Oracle 1z0-822 - Oracle Solaris 11 Advanced System Administration

svcs -x: Explains why a service is not available.

Incorrect:

not A: svcs -l FMRI: Provides a long listing of information about FMRI; includes dependency information

not B, not C: svcs -d FMRI: Lists dependencies for FMRI.

not e: svcadm clear FMRI: Clear faults for FMRI.

The audit service makes the following possible:

Monitoring security-relevant events that take place on the host

Recording the events in a network-wide audit trail

Detecting misuse or unauthorized activity

Reviewing patterns of access and the access histories of individuals and objects

Discovering attempts to bypass the protection mechanisms

Discovering extended use of privilege that occurs when a user changes identity

Incorrect:

Not A: auditing does not prevent attempts to bypass the protection mechanisms, it just discovers them.

create uses a default template of SYSdefault. The default template can be changed on a system-wide basis using the default_template SMF property of the svc:/system/zones:default service.

Note:

create [-F] [ -a path |-b | -t template]

Create an in-memory configuration for the specified zone. Use create to begin to configure a new zone

A: IPS package manifests can be signed, with the signatures becoming part of the manifest.

Signatures are represented as actions just as all other manifest content is represented as actions.

C: A manifest can have multiple independent signatures.

From the poolcfg –c info command output we see that FSS (Fair Share Scheduler) is used.

From the prctl command output we see that zone z1 has been configured with a zone.cpu-shares value of 40.

* The pool_default has a value of 100 CPU shares.

* prstat

- report active process statistics

Option –Z

-Z

Report information about processes and zones. In this mode, prstat displays separate reports about processes and zones at the same time.

Disabled in the MODE column means that all probe-based failure detection is disabled.

You must enable transitive probing to use this failure detection method that does not require test addresses.

Note:

* ipmpstat

- display IPMP subsystem status

The ipmpstat command concisely displays information about the IPMP subsystem.

The -t option identifies the probe targets that are associated with each IP interface in an IPMP group.

* Target mode displays IPMP probe target information. The following output fields are supported:

/ INTERFACE

The IP interface name associated with the information.

/ MODE

The probe target discovery mode:

routes

Probe targets found by means of the routing table.

multicast

Probe targets found by means of multicast ICMP probes.

disabled

All probe-based failure detection is disabled.

transitive

Failure detection is by means of transitive probing, where the health of the IP interface is determined by probing other active interfaces in the group.

/ TESTADDR

The source address used in outgoing probes. Active interfaces that are being used for data traffic, as well as interfaces that have been explicitly configured with NOFAILOVER test addresses, will have the hostname (or IP address) that is used for sending and receiving the ICMP probes. All other interfaces in the group will display the name of the interface from which the probes are sent. Note that if an active IP interface is configured with both IPv4 and IPv6 test addresses, probe target information will be displayed separately for each test address.

/ TARGETS

A space-separated list of probe target hostnames (or IP addresses) for ICMP probes, or target interfaces for transitive probes. The IP targets will be listed in firing order, and, if no probe targets could be found, this field will be empty.

Set-Publisher

With -P or --search-first, set the specified publisher first in the search order. When installing new packages, this publisher is searched first. Updates to already installed packages come from the same publisher that originally provided the package as long as that publisher remains sticky. When -P or --search-first is used with -p, only added publishers are placed first in search order.

* pkgrecv

- Image Packaging System content retrieval utility

pkgrecv allows the user to retrieve packages from a pkg repository or package archive. pkgrecv can also optionally republish the retrieved packages to a different package repository or archive them.

-s src_repo_uri

A URI representing the location of a pkg repository or package archive from which to receive package data.

-d path_or_uri

The file system path or URI of the target to republish packages to. If -a is specified, the target is a new package archive that cannot already exist. Otherwise, the target must be a package repository that already exists. New repositories can be created using pkgrepo(1).