1z0-822 Oracle Solaris 11 Advanced System Administration Free Practice Exam Questions (2025 Updated)

Example. Displaying Administratively Customized Properties (here only admin layer is displayed with –l)

The following command uses SMF layers to display administratively customized properties.

example% svcprop -p config -l admin svc:/network/dns/client

(A) config/domain astring admin my.domain.com

(D) config/nameserver net_address admin 10.22.33.44 10.44.33.11

Note:

* config/nameserver refers to the Solaris DNS server.

/ The nameserver keyword specifies DNS servers to query using IP address.

Example:

The /etc/resolv.conf file contains configuration directives for the DNS resolver. The following resolv.conf example shows two name servers and three search suffixes:

domain nj.bigcorporation.com

nameserver 192.168.10.11

nameserver 192.168.20.88

* The svcprop utility prints values of properties in the service configuration repository. Properties are selected by -p options and the operands

Scheduling classes provide different CPU access characteristics to threads that are based on algorithmic logic. The scheduling classes include:

Realtime scheduling class (RT) (not a)

Interactive scheduling class (IA)

Fixed priority scheduling class (FX) (not b)

Timesharing scheduling class (TS) (not c)

Fair share scheduling class (FSS) (not E)

A: To restart remote logging:

svccfg -s system-log setprop config/log_from_remote=true

svcadm restart system-log

D: You can run 'snoop' on the interface to see if you see syslog packets leaving the server

snoop udp port 514

* How to Reconfigure a Zone to Use a VNIC

1. Become an administrator.

2. Create the VNIC.

(C) 3. Change the zone's IP type from shared to exclusive.

4.Change the zone's interface to use a VNIC.

5. Verify and commit the changes you have implemented and then exit the zone.

(D) 6. Reboot the zone.

7. Log in to the zone.

8. Configure the VNIC with a valid IP address.

* Example. Reconfiguring a Zone Configuration to Use a VNIC

In this example, zone2 already exists as a shared zone. The zone also uses the primary interface of the system rather than a virtual link. You need to modify zone2 to use vnic2. To use vnic2, zone2's IP type must first be changed to exclusive. Note that some of the output is truncated to focus on the relevant information that relates to virtual networks.

global# dladm create-vnic -l net0 vnic2

global# zonecfg -z zone2

(C) zonecfg:zone1> set ip-type=exclusive

zonecfg:zone1> remove net physical=net0

zonecfg:zone1> add net

zonecfg:zone1:net> set physical=vnic2

zonecfg:zone1:net> end

zonecfg:zone1> verify

zonecfg:zone1> commit

zonecfg:zone1> exit

(D) global# zoneadm -z zone2 reboot

global# zlogin zone2

zone2# ipadm create-ip vnic2

zone2# ipadm create-addr -a 192.168.3.85/24 vnic2

ipadm: vnic2/v4

zone2# exit

global# vi /etc/hosts

#

1 localhost

127.0.0.1 localhost

192.168.3.70 loghost #For net0

192.168.3.80 zone1 #using vnic1

192.168.3.85 zone2 #using vnic2

The beadm utility enables you to create a new boot environment based on an existing snapshot.

Note:

* You can manage the boot environments on your system either by using the beadm command or by using the Package Manager.

* A boot environment is a bootable instance of the Oracle Solaris operating system image plus any other application software packages installed into that image. System administrators can maintain multiple boot environments on their systems, and each boot environment can have different software versions installed.

By default, a new BE is automatically created when you perform one of the following operations:

* (D) Set the be-policy image policy to always-new. Under this policy, all package operations are performed in a new BE set as active on the next boot.

* Update particular key system packages such as some drivers and other kernel components. This can happen when you install, uninstall, update, change variant, or change facet.

* Often a new BE is created when you execute the pkg update command to update all packages that have updates available.

* Specify any of the following options: --be-name, --require-new-be, --backup-be-name, --require-backup-be.

Signature Policy: verify

Verify that all manifests with signatures are validly signed, but do not require all installed packages to be signed.

This is the default value.

Note:

* (not A, not B, not D) The privs key contains a comma-separated list of privilege numbers that will be effective when the command or action is run.

