Saturday:zfs create snapshotpool1/data@satzfs send pool1/data@sat | zfs recv remote/backup/ `date' `+%m%d%y'
C. On Saturday:zfs create snapshotpool1/data@satzfs send pool1/data@sat > /remote/backup/full
D. On Saturday:zfs create snapshotpool1/data@satzfs send pool1/data@sat | zfsrecv remote/backup
Correct Answer: BC
Section: (none)
Explanation
Explanation:
You can use the zfs send command to send a copy of a snapshot stream and receive the snapshot stream in another pool on the same system or in
another pool on a different system that is used to store backup data.
You can send incremental data by using the zfs send -i option.
For example:
host1# zfs send -i tank/dana@snap1 tank/dana@snap2 | zfs recv newtank/dana Note that the first argument (snap1) is the earlier snapshot and the
second argument (snap2) is the later snapshot. In this case, the newtank/dana file system must already exist for the incremental receive to be
successful.
The incremental snap1 source can be specified as the last component of the snapshot name. This shortcut means you only have to specify the name
after the @ sign for snap1, which is assumed to be from the same file system as snap2. For example:
host1# zfs send -i snap1 tank/dana@snap2 > zfs recv newtank/dana This shortcut syntax is equivalent to the incremental syntax in the preceding
example.
References:
QUESTION 39
Select the five tasks that need to be performed on the Automated Installer (AI) install server before setting up the client.
A. Create a local IPS repository on the AI Install server and start the repository server service, the publisher origin to the repository file.
B. Set up a IP address on the AI install server.
C. The DHCP server must be enabled on the install server and must provide the DHCP service for the clients.
D. DHCP must be available on the network for the Install server and the clients, but the install server does not need to be the DHCP server.
E. Download the AI boot image. The image must be the same version as the Oracle Solaris OS that you plan to install on the client.
F. Download the text install image into the IPS repository.
G. Install the AI installation tools.
H. Create the AI install service.Specify the path to the AI network boot image ISO file and the path where the AI net image ISO file should be unpacked.
I. Create the AI install service. Specify the path to the AI network boot image ISO file and the path to the IPS repository.
Correct Answer:
Section: (none)
Explanation
Answer: B,D,F,G,I
Explanation:
B:Configure the AI install server to use a static IP address and default route.
D: The create-service command can set up DHCP on the AI install server. If you want to set up a separate DHCP server or configure an existing DHCP
server for use with AI. The DHCP server must be able to provide DNS information to the systems to be installed.
E: An automated installation of a client over the network consists of the following high-level steps:
1. The client system boots over the network and gets its network configuration and the location of the install server from the DHCP server.
2. The install server provides a boot image to the client.
3. Characteristics of the client determine which installation instructions and which system configuration instructions are used to install the client.
4. The Oracle Solaris 11 OS is installed on the client, pulling packages from the package repository specified by the installation instructions in the AI
install service.
G: Install the AI tool set.

Use the installadm create-service command to create an AI install service. Give the service a meaningful name, and specify the path where you want
the service created. Specify the source of the network boot image (net image) package or ISO file.
installadm create-service [-n svcname]

[-s FMRI_or_ISO] [-d imagepath]
-d imagepath
The imagepath is the location of the new install service. The install-image/solaris-auto- install package is installed to this location, or the specified ISO
file is expanded at this location.
References:
QUESTION 40
ServerA contains two ISO images of a package repository named so1.repo.iso-a and so1.repo.iso-b respectively. You need to create a single local
package repository on server that clients can connect to. The package repository will be stored on the /export/IPS file system and named repo. The
preferred publisher will be named solaris and the publisher URL will be http://serverA.example.com.
Which is the correct procedure to perform on ServerA to create the local Package repository?
A. cat so1.repo.iso-a sol.repo.iso-b > so1.full.isoMount the ISO image and use the rsync command to extract the contents of the ISO file to the /export/
IPS file system.Set the pkg/inst_root property to /export/IPS/repo and the pkg/readonly property to true.Set the preferred publisher by using pkg set-
publisher-Ghttp://pkg.oracle.com/solaris/release/ \-g http"//serverA.example.com/ solaris
B. cat so1.repo.iso-a so1.repo.iso-b > /export/IPS/repoSet the pkg/inst_root property to true and the pkg/readonly property to /export/IPSSet the
preferred publisher by using pkg set-publisher-G http://serverA.example.com/ \-g http://pkg/oracle.com/solaris/rekease/solaris
C. cat so1.repo.iso-a so1.repo.iso-b > so1.full.isoMount the ISO image and use the rsync command to extract the contents of the ISO file to /export/IPS/
repoSet the pkg/inst_root property to /export/IPS/repo and the pkg/readonly property to trueSet the preferred publisher by using pkg set-publisher
solaris \-g http://pkg.oracle.com/
D. cat so1.repo,iso-a so1.repo.iso-b > /export/IPS/repo.isoMount the ISO image and copy the repo directory from the ISO image to /export/IPS/reposet
the pkg/inst_root property and thepkg/readonly property to /export/IPS/reposet the preferred pkg/inst_root property by using pkg set-publisher-G
http://serverA.example.com/ \-g http://pkg.oracle.com/solaris.com/release/-p solaris
Correct Answer: D
Section: (none)
Explanation
Explanation:
Concatenate the files into one file using the cat command. Make the contents of the repository .iso file available using the mount command. To increase
the performance of repository accesses and to avoid the need to remount the .iso image each time the system restarts, copy the repository files from /
mnt/repo/to a ZFS file system. You can do this copy with rsync or with tar.
References:
QUESTION 41
You want to configure an iSCSI target device on your system. Select the group package required to install this functionality on your system.
A. storage-server
B. solaris-small-server
C. storage-avs
D. storage-nas
Correct Answer: A
Section: (none)
Explanation
Explanation:
How to Create an iSCSI LUN
The disk volume provided by the server is referred to as the target. When the LUN is associated with an iSCSI target, it can be accessed by an iSCSI
initiator. The following tasks are completed on the system that is providing the storage device.
1. Install the COMSTAR storage server software.
target# pkg install storage-server
Etc.
QUESTION 42
The core dump configuration in your non global zone is
A user is running a process in a non-global zone (testzone) and the process crashes. The process information is:
user126632618017:46:42pts/20:00/usr/bin/bash
When the user's process crashes in testzone, a non-global zone, where will the core dump be saved?
A. The file will be stored in the non-global zone's directory: /var/core/pprocess/core.hash.2663.

