Oracle 자격증 1Z0-881 시험문제와 답

ITExamDump의 Oracle인증 1Z0-881덤프를 공부하여Oracle인증 1Z0-881시험을 패스하는건 아주 간단한 일입니다.저희 사이트에서 제작한Oracle인증 1Z0-881덤프공부가이드는 실제시험의 모든 유형과 범위가 커버되어있어 높은 적중율을 자랑합니다.시험에서 불합격시 덤프비용은 환불신청 가능하기에 안심하고 시험준비하시면 됩니다.

ITExamDump는 여러분의 시간을 절약해드릴 뿐만 아니라 여러분들이 안심하고 응시하여 순조로이 패스할수 있도록 도와주는 사이트입니다. ITExamDump는 믿을 수 있는 사이트입니다. IT업계에서는 이미 많이 알려 져있습니다. 그리고 여러분에 신뢰를 드리기 위하여Oracle 1Z0-881관련자료의 일부분 문제와 답 등 샘플을 무료로 다운받아 체험해볼 수 있게 제공합니다. 아주 만족할 것이라고 믿습니다. 우리는ITExamDump제품에 대하여 아주 자신이 있습니다. 우리Oracle 1Z0-881도 여러분의 무용지물이 아닌 아주 중요한 자료가 되리라 믿습니다. 여러분께서는 아주 순조로이 시험을 패스하실 수 있을 것입니다. ITExamDump선택은 틀림없을 것이며 여러분의 만족할만한 제품만을 제공할것입니다.

ITExamDump는 아주 믿을만하고 서비스 또한 만족스러운 사이트입니다. 만약 시험실패 시 우리는 100% 덤프비용 전액환불 해드립니다.그리고 시험을 패스하여도 우리는 일 년 동안 무료업뎃을 제공합니다.

IT업계에 종사하는 분이 점점 많아지고 있는 지금 IT인증자격증은 필수품으로 되었습니다. IT인사들의 부담을 덜어드리기 위해ITExamDump는Oracle인증 1Z0-881인증시험에 대비한 고품질 덤프를 연구제작하였습니다. Oracle인증 1Z0-881시험을 준비하려면 많은 정력을 기울여야 하는데 회사의 야근에 시달리면서 시험공부까지 하려면 스트레스가 이만저만이 아니겠죠. ITExamDump 덤프를 구매하시면 이제 그런 고민은 끝입니다. 덤프에 있는 내용만 공부하시면 IT인증자격증 취득은 한방에 가능합니다.

ITExamDump 에서 제공해드리는 Oracle인증1Z0-881시험덤프자료를 구입하시면 퍼펙트한 구매후 서비스를 약속드립니다. ITExamDump에서 제공해드리는 덤프는 IT업계 유명인사들이 자신들의 노하우와 경험을 토대로 하여 실제 출제되는 시험문제를 연구하여 제작한 최고품질의 덤프자료입니다. Oracle인증1Z0-881시험은ITExamDump 표Oracle인증1Z0-881덤프자료로 시험준비를 하시면 시험패스는 아주 간단하게 할수 있습니다. 구매하기전 PDF버전 무료샘플을 다운받아 공부하세요.

시험 번호/코드: 1Z0-881

시험 이름: Oracle (Oracle Solaris 10 Security Administrator Certified Expert Exam)

ITExamDump 는 완전히 여러분이 인증시험 준비와 안전한 시험패스를 위한 완벽한 덤프제공 사이트입니다.우리 ITExamDump의 덤프들은 응시자에 따라 ,시험 ,시험방법에 따라 알 맞춤한 퍼펙트한 자료입니다.여러분은 ITExamDump의 알맞춤 덤프들로 아주 간단하고 편하게 인증시험을 패스할 수 있습니다.많은 it인증관연 응시자들은 우리 ITExamDump가 제공하는 문제와 답으로 되어있는 덤프로 자격증을 취득하셨습니다.우리 ITExamDump 또한 업계에서 아주 좋은 이미지를 가지고 있습니다.

