Oracle 1Z0-821 Exam Questions and Answers 2021

NEW QUESTION 1
A datalink can best be described as .

• A. a driver for a Network Interface Card
• B. the software connecting the Internet Layer and the Physical Layer
• C. a device that provides Classless Inter-Domain Routing
• D. a logical object used for IP Multipathing

Answer: D

Explanation: The command dladm is used to configure data-link interfaces in Sun Solaris. A configured data-link is represented in the system as interface that can be used for TCP/IP. Each data- link relies on either a single network device or an link aggregation device to send & recieve packets.
Network interfaces provide the connection between the system and the network. These interfaces are configured over data links, which in turn correspond to instances of hardware devices in the system.
In the current model of the network stack, interfaces and links on the software layer build on the devices in the hardware layer. More specifically, a hardware device instance in the
hardware layer has a corresponding link on the data-link layer and a configured interface on the interface layer. This one-to-one relationship among the network device, its data link, and the IP interface is illustrated in the figure that follows.
Network Stack Showing Network Devices, Links, and Interfaces:

NEW QUESTION 2
You have connected a new printer at a fixed IP address.
It appears to work correctly most of the time, but at other times does not respond. You suspect that the assigned address may not be unique within the network. What command will be useful to confirm this?

• A. arp
• B. netstat
• C. ipadm show-if
• D. dladm show-addr
• E. ipadm show-addr

Answer: E

Explanation: 'ipadm show-addr' displays all the configured addresses on the system. Example:
# ipadm show-addr
ADDROBJ TYPE STATE ADDR
lo0/v4 static ok 127.0.0.1/8 lo0/v6 static ok ::1/128

NEW QUESTION 3
zone1 is a non-global zone that has been configured and installed.
zone1 was taken down for maintenance, and the following command was run: zoneadm -z zone1 mark incomplete
The following information is displayed when listing the zones on your system:

Which task needs to be performed before you can boot zone1?

• A. The zone needs to be installed.
• B. The zone needs to be brought to the ready state.
• C. The zone needs to be uninstalled and reinstalled.
• D. The zone needs to be brought to the complete state.

Answer: C

Explanation: If administrative changes on the system have rendered a zone unusable or inconsistent, it is possible to change the state of an installed zone to incomplete.
Marking a zone incomplete is irreversible. The only action that can be taken on a zone marked incomplete is to uninstall the zone and return it to the configured state.

NEW QUESTION 4
To inspect network interface net3, you enter the following commands:

What problem do you suspect? Assume the user is authorized and provided the correct password.

• A. The net3 interface hasn't been enabled yet.
• B. The net3 vnic hasn't been created.
• C. The net3/v4 ip object hasn't been configured.
• D. The net3 interface is not attached to a NIC or etherstub.

Answer: C

Explanation: The following command marks the address object net1/v4a up that was previously marked
down.
# ipadm up-addr net1/v4a

NEW QUESTION 5
The interface net3 should be operating, but is not. Command:

Which command should you enter next?

• A. ipadm create-ip
• B. ipadm enable-if
• C. ipadm show-if
• D. ipadm up-addr

Answer: B

Explanation: Enable-if -t interface
Enables the given interface by reading the configuration from the persistent store. All the persistent interface properties, if any, are applied and all the persistent addresses, if any, on the given interface will be enabled.
-t, --temporary
Specifies that the enable is temporary and changes apply only to the active configuration.

NEW QUESTION 6
A user on the system has started a process, but it needs to be terminated. The process ID was determined as follows:
pgrep userprogram l5317
The user attempted to terminate the program as follows: pkill 15317
This command runs without an error message, and the process continues to run. What is the issue?

• A. You need to run the pkill command with the process name.
• B. You need to switch to super user to kill the process.
• C. You need to run the ps command to get more information.
• D. You need to run the prstat command to get more information.

Answer: B

Explanation: You can use the pgrep and pkill commands to identify and stop command processes that you no longer want to run. These commands are useful when you mistakenly start a process that takes a long time to run.
To terminate a process:
Type pgrep to find out the PID(s) for the process(es). Type pkill followed by the PID(s).
You can kill any process that you own. Superuser can kill any process in the system except for those processes with process IDs of 0, 1, 2, 3, and 4. Killing these processes most likely
will crash the system.