B. The file will be saved in the global zone's directory: /var/core/core.bash.2663.
C. A core file cannot be generated in a non-global zone because it shares the kernel with the global zone.
D. The file will be stored in the global zone's directory: /var/core/pprocess/core.bash.2663.
E. The file will be saved in non-global zone's directory: /var/core/core.bash.2663
Correct Answer: E
Section: (none)
Explanation
Explanation:
The line
init core file pattern: /var/core/core.%f.%p
will be used for the non-global process to determine the destination of the dump file.
Note: When a process is dumping core, up to three core files can be produced: one in the per- process location, one in the system-wide global location,
and, if the process was running in a local (non-global) zone, one in the global location for the zone in which that process was running.
References:
QUESTION 43
You create a flash archive of the Solaris 10 global zone on the serves named sysA. The archive name is s10-system.flar, and it is stored on a remote
server named backup_server.
On sysA, you create a Solaris 10 branded zone named s10-zone.
You want to use the flash archive, located On" /net/bactup_servers/10-system.flar, to install the Operating system in the s10-zone zone.
Which command do you choose to install the s10-system.flar archive in the Solaris 10 branded zone (s10-zone)?
A. zoneadm-z s10-zone install-a /net/backup_server/s10-system.flar-u

B. zonecfg-z s10-zone install-a /net/backup_server/s10-system.flar-u
C. zoneadm-z s10-zone clone-s /net/backup_server/s10-system.flar
D. zone cfg-a s10-zone create-t SUNWsolaris10\</net/backup_server/s10-system.flar
E. zonecfg-z s10-zone install-f /net/backup/backup_server/s10-system.flar
Correct Answer: A
Section: (none)
Explanation
Explanation:
The zoneadm command is the primary tool used to install and administer non-global zones. Operations using the zoneadm command must be run from
the global zone on the target system.
How to Install the solaris10 Branded Zone

A configured solaris10 branded zone is installed by using the zoneadm command with the install subcommand.
Example: global# zoneadm -z s10-zone install -a /net/machine_name/s10-system.flar u
References:
QUESTION 44
How should you permanently restrict the non-global zone testzone so that it does not use more than 20 CPU shares while it is running?
A. While configuring the zone, add this entry:add rct1set name = capped.cpu-sharesadd value (priv = privileged, limit = 20, action = none)endexit
B. While configuring the zone, add this entry:add rct1set name= zone.cpu-sharesadd value (priv=privileged, limit=20, action=none)endexitfrom
command line, enter:# dispadmin-d FSS
C. From the command line enter:#prct1-n zone.cpu-shares-r-v 20-i zone testzone
D. From the command line, enter:#prct1-n zone.cpu-shares-v 80-r-i zone global
Correct Answer: C
Section: (none)
Explanation
Explanation:
The prctl utility allows the examination and modification of the resource controls associated with an active process, task, or project on the system. It
allows access to the basic and privileged limits and the current usage on the specified entity.
How to Change the zone.cpu-shares Value in a Zone Dynamically This procedure can be used in the global zone or in a non-global zone. For more
information about roles, see Configuring and Using RBAC (Task Map) in System Administration Guide: Security Services.
# prctl -n zone.cpu-shares -r -vvalue-i zonezonename idtype is either the zonename or the zoneid. value is the new value.
Note:project.cpu-shares
Number of CPU shares granted to a project for use with the fair share scheduler
References:
QUESTION 45
You display the IP Interface information with ipmpstat - i
Which two characteristics are indicated by characters that may be included in the FLAGS column?
A. default route
B. IP forwarding enabled
C. allocated to global zone
D. unusable due to being inactive
E. nominated to send/receive IPv4 multicast for its IPMP group
Correct Answer: DE
Section: (none)
Explanation
Explanation:
The ipmpstat command concisely displays information about the IPMP subsystem. It supports five different output modes, each of which provides a
different view of the IPMP subsystem (address, group, interface, probe, and target), described below.
-i
Display IP interface information ("interface" output mode).
Interface Mode
Interface mode displays the state of all IP interfaces that are tracked by in.mpathd on the system.
The following output field is one of the supported:
FLAGS
Assorted information about the IP interface:
i
(D) Unusable due to being INACTIVE.
s
Marked STANDBY.
m
(E) Nominated to send/receive IPv4 multicast for its IPMP group.
b
Nominated to send/receive IPv4 broadcast for its IPMP group.
M
Nominated to send/receive IPv6 multicast for its IPMP group.
d
Unusable due to being down.
h
Unusable due to being brought OFFLINE by in.mpathd because of a duplicate hardware address.
References:
QUESTION 46
You are going to use the- Automated installer (AI) to install a non global zone named zone1. You have created a custom manifest for the non-global
zone and named it zone1manifest
Which command will you use to add this custom manifest to the s11-sparc install service and associate this custom manifest with the non-global zone?
A. installadm create-profile-n s11-sparc-f /tmp/zone1manifest.xml-c

B. installadm create-manifest-n s11-sparc-f /tmp/zone1manifest.xml-m
C. installadm create-client-n s11-sparc-f /tmp/zone1manifest.xml-m zone1manifest-c zonename= "zone1"
D. installadm create-service-n s11-sparc-f /tmp/zone1manifest.xml-m zone1manifest-c zonename="zone1"
Correct Answer: B
Section: (none)
Explanation
Explanation:
installadm add-manifest
Associates manifests with a specific install

service, thus making the manifests available on
the network, independently from creating a
service. When publishing a non-default manifest,
it is required to associate criteria either via
criteria entered on the command line (-c) or
via a criteria XML file (-C).
References:
QUESTION 47
Identify the correctly matching pair of equivalent functionality of JumpStart and Automated installer (AI).
A. JumpStart: begin scriptAI: package repository