1Z0-881 덤프무료샘플다운로드하기: http://www.itexamdump.com/1Z0-881.html

NO.1 An Internet service provider is offering shell accounts on their systems. As a special service,
customers can also apply for a root account to get their own virtual machine. The provider has
implemented this by using zones, and the customers get root access to the non-global zone. One of their
customers is developing cryptographic software and is using the ISP machine for testing newly developed
Solaris crypto providers. What kind of testing is available to this developer?
A. The developer is able to test newly developed user-level providers.
B. The developer is able to test newly developed kernel software providers.
C. The developer can NOT test newly developed providers in a non-global zone.
D. The developer is able to do the same tests as if developing as root in the global zone.
Answer: A

Oracle기출문제   1Z0-881   1Z0-881   1Z0-881   1Z0-881덤프   1Z0-881기출문제

NO.2 You have been asked to grant the user ennovy, a member of the staff group, read and write access to
the file /app/notes which has the following properties: ls -l /app/notes -rw-rw---- 1 root app 0 Jun 6 15:11
/app/notes Which options will NOT grant the user the ability to read and write the file?
A. usermod -G app ennovy
B. setfacl -m user:ennovy:rw- /app/notes
C. setfacl -m group:staff:rw- /app/notes
D. usermod -K defaultpriv=basic,file_dac_read,file_dac_write ennovy
Answer: D

Oracle   1Z0-881 dump   1Z0-881시험문제   1Z0-881

NO.3 A security administator has a requirement to make an encrypted backup copy of an application and its
data, using the AES algorithm, so that it can be safely transmitted to a partner. Which two command
sequences can be used to generate an encrypted backup of the files under /app1? (Choose two.)
A. crypt < /app1/* > app1.backup.aes
B. encrypt -a aes -d /app1 -o app1.backup.aes
C. tar cf - /app1 | gzip -d -e aes > app1.backup.aes
D. ufsdump 0f - /app1 |\ crypt -a aes > app1.backup.aes
E. ufsdump 0f - /app1 |\ encrypt -a aes -o app1.backup.aes
F. tar cf - /app1 |\ openssl enc -out app1.backup.aes -aes-128-cbc
Answer: E,F

Oracle   1Z0-881자료   1Z0-881기출문제   1Z0-881덤프   1Z0-881

NO.4 After a recent audit, you have been requested to minimize an existing Solaris system which runs a third
party database application. Which two should you do before starting to minimize the system? (Choose
two.)
A. Back up the system.
B. Remove any unneeded patches.
C. Install the SUNWrnet metacluster.
D. Remove any unneeded packages.
E. Confirm with the vendor of the database software that they support minimization.
Answer: A,E

Oracle pdf   1Z0-881   1Z0-881 dump

NO.5 Within the context of file integrity, rules can be implemented to change the scope of the Basic Audit
and Report Tool (BART) manifest. Given the rule file: /home/bert/docs *.og[dt] CHECK all IGNORE mtime
Which two statements are valid? (Choose two.)
A. All files on the system will be checked.
B. The last modification time of all checked files will not be checked.
C. Key words such as CHECK and IGNORE can NOT be used in a rule file.
D. Only files with extension .ogt and .ogd in the directory /home/bert/docs will be checked.
E. All files on the system will be checked, except for files with extensions .ogt and .ogd in the directory
/home/bert/docs.
Answer: B,D

Oracle   1Z0-881덤프   1Z0-881   1Z0-881 pdf

NO.6 A security administrator is required to validate the integrity of a set of operating system files on a
number of Solaris systems. The administrator decides to use the Solaris Fingerprint Database to validate
configuration and data files as well as binaries and libraries. What command, available by default in
Solaris 10, will help the security administrator collect the necessary information that will be used with the
Solaris Fingerprint Database?
A. md5sum
B. digest
C. encrypt
D. elfsign
E. cryptoadm
Answer: B

Oracle pdf   1Z0-881덤프   1Z0-881   1Z0-881

NO.7 Click the Exhibit button.
You maintain a minimized and hardened web server. The exhibit shows the current credentials that the
web server runs with. You receive a complaint about the fact that a newly installed webbased application
does not function. This application is based on a /bin/ksh cgi-bin script.
What setting prevents this cgi-bin program from working?
A. The system might NOT have /bin/ksh installed.
B. The server is NOT allowed to call the exec system call.
C. The server should run with uid=0 to run cgi-bin scripts.
D. Some of the libraries needed by /bin/ksh are NOT present in the webserver's chroot
environment.
Answer: B

Oracle   1Z0-881덤프   1Z0-881 dumps

NO.8 A security administrator has a requirement to deploy the Solaris Security Toolkit onto all Solaris servers
in the department. In this environment, there are a variety of platforms and operating system versions
deployed. Onto which two platforms and operating system combinations can the Solaris Security Toolkit
be deployed in a supported configuration? (Choose two.)
A. x86, Solaris 2.4
B. x64, Solaris 9
C. x86, Solaris 10
D. SPARC, Solaris 2.6
E. SPARC, Solaris 8
Answer: C,E

