1z0-821 Oracle Solaris 11 System Administration - Practice Questions

Question 4

Identify the two security features incorporated in the Oracle Solaris 11 Cryptographic Framework.

Select all that apply, then click Submit answer.

○
Layer 5 IP address encryptions
○
Internet protocol security
○
Diffie-Kerberos coaxial key encryption
○
Signed cryptographic plugins (providers)
○
Kernel support for signed antivirus plugins

Question 5

To help with your troubleshooting, you need to determine the version of the OBP. Which two commands will provide you with this information?

Select all that apply, then click Submit answer.

○
printenv
○
banner
○
.version
○
set-env
○
show-devs
○
value version

Question 6

Which two options accurately describe the network characteristics of a zone?

Select all that apply, then click Submit answer.

○
DHCP address assignment cannot be configured in a shared IP zone.
○
Shared IP is the default type of network configuration.
○
Exclusive IP is the default type of network configuration.
○
By default, all IP addresses, netmasks, and routes are set by the global zone and cannot be altered in a non global zone.
○
IPMP cannot be managed within the non-global zone.
○
Commands such as snoop and dladm cannot be used on datalinks that are in use by a running zone.

Reference / correct answer:

DHCP address assignment cannot be configured in a shared IP zone.

Shared IP is the default type of network configuration.

A: Non-global zones can not utilize DHCP (neither client nor server).

B (not C): By default, non-global zones will be configured with a shared IP functionality. What this means is that IP layer configuration and state is shared between the zone you’re creating and the global zone. This usually implies both zones being on the same IP subnet for each given NIC.

Note: A zone is a virtual operating system abstraction that provides a protected environment in which applications run. The applications are protected from each other to provide software fault isolation. To ease the labor of managing multiple applications and their environments, they co-exist within one operating system instance, and are usually managed as one entity.

The original operating environment, before any zones are created, is also called the "global zone" to distinguish it from non-global zones, The global zone is the operating system instance.

Incorrect answer:

E: Exclusive-IP zones can use IPMP. IPMP is configured the same way in an exclusive-IP zone as it is on a system not using zones. For shared-IP zones, IPMP can be configured in the global zone.

F: Full IP-level functionality is available in an exclusive-IP zone.

An exclusive-IP zone has its own IP-related state.

An exclusive-IP zone is assigned its own set of data-links using the zonecfg command. The zone is given a data-link name such as xge0, e1000g1, or bge32001, using the physical property of the net resource. The address property of the net resource is not set.

Note that the assigned data-link enables the snoop command to be used.

The dladm command can be used with the show-linkprop subcommand to show the assignment of data-links to running exclusive-IP zones.

1z0-821 – Oracle Solaris 11 System Administration