* euid and uid contain a single user name or a numeric user ID. Commands designated with euid run with the effective UID indicated, which is similar to setting the setuid bit on an executable file. Commands designated with uid run with both the real and effective UIDs. Setting uid may be more appropriate than setting the euid on privileged shell scripts.

* egid and gid contain a single group name or a numeric group ID. Commands designated with egid run with the effective GID indicated, which is similar to setting the setgid bit on a file. Commands designated with gid run with both the real and effective GIDs. Setting gid may be more appropriate than setting guid on privileged shell scripts.

* /etc/security/exec_attr is a local database that specifies the execution attributes associated with profiles.

/etc/security/exec_attr

Locally added entries. Make sure that the shipped header remains intact.

/etc/security/exec_attr.d/*

Entries added by package installation.

A: IPS package manifests can be signed, with the signatures becoming part of the manifest.

Signatures are represented as actions just as all other manifest content is represented as actions.

C: A manifest can have multiple independent signatures.

vmstat reports virtual memory statistics regarding kernel thread, virtual memory, disk, trap, and CPU activity.

Global Actions on Resource Control Values

Global actions apply to resource control values for every resource control on the system. You can use the rctladm command to perform the following actions:

* Display the global state of active system resource controls

* Set global logging actions

https://docs.oracle.com/cd/E23824_01/html/821-1454/rfsadmin-56.html

Gathering Statistics About Network Traffic on Flows

Flow statistics help you evaluate packet traffic on any defined flows on the system. To obtain flow information, you use the flowstat command.

* Display statistics about incoming and outgoing packets on all flows.

# flowstat

This command provides a static display of traffic information on all configured flows.

Incorrect:

Not A: In computing, sar (System Activity Report) is a Solaris-derived system monitor command used to report on various system loads, including CPU activity, memory/paging, device load, network.

Example 1: Creating a New Shell

The following example creates a new shell in the canada pro-

ject, displaying the task id:

example$ id -p

uid=565(gh) gid=10(staff) projid=10(default)

example$ newtask -v -p canada

38

Explain:

If you want to change the content of a manifest or script that has already been added to an install service, use the installadm update-manifest command. Criteria, default status, and manifest_or_script_name are not changed as a result of the update.

# installadm update-manifest -n s11-x86

-f ./newregion1.xml -m region1

The create-manifest and update-manifest subcommands validate XML manifest files before adding them to the install service. AI syntactically validates the AI manifests at client installation time.

Note - If an invalid manifest is provided to a client, the automated installation aborts. To investigate the cause of the validation failure, see the /system/volatile/install_log on the client.

svccfg

subcommand: revert [snapshot]

Reverts the administrative customizations of the currently selected instance and its service to those recorded in the named snapshot. If no argument is given, use the currently selected snapshot and deselect it on success.

Incorrect:

Not A: Rollback to as-delivered system: svccfg delcust

svccfg

subcommand: delcust [-M] [pattern]

Delete any administrative customizations for the current selection. If an argument is supplied, it is taken as a glob pattern and only property groups and properties with names that match the argument are deleted.

Not B: There is no command revetsnap

Not C: Run the command /lib/svc/bin/restore_repository, and follow its instructions to restore one of the automatic backup copies of the repository. Upon successful completion, the system or local zone will be rebooted, and the restored repository will take effect.

Not D:

* Example 1:

* man zonestat   -q         Quiet mode. Only print summary reports (requires the  -R         option). All interval reports are omitted.     -r resource[,resource]         Specify resource types on which to report. The available         resources  are: physical-memory, virtual-memory, locked-         memory,  processor-set,  processes,  lwps,   shm-memory,         shm-ids, sem-ids, msg-ids, lofi, and network.         summary         A summary of cpu, physical-memory,  vir-                         tual memory, and network usage.

* Example 2 :

The following command monitors silently at a 10 second interval for 24 hours, producing a total and high report every 1 hour:

# zonestat -q -R total,high 10s 24h 1h

Link-Based Failure Detection

Link-based failure detection is always enabled, provided that the interface supports this type of failure detection.

To determine whether a third-party interface supports link-based failure detection, use the ipmpstat -i command. If the output for a given interface includes an unknown status for its LINK column, then that interface does not support link-based failure detection. Refer to the manufacturer's documentation for more specific information about the device.