1Z

Transcription

1 1Z0-880 Passing Score: 800 Time Limit: 4 min

2 Exam A QUESTION 1 You want to modify the failure detection time for IPMP so that failures are detected more quickly on the IPMP group containing the IPv6 interface eri0. Which file you do edit? A. /etc/default/mpathd B. /etc/default/mpathd6 C. /kernel/drv/ipmp.conf D. /kernel/drv/ipmp6.conf E. /etc/hostname6.eri0 Correct Answer: A /Reference: QUESTION 2 Click the Exhibit button. ClientA has IP address /32. ClientB has IP address /32. The Solaris 10 OS ServerA with IP address /32 has the packet filter enabled and the configuration of the firewall is stored in the /etc/ipf/ipf.conf file which contains: pass in quick from /32 to any pass in proto tcp from /32 to any port = 23 block in all With this Solaris IP Filter configuration, which statement is true about Solaris 10 ServerA? A. ServerA drops all packets coming from either ClientA or ClientB. B. ServerA accepts any packets from ClientA and only telnet packets from ClientB. C. ServerA accepts any packets from ClientA and none from ClientB. D. ServerA accepts only telnet packets from ClientB and none from ClientA.

3 Correct Answer: C /Reference: QUESTION 3 The DNS configuration file on your system contains the following lines: search training.sun.com education.sun.com suned.sun.com nameserver nameserver nameserver Which statement is true? A. This system searches the three domains specified to find a match for a given host name. B. This system is allowed to query only three DNS domains. C. This system is a secondary server for three primary servers. D. This system is a DNS server for three domains and has three network interfaces. Correct Answer: A /Reference: QUESTION 4 A system administrator auditing a host running Solaris IP Filter verifies the contents of /etc/ipf/ipf.conf, but is unsure if the rules listed in this configuration file have been applied to the currently running Solaris IP Filter service. Which command lists the current rules being applied by Solaris IP Filter? A. autopush -l ipf B. ipstate -a C. cat /etc/ipf/ipf.conf D. ipfstat -io Correct Answer: D

4 /Reference: Question: 238 DRAG DROP Click the Task button. Place each component of an Ethernet-II frame on its corresponding position in the frame. Answer: Question: 239 DRAG DROP Click the Task button. Place each component of an Ethernet-II frame on its corresponding position in the frame. Answer: QUESTION 5 Click the Exhibit button. A DNS zone file is shown in the exhibit. The configuration for this domain is removed from the primary server, but the secondary server is not modified. How long after the domain is removed from the primary server will the secondary server stop returning authoritative replies for this domain? A. approximately 15 minutes after B. immediately C. approximately 30 minutes after D. approximately 1 hour after E. approximately 10 days after Correct Answer: E /Reference: QUESTION 6 You need to provision a new network segment on the network, which can accommodate up to 1600 IP addresses. Using CIDR notation, what allows you to accomplish this task? A /32 B /22

5 C /23 D /21 Correct Answer: D /Reference: QUESTION 7 The administrator of a multi-homed Solaris system is verifying that the qfe3 interface has successfully autonegotiated a port connection. The /var/adm/messages file reports a recent entry of: NOTICE: qfe3: 100 Mbps full duplex link up However, ndd -get /dev/qfe link_speed returns a value of 0. What is causing the mismatch in reported values? A. Setting the link_speed value only takes effect following a reboot. B. The wrong driver is being queried by ndd. C. The ndd command is using the default instance value. D. The switch can only negotiate half duplex connections. Correct Answer: C /Reference: QUESTION 8 You are asked to recommend a network topology for a new server network. This network will service all of your Sun servers (approximately 50 machines) and several employee workstations (approximately 20 machines). Which network topology is suited for this environment? A. a ring topology using intelligent hubs B. a VLAN topology with one VLAN for servers and another for workstations C. a star topology with one segment for servers and another for workstations D. a bus topology segmented into multiple network Correct Answer: B

