Oracle 1z0-822 Oracle Solaris 11 Advanced System Administration Exam Practice Test

vmstat reports virtual memory statistics regarding kernel thread, virtual memory, disk, trap, and CPU activity.

Gathering Statistics About Network Traffic on Flows

Flow statistics help you evaluate packet traffic on any defined flows on the system. To obtain flow information, you use the flowstat command.

* Display statistics about incoming and outgoing packets on all flows.

# flowstat

This command provides a static display of traffic information on all configured flows.

Incorrect:

Not A: In computing, sar (System Activity Report) is a Solaris-derived system monitor command used to report on various system loads, including CPU activity, memory/paging, device load, network.

A: Resource Allocation: Zones, Pools and FSS

Example:

Then create a pool for your zone (in this example, we'll use the zones named 'habitue,' 'creator,' 'netid,' and 'linguo'): pooladm -x

pooladm -s

poolcfg -c 'create pool habitue-pool ( string pool.scheduler = "FSS" )'

poolcfg -c 'create pool creator-pool ( string pool.scheduler = "FSS" )'

poolcfg -c 'create pool linguo-pool ( string pool.scheduler = "FSS" )'

poolcfg -c 'create pool netid-pool ( string pool.scheduler = "FSS" )'

pooladm -c

B: Set the default scheduler for the system to be the FSS.

# dispadmin -d FSS

D: Example:

global# zonecfg -z global

zonecfg:myzone> set cpu-shares=100

zonecfg:myzone> set scheduling-class=FSS

zonecfg:myzone> exit

Example;root@solaris:~# zpool create pool1 mirror c8t0d0 c8t1d0 mirror c8t3d0 c8t4d0

root@solaris:~# zpool status

pool: pool1

state: ONLINE

scan: none requested

config:

NAME STATE READ WRITE CKSUM

pool1 ONLINE 0 0 0

mirror-0 ONLINE 0 0 0

c8t0d0 ONLINE 0 0 0

c8t1d0 ONLINE 0 0 0

mirror-1 ONLINE 0 0 0

c8t3d0 ONLINE 0 0 0

The Zone Management profile grants the power to manage all of the non-global zones on the system to a user.

By default, a new BE is automatically created when you perform one of the following operations:

* (D) Set the be-policy image policy to always-new. Under this policy, all package operations are performed in a new BE set as active on the next boot.

* Update particular key system packages such as some drivers and other kernel components. This can happen when you install, uninstall, update, change variant, or change facet.

* Often a new BE is created when you execute the pkg update command to update all packages that have updates available.

* Specify any of the following options: --be-name, --require-new-be, --backup-be-name, --require-backup-be.

To make IPMP groups persists across reboots you would have to do some work:

To configure an IPMP group that persists across system reboots, you would edit the hostname configuration file of the IPMP interface to add data addresses.

Note: The same (non-null) character string IPMP group name identifies all interfaces in the group. You can place interfaces from NICs of different speeds within the same IPMP group, as long as the NICs are of the same type. For example, you can configure the interfaces of 100-megabit Ethernet NICs and the interfaces of one gigabit Ethernet NICs in the same group. As another example, suppose you have two 100-megabit Ethernet NICs. You can configure one of the interfaces down to 10 megabits and still place the two interfaces into the same IPMP group.

Incorrect:

Not A: You cannot place two interfaces of different media types into an IPMP group. For example, you cannot place an ATM interface in the same group as an Ethernet interface.

Not B: An IP multipathing group, or IPMP group, consists of one or more physical interfaces on the same system that are configured with the same IPMP group name. All interfaces in the IPMP group must be connected to the same IP link.

Rights profiles – The user_attr, prof_attr, and exec_attr databases are now read-only. These local files databases are assembled from fragments that are located in /etc/user_attr.d, /etc/security/prof_attr.d, and /etc/security/exec_attr.d.

The fragment files are not merged into a single version of the file, but left as fragments. This change enables packages to deliver complete or partial RBAC profiles. Entries that are added to the local files repository with the useradd and profiles commands are added to the local-entries file in the fragment directory.

Example:

List all configuration changes that have been made in the SMF configuration repository to the name-service/switch service:

# svccfg -s name-service/switch listcust –L

Set the default scheduler for the system to be the FSS.

# dispadmin -d FSS

Example 1: Creating a New Shell

The following example creates a new shell in the canada pro-

ject, displaying the task id:

example$ id -p

uid=565(gh) gid=10(staff) projid=10(default)

example$ newtask -v -p canada

38

* The netcfg command manipulates system network configuration profiles. The netcfg command can be invoked interactively, with an individual subcommand, or by specifying a command file that contains a series of subcommands.