NEW QUESTION 7
United States of America export laws include restrictions on cryptography.
Identify the two methods with which these restrictions are accommodated in the Oracle Solaris 11 Cryptographic Framework.

• A. Corporations must utilize signed X.509 v3 certificates.
• B. A third-party provider object must be signed with a certificate issued by Oracle.
• C. Loadable kernel software modules must register using the Cryptographic Framework SPI.
• D. Third-party providers must utilize X.509 v3 certificates signed by trusted Root Certification Authorities.
• E. Systems destined for embargoed countries utilize loadable kernel software modules that restrict encryption to 64 bit keys.

Answer: BC

Explanation: B: Binary Signatures for Third-Party Software
The elfsign command provides a means to sign providers to be used with the Oracle Solaris Cryptographic Framework. Typically, this command is run by the developer of a provider.
The elfsign command has subcommands to request a certificate from Sun and to sign binaries. Another subcommand verifies the signature. Unsigned binaries cannot be used by the Oracle Solaris Cryptographic Framework. To sign one or more providers requires the certificate from Sun and the private key that was used to request the certificate.
C: Export law in the United States requires that the use of open cryptographic interfaces be restricted. The Oracle Solaris Cryptographic Framework satisfies the current law by requiring that kernel cryptographic providers and PKCS #11 cryptographic providers be signed.

NEW QUESTION 8
You want to display network interface information. Which command should you use?

• A. ipadm show-if
• B. ipadm show-addr
• C. ipadm show-prop
• D. ipadm show-addrprop

Answer: A

NEW QUESTION 9
You need to install the gzip software package on your system. Which command would you use to find the software package in the configured repository?

• A. pkg search gzip
• B. pkg info gzip
• C. pkg contents gzip
• D. pkginfo gzip
• E. yum list gzip

Answer: A

Explanation: Use the pkg search command to search for packages whose data matches the specified pattern.
Like the pkg contents command, the pkg search command examines the contents of packages. While the pkg contents command returns the contents, the pkg search command returns the names of packages that match the query.

NEW QUESTION 10
Which best describes the svc:/system/boot-config service?

• A. It is used to change the milestone on a system.
• B. It is used to set the default run level of the system.
• C. It provides the parameters used to set the system to automatically perform a fast or slow reboot.
• D. When the service is enabled, the system performs a fast reboot by default; when it is disable the system performs a slow reboot by default.

Answer: C

Explanation: Starting with the Oracle Solaris 11 Express release, Fast Reboot is supported on the SPARC platform, as well as the x86 platform. On both platforms, this feature is controlled by the SMF and implemented through a boot configuration service, svc:/system/boot- config. The boot-config service provides a means for setting or changing the default boot configuration parameters.
The fastreboot_default property of the boot-config service enables an automatic fast reboot of the system when either the reboot or the init 6 command is used. When the config/fastreboot_default property is set to true the system automatically performs a fast reboot, without the need to use the reboot -f command. By default, this property's value is set to false on the SPARC platform and to true on the x86 platform.

NEW QUESTION 11
The core dump configuration for your system is:

A user is running a process in the global zone and the process crashes. The process information is:
User1 2663 2618 0 17:46:42 pts/2 0:00 /usr/bin/bash
The server host name is: zeus
What will the per-process core file be named?

• A. core.bash.2663.global
• B. core.bash.2663.zeus
• C. /var/core/core.bash.2663
• D. /var/core/core.bash.2663.global

Answer: C

Explanation: Note the first line:
global core file pattern: /globalcore/core.%f.%p
The program name is bash The runtime process ID is 2663
Note: By default, the global core dump is disabled. You need to use the coreadm command with the -e global option to enable it. The -g option causes the command to append the program name(%f) and the runtime process ID (%p) to the core file name.

NEW QUESTION 12
A user account must be a member of a primary group, and may also be a member of one or more secondary groups. What is the maximum total number of groups that one user can concurrently belong to?