6 /Reference: QUESTION 9 A system with its Ethernet port configured for full-duplex operation has what advantage over one running at half-duplex? A. The system's CPU processes fewer interrupts. B. It provides more reliable transmission. C. It has double the throughput capacity. D. It has double the transmission speed. Correct Answer: C /Reference: QUESTION 10 Given the following output showing the arp table of a system: Net to Media Table: IPv4 Device IP Address Mask Flags Phys Addr iprb0 cobra_ext SP 00:00:39:e4:7d:df iprb SP 00:00:39:e4:7d:df iprb SM 01:00:5e:00:00:00 Which two statements are true? (Choose two.) A. The system will respond to ARP requests for the address B. cobra_ext resolves to the IP address C. The MAC address associated to should be 01:00:5e:00:00:00. D IP address has been statically added to the system arp table. E. The MAC address associated to IP address is incorrect.

7 Correct Answer: AD /Reference: Question: 246 DRAG DROP Click the Task button. A Solaris 10 OS has packet filtering enabled and configured. Logging of Solaris IP Filter activity is also enabled. You assume a role that includes the Solaris IP Filter Management right profile. Place the commands in the proper order of execution. 1. Save logged packets to a file (log_file) 2. Flush the packet log buffer 3. Print the content of log_file to stdout Note: Not all commands are used. Answer: QUESTION 11 A DNS server is successfully providing information related to zones for which it is authoritative. A problem occurs when it attempts to resolve addresses in zones for which it is not authoritative. What is a cause of this problem? A. The server has no knowledge of the root-level servers. B. The server has no /etc/resolv.conf file. C. The server has only a single Ethernet interface. D. The server does NOT support the.com domain. E. The server is NOT authoritative for any reverse domains. Correct Answer: A /Reference: QUESTION 12 As part of a security audit, you are compiling a list of MAC addresses for systems on the subnet you administer. Given the output: Net to Media Table: IPv4

8 Device IP Address Mask Flags Phys Addr hme :76:6f:6e:6e:65 hme0 dbms :65:46:6f:76:65 hme0 dbms :6f:75:21:3b:29 hme0 dbms SP 08:00:20:ad:d5:9e hme SM 01:00:5e:00:00:00 Which two commands create this output? (Choose two.) A. arp -an B. arp -a C. kstat -av D. netstat -av E. netstat -p F. ifconfig hme0 Correct Answer: BE /Reference: QUESTION 13 A Solaris 10 OS server on your network has the packet filter enabled. The rule of Solaris IP Filter firewall is: block in proto icmp all This rule, stored in the /etc/ipf/ipf.conf file, blocks all Internet Control Message Protocol (ICMP) traffic. Which command modifies this rule so it prevents only ping traffic? A. block in proto icmp all icmp-type dest-unreach B. block in proto icmp from any to any icmp-type dest-unreach C. block in proto icmp from any to any D. block in proto icmp all icmp-type echo Correct Answer: D /Reference:

9 QUESTION 14 Given the following subsection of a /etc/named.conf primary DNS server configuration file: acl "inside" { /24; /24; }; acl "pusher" { /32; }; zone "one.edu" in { type master; file "forward.zone"; allow-query { "inside"; }; allow-transfer { /32; }; allow-update { ; "pusher"; } }; Which two statements are true? (Choose two.) A. Only the system with IP addresses /32 can dynamically update the zone one.edu. B. Only systems with IP addresses /24 receive responses from the name server. C. The primary DNS server can NOT be dynamically updated. D. The secondary DNS server /32 can receive zone transfers. E. The system "pusher" with IP address /32 receives responses from the name server. Correct Answer: DE /Reference: QUESTION 15 Given the following portion of the /etc/inet/dhcpsvc.conf file: DAEMON_ENABLED=TRUE RUN_MODE=relay RESOURCE=SUNWfiles PATH=/var/dhcp On which system are these entries found? A. a system running in.dhcpd -r B. a DHCP server C. a DHCP client D. a system running in.dhcpd in debug mode