B. JumpStart: setup_serverAI: installadm create-service
C. JumpStart: add_Install_clientAI: SMF system configuration profile files
D. JumpStart: finish scripts and sysidsfg filesAI: manifest files
Correct Answer: B
Section: (none)
Explanation
Explanation:
JumpStart:Use the setup_install_server(1M) command.
AI: Use the installadm create-service command.
References:
QUESTION 48
You are setting up an automated installer (AI) install server and issue the following command:
installadm create-service -n prod_ai -s /repo/prod_ai.iso \ -i 192.168.1.100 -c 5 -d /export/repo
Which four options describe the install server that you have configured?
A. Theservicename is prod_ai.
B. DHCP base IP address is 192.168.1.100
C. The initial IP address for the install clients will be 192.168.1.100. This IP address is temporary. After the client is booted, it will use IP addresses in
the following range:192.168.1.101-105.
D. Five IP addresses are allocated for DHCP clients, starting with 192.168.1.100.
E. The Install server will support up to five clients.
F. The AI net image ISO file is located in /repo/prod and the net image ISO will be unpacked in /export/repo.
G. The AI net image ISO file is located in /repo/repo and is named /repo/prod/_ai.iso.
Correct Answer: ABDF
Section: (none)
Explanation
Explanation:
A:-n <svcname>
Uses this install service name instead of default
service name.
B: -i <dhcp_ip_start>
Sets up a new DHCP server. The IP addresses,
starting from dhcp_address_start, are set up.
D: -c <count_of_ipaddr>
Sets up a total number of IP addresses in the
DHCP table equal to the value of the
count_of_ipaddr. The first IP address is the
value of dhcp_ip_start that is provided by the
-i option.
F: -s <srcimage>
Specifies location of AI ISO image to use for
setting up the install service.
<targetdir>
Required: Specifies location to set up net image.
References:
QUESTION 49
Your mentor suggests using the dladm rename-link command to rename the network datalinks.
What are the two advantages of following this advice?
A. It can clarify which network interface has what purpose.

B. It can simplify specifying the network interface with the dladm modify-aggrcommand.
C. It can simplify specifying the network interface with the dladmmodify-bridge command.
D. Itcan simplify IP filter rule changes if the network interface is replaced with a different type.
E. It can prevent accidental deletion of the network interface with the dladm delete-phys command.
F. It can prevent accidental deletion of the network interface configuration with the ipadm delete-addr command.
Correct Answer: AE
Section: (none)
Explanation
Explanation:
A: To rename the bge0 link to mgmt0, enter the following command:
# dladm rename-link bge0 mgmt0
E: Consider that the bge0 device, whose link was named mgmt0 as shown in the previous example, needs to be replaced with a ce0 device because of
a hardware failure. The bge0 NIC is physically removed, and replaced with a new ce0 NIC. To associate the newly added ce0 device with the mgmt0
configuration previously associated with bge0, enter the following command:
# dladm rename-link ce0 mgmt0

Note: How to Rename a Datalink
Use this procedure if you want to change a datalink name to a customized name. For example, some of the datalinks in upgraded system might have
retained legacy hardware-based names and you want to change these names to generic ones.
Note: dladm rename-link [-R root-dir] link new-link

Rename link to new-link. This is used to give a link a meaningful name, or to associate existing link configuration such as link properties of a removed
device with a new device.
QUESTION 50
You are asked to troubleshoot networking issues on an unfamiliar system.
Select the correct command to display what network devices are installed.
A. ifconfig -a
B. dladm show-dev
C. dladm show-phys
D. dladm show-ether
E. netadm show-dev
F. netadm show-ether
Correct Answer: B
Section: (none)
Explanation
Explanation:
dladm show-dev
Shows information for all devices or the specified device.
References:
QUESTION 51
The core dump configuration for your system is:
A user is running a process in the global zone and the process crashes. The process information
is:
User1 2663 2618 0 17:46:42 pts/2 0:00 /usr/bin/bash
The server host name is: zeus
What will the per-process core file be named?
A. core.bash.2663.global
B. core.bash.2663.zeus
C. /var/core/core.bash.2663
D. /var/core/core.bash.2663.global
Correct Answer: C
Section: (none)
Explanation
Explanation:
Note the first line:
global core file pattern: /globalcore/core.%f.%p
The program name is bash

The runtime process ID is 2663
Note:By default, the global core dump is disabled. You need to use the coreadm command with the -e global option to enable it. The -g option causes
the command to append the program name(%f) and the runtime process ID (%p) to the core file name.
References:
QUESTION 52
Select two statements that correctly describe the capabilities of the Distribution Constructor.
A. ISO images for use with the Automated Installer (AI) can be created.
B. Bootable USB images can be created for SPARC and x86 architectures.
C. A single installation server can be used to create ISO images for SPARC and x86 architectures.
D. Checkpoints can be used to pause the build, allowing scripts to run that modify the resulting ISO Image.
E. A single Installation server can be used to create ISO images for Solaris 10 and Solaris11 operating systems.
Correct Answer: AD
Section: (none)
Explanation
Explanation:
A:You can use the distribution constructor to create the following types of Oracle Solaris images:
* (A) x86 or SPARC ISO Image for Automated Installations
* Oracle Solaris x86 live CD image
* x86 or SPARC Oracle Solaris text installer image
* x86 Oracle Solaris Virtual Machine
Note: You can use the distribution constructor to build custom Oracle Solaris images. Then, you can use the images to install the Oracle Solaris
software on individual systems or multiple systems. You can, also, use the distribution constructor to create Virtual Machine (VM) images that run the
Oracle Solaris operating system.
D: Checkpointing Options
You can use the options provided in the distro_const command to stop and restart the build process at various stages in the image-generation process,
in order to check and debug the image that is being built. This process of stopping and restarting during the build process is called checkpointing.
References:
QUESTION 53
The current ZFS configuration on serverA is:
Pool1
c3t2d0
c3t3d0
Pool2
c3t4d0
c3t5d0
The ZFS configuration on serverB is:
Pool1
mirror-0
c3t2d0
c3t3d0
mirror-1
c3t4d0
c3t5d0
You need to change serverA's ZFS configuration to match serverB's configuration.
Which option should you choose to modify the configuration on serverA so that it matches serverB's configuration?
A. zpool destroy pool2zpool attach pool1 c3t4d0 ct3t5d0