Oracle   1Z0-881   1Z0-881

NO.9 A security administrator is required to periodically validate binaries against the Solaris Fingerprint
Database. While attempting to capture MD5 file signatures for key Solaris OS files, the security
administrator encounters the following error: digest: no cryptographic provider was found for this
algorithm -- md5 What command should the administrator use to help determine the cause of the
problem?
A. crypt
B. digest
C. kcfadm
D. openssl
E. cryptoadm
Answer: E

Oracle   1Z0-881   1Z0-881 dumps   1Z0-881

NO.10 Solaris Auditing supports the selective logging of which two kinds of events? (Choose two.)
A. file access by selected users
B. access to selected files by all users
C. selected users making outbound network connections
D. password changes which do not meet the system password policy
Answer: A,C

Oracle   1Z0-881   1Z0-881   1Z0-881   1Z0-881

NO.11 Which are two advantages of the Service Management Facility compared to the init.d startup scripts?
(Choose two.)
A. It restarts processes if they die.
B. It handles service dependencies.
C. It has methods to start and stop the service.
D. It specifies what the system should do at each run level.
Answer: A,B

Oracle   1Z0-881기출문제   1Z0-881 dumps   1Z0-881자격증

NO.12 You decided it was worth maintaining an extremely paranoid policy when configuring your firewall
rules. Therefore, you had your management approve the implementation of a security policy
stance to deny all inbound connection requests to your corporate network. How is it possible that
you still suffer from remote exploits that your adversaries are using to obtain interactive sessions
inside your firewall?
A. TCP splicing is easy to do.
B. Internal software may be vulnerable.
C. UDP vulnerabilities are well-known and exploited.
D. ICMP hijacking attacks can still succeed through any firewall.
Answer: B

Oracle dump   1Z0-881자료   1Z0-881자료

NO.13 To harden a newly installed Solaris OS, an administrator is required to make sure that syslogd is
configured to NOT accept messages from the network. Which supported method can be used to
configure syslogd like this?
A. Run svcadm disable -t svc:/network/system-log.
B. Edit /etc/default/syslogd to set LOG_FROM_REMOTE=NO.
C. Edit /etc/rc2.d/S74syslog to start syslogd with the -t option.
D. Edit /lib/svc/method/system-log to set LOG_FROM_REMOTE=NO.
Answer: B

Oracle   1Z0-881   1Z0-881   1Z0-881자격증

NO.14 Which two tasks does the Key Distribution Center (KDC) perform? (Choose two.)
A. issues service tickets
B. authenticates services
C. issues ticket-granting-tickets
D. validates passwords sent in clear text
E. provides private sessions to services
Answer: A,C

Oracle자료   1Z0-881   1Z0-881시험문제   1Z0-881

NO.15 One of the operators of the mainframe group was moved to the UNIX group and tasked to activate and
configure password history. For every user, the last 10 passwords should be remembered in the history. In
what file is the size of the password history configured?
A. /etc/shadow
B. /etc/pam.conf
C. /etc/default/passwd
D. /etc/security/policy.conf
Answer: C

Oracle자료   1Z0-881   1Z0-881   1Z0-881

NO.16 You are configuring a new system to be used as an intranet web server. After you have installed the
minimal amount of packages and patched the system, you added the appropriate web server packages
(SUNWapch2r and SUNWapch2u). By default, the web server daemon will be started using UID
webservd and the basic privilege set. To comply with the company's policy of least privilege, you need to
minimize the privileges that the web server will have. What will you modify to specify the privileges that
the web service will run with?
A. the PRIV_DEFAULT setting in /etc/security/policy.conf
B. the defaultpriv setting of webserverd in /etc/user_attr
C. the privileges property of the web service in the SMF repository
D. the privs property of the web service in /etc/security/exec_attr
Answer: C

Oracle   1Z0-881자격증   1Z0-881시험문제   1Z0-881

NO.17 A security administrator has a requirement to help configure and deploy a new server. What are two
security tasks that the security administrator should perform? (Choose two.)
A. Configure the server to use LDAP for authentication.
B. Configure network interfaces and routing information.
C. Install a DTrace probe to capture the use of privileges.
D. Disable any network services that are NOT being used.
E. Apply software patches to correct security vulnerabilities.
Answer: D,E