10 Correct Answer: A /Reference: QUESTION 16 Click the Exhibit button. A portion of your network has three networks: NET1, NET2, and NET3. All clients on NET2 have the default route set to All clients on NET3 have the default route set to Clients on the NET2 network are NOT able to reach any of the clients on NET3. You are given the following output of the netstat -rn command from Sys11: # netstat -rn Routing Table: IPv4 Destination Gateway Flags Ref Use Interface UG U hme UG U qfe U 1 0 hme UH 1 3 lo0 Which entry is incorrect? A UH 1 3 lo0 B UG 1 0 C UG 1 0 D U hme0 E U 1 0 hme0 F U qfe0 Correct Answer: C /Reference: QUESTION 17 You are asked to configure a DHCP server for your office. The DHCP server will be used to assign a dynamic IP address to workstations that are occasionally

11 moved between networks and are left powered on 24 hours a day. Which is a suitable DHCP lease time to configure? A. No lease time is required. B. 10 minutes C. 1 hour D. 10 seconds E. 1 week Correct Answer: E /Reference: Question: 254 DRAG DROP Click the Task button. Resource records are entries contained in the name server zone files. The general format of any resource record is: [name] [ttl] class type data Place the record type in its place to complete the resource record. Answer: QUESTION 18 You are configuring Solaris IP Filter on your Solaris 10 OS system so that it logs all packets that are blocked to the /var/adm/ipf.blocked file. Syslog and IP Filter are already running on the system. Which three commands must you use to enable logging? (Choose three.) A. ipf -f /var/adm/ipf.blocked B. ipmon -D -s C. edit /etc/syslog.conf D. svcadm restart svc:/system/system-log:default E. inetadm -e svc:/system/system-log:default Correct Answer: BCD /Reference:

12 QUESTION 19 Given: Network Netmask Gateway gwhost Which command adds a routing table entry for the network? A. route add net gwhost -netmask B. route -net C. ifconfig hme0 inet netmask broadcast D. route add net gwhost -netmask E. route add -netmask gwhost Correct Answer: D /Reference: QUESTION 20 A host with two interfaces has the following routing table: # netstat -rn Routing Table: IPv4 Destination Gateway Flags Ref Use Interface U hme UG U qfe U 1 0 hme UH 1 3 lo0 What can be determined from the UG flags in the second line? A. It is an indirect route, and the gateway system is B. The IP is a gateway.

13 C. The gateway is up. D. The gateway has been updated. Correct Answer: A /Reference: QUESTION 21 Which two statements are true when you use IPMP with IPv6? (Choose two.) A. All test interfaces must be marked as DEPRECATED. B. IPMP can be configured on a single network interface. C. Multiple test addresses can use the same link-local address. D. All interfaces must have a unique MAC address. E. All test addresses must be manually assigned a unique link-local address. Correct Answer: BD /Reference: QUESTION 22 You have been asked to reconfigure a VLANs on your network. Which device do you need to reconfigure? A. hub B. switch C. bridge D. router Correct Answer: B /Reference:

14 Question: 260 DRAG DROP Click the Task button. The network you are managing has many services. One of the servers on your network with IP address , on the interface eri0, is an HTTP server. The HTTP server shown in the graphic has the Solaris IP Filter firewall enabled. The rule, which allows any incoming Internet connections on the interface eri0 for the HTTP service, must be designed. Use three options to complete the Solaris IP Filter firewall rule. Answer: QUESTION 23 You want to configure the hme0 interface with an IPv6 address and the prefix fec0. Which two configurations achieve this? (Choose two.) A. The file /etc/hostname6.hme0 contains an addif hostname entry in addition to the normal host name. This cross-references an entry in /etc/inet/ipnodes with IPv6 address prefix fec0:. B. The file /etc/hostname6.hme0 contains a host name defined in the /etc/inet/ipnodes file. This entry has an IPv6 address prefix of fec0. C. The file /etc/hostname6.hme0:1 contains a host name, which is defined in the /etc/inet/ipnodes file. This entry has an IPv6 address prefix of fec0. D. The file /etc/hostname6.hme0:1 contains a host name, which is defined in the /etc/hosts file. This entry has an IPv6 address prefix of fec0. Correct Answer: AC /Reference: Question: 262 DRAG DROP Click the Task button. When you investigate tunneling, you decide to use snoop to examine the way IPv6 encapsulation works. You ping the destination address of the tunnel and get a successful reply. In the snoop output you discover these protocols: - ICMPv6 - ETHER - IPv6 - IPv4 Place the protocol types in the order of encapsulation in which they would be observed in the snoop output. Note: Box 1 should contain the outermost protocol in terms of encapsulation, and Box 4 should contain the innermost encapsulated protocol. Answer: QUESTION 24 A Solaris system has an existing hme0 interface configured with an IPv4 address. hme0: flags= <up,broadcast,running,ipv4> mtu 1500 index 2