* subcommand: netcfg commit

Commits the current profile specification to persistent storage. A configuration must be correct to be committed. Therefore, this operation automatically performs a verify operation on the profile or object as well. The commit operation is attempted automatically upon exiting the current scope by using either the end or exit subcommand.

Note:

* from the netadm list output we see the line

ncp Automatic disabled

* Oracle Solaris 11 uses profile-based network configuration, which is comprised of two network configuration modes: manual (fixed) and automatic (reactive). Depending on which network configuration mode you choose during an installation, either the DefaultFixed network configuration profile (NCP) or the Automatic NCP is activated on the system. If the DefaultFixed NCP is active, the network is manually configured by using the dladm and ipadm commands . If the Automatic NCP or a user-defined NCP that you previously created is active, the netcfg and netadm commands (formerly nwamcfg and nwamadm) are used to create and manage network configuration.

Must be in the same network range (see * below).

Different speeds are fine (see ** below).

* An IP multipathing group, or IPMP group, consists of one or more physical interfaces on the same system that are configured with the same IPMP group name. All interfaces in the IPMP group must be connected to the same IP link (A, not B, not C, Not D).

** The same (non-null) character string IPMP group name identifies all interfaces in the group. You can place interfaces from NICs of different speeds within the same IPMP group, as long as the NICs are of the same type. For example, you can configure the interfaces of 100-megabit Ethernet NICs and the interfaces of one gigabit Ethernet NICs in the same group. As another example, suppose you have two 100-megabit Ethernet NICs. You can configure one of the interfaces down to 10 megabits and still place the two interfaces into the same IPMP group.

D: /etc/security/auth_attr is a local source for authorization names and descriptions.

An authorization is a right assigned to users that is checked by certain privileged programs to determine whether users can execute restricted functionality.

svccfg

subcommand: revert [snapshot]

Reverts the administrative customizations of the currently selected instance and its service to those recorded in the named snapshot. If no argument is given, use the currently selected snapshot and deselect it on success.

Incorrect:

Not A: Rollback to as-delivered system: svccfg delcust

svccfg

subcommand: delcust [-M] [pattern]

Delete any administrative customizations for the current selection. If an argument is supplied, it is taken as a glob pattern and only property groups and properties with names that match the argument are deleted.

Not B: There is no command revetsnap

Not C: Run the command /lib/svc/bin/restore_repository, and follow its instructions to restore one of the automatic backup copies of the repository. Upon successful completion, the system or local zone will be rebooted, and the restored repository will take effect.

Not D:

* pkgrecv

- Image Packaging System content retrieval utility

pkgrecv allows the user to retrieve packages from a pkg repository or package archive. pkgrecv can also optionally republish the retrieved packages to a different package repository or archive them.

-s src_repo_uri

A URI representing the location of a pkg repository or package archive from which to receive package data.

-d path_or_uri

The file system path or URI of the target to republish packages to. If -a is specified, the target is a new package archive that cannot already exist. Otherwise, the target must be a package repository that already exists. New repositories can be created using pkgrepo(1).

Global Actions on Resource Control Values

Global actions apply to resource control values for every resource control on the system. You can use the rctladm command to perform the following actions:

* Display the global state of active system resource controls

* Set global logging actions

zonecfg subcommand info:

info zonename | zonepath | autoboot | brand | pool | limitpriv

info [resource-type [property-name=property-value]*]

Display information about the current configuration. If resource-type is specified, displays only information about resources of the relevant type. If any property-name value pairs are specified, displays only information about resources meeting the given criteria. In the resource scope, any arguments are ignored, and info displays information about the resource which is currently being added or modified.

Incorrect:

Not A: priocntl- process scheduler control

The priocntl() function provides for control over the scheduling of an active light weight process (LWP).

Not C: rctladm- display and/or modify global state of system resource controls.

The rctladm command allows the examination and modification of active resource controls on the running system.

Not D: prctl

- get or set the resource controls of running processes, tasks, and projects

The prctl utility allows the examination and modification of the resource controls associated with an active process, task, or project on the system. It allows access to the basic and privileged limits on the specified entity.

Install services are created with a default AI manifest, but customized manifests or derived manifests scripts (hereafter called “scripts”) can be added to an install service by using the create-manifest subcommand.

* Example:

Add the new AI manifest to the appropriate AI install service, specifying criteria that define which clients should use these installation instructions.

# installadm create-manifest -n s11-x86 -f ./mem1.xml -m mem1 \

-c mem="2048-unbounded"

* Syntax

installadm create-manifest -n|--service svcname

-f|--file manifest_or_script_filename

[-m|--manifest manifest_name]

[-c|--criteria criteria=value|list|range... |

-C|--criteria-file criteriafile]

[-d|--default]

All interfaces in the same group must have the same STREAMS modules configured in the same order.