• A. 15
• B. 16
• C. 17
• D. 63
• E. 64
• F. 65
• G. The number of groups one user can concurrently belong to is unlimited in Solaris 11.

Answer: B

Explanation: Each user belongs to a group that is referred to as the user’s primary group. The GID number, located in the user’s account entry within the /etc/passwd file, specifies the user’s primary group.
Each user can also belong to up to 15 additional groups, known as secondary groups. In the /etc/group file, you can add users to group entries, thus establishing the user’s secondary group affiliations.
Note (4 PSARC/2009/542):
his project proposes changing the maximum value for NGROUPS_MAX from 32 to 1024 by changing the definition of NGROUPS_UMAX from 32 to 1024.
The use for a larger number of groups is described in CR 4088757, particular in the case of Samba servers and ADS clients; the Samba servers map every SID to a Unix group. Users with more than 32 groups SIDs are common. We've seen reports varying from "64 is enough", "128 is absolutely enough" and "we've users with more 190 group SIDS).
NGROUPS_MAX as defined by different Unix versions are as follows (http://www.j3e.de/ngroups.html):
Linux Kernel >= 2.6.3 65536
Linux Kernel < 2.6.3 32 Tru64 / OSF/1 32
IBM AIX 5.2 64
IBM AIX 5.3 ... 6.1 128
OpenBSD, NetBSD, FreeBSD, Darwin (Mac OS X) 16 Sun Solaris 7, 8, 9, 10 16 (can vary from 0-32)
HP-UX 20
IRIX 16 (can vary from 0-32)
Plan 9 from Bell Labs 32
Minix 3 0 (Minix-vmd: 16)
QNX 6.4 8

NEW QUESTION 13
View the Exhibit and review the file system information displayed from a remote server.

You are configuring a new server. This new server has the following storage pool configured:

This new server also has the following file systems configured:

When you are finished building this new server, the pool1/data dataset must be an exact duplicate of note server. What is the correct procedure to create the pool1/data dataset on this new server?

• A. zfs create –o mountpoint=/data –o refquota=1g pool1/data
• B. zfs set mountpoint=none pool1zfs create pool1/data
• C. zfs set mountpoint=none pool1zfs create –o mountpoint=/data –o quota=1g pool1/data
• D. zfs create quota=1g pool1/data
• E. zfs create mountpoint=/data pool1/data
• F. zfs set quota=1g pool1/data

Answer: A

NEW QUESTION 14
You are setting up a local IPS package repository on your Oracle Solaris11 server: solaris.example.com.
You want to point the existing local IPS publisher to the new local IPS repository located in
/repo.
These are the stops that you have followed:
1. Download and rsync the contents of the Oracle Solaris11 repository ISO image to the
/repo directory.
2. Configure the repository server service properties. The svcprop command display, the IPS related properties:
pkg/inst_root astring/repo pkg/readonly Boolean true
The 1s command displays the contents of the /repo directory:
#ls/repo
Pkg5.repository publisher
The svcs publisher command shows the svc: /application/pkg/server: default service is online.
The pkg publisher command shows the svc: /application/pkg/server: default service is online.
The pkg publisher command still displays: PUBLISHERTYPESTATUSURI
solarisoriginonlinehttp://pkg.oracle.com/solaris/release/
Which steps needs to be performed to set the local IPS publisher to the local IPS repository/repo?

• A. Issue the pkgrepo refresh -s command to refresh the repository.
• B. Restart the svc:/application/pkg/server:default service.
• C. pkg set-publisher command to set the new repository location.
• D. Issue the pkgrepo rebuild command to rebuild the repository.
• E. Issue the pkgrepo set command to set the new repository location.

Answer: C

Explanation: Set the Publisher Origin To the File Repository URI
To enable client systems to get packages from your local file repository, you need to reset the origin for the solaris publisher. Execute the following command on each client:
Example:
# pkg set-publisher -G '*' -M '*' -g /net/host1/export/repoSolaris11/ solaris

NEW QUESTION 15
You have completed configuring a zone named dbzone on your Solaris 11 server. The configuration is as following:

The global zone displays the following network information:

The zone has never been booted. Which three options correctly describe this zone?