15 inet netmask ffffff00 broadcast ether 8:0:20:f5:d7:d7 An administrator wants to test an implementation of IPv6 on this system. Which two commands can the administrator use to add an IPv6 address to hme0? (Choose two.) A. routeadm -e -i hme0 inet6 B. ifconfig hme0 ipv6 plumb up C. ifconfig -d hme0 addif inet6 -auto D. ifconfig hme0 inet6 plumb up E. touch /etc/hostname6.hme0; init 6 Correct Answer: DE /Reference: QUESTION 25 Given the following output showing the arp table of a system: Net to Media Table: IPv4 Device IP Address Mask Flags Phys Addr iprb0 cobra_ext SP 00:00:39:e4:7d:df iprb SP 00:00:39:e4:7d:df iprb SM 01:00:5e:00:00:00 Which two statements are true? (Choose two.) A. cobra_ext resolves to the IP address B. The system will respond to ARP requests for the address C. The MAC address associated to should be 01:00:5e:00:00:00. D IP address has been statically added to the system arp table. E. The MAC address associated to IP address is incorrect. Correct Answer: BD /Reference: QUESTION 26

16 Given: host name IP address MAC address host :0:20:75:6e:7d Which command removes the ARP table entry for host1? A. rmarp -r B. arp -d host1 C. rarp host1 D. rarp 8:0:20:75:6e:7d E. rm -a Correct Answer: B /Reference: QUESTION 27 On a running Solaris 10 OS server, packet filtering is enabled, and the configuration of the Solaris IP Filter firewall is stored in the /etc/ipf/ipf.conf file, which contains: pass in proto tcp from any to any port = 23 pass in proto tcp from any to any port = 21 block in all With this configuration in place, how does the Solaris 10 OS server respond to clients that try to establish a tcp connection? A. The server only permits telnet connections. B. The server only permits telnet and ftp connections. C. The server only permits ftp connections. D. The server blocks all incoming packets. Correct Answer: D /Reference: Question: 267 DRAG DROP Click the Task button. Solaris IP Filter provides facilities for both filtering network packets as well as performing Network Address Translation (NAT) on network packets. The packets make it through all the filtering steps. Place the steps in order to create the path a network packet takes through a Solaris 10 OS system acting as a routing firewall and using Solaris IP Filter and NAT. Note: Some steps are used more than once.

17 Answer: QUESTION 28 Which two are benefits of using DHCP? (Choose two.) A. DHCP on Solaris OS includes a VPN feature that allows for the dynamic setup of an IP-over-IP tunnel. B. DHCP is a replacement for JumpStart. C. DHCP reduces the cost of managing networks by automatic assignment of available IP addresses from a pool of addresses. D. DHCP allows setting up BOOTP and RARP relays. E. DHCP supports clients that boot over a network, effectively replacing the need for RARP and the bootparamsbootparams file. Correct Answer: CE /Reference: QUESTION 29 A Solaris system administrator wants to change a workstation so it no longer uses a static IP address but rather acquires a DHCP address at boot time on its hme0 interface. Which step needs to be executed on the workstation to accomplish this? A. create /etc/dhcp.hme0 B. execute svcadm restart svc:/network/dhcp-server:default C. execute ndd -set /dev/hme dhcp bind D. modify /etc/hostname.hme0 to include the dhcp-client tag Correct Answer: A