B. zpool destroy pool2zpool attach pool1 c3t2d0 c3t2d0 c3t4d0 c3t5d
C. zpool destroy pool2zpool add pool1 c3t4d0 c3t5d0
D. zpool destroy pool2zpool mirror pool1 pool2
E. zpool destroy pool2zpool attach pool1 c3t2d0 c3t4d0zpool attach pool1 c3t3d0 c3t5d0
F. zpool destroy pool1zpool destroy pool2zpool create pool1 mirror c3t2d0c3t3d0c3t4d0 c3t5d0
Correct Answer: F
Section: (none)
Explanation
Explanation:
Wedestroy both pools. Then we recreate the mirror.
Note:
zpool attach [-f] pool device new_device
Attaches new_device to an existing zpool device. The existing device cannot be part of a raidz configuration. If device is not currently part of a mirrored
configuration, device automatically transforms into a two-way mirror of device and new_device. If device is part of a two-way mirror, attaching
new_device creates a three-way mirror, and so on. In either case, new_device begins to resilver immediately.
References:
QUESTION 54
Which three statements accurately describe the Automated Installation (AI) client?
A. If the AI client does not match any criteria to use a custom manifest or script, the default manifest is used.
B. If the AI client does not match any criteria to use a custom manifest or script, the automated installation aborts.
C. Any manifest or script in a service can be designated to be the default for that service.
D. Only the default.xmlfile is used as the default AT client manifest.
E. If a client system does not use any SC profile, then an interactive tool opens on that client at first boot after that client installation to complete the
configuration of that client.
F. If a client system does not use any SC profile, then the install server will use the default SC profile.
Correct Answer: ADE

Section: (none)
Explanation
Explanation:
A: Each client uses one and only one AI manifest to complete its installation. The AI manifest is selected for a client according to the following algorithm:
* If no custom AI manifests are defined for this install service, the default AI manifest is used. The default AI manifest is not associated with any client
criteria
etc.
D: When you create a new install service,

install_service_image_path/auto_install/manifest/default.xml is the initial default AI manifest for that install service.
E: Each client can use any number of system configuration profiles. If a client system does not use any configuration profile, then an interactive tool
opens on that client at first boot after that client installation to complete the configuration of that client.
References:
QUESTION 55
You are going to create live zones on you server. Disk space is critical on this server so you need to reduce the amount of disk space required for these
zones. Much of the data required for each of these zones is identical, so you want to eliminate the duplicate copies of data and store only data that is
unique to each zone.
Which two options provide a solution for eliminating the duplicate copies of data that is common between all of these zones?
A. Create the zones by using sparse root zones.
B. Set the dedup property to on and the dedupratio to at least 1.5 for thezpool.Create a separate ZFS file system for each zone in the zpool.
C. Put all of the zones in the same ZFS file system and set the dedupratio property for the ZFS file system to at least 1.5.
D. Put all of the zones in the same ZFS file system and set the dedup property for the file system to on.
E. Put each zone in a separate ZFS file system within the same zpool.Set thededupproperty to on for each ZFS file system.
Correct Answer: DE
Section: (none)
Explanation
Explanation:
n Oracle Solaris 11, you can use the deduplication (dedup) property to remove redundant data from your ZFS file systems. If a file system has the dedup
property enabled, duplicate data blocks are removed synchronously. The result is that only unique data is stored, and common components are shared
between files.
QUESTION 56
Solaris 11 includes a redesigned software packaging model: the Image Packaging system.
Which three describe advantages of the Image Packaging System over the previous Solaris 10 SVR4 packaging model?
A. Eliminates patching of the software package

B. Makes the patching process more efficient with less downtime
C. Eliminates OS version upgrade
D. Allows for the installation of the OS without a local DVD or installation server
E. Allows the use of a repository mirror to speed up package operation
F. Allows users to publish their own software package in a software repository
Correct Answer: ADF

Section: (none)
Explanation
Explanation:
A: In contrast to the SVR4 packaging model used in earlier Oracle Solaris releases, IPS eliminates the need for patching.
QUESTION 57
You have Solaris 11 system with a host name of sysA and it uses LDAP as a naming service.
You have created a flash archive of sysA and you want to migrate this system to an Oracle Solaris11 server, Solaris10 branded zone.
The zone Status on the Oracle Solaris 11 server is:
- zone10 incomplete/zone/zone1solaris10exc1
Select the option that will force the non-global zone to prompt you for a host name and name service the first time it is booted.
A. Use zonecfg to change the zonename before booting the system for the first time
B. Use the-u option with the zoneadm-z zone10 attach command.
C. Use the-u option with the zoneadn-z zone10 install command.
D. Remove the sysidcfg file from the <zonepath>/root directory before booting the non-global zone.
Correct Answer: C
Section: (none)
Explanation
Explanation:
Oracle Solaris 10 branded zones Oracle Solaris 10 Zones provide an Oracle Solaris 10 environment on Oracle Solaris 11. You can migrate an Oracle
Solaris 10 system or zone to a solaris10 zone on an Oracle Solaris 11 system in the following ways:
* Create a zone archive and use the archive to create an s10zone on the Oracle Solaris 11 system.
This option applies in the current scenario.
Example of command to Install the Oracle Solaris 10 non-global zone. s11sysB# zoneadm -z s10zone install -u -a /pond/s10archive/s10.flar
* Detach the zone from the Oracle Solaris 10 system and attach the zone on the Oracle Solaris 11 zone. The zone is halted and detached from its
current host. The zonepath is moved to the target host, where it is attached.
Note:
install [-x nodataset] [brand-specific options]
A subcommand of the zoneadm.
Install the specified zone on the system. This subcommand automatically attempts to verify first.
It refuses to install if the verify step fails.
-u uuid-match
Unique identifier for a zone, as assigned by libuuid(3LIB). If this option is present and the argument is a non-empty string, then the zone matching the
UUID is selected instead of the one named by the -z option, if such a zone is present.
References:
QUESTION 58
You upgraded your server to Oracle Solaris 11 and you imported zpool (pool1) that was created in Solaris 10. You need to create an encrypted ZFS file
system in pool1, but first you need to make sure that your server supports ZFS encryption.
Which four statements are true for support of ZFS encryption?
A. The encrypted file system must have been created in Oracle Solaris11. To encrypt a ZFS file system from a previous version of Solaris, upgrade the
zpool and create a new encrypted ZFS file system into the encrypted ZFS file system.
B. If you plan to create an encrypted file system in an existing zpool, the zpool must be upgraded to ZFS version 30.
C. ZFS encryption is integrated with the ZFS command set and no additional packages need to be installed.
D. ZFS encryption requires that the ZFS Dataset Encryption package be installed.
E. If you plan to create an encrypted file system in an existing zpool, the pool must be upgraded to ZFS version 21, minimum.
F. Encryption is supported at the pool or dataset (file system) level.
G. Encryption is supported at the pool level only for every file system in the pool will be encrypted.
H. You cannot create an encrypted file system in a zpool that was created prior to oracle Solaris11. Create a new zpool in Solaris11, create an
encrypted ZFS file system in the new zpool, and move or copy the data from the existing file system into the new encrypted file system.
Correct Answer: ABCF

