- Email support@dumps4free.com
You administer an Oracle Solaris 11 server with multiple zones. You want to configure it so
that all nonprivileged users in the global zone see only their own process.
What must you do to make the change?
A.
Modify the LIMITPRIV variable in the /etc/usr/user_attr file.
B.
Modify the basic privilege ser in the /etc/security/policy.conf file.
C.
Configure the priv= attribute in the /etc/security/prof_attr.d/core-os file.
D.
Configure privileges for the ps command in the /etc/security/exec_attrd/core-os file.
Modify the basic privilege ser in the /etc/security/policy.conf file.
Explanation: * policy.conf
policy.conf– configuration file for security policy.
The policy.conf file provides the security policy configuration for user-level attributes.
* Example: Modifying Every User's Basic Privilege Set
In this example, the security administrator of a large Sun Ray installation does not want
regular users to view the processes of other Sun Ray users. Therefore, on every system
that is configured with Trusted Extensions, the root role removes proc_info from the basic
set of privileges. The PRIV_DEFAULT setting in the /etc/policy.conf file is uncommented
and modified as follows:
PRIV_DEFAULT=basic,!proc_info
You administer a system with three nonglobal zones. All three-zones (z1, z2, and z3) use a
common resource pool. The pool is a fixed, two-CPU configuration. The default scheduler
is FSS.
Zones z1 and z2 run applications that, over time, consume all available CPU resources.
You have allotted 20 shares each to these zones. Zone z3 runs a mission-critical
application, so you allotted it 60 shares.
Because of application maintenance, zone z3 is currently using about 10% of the CPU
resources in the shared pool. Which option describes the demand when available CPU
resources are consumed by zones z1 and z2?
A.
Zones z1 and z2 will consume CPU resources until each zone consumes approximately
20% of the CPU resources, and only then they will be constrained.
B.
Zones z1 and z2 will consume CPU resources until each zone consumes approximately
60% of the CPU resources, and only then they will be constrained.
C.
Zones z1 and z2 will consume CPU resources until each zone consumes approximately
90% of the CPU resources, and only then they will be constrained.
D.
Zones z1 and z2 will consume CPU resources until each zone consumes all the
resources that they require, up to 100%.
Zones z1 and z2 will consume CPU resources until each zone consumes approximately
90% of the CPU resources, and only then they will be constrained.
You are creating a native Oracle Solaris zone that will be called zd1. The zone must have a
virtual network interface configured. You use the following command to create the zone
configuration:
# zonecfg –z zd1
zonecfg:zd1> create
What is the minimum specification required to complete the configuration before the exit
command is issued?
A.
A zonepath must be set.
B.
An anet resource must be added.
C.
No other configuration parameters need to be set.
D.
Both an anet configuration and a zonepath must be set.
A zonepath must be set.
Explanation: * Example:
root@solaris:~# zonecfg -z zd1
Use 'create' to begin configuring a new zone.
zonecfg:zd1> create
create: Using system default template 'SYSdefault'
zonecfg:zd1> exit
zonepath cannot be empty.
Zone zd1 failed to verify
zd1: Required resource missing
Configuration not saved; really quit (y/[n])? n
zonecfg:zd1> verify
zonepath cannot be empty.
zd1: Required resource missing
zonecfg:zd1> set zonepath=/zones/zd1
zonecfg:zd1> exit
Note:
* anet
Automatic network interface.
The anet resource represents the automatic creation of a network resource for an
exclusive-IP zone.
You administer an Oracle Solaris 11 system that uses a user-defined Network
Configuration Profile (NCP). You now need to modify the DNS name servers. Select the
profile type that you will need to modify.
A.
Automatic-NCP
B.
Location profile
C.
Network Configuration Unit
D.
External Network Modifiers
Location profile
Explanation: Once basic networking has been achieved, there is something called the
Location Profile that loads system-wide network configuration information. This includes:
- Condition under which it is activated
- Naming service to use
- Domain name
- IP Filter rules
- IPsec policy
Incorrect:
Not A: The Automatic NCP is a system-defined profile and cannot be modified by a user. It
contains one Link NCU and one Interface NCU for each physical link on the system. For
this particular profile, Physical links take precedence over Wireless links when it is time to
activate an NCU. This profile changes dynamically when new links are inserted or removed
from the system.
Which option lists default checkpoints for building an image using the Distribution
Constructor?
A.
manifest-valid and ba-init
B.
ba-arch and grub-setup
C.
transfer-ips-install and pre-pkg-img-mod
D.
pkg-img mod and create-usb
transfer-ips-install and pre-pkg-img-mod
Explanation: The following list provides a brief description of each default checkpoint in
the order the checkpoints are executed in most manifests.
transfer-ips-install – At this checkpoint, the distribution constructor contacts the IPS
publishers and adds to the image the packages that are listed in the software_data element
of the manifest.
set-ips-attributes – At this checkpoint, the constructor sets the publisher to be used by the
installed system. The values set by this checkpoint are not relevant if you are building an
automated installation image.
pre-pkg-img-mod – At this checkpoint, the constructor imports into the image the SMF
service files that were specified in the configuration element of the manifest. Also, the
constructor modifies some files to optimize the image.
| Page 7 out of 28 Pages |
| Previous |