18 /Reference: QUESTION 30 You are attempting to filter all UDP network traffic between two Solaris zones on the same machine. Zone 1 is using the IP address on the interface ce0:1 Zone 2 is using the IP address on the interface ce0:2 The Solaris IP Filter rules are in effect : block in quick proto udp from to block in quick proto udp from to With these rules in effect, UDP traffic still passes between the two zones. Why is this traffic NOT being blocked? A. At least one pass in rule is required. B. Solaris IP Filter can NOT filter traffic between zones on the same machine. C. Solaris IP Filter does NOT support CE interfaces. D. Solaris IP Filter can NOT be used to filter UDP traffic. Correct Answer: B /Reference: QUESTION 31 A Solaris IP Filter administrator is tasked with creating rules granting access to a new system for beta testing. The testing is only to be done by a select group of users originating from a large number of different subnets. Which Solaris IP Filter feature can be used to simplify the required rule additions? A. quick B. group C. keep flag D. address pool Correct Answer: D /Reference:

19 QUESTION 32 A system that normally boots from the network continues to report: Timeout waiting for ARP/RARP packet The snoop command shows the RARP packet arriving at the boot server. Which command helps you determine the reason for server not responding? A. inetadm restart svc:/network/rarp:debug B. svcadm restart svc:/network/rarp:debug C. pkill in.rarpd ; /usr/sbin/in.rarpd -da D. ndd -set /dev/arp debug 1 E. svcadm disable -t /network/rarp; /usr/sbin/in.rarpd -da Correct Answer: E /Reference: QUESTION 33 A host's IPv6 link-local unicast address is based on the host's Ethernet address. A 16-bit code is inserted in the 64-bit Interface ID portion of the IPv6 address to enable a 48-bit Ethernet address to become 64 bits in length. Which value represents this added 16-bit code? A. FFFF B. FEC0 C. FFEE D. FE80 E. FFFE Correct Answer: E /Reference: QUESTION 34 The TCP/IP network model is a four-layered structure resting on a common hardware platform. In this model, the Transport layer is responsible for transporting data to and from the correct application. Which two protocols are found in the Transport layer? (Choose two.) A. ARP

20 B. IP C. UDP D. TCP E. FTP F. HTTP Correct Answer: CD /Reference: QUESTION 35 You used ndd to enable IP forwarding on your network interfaces. After a system reboot, the system does not forward packets. What caused this problem? A. The effects of the ndd command did not survive reboot. B. The /etc/notrouter file was recreated during reboot. C. One of the /etc/rc2.d start scripts failed to complete. D. The svc.startd daemon was not reconfigured. Correct Answer: A /Reference: QUESTION 36 You are an administrator for a large organization that uses a single registered Class B address range. Your organization contains a number of departments that range in size from 25 to 400 employees. Each department is to be given its own separate range of network addresses. Which networking strategy efficiently uses the addresses allocated to your organization? A. using variable length subnet masks to divide the address space B. obtaining some Class A address ranges for the smaller departments C. using /etc/netgroup to create network names for each department D. configuring static routing tables on all hosts and routers E. using switches with more ports in the larger departments

21 Correct Answer: A /Reference: QUESTION 37 Click the Exhibit button. Given the BIND configuration shown in the exhibit, which statement is true about the mycompany.com domain? A. The user bob can modify the domain. B. Another DNS server in /24 can forward requests to this server. C. The zone configuration is invalid as there is no serial number. D. Any host in /24 can act as a secondary server. Correct Answer: B /Reference: Question: 278 DRAG DROP Click the Task button. Place each file name or identifier on its corresponding action. Answer: QUESTION 38 Given the following portion of in.dhcpd output running in debug mode: 3cdbc114: There is no dhcp-network table. 3cdbc114: Datagram received on network device: hme0. Which two commands need to be run on the DHCP server for the DHCP client to obtain an IP address? (Choose two.)

