1z0-822 Exam Dumps - Oracle Solaris 11 Advanced System Administration

How to Create a Virtual Network Interface

This procedure shows how to create a virtual network interface card (VNIC).

1. Create a VNIC over a datalink.

# dladm create-vnic -l link vnic

link is the name of the datalink over which the VNIC is configured.

vnic is the VNIC which you can label with a customized name as well.

2. Create a VNIC IP interface over the link.

# ipadm create-ip vnic

3. Configure the VNIC with a valid IP address.

If you are assigning a static IP address, use the following syntax:

# ipadm create-addr -T static -a address addrobj

where addrobj uses the naming format interface/user-defined-string, such as e1000g0/v4globalz.

re

page reclaims.

The information is given in units per second.

Note:

* vmstat reports virtual memory statistics regarding kernel thread, virtual memory, disk, trap, and CPU activity.

Incorrect:

Not B: sr, pages scanned by clock algorithm

Not C: free

size of the free list (Kbytes)

Not D: fr

kilobytes freed

Gathering Statistics About Network Traffic on Flows

Flow statistics help you evaluate packet traffic on any defined flows on the system. To obtain flow information, you use the flowstat command.

* Display statistics about incoming and outgoing packets on all flows.

# flowstat

This command provides a static display of traffic information on all configured flows.

Incorrect:

Not A: In computing, sar (System Activity Report) is a Solaris-derived system monitor command used to report on various system loads, including CPU activity, memory/paging, device load, network.

zpool detach pool device

Detaches device from a mirror. The operation is refused if there

are no other valid replicas of the data.

* policy.conf

policy.conf– configuration file for security policy.

The policy.conf file provides the security policy configuration for user-level attributes.

* Example: Modifying Every User's Basic Privilege Set

In this example, the security administrator of a large Sun Ray installation does not want regular users to view the processes of other Sun Ray users. Therefore, on every system that is configured with Trusted Extensions, the root role removes proc_info from the basic set of privileges. The PRIV_DEFAULT setting in the /etc/policy.conf file is uncommented and modified as follows:

PRIV_DEFAULT=basic,!proc_info

Set the default scheduler for the system to be the FSS.

# dispadmin -d FSS

How to Move a Running Process Into a New Task

This example shows how to associate a running process with a different task and new project.

To perform this action, you must either be superuser, or be the owner of the process and be a

member of the new project.

1. Become superuser or assume an equivalent role

2. Obtain the process ID of thebook_catalogprocess.

# pgrep book_catalog

8100

3. Associate process8100with a new task ID in thebooksiteproject.

# newtask -v -p booksite -c 8100

17

The -coption specifies that newtaskoperate on the existing named process.

4. Confirm the task to process ID mapping.

# pgrep -T 17

8100

Incorrect:

Not C: projmod does not change the processes of a project.

The projmod utility modifies a project's definition on the system. projmod changes the definition of the specified project and makes the appropriate project-related system file and file system changes.

* Set the default scheduler for the system to be the FSS.

# dispadmin -d FSS

* Scheduling Class on a System with Zones Installed

Non-global zones use the default scheduling class for the system. If the system is updated with a new default scheduling class setting, non-global zones obtain the new setting when booted or rebooted.

The preferred way to use FSS in this case is to set FSS to be the system default scheduling class with the dispadmin command.

See % below.

coredump parameter: -m mink | minm | min%

Create a minfree file in the current savecore directory indicating that savecore should maintain at least the specified amount of free space in the file system where the savecore directory is located. The min argument can be one of the following:

k

A positive integer suffixed with the unit k specifying kilobytes.

m

A positive integer suffixed with the unit m specifying megabytes.

%

A % symbol, indicating that the minfree value should be computed as the specified percentage of the total current size of the file system containing the savecore directory.

The savecore command will consult the minfree file, if present, prior to writing the dump files. If the size of these files would decrease the amount of free disk space below the minfree threshold, no dump files are written and an error message is logged. The administrator should immediately clean up the savecore directory to provide adequate free space, and re-execute the savecore command manually. The administrator can also specify an alternate directory on the savecore command-line.