Oracle dump   1Z0-881   1Z0-881   1Z0-881 pdf

NO.18 Which two commands are part of Sun Update Connection? (Choose two.)
A. /usr/bin/pkgadm
B. /usr/bin/keytool
C. /usr/sbin/smpatch
D. /usr/sbin/patchadd
E. /usr/bin/updatemanager
Answer: C,E

Oracle   1Z0-881자료   1Z0-881   1Z0-881   1Z0-881

NO.19 Given:
jupiter:$md5,rounds=2006$2amXesSj5$$kCF48vfPsHDjlKNXeEw7V.:12210:::::: What is the
characteristic of this /etc/shadow entry?
A. User jupiter uses the md5 hash, with salt 2006$2amXesSj5$, and with the encrypted password
$kCF48vfPsHDjlKNXeEw7V.
B. User jupiter uses the 2a hash, with 2006 iterations of the hash, with salt 2amXesSj5, and with the
encrypted password kCF48vfPsHDjlKNXeEw7V.
C. User jupiter uses the md5 hash, with 2006 iterations of the hash, with salt 2amXesSj5, and with the
encrypted password kCF48vfPsHDjlKNXeEw7V.
D. User jupiter uses the md5 hash, with 2006 iterations of the hash, with no salt, and with the encrypted
password $rQmXesSj5$$kCF48vfPsHDjlKNXeEw7V.
Answer: C

Oracle시험문제   1Z0-881   1Z0-881   1Z0-881

NO.20 The company security policy now requires very detailed auditing of all actions. This includes capturing
all executed commands together with their arguments and the environment variables.
After activating auditing on all Solaris 10 systems, the security auditor complains about having to check
the audit trail on each individual host. He asks for a central place to capture all audit trails.
Using standard Solaris 10 security features, which is a solution to this problem.?
A. Configure auditd to send email with the events.
B. Configure auditd to send the output using syslog to a central loghost.
C. Configure auditd to store the audit trail using NFS on a central server.
D. Configure auditd to store the audit trail using LDAP in a central directory.
Answer: C

Oracle시험문제   1Z0-881덤프   1Z0-881자료   1Z0-881

NO.21 Which option is used in /etc/vfstab to limit the size of a tmpfs file system to 512MB to prevent a
memory denial of service (DoS)?
A. size=512m
B. maxsize=512
C. minsize=512
D. swapfs=512mb
Answer: A

Oracle   1Z0-881   1Z0-881   1Z0-881   1Z0-881

NO.22 Due to changes to the security policy of your organization, access restriction must be applied to
systems. The changes specify that access to systems through the ftp protocol is NOT allowed according
to the Human Resources department, which has the 10.10.10.0/24 address space assigned. TCP
wrappers have been enabled for the ftp daemon, and these files have been configured: # cat
/etc/hosts.allow in.ftpd: ALL # cat /etc/hosts.deny in.ftpd: 10.10.10.0/24 Despite the implemented
configuration, Human Resources is still able to access systems through the ftp protocol. What action must
be taken?
A. The ftp daemon must be restarted.
B. The inetd daemon must be restarted.
C. The entry in the hosts.deny file is wrong and must be changed.
D. The entry in the hosts.allow file is wrong and must be changed.
Answer: D

Oracle시험문제   1Z0-881 dump   1Z0-881 pdf   1Z0-881최신덤프

NO.23 Packet filters and firewalls are an important component of any defense-in-depth security strategy.
Which two types of threats can IP Filter be deployed as an effective countermeasure against? (Choose
two.)
A. a Christmas Tree scan
B. an attempt to log in to a system using SSH by an unauthorized user
C. an attempt to exploit a SQL injection vulnerability in a web storefront application
D. an attempt to exploit a buffer overflow vulnerability in rpcbind, originating from a host on an authorized
network
E. an attempt to exploit a buffer overflow vulnerability in rpcbind, originating from a host on an
unauthorized network
Answer: A,E

Oracle   1Z0-881인증   1Z0-881   1Z0-881인증

NO.24 A new security related patch has been released for the Solaris OS. This patch needs to be applied
to the system that functions as your web server. The web server is configured to run in a non-
global zone. Can you just use patch add to apply the patch to the global zone to update the web
server zone?
A. No, you need to shut down the web server zone first.
B. Yes, patches will be automatically applied to all zones.
C. No, you need to apply the patch to the web server zone separately.
D. Yes, but you must make sure that the web server zone is booted first.
Answer: B