22 A. touch /etc/dhcp.hme0 B. pntadm -p /var/dhcp -A C. ifconfig hme0 dhcp start D. pntadm -C E. svcadm restart svc:/network/dhcp-server F. init 6 Correct Answer: BD /Reference: Question: 280 DRAG DROP Click the Task button. Place each IPv6 address type on its address description. Answer: QUESTION 39 Each DNS zone must have a primary server. What are two features of a DNS primary server? (Choose two.) A. They are never authoritative for any domain, except for the loopback address. B. They maintain data about each of the top-level zones. C. They provide update information and synchronize secondary servers when the secondary servers request information. D. They are the system on which all changes are made to the zone. Correct Answer: CD /Reference: QUESTION 40 You need to temporarily change the IP address on the hme0 interface on a system. Which command modifies the address to with a broadcast address of and a netmask of ? A. ifconfig hme netmask broadcast +

23 B. ifconfig hme netmask broadcast + C. ifconfig hme netmask broadcast D. ifconfig hme netmask broadcast + E. ifconfig hme netmask broadcast Correct Answer: B /Reference: QUESTION 41 In order to add static routes to in.routed at startup time, you add the following line to /etc/defaultrouter: net gateway gw metric 1 When the system is rebooted, you notice that the in.routed has NOT started. The svcs -x does NOT show anything wrong. What is the cause of this problem? A. You specified the routers by name, rather than by address. B. You did not add the static keyword. C. You did not use /etc/gateways. D. You did not specify a netmask as well. Correct Answer: C /Reference: Question: 284 DRAG DROP Click the Task button. Resource records are entries contained in the name server zone files. The general format of any resource record is: [name] [ttl] class type data Place the record type in its place to complete the resource record. Answer: QUESTION 42 A DNS server that you administer has stopped responding to client requests. Which four commands can you use in debugging the DNS server? (Choose four.) A. pkill -HUP inetd

24 B. svcadm restart system/name-service-cache C. dig D. ndc E. pkill -INT in.inetd F. pkill -INT in.named G. pkill -USR1 in.named Correct Answer: CDFG /Reference: QUESTION 43 A Solaris 10 OS server has packet filtering enabled. The rule set includes: pass in all pass in quick from any to any port = 22 pass in quick from any to any port = 80 pass in from any to any port = 23 pass in from any to any port = 25 block in all Which three network connections are blocked by the ipfilter software? (Choose three.) A. SSH connections from all hosts B. HTTP connections from all hosts C. Telnet connections from all hosts D. FTP connections from all hosts E. SMTP connections from all hosts Correct Answer: CDE /Reference: QUESTION 44 Which four functions can be performed using the graphical dhcpmgr utility? (Choose four.) A. start, stop, enable, and disable DHCP services on the client

25 B. update the NIS database with the DHCP-generated host names C. modify DHCP configuration macros D. update the DNS database with the DHCP-generated host names E. install DHCP packages on a client F. modify IP address records within the DHCP network management tables G. configure BOOTP relay agents Correct Answer: CDFG /Reference: QUESTION 45 In a given Telnet communication, two IP addresses, and , are involved in peer-to-peer communication. Datagrams leave the source host and are transmitted to destination host Which should you expect to find in the IP header of an outbound datagram? A. destination IP address B. source port number C. destination port number D. destination IP address Correct Answer: A /Reference: QUESTION 46 Which configuration line caused the following message to be logged? Jan 15 19:16:24 ennovy ipmon[757]: 19:16: b , > ,139 PR tcp len S IN A. block in log on qfe1 from to any B. pass in quick on qfe1 from to any group 100 C. pass in quick proto icmp from any to /32 group 100 D. block in log on qfe2 all head 200

26 E. block in log on qfe1 all head 100 F. block in log on qfe1 proto tcp all flags S/SA group 100 Correct Answer: F /Reference: Question: 290 DRAG DROP Click the Task button. A Solaris 10 OS has packet filtering enabled and configured. Logging of Solaris IP Filter activity is also enabled. You assume a role that includes the Solaris IP Filter Management right profile. Place the commands in the proper order of execution. 1. Save logged packets to a file (log_file) 2. Flush the packet log buffer 3. Print the content of log_file to stdout Note: Not all commands are used. Answer: QUESTION 47 On a system of your network, which is an NTP client, the output of the system administration command ntpq -p (standard Network Time Protocol query program) is: remote refid st t when poll reach delay offset disp =================================================================== *sun-roma02 sunital 4 m Which two statements are true? (Choose two.) A. The polling interval is 26 seconds. B. The NTP server is sunital. C. The type of the peer is multicast. D. The current estimated delay is 0.98 seconds. E. The current estimated offset is milliseconds. Correct Answer: CE

