Question 1

Consider the following rule file for use with the Basic Audit Reporting Tool (BART).CHECK allIGNORE dirmtime/etc/security/etc/noticesIGNORE contents/export/homeIGNORE mtime size contents/varCHECKYou are using BART to detect inappropriate changes to the file system.Identify the two correct statements describing the attributes recorded.

Options :

A : /var/dhcp Attribute: size uid gid mode acl

B : /etc/hosts Attributes: size uid gid mode acl intime dest

C : /var/spool/mqueue Attribute: size uid gid mode acl dirmtime

D : /etc/security/exec_attr Attribute: size uid mode acl mtime devnode

E : /export/home/kate/.profile Attributes: uid gid mode acl dirmtime

F : /export/home/rick/.profile Attributes: size uid gid mode acl mtime contents

Answer: A,D

Question 2

A process associated with a user application keeps crashing on the user, but a core dump is not being saved in the /var/core/pprocess directory. The core dump configuration is:global core file pattern: /var/core/core. %f.%pglobal core file content: defaultinit core file pattern: coreinit core file content: defaultglobal core dumps: enabledper-process core dumps: enabledglobal setid core dumps disabledper-process setid core dumps: disabledglobal core dump logging: disabledWhich option would change the core dump configuration so that a user's per-process core dumps get saved in the /var/core/pprocess directory?

Options :

A : coreadm ---g /var/core/pprocess/core.%f %p

B : coreadm ---i /var/core/pprocess/core.%f.%p

C : coreadm ---i /var/core/pprocess/core.%f.%p coreadm ---e proc---setid ---d process

D : coreadm ---g /var/core/pprocess/core.%f.%p coreadm ---e global---setid

E : Make this change to the /etc/coreadm conf file:init core file pattern: /var/core/pprocess/core.%f.%p

Answer: A

Question 3

Review the output from a ZFS file system:NAMEPROPERTYVALUESOURCEpool1/encryptencryptionaes-256-ccmlocal pool1/encryptkeysourceraw,file///mykeylocalYou need to recreate the pooM/encrypt file system exactly as it is listed above Which two commands can you use to recreate the pooM/encrypt file system?(Choose two.)

Options :

A : pktool genkey keystone=file outkey=/mykey keytype=aes keylen=256

B : genkey pktool keystore=file outkey=/mykey keytype=aes keylen=256

C : zfs create -o encryption=aes-256-ccm -o keysource=raw,file://mykey pooll/encrypt

D : zfs create -o encryption=aes-256-ccm -o keysource=raw,file:///mykey pooM/encrypt

E : zfs create -o encryption=aes-256-ccm -o keysource=raw,file:///mykey source=local pooll/encrypt

Answer: B,C

Question 4

After installing the OS, you boot the system and notice that the syslogd daemon is not accepting messages from remote systems.Which two options should you select to modify the syslogd daemon configuration so that it accepts messages from remote systems?

Options :

A : svccfg -s svc:/system/system -log setprop start/exec= ''syslogd -t''Restart the syslogd daemon.

B : Set the following parameter in the /etc/syslogd.conf file: LOG_FROM_REMOTE= YESRestart the syslogd daemon.

C : svcadm enable svc:/system/system -log/config/log_from_remoteRestart the syslogd daemon.

D : svccfg -s svc:/system/system-log setprop config/log_from_remote=trueRestart the syslogd daemon.

E : Set the following parameter in the /etc/default/syslogd file: LOG_FROM_REMOTE=YESRestart the syslogd daemon.

Answer: B,D

Question 5

You have Solaris 11 system with a host name of sysA and it uses LDAP as a naming service.You have created a flash archive of sysA and you want to migrate this system to an Oracle Solaris11 server, Solaris10 branded zone.The zone Status on the Oracle Solaris 11 server is:- zone10 incomplete /zone/zone1 solaris10 exc1Select the option that will force the non-global zone to prompt you for a host name and name service the first time it is booted.

Options :

A : Use zonecfg to change the zonename before booting the system for the first time

B : Use the - u option with the zoneadm - z zone10 attach command.

C : Use the -u option with the zoneadn -z zone10 install command

D : Remove the sysidcfg file from the /root directory before booting the non-global zone.

Answer: C