Free Oracle 1Z0-820 Exam Questions

Question 1

You upgraded your server to Oracle bolans 11 and you imported a zpool(pooll) that was created in bolaris 10. You need to create an encrypted ZFS file system in pooll, but first you need to make sure that your server supports ZFS encryption.

Which four statements are true for support of ZFS encryption?

A : The encrypted file system must have been created in Oracle Solaris 11. To encrypt a ZFS file system from a previous version of Solaris, upgrade the zpool and create a new encrypted ZFS file system in that zpool Finally, move or copy the data from the existing ZFS file system into the new encrypted ZFS file system.

B : if you plan to create an encrypted file system in an existing zpool, the zpool must be upgraded to ZFS version 30, minimum

C : ZFS encryption is integrated with the ZFS command set and no additional packages need to be installed.

D : ZFS encryption requires that the ZFS Dataset Encryption package be installed.E If you plan to create an encrypted file system in an existing zpool, the zpool must be upgraded to ZFS version 21, minimum. D f Encryption is supported at the pool or dataset (file system) level

E : Encryption is supported at the pool level only and every file system in the pool will be encrypted.

F : You cannot create an encrypted file system in a zpool that was created prior to Oracle Solaris 11.Create a new zpool in Solaris 11, create an encrypted ZFS file system in the new zpool, and move or copy the data from the existing file system into the new encrypted file system.

Answer: A,B,C

Question 2

You have Solaris 11 system with a host name of sysA and it uses LDAP as a naming service.

You have created a flash archive of sysA and you want to migrate this system to an Oracle Solaris11 server, Solaris10 branded zone.

The zone Status on the Oracle Solaris 11 server is:

- zone10 incomplete /zone/zone1 solaris10 exc1

Select the option that will force the non-global zone to prompt you for a host name and name service the first time it is booted.

A : Use zonecfg to change the zonename before booting the system for the first time

B : Use the - u option with the zoneadm - z zone10 attach command.

C : Use the -u option with the zoneadn -z zone10 install command

D : Remove the sysidcfg file from the /root directory before booting the non-global zone.

Answer: C

Question 3

Review the output from a ZFS file system:

NAMEPROPERTYVALUESOURCE

pool1/encryptencryptionaes-256-ccmlocal pool1/encryptkeysourceraw,file///mykeylocal

You need to recreate the pooM/encrypt file system exactly as it is listed above Which two commands can you use to recreate the pooM/encrypt file system?

(Choose two.)

A : pktool genkey keystone=file outkey=/mykey keytype=aes keylen=256

B : genkey pktool keystore=file outkey=/mykey keytype=aes keylen=256

C : zfs create -o encryption=aes-256-ccm -o keysource=raw,file://mykey pooll/encrypt

D : zfs create -o encryption=aes-256-ccm -o keysource=raw,file:///mykey pooM/encrypt

E : zfs create -o encryption=aes-256-ccm -o keysource=raw,file:///mykey source=local pooll/encrypt

Answer: B,C

Question 4

Consider the following rule file for use with the Basic Audit Reporting Tool (BART).

CHECK all

IGNORE dirmtime

/etc/security

/etc/notices

IGNORE contents

/export/home

IGNORE mtime size contents

/var

CHECK

You are using BART to detect inappropriate changes to the file system.

Identify the two correct statements describing the attributes recorded.

A : /var/dhcp Attribute: size uid gid mode acl

B : /etc/hosts Attributes: size uid gid mode acl intime dest

C : /var/spool/mqueue Attribute: size uid gid mode acl dirmtime

D : /etc/security/exec_attr Attribute: size uid mode acl mtime devnode

E : /export/home/kate/.profile Attributes: uid gid mode acl dirmtime

F : /export/home/rick/.profile Attributes: size uid gid mode acl mtime contents

Answer: A,D

Question 5

Select the two correct descriptions of the configuration of a default installation of Oracle Solaris 11. (Choose two.)

A : The root account no longer exists.

B : Access to the root account is restricted by RBAC.

C : The Solaris Management Console GUI (SMC) can be used to assign the root role to a user.

D : telnet, ftp, and other services are disabled for network access, but root can log in by using SSH.

E : Any logged in user, who knows the password for the root account, can modify the system configuration.

F : usermod -R +root alice will allow user alice to assume the role of root to modify the system configuration.

Answer: A,B