Oracle자료   1Z0-881 pdf   1Z0-881   1Z0-881인증

NO.25 Your company is running a DNS test server on the internal network. Access to this server must be
blocked by using IP Filter. The administrator prefers that this access control is not obvious to someone
trying to contact the server from the outside. Which rule implements the access control but hides the use
of IP Filter to the outside?
A. pass in quick on eri0 from 192.168.0.0/24 to any
B. block in quick proto udp from any to any port = 53
C. pass out quick on eri0 proto icmp from 192.168.1.2 to any keep state
D. block return-icmp(port-unr) in proto udp from any to 192.168.1.2 port = 53
Answer: D

Oracle   1Z0-881   1Z0-881자료

NO.26 The Key Distribution Center (KDC) is a central part of the Kerberos authentication system. How should
the system running the KDC be configured?
A. It should be a hardened, minimized system.
B. It should be a hardened, non-networked system.
C. The KDC implementation employs cryptography and can therefore run securely on an ordinary
multi-user system.
D. For improved security, users must log in to the KDC before authenticating themselves, so it must be a
multiuser system.
Answer: A

Oracle   1Z0-881인증   1Z0-881기출문제   1Z0-881

NO.27 A security administrator creates a directory called prevoy with the following access control policy:
$ getfacl prevoy # file: prevoy # owner:
secadm # group: secadm user::rwx group::r-x #effective:r-x mask:r-x other:r-x default:user::r-default:
user:
sysadm:rw- default:group::r-- default:group:sysadm:rw- default:mask:rwx default:other:--- Into this
directory, the security administrator creates a file called secrets. The ls command reports the following for
the prevoy directory and secrets file: $ ls -ld . secrets drwxr-xr-x+ 2 secadm secadm 512 Jun 6 16:38 .
-r--r-----+ 1 secadm secadm
0 Jun 6 16:38 secrets Which two actions can be successfully taken by the sysadm role? (Choose two.)
A. The sysadm role can read the secrets file.
B. The sysadm role can write to the secrets file.
C. The sysadm role can remove the secrets file.
D. The sysadm role can create new files under the prevoy directory.
E. The sysadm role can change the Access Control Lists of the prevoy directory.
Answer: A,B

Oracle   1Z0-881 dump   1Z0-881최신덤프   1Z0-881기출문제

NO.28 The /etc/default/passwd file contains a number of configuration parameters that can be used to
constrain the character composition of user passwords. What is one of the dangers of having password
composition too tightly constrained?
A. Password complexity rules apply only to the English alphabet.
B. The entropy of the resulting password strings will be very high.
C. Duplication of encrypted user password strings is much more likely.
D. Limited password value possibilities can simplify brute force attacks.
E. Passwords are harder to compute when using many character classes.
Answer: D

Oracle   1Z0-881   1Z0-881최신덤프

NO.29 You have been asked to implement defense in depth for network access to a system, where a web
server will be running on an Internet-facing network interface. Which is NOT contributing to the defense in
depth?
A. running the web server in a zone
B. using svcadm to disable unused services
C. using IP Filter to limit which network ports can be accessed from the Internet
D. using VLANs on a single network interface instead of using multiple network interfaces
E. using TCP wrappers to limit from which system SSH be used to connect to the system
Answer: D

Oracle pdf   1Z0-881기출문제   1Z0-881 pdf   1Z0-881

NO.30 A cryptographically signed patch provides system administrators with assurance that the patch
possesses certain qualities. Which two qualities are assured when a patch signature is verified? (Choose
two.)
A. The patch has a verified origin.
B. The patch has NOT been modified since it was signed.
C. The patch was created by a Sun Certified Systems Engineer.
D. The contents of the patch have NOT been revealed to anyone who does NOT have a Sun service plan.
Answer: A,B

Oracle   1Z0-881   1Z0-881기출문제   1Z0-881   1Z0-881

IT인증시험은 국제적으로 인정받는 자격증을 취득하는 과정이라 난이도가 아주 높습니다. Oracle인증 1Z0-881시험은 IT인증자격증을 취득하는 시험과목입니다.어떻게 하면 난이도가 높아 도전할 자신이 없는 자격증을 한방에 취득할수 있을가요? 그 답은ITExamDump에서 찾을볼수 있습니다. ITExamDump에서는 모든 IT인증시험에 대비한 고품질 시험공부가이드를 제공해드립니다. ITExamDump에서 연구제작한 Oracle인증 1Z0-881덤프로Oracle인증 1Z0-881시험을 준비해보세요. 시험패스가 한결 편해집니다.