27 /Reference: QUESTION 48 Click the Exhibit button. You have a system that is directly connected to three local IPv6 networks. Currently this machine can talk to other hosts on each of the three networks. However, machines on different networks cannot talk to each other, even though they all have this system configured as their default IPv6 router. The output of routeadm is shown in the exhibit. Which command do you need to run to allow this machine to immediately begin forwarding packets between the three directly connected networks? A. routeadm -e ipv6-routing B. /usr/lib/inet/in.ripngd C. routeadm -e ipv6-forwarding D. routeadm -u -e ipv6-forwarding E. ndd -set /dev/ip ipv6_send_redirects 1 Correct Answer: D /Reference: QUESTION 49 Your network is made of many servers running many services. One of these systems is named system-ssh, which is an ssh server. The ssh server is on Solaris 10 OS with the packet filter enabled and configured. The rule set is: pass in quick proto tcp from any to any port = 22 keep state block in all Due to maintenance on the ssh software, a telnet connection must be used instead. You change the rule set in: pass in quick proto tcp from any to any port = 23 keep state block in all These are added as an inactive rule set to the ipf kernel module of Solaris 10 OS. Which command do you execute to list the inactive rule set and make it active? A. ipfstat -ii; ipf -s B. ipmon -i; ipf -I C. ipmon -l; ipfstat -i D. ipmon -i; ipf -s E. ipfstat -i; ipf -I

28 Correct Answer: A /Reference: QUESTION 50 Which two statements are true about the data payload section of an Ethernet frame? (Choose two.) A. Its maximum size is specific to the type of network interface on a system that receives the frame. B. It includes the Transport, Internet, and Application layer headers. C. It includes the Ethernet address of the receiving system. D. It helps the receiving interface detect the beginning of the frame. E. It includes information used by both the sending and receiving hosts to determine if an error has occurred during frame transmission. Correct Answer: AB /Reference: QUESTION 51 You are an administrator for a web-hosting organization. Each website your company supports has its own IP address. You want to assign each IP address to its own virtual interface on your server. Your server needs to support more websites than the default number of virtual interfaces on the Solaris OS. Which command should you use to change the maximum number of configurable virtual interfaces so that your strategy can be implemented? A. ndd B. netstat C. inetinit D. ifconfig E. route Correct Answer: A /Reference: Question: 296 DRAG DROP

29 Click the Task button. The network you are managing has many services. One of the servers on your network with IP address , on the interface eri0, is an HTTP server. The HTTP server shown in the graphic has the Solaris IP Filter firewall enabled. The rule, which allows any incoming Internet connections on the interface eri0 for the HTTP service, must be designed. Use three options to complete the Solaris IP Filter firewall rule. Answer: Question: 297 DRAG DROP Click the Task button. Place each file name or identifier on its corresponding action. Answer: QUESTION 52 On a system of your network, which is an NTP client, the output of the system administration command ntpq -p (standard Network Time Protocol query program) is: remote refid st t when poll reach delay offset disp =================================================================== *sun-roma02 sunital 4 m Which two statements are true? (Choose two.) A. The polling interval is 26 seconds. B. The current estimated delay is 0.98 seconds. C. The current estimated offset is milliseconds. D. The NTP server is sunital. E. The type of the peer is multicast. Correct Answer: CE /Reference: QUESTION 53 You are tasked with securing a web server running Solaris 10 OS. You must use the Solaris IP Filter software to only accept incoming connection requests to the following ports: ssh

30 http The IP address of the server is Which two lines should be added to the Solaris IP Filter configuration file to pass the required connection requests? (Choose two.) A. pass in from any to port = 22 B. pass in from any to port = 80 C. pass in from to port = 80 D. pass in from to port = 22 E. pass in from any to port = 25 Correct Answer: AB /Reference: QUESTION 54 Click the Exhibit button. The hme