Incorrect:

Not C: Separate ZFS volumes must be used for the swap area and dump devices.

D: Example:

# prctl -n task.max-lwps $$

process: 111107: csh

NAME PRIVILEGE VALUE FLAG ACTION RECIPIENT

task.max-lwps

usage 3

privileged 3 - deny -

system 2.15G max deny

F: The following command activates system logging of all violations of task.max-lwps.

# rctladm -e syslog task.max-lwps

#

Note: How to Set the Maximum Number of LWPs for Each Task in a Project

This procedure adds a project named x-files to the /etc/project file and sets a maximum number of LWPs for a task created in the project.

1.Become an administrator.

2. Use the projadd command with the -K option to create a project called x-files. Set the maximum number of LWPs for each task created in the project to 3.

# projadd -K 'task.max-lwps=(privileged,3,deny)' x-files

root@solaris:~# zfs snapshot pool1/sales/qrreports@qrreportroot@solaris:~# zfs list -t snapshot -r pool1/sales/qrreportsNAME USED AVAIL REFER MOUNTPOINTpool1/sales/qrreports@qrreport 0 - 31K -root@solaris:~# zfs send -i pool1/sales/qrreports@qrreport pool1/sales/qrreports@mth2qtrreportError: Stream can not be written to a terminal.You must redirect standard output.

A: The audit_remote plugin is loaded by auditd if the plugin is configured as an active via auditconfig. Use the auditconfig -setplugin option to change all the plugin related configuration parameters

B: The solaris-audit service port assigned by IANA is 16162.

Incorrect:

Not D: audit_remote authenticates itself to the remote audit service by way of GSS-API (libgss(3LIB)). Default gss credentials are used as provided by the gss implementation mechanism, such as Kerberos.

Note: audit_remote

- send Solaris audit logs to a remote server

Example:

List all configuration changes that have been made in the SMF configuration repository to the name-service/switch service:

# svccfg -s name-service/switch listcust –L

Use one of the following methods to restart the depot server process:

B: Use svcadm(1M) to restart the application/pkg/server instance.

C: Send a SIGUSR1 signal to the depot server process using kill(1). This executes a “graceful restart” that leaves the process intact but reloads all configuration, package, and search data:

# kill -USR1 pid

Note:

* The pkd.depotd service is managed by SMF under the service identifier svc:/application/pkg/server.

Example. Displaying Administratively Customized Properties (here only admin layer is displayed with –l)

The following command uses SMF layers to display administratively customized properties.

example% svcprop -p config -l admin svc:/network/dns/client

(A) config/domain astring admin my.domain.com

(D) config/nameserver net_address admin 10.22.33.44 10.44.33.11

Note:

* config/nameserver refers to the Solaris DNS server.

/ The nameserver keyword specifies DNS servers to query using IP address.

Example:

The /etc/resolv.conf file contains configuration directives for the DNS resolver. The following resolv.conf example shows two name servers and three search suffixes:

domain nj.bigcorporation.com

nameserver 192.168.10.11

nameserver 192.168.20.88

* The svcprop utility prints values of properties in the service configuration repository. Properties are selected by -p options and the operands

Example:

In Solaris 11 the “grant” authorization is no longer used, rather a set of authentication have been defined for that

purpose. The authentication strings can be found in /etc/security/prof_attr.d/core-os file.

solaris.auth.:RO::Authorizations::help=AuthorizationHeader.html

solaris.auth.assign:RO::Assign any authorization::help=AuthAssign.html

solaris.auth.delegate:RO::Assign owned authorizations::help=AuthDelegate.html

solaris.auth.manage:RO::Manage authorizations::help=AuthManage.html

Note: You no longer need to use the visual editor to add your own site specific entries to the Role Based Access Controls framework in Oracle Solaris 11. The profile command has been modified to support creation, modification and removal of Rights Profiles

Required to maintain high availability --> use a mirror.

The same data will be accessed many times throughout the day. Configure the storage for maximum performance. Use caching.

Dump Parameter: minimum free space

Minimum amount of free space required in the savecoredirectory after

saving crash dump files. If no minimum free space has been configured, the

default is one Mbyte.