• A. It is a sparse root zone.
• B. It is a whole root zone.
• C. It is an immutable zone.
• D. It is a native zone.
• E. The zone shares the network interface with the host.
• F. The zone uses a virtual network interface.
• G. The hostid is the same as the global zone.
• H. The IP address of the zone is 10.0.2.18.

Answer: CEG

Explanation: C: Immutable Zones provide read-only file system profiles for solaris non-global zones. Note that ip-type: exclusive:
Starting with OpenSolaris build 37 and Oracle Solaris 10 8/07, a default zone can be configured as an "exclusive-IP zone" which gives it exclusive access to the NIC(s) that the zone has been assigned. Applications in such a zone can communicate directly with the NIC(s) available to the zone.
Note on zones:
After installing Oracle Solaris on a system, but before creating any zones, all processes run in the global zone. After you create a zone, it has processes that are associated with that zone and no other zone. Any process created by a process in a non-global zone is also associated with that non-global zone.
Any zone which is not the global zone is called a non-global zone. Most people call non- global zones simply "zones." Some people call them "local zones" but this is discouraged.
The default native zone file system model on Oracle Solaris 10 is called "sparse-root." This model emphasizes efficiency and security at the cost of some configuration flexibility. Sparse-root zones optimize physical memory and disk space usage by sharing some directories, like /usr and /lib. Sparse-root zones have their own private file areas for directories like /etc and /var. Whole-root zones increase configuration flexibility but increase resource usage. They do not use shared file systems for /usr, /lib, and a few others.
There is no supported way to convert an existing sparse-root zone to a whole-root zone. Creating a new zone is required.

NEW QUESTION 16
You are going to use the- Automated installer (AI) to install a non global zone named zone1. You have created a custom manifest for the non-global zone and named it zone1manifest
Which command will you use to add this custom manifest to the s11-sparc install service and associate this custom manifest with the non-global zone?

• A. installadm create-profile -n s11-sparc -f /tmp/zone1manifest.xml - c
• B. installadm create-manifest -n s11-sparc -f /tmp/zone1manifest.xml -m
• C. installadm create-client -n s11-sparc -f /tmp/zone1manifest.xml -m zone1manifest -c zonename= “zone1”
• D. installadm create-service - n s11-sparc -f /tmp/zone1manifest.xml -m zone1manifest - c zonename=”zone1”

Answer: B

Explanation: installadm add-manifest
Associates manifests with a specific install service, thus making the manifests available on the network, independently from creating a service. When publishing a non-default manifest, it is required to associate criteria either via criteria entered on the command line (-c) or via a criteria XML file (-C).

NEW QUESTION 17
You are logged in as root to a newly installed Solaris 11 system. You issue the command useradd -d, and then examine the /usr/sadm/defadduser file. This file includes the entry defshell=/bin/sh. Which shell will now be the default for the next account created?

• A. bash shell
• B. C shell
• C. korn shod
• D. bourne shell

Answer: A

Explanation: Oracle Solaris 11 introduces user environment and command-line argument changes that include the following:
* Shell changes - The default shell, /bin/sh, is now linked to ksh93. The default user shell is the Bourne-again (bash) shell.
* The legacy Bourne shell is available as /usr/sunos/bin/sh.
* The legacy ksh88 is available as /usr/sunos/bin/ksh from the shell/ksh88 package.
* Korn shell compatibility information is available in /usr/share/doc/ksh/COMPATIBILITY.

NEW QUESTION 18
You need to set up a local package repository to serve 75 client systems. Multiple clients will being the package repository concurrently and you need to ensure that the local repository performs very well under this heavy load, especially during package intensive operations.
Which option would ensure the best performance of the repository during package-
intensive rations by multiple clients?

• A. Set up multipathing on the package repository server to distribute the network load multiple network interfaces.
• B. Deploy a second instance of the package repository server to run as a read writable mirror.
• C. Deploy a second instance of the package repository server to run as a read-only mirror.
• D. Deploy a second instance of the package repository server to run as a clone of the primary repository server.
• E. Deploy a package repository locally on each client.

Answer: A