Section: (none)
Explanation
Explanation:
A (not H): You can use your existing storage pools as long as they are upgraded. You have the flexibility of encrypting specific file systems.
B(not E): Can I enable encryption on an existing pool? Yes, the pool must be upgraded to pool version 30 to allow encrypted ZFS file systems and
volumes.
C(not D): ZFS encryption is integrated with the ZFS command set.Like other ZFS operations, encryption operations such as key changes and rekey are
performed online. F (not G): Encryption is the process in which data is encoded for privacy and a key is needed by the data owner to access the
encoded data. You can set an encryption policy when a ZFS dataset is created, but the policy cannot be changed.
References:
QUESTION 59
Identify three options that describe the new Oracle Solaris 11 zone features.
A. There are boot environments for zones.

B. Administrators can delegate common administration tasks by using RBAC.
C. Oracle Solaris 11 supports Solaris 8, 9, and 10 branded zones.
D. You can migrate a physical Solaris 10 system and its non-global zones to a solaris10 branded zone running on an Oracle Solaris 11 system.
E. It is possible to change the host ID of a zone.
Correct Answer: ABD

Section: (none)
Explanation
Explanation:
A:The beadm utility includes support for creating and administering non-global zone boot environments.
Note: A boot environment is a bootable instance of the Oracle Solaris operating system image plus any other application software packages installed
into that image. System administrators canmaintain multiple boot environments on their systems, and each boot environment can have different
software versions installed.
B: Role-based access control (RBAC) is a security feature for controlling user access to tasks that would normally be restricted to the root role. By
applying security attributes to processes and to users, RBAC can divide up superuser capabilities among several administrators.
QUESTION 60
You run the command dlstat show-link -r.
Select the two correct statements regarding the information displayed in the INTRS column.
A. No value is listed for virtual network interfaces.

B. A value of 0 is listed for virtual interfaces and ether stubs.
C. The number of Interrupts is listed, which indicates network efficiency.
D. A number equal to the number of transmitted Ethernet frames is listed for physical links.
E. The number of packets that were interrupted by a collision is listed, which may indicate hardware problems.
Correct Answer: CE
Section: (none)
Explanation
Explanation:
In this output, the statistics for interrupt (INTRS) are significant. Low interrupt numbers indicate greater efficiency in performance. If the interrupt
numbers are high, then you might need to add more resources to the specific link.
Example:
# dlstat -r -i 1
LINK IPKTS RBYTES INTRS POLLS CH<10 CH10-50 CH>50
e1000g0 101.91K 32.86M 87.56K 14.35K 3.70K 205 5
nxge1 9.61M 14.47G 5.79M 3.82M 379.98K 85.66K 1.64K
vnic1 8 336 0 0 0 0 0
e1000g0 0 0 0 0 0 0 0
nxge1 82.13K 123.69M 50.00K 32.13K 3.17K 724 24
vnic1 0 0 0 0 0 0 0
Note:dlstat show-link [-r [-F] | -t] [-i interval] [-a] [-p] [ -o field[,...]] [-u R|K|M|G|T|P] [link] Display statistics for a link.
-r
Display receive-side statistics only. Includes bytes and packets received, hardware and software drops, and so forth.
List of supported RX fields:
link
iusedby
ibytes
ipkts
intrs
polls
hdrops: hardware drops
sdrops: software drops (owing to bandwidth enforcement) ch<10: number of packet chains of length < 10
ch10-50: number of packet chains of length between 10 and 50 ch>50: number of packet chains of length > 50
References:
QUESTION 61
You need to set up a local package repository to serve 75 client systems. Multiple clients will being the package repository concurrently and you need to
ensure that the local repository performs very well under this heavy load, especially during package intensive operations.
Which option would ensure the best performance of the repository during package-intensive rations by multiple clients?
A. Set up multipathing on the package repository server to distribute the network load multiple network interfaces.
B. Deploy a second instance of the package repository server to run as a read writable mirror.
C. Deploy a second instance of the package repository server to run asa read-only mirror.
D. Deploy a second instance of the package repository server to run as a clone of the primary repository server.
E. Deploy a package repository locally on each client.
Correct Answer: A
Section: (none)
Explanation
Explanation:
QUESTION 62
View the Exhibit and review the zpool and ZFS configuration information from your system.
Identify the correct procedure for breaking the /prod_data mirror, removing c4t0d0 and c4t2d0, and making the data on c4t0d0and c4t2d0 accessible
under the dev_data mount point.
A. zpool split pool1 pool2 c4t0d0 c4t2d0zpool import pool2zfs set mountpoint = /dev_data pool2/prod_data
B. zpool detach pool1 pool2zpool attach pool2zfs set mountpoint=/dev_data pool2/prod_data
C. zpool split pool1/prod_data-n pool2/dev_datazfs set mountpoint = /dev_data pool2/prod_data
D. zpool split pool1 pool2 c4t0d0 c4t2d0zpool import pool2
Correct Answer: D
Section: (none)
Explanation
Explanation:
In this Solaris release, you can use the zpool split command to split a mirrored storage pool, which detaches a disk or disks in the original mirrored pool
to create another identical pool.
After the split operation, import the new pool.
References:
QUESTION 63
Which modification needs to be made to the Service Management Facility before you publish a new package to the IPS repository?
A. The pkg.depotd must be disabled.

B. The pkg/readonly property for the application/pkg/server service must be set tofalse
C. The pkg/writable_root property for the application/pkg/server service must be set to true.
D. The pkg/image_root property for the application/pkg/server service must be set to the location of the repository.
Correct Answer: D
Section: (none)
Explanation
Explanation:
pkg/image_root
(astring) The path to the image whose file information will be used as a cache for file data.
References:
QUESTION 64
United States of America export laws include restrictions on cryptography.
Identify the two methods with which these restrictions are accommodated in the Oracle Solaris 11 Cryptographic Framework.
A. Corporations must utilize signed X.509 v3 certificates.
B. A third-party provider object must be signed with a certificate issued by Oracle.
C. Loadable kernel software modules must register using the Cryptographic Framework SPI.
D. Third-party providers must utilize X.509 v3 certificates signed by trusted Root Certification Authorities.
E. Systems destined for embargoed countries utilize loadable kernel software modules that restrict encryption to 64 bit keys.
Correct Answer: BC
Section: (none)
Explanation
Explanation:
B: Binary Signatures for Third-Party Software

The elfsign command provides a means to sign providers to be used with the Oracle Solaris Cryptographic Framework. Typically, this command is run
by the developer of a provider.
The elfsign command has subcommands to request a certificate from Sun and to sign binaries. Another subcommand verifies the signature. Unsigned
binaries cannot be used by the Oracle Solaris Cryptographic Framework. To sign one or more providers requires the certificate from Sun and the private
key that was used to request the certificate.
C: Export law in the United States requires that the use of open cryptographic interfaces be restricted. The Oracle Solaris Cryptographic Framework
satisfies the current law by requiring that kernel cryptographic providers and PKCS #11 cryptographic providers be signed.
References:
QUESTION 65
You are setting up a local IPS package repository on your Oracle Solaris11 server:
solaris.example.com.
You want to point the existing local IPS publisher to the new local IPS repository located in /repo.
These are the stops that you have followed:
1. Download and rsync the contents of the Oracle Solaris11 repository ISO image to the /repo directory.
2. Configure the repository server service properties. The svcprop command display, the IPS related properties:
pkg/inst_root astring/repo
pkg/readonly Boolean true
The 1s command displays the contents of the /repo directory:
#ls/repo
Pkg5.repository publisher
The svcs publisher command shows the svc: /application/pkg/server: default service is online.
The pkg publisher command shows the svc: /application/pkg/server: default service is online.
The pkg publisher command still displays:
solarisoriginonlinehttp://pkg.oracle.com/solaris/release/
Which steps needs to be performed to set the local IPS publisher to the local IPS repository/repo?
A. Issue the pkgrepo refresh-s command to refresh the repository.

B. Restart thesvc:/application/pkg/server:default service.
C. pkg set-publisher command to set the new repository location.
D. Issue the pkgrepo rebuild command to rebuild the repository.
E. Issue the pkgrepo set command to set the new repository location.
Correct Answer: C
Section: (none)
Explanation
Explanation:
Set the Publisher Origin To the File Repository URI
To enable client systems to get packages from your local file repository, you need to reset the origin for the solaris publisher. Execute the following
command on each client:
Example:
# pkg set-publisher -G '*' -M '*' -g /net/host1/export/repoSolaris11/ solaris
References:
QUESTION 66
New features wore added to ZFS in Oracle Solaris11. Your justification to upgrade from Solaris10 to oracle Solaris11 is that it will be possible to take
advantage of the enhancements that were made to ZFS.
Identify the three ZFS functions and features that are included in Oracle Solaris 11, but not in Solaris 10.
A. Encrypted ZFS datasets

B. Ability for ZFS to detect and remove redundant data from the tile system
C. Shadow Data Migration
D. Ability to split a mirrored ZFS storage pool
E. Ability to use ZFS on the boot drive and boot to a ZFS root file system.
F. elimination of the swap file system when using ZFS on the root disk
Correct Answer: ABE

Section: (none)
Explanation
Explanation:
A:ZFS encryption was introduced in ZFS Pool Version Number 30, Solaris Nevada b149.
Filesystem encryption since Solaris 11 Express
B: Deduplication was introduced in ZFS Pool Version Number 21, Solaris Nevada b128.
E: Booting From a ZFS Root File System
Both SPARC based and x86 based systems use the new style of booting with a boot archive, which is a file system image that contains the files required
for booting. When a system is booted from a ZFS root file system, the path names of both the boot archive and the kernel file are resolved in the root file
system that is selected for booting.
References:
QUESTION 67
You are troubleshooting the Oracle Solaris11 Automated Installer (AI), which is not connecting with the IPS software repository.
Which three steps will help determine the cause of DNS name resolution failure?
A. Verify the contents of /etc/resolve.conf.

B. Run netstat-nr to verify the routing to the DNS server.
C. Ping the IP address of the IPS server to verify connectivity.
D. On the installation server, verify that the menu.1st file for the client points to a valid boot arc hive.
E. Run df-k to verify that the boot directory containing the boot archive is loopback mounted under /etc/netboot.
F. Run the command /sbin/dhcpinfo DNSserv to ensure that the DHCP server providing the DNS server information.
Correct Answer: ABF

Section: (none)
Explanation
Explanation:
Check DNS
* (A) Check whether DNS is configured on your client by verifying that a non-empty /etc/resolv.conf file exists.
* (F) If /etc/resolv.conf does not exist or is empty, check that your DHCP server is providing DNS server information to the client:
# /sbin/dhcpinfo DNSserv
If this command returns nothing, the DHCP server is not set up to provide DNS server information to the client. Contact your DHCP administrator to
correct this problem.
* (B) If an /etc/resolv.conf file exists and is properly configured, check for the following possible problems and contact your system administrator for
resolution:
**The DNS server might not be resolving your IPS repository server name.
**No default route to reach the DNS server exists.
References:
QUESTION 68
You created a new zpool. Now you need to migrate the existing ZFS file system from pool1/prod to pool2/prod.
You have these requirements:

1. Users must have access to the data during the migration, so you cannot shutdown the file system while the migration takes place.
2. Because you want to copy the data as quickly as possible, you need to increase the server resources devoted to the ZFS migration.
Which method would you use to modify the ZFS shadow migration daemon defaults to increase the concurrency and overall speed of migration?
A. Svccfg-s filesystem/shadowd:defaultsetprop config_params/shadow_threads=integer:

16endsvcadm refresh filesystem/shadowd: default
B. Specify the-b <blocksize> option with the zfs create command and increase the value of <blocksize>
C. Use the-o -volblocksize=<blocksize>option with the zfs create command and increase the value of the default <blocksize>.
D. Svccfg-s filesystem/zfs: defaultsetprop config_params/shadow_threads = integer:
16endsvcadm refresh filesystem/zfs:default
Correct Answer: A
Section: (none)
Explanation
Explanation:
shadowd is a daemon that provides background worker threads to migrate data for a shadow migration. A shadow migration gradually moves data from
a source file system into a new "shadow" file system. Users can access and change their data within the shadow file system while migration is occurring.
The shadowd service is managed by the service management facility, smf(5). Administrative actions on this service, such as enabling, disabling, or
requesting restart, can be performed using svcadm(1M). The service's status can be queried using the svcs(1) command.
The svccfg(1M) command can be used to manage the following parameter related to shadowd:
config_params/shadow_threads
Note: Oracle Solaris 11: In this release, you can migrate data from an old file system to a new file system while simultaneously allowing access and
modification of the new file system during the migration process.
Setting the shadow property on a new ZFS file system triggers the migration of the older data. The shadow property can be set to migrate data from the
local system or a remote system with either of the following values:
file:///path
nfs://host:path
References:
QUESTION 69
The current ZFS configuration on server is:
You need to backup the /data file system while the file system is active. Select the option that creates a full backup of the /data file system and stores the
backup on server in the pool named backup.
A. Mount-F nfs system: /backup / mntzfs snapshot pool/data@monday>/mnt/Monday

B. Mount-F nfs systemB: /backup/mntzfs snapshot pool1/data@Mondayzfs clone pool1/data@monday/mnt/Monday
C. Zfs send pool1/data@Monday | ssh system zfs recv backup/monday
D. Zfs snapshot pool1/data@Monday | ssh system zfs recv backup/monday
Correct Answer: D
Section: (none)
Explanation
Explanation:
Example (assuming there exists a snapshot `tank/test@1).
Full backup
Now let's do a full initial backup from the `tank/test@1 snapshot:
# zfs send tank/test@1 | zfs receive tank/testback
QUESTION 70
You are creating a non-global zone on your system.
Which option assigns a zpool to a non-global zone, and gives the zone administrator permission to create zfs file system in that zpool?
A. While creating the non-global zone, make the following entry:add deviceset match=/dev/rdsk/c4t0d0endBoot the zone and log in the zone as root.
Create the zpool:zpool create pool2 c4t0d0In the non-global zone, root can now create ZFS file system in the pool2 zpool
B. In the global zone, create the zpool:global# zpool create pool2 c4t1d0While creating the no- global zone, make the following entry:add datasetset
name=pool2endadd fsset dir=pool1set special=pool1set type=zfspool1endBoot the zone, log in the zone as root, and create the zfs file system in the
pool2 zpool.
C. In the global zone, create the zpool:global#zpool create pool2 c4t1d0While creating the global zone, make the following entry:add datasetset
name=pool2endBoot the zone, log in to the zone as root and create the zfs file systems in the pool2 zpool.
D. In the global zone, create the zpool and the ZFS file systems that you want to use in the non- global zone:global#zpool create pool2 c4t1d0global#zfs
create pool2/dataWhile creating the non-global zone, make the following entry for each ZFS file system that you want to make available in the
zone:add fsset dir=/dataset special=pool2/dataset type=zfsend
E. Create the zpool in the global zone:global#zpool create pool2 c4t1d0Boot the non-global zone, log in to the zone as root, and issue this command to
delegate ZFS permissions to root:non- global zone# zfs allow root create , destroy, mount pool2Log in to the non-global zone create ZFS file systems
in the pool2 zpool.
Correct Answer: D
Section: (none)
Explanation
Explanation:
You can add a ZFS file system to a non-global zone by using the zonecfg command's add fs subcommand.
In the following example, a ZFS file system is added to a non-global zone by a global zone administrator from the global zone:
# zonecfg -z zion
zonecfg:zion> add fs
zonecfg:zion:fs> set type=zfs
zonecfg:zion:fs> set special=tank/zone/zion
zonecfg:zion:fs> set dir=/export/shared
zonecfg:zion:fs> end
References:
QUESTION 71
A change in your company's security policy now requires an audit trial of all administrators assuming the sysadm role, capturing:
There are two command necessary to accomplish this change. One is a rolemod command. What is the other?
A. auditconfig set policy=argv

B. auditconfig-setpolicy +argv
C. auditconfig-setflags lo, ex sysadm
D. auditconfig set flags=lo, ex sysadm
Correct Answer: B
Section: (none)
Explanation
Explanation:
Audit Significant Events in Addition to Login/Logout (see step 2 below) Use this procedure to audit administrative commands, attempts to invade the
system, and other significant events as specified by your site security policy.
For all users and roles, add the AUE_PFEXEC audit event to their preselection mask.
# usermod -K audit_flags=lo,ps:no username

# rolemod -K audit_flags=lo,ps:no rolename
# auditconfig -setpolicy +argv
3- Record the environment in which audited commands are executed.
# auditconfig -setpolicy +arge
Note: [-t] -setpolicy [+|-]policy_flag[,policy_flag ...] Set the kernel audit policy. A policy policy_flag is literal strings that denotes an audit policy. A prefix of
+ adds the policies specified to the current audit policies. A prefix of - removes the policies specified from the current audit policies. No policies can be
set from a local zone unless the perzone policy is first set from the global zone.
References:
QUESTION 72
Your task is to convert a JumpStart sysidcfg file to an Automated Installer (AI) sc_profile.xml file, using js2ai.
Select two unsupported items that will require changes.
A. terminal = zterms
B. name_service-NTS+
C. timezone=US/pacific
D. system_locale=en_US
E. network_interface=PRIMARY
F. root_password=rJmvLUXM10cU
Correct Answer: AD
Section: (none)
Explanation
Explanation:
A: terminal
The js2ai tool does not perform any translation. Make sure the terminal type speciied in the sysidcfg ile is supported in Oracle Solaris 11.
D: system_locale
The js2ai tool does not perform any translation. Make sure the locale specified in the sysidcfg ile is supported in Oracle Solaris 11.
References:
QUESTION 73
The COMSTAR framework provides support for the iSCSI protocol.
Select three options that correctly describe the COMSTAR framework.
A. iSCSIdevices can be used as dump devices.

B. SCSI commands are carried over IP networks and enable you to mount disk devices from across the network onto your local system.
C. Large amounts of data can be transferred over an IP network with very little network degradation.
D. COMSTAR allows you to convert any Solaris11 host into a SCSI target device that can be accessed over a storage network.
E. One IP port can handle multiple ISCSI target devices.
Correct Answer: BDE

Section: (none)
Explanation
Explanation:
B: By carrying SCSI commands over IP networks, the iSCSI protocol enables you to access block devices from across the network as if they were
connected to the local system. COMSTAR provides an easier way to manage these iSCSI target devices.
D: Common Multiprotocol SCSI TARget, or COMSTAR, a software framework that enables you to convert any Oracle Solaris 11 host into a SCSI target
device that can be accessed over a storage network by initiator hosts.
E: One IP port can handle multiple iSCSI target devices.
References:
QUESTION 74
View the Exhibit to inspect the boot environment Information displayed within a non global zone on your system.
Which two options describe the solaris-1 boot environment?
A. The solaris-1 boot environment is not bootable.

B. The solaris-1 boot environment is incomplete.
C. The solaris-1 boot environment was created automatically when the non global zone was created.
D. The solaris-1 boot environment was created in the non-global zone using the beadm create command.
E. The solaris-1 boot environment is associated with a non active global zone boot environment.
Correct Answer: AD
Section: (none)
Explanation
Explanation:
A: The of the Active Column indicates that this boot environment is inactive, and hence not bootable.
Note: The values for the Active column are as follows:
R Active on reboot.
N Active now.
NR Active now and active on reboot.
"-" Inactive.
"!" Unbootable boot environments in a non-global zone are represented by an exclamation point.
D: beadm create
Creates a new boot environment name, beName.
Note: beadm list

Lists information about the existing boot environment, which is beName, or lists information for all boot environments if beName is not provided.
Note: Using beadm Utility (Tasks)
You can use the beadm utility to create and manage snapshots and clones of your boot environments.
Note the following distinctions relevant to boot environment administration:
* A snapshot is a read-only image of a dataset or boot environment at a given point in time. A snapshot is not bootable.
* A boot environment is a bootable Oracle Solaris environment, consisting of a root dataset and, optionally, other datasets mounted underneath it.
Exactly one boot environment can be active at a time.
* A clone of a boot environment is created by copying another boot environment. A clone is bootable.
References:
QUESTION 75
You are using AI to install a new system. You have added to following information to the AI manifest:
<configuration type= "zone" name= "dbzone"

source = "http://sysA.example.com/zone_cfg/zone.cfg"/>
Which statement is true with regard to the zone.cfg?
A. The zone.cfg file is text file in a zonecfg export format.

B. The zone.cfg file is an AI manifest that specifies how the zone is to be installed.
C. The zone.cfg file is an xml file in a form suitable for use as a command file for the zonecfg command.
D. The zone.cfg file is an SC profile with keywords that are specific for configuring a as part of the installation process.
E. It is am xml configuration file from the /etc/zone directory. It will be used as a profile for the zone. It specifies the zonename, zonepath, and other
zonecfg parameters.
Correct Answer: B
Section: (none)
Explanation
Explanation:
The configuration element supports non-global zone configurations. When installing a global zone system, the zone configurations specified in the AI
manifest are used to install non-global zones onto the system after the global zone has been installed
The configuration element has the following attributes:
type
The type of configuration to install. The only type supported by AI is zone.
name
A name given to the configuration. This name must be unique across all configuration elements in an AI manifest. For configurations of type zone, this
name is also used as the zonename for the zone.
source
The location from which AI downloads the configuration file for this configuration element. The value can be an HTTP or FILE URI specification. For
configurations of type zone, this value should point to a zone configuration file as produced from the zonecfg export command.
References:

Oracle Certkiller 1z0-820 v2015-03-25 by Aileen 75q

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Oracle Certkiller 1z0-820 v2015-03-25 by Aileen 75q

Uploaded by

Copyright:

Available Formats

Certkiller 1z0-820 75q

Upgrade to Oracle Solaris 11 System Administrator

A. Layer 5 IP address encryptions

Which four correctly describe the output?

Correct Answer: ACEG

File or Directory Change Identifier

Correct Answer: ABDF

$ sudo pkg install slim_install

D:The text installer advantages over the GUI installer include:

Which interactive tool can be used to generate this question configuration?

zonestate - q physical - memory -R high -z -p -p "zones" 10 24h 60m

* -R report[,report] (here high)

A. Resources listed in /etc/dfs/dfstab are automatically shared on boot up.

A. zfs create-oencryption = /mykey pool1/encrypt

# zfs create -o encryption=aes-256-ccm -o keysource=raw,file:///cindykey.file tank/home/cindys References:

A. Create a ZFS file system named iscsi/target.

4. Confirm that the LUN has been created.

(F) 5. Add the LUN view.

target# stmfadm add-view 600144F0B5418B0000004DDAC7C10001 How to Create the iSCSI Target

(H) 1. Enable the iSCSI target service.

(I) 2. Create the iSCSI target.

The update is available on the updated publisher:

Changing a Publisher Origin URI

# pkg set-publisher -g http://pkg.example.com/support \ -Ghttp://pkg.example.com/release example.com

Select the three activities necessary to accomplish this.

A. To the file /etc/security/prof_attr, add the line:Network Management:

Correct Answer: CDG

A. to temporarily bypass IP Filter rules

Choose the command used to connect to testzone's console.

Identify the two correct statements describing the attributes recorded.

A. /var/dhcp Attribute: size uid gid mode acl

A. zfs snapshot pool1/data@now

Correct Answer: ADE

# zfs destroy tank/home/ahrens@now

Correct Answer: DEF

To accomplish this, you will create__________.

Correct Answer: CDE

The correct command is ___________.

# rctladm -e syslog task.max-lwps

Correct Answer: BEF

showmount [ -ade ] [ hostname ]

View the exhibit.

What is the reason for this error?

A. The name vswitch192.168.1 is not legal.

Note: Create a VNIC in the system's global zone.

# dladm create-vnic -l data-link vnic-name

link can be a physical link or an etherstub.

vnic-name is the name that you want to give the VNIC.

# dladm create-vnic -l e1000g0 vnic0

Example: Creating a Virtual Network Without a Physical NIC

First, create an etherstub with name stub1:

# dladm create-etherstub stub1

# dladm create-vnic -l stub1 hello0

Correct Answer: BEF

E: AI Server Software Requirements include

F: Install Server Requirements

Correct Answer: BDE

E: Use pkg.depotd to serve the repository to clients.

A. zfs create-ocompression=on pool1/data

You can enable this property as follows:

# zfs set dedup=on tank/home

A. pkg info|grep gzip

A. This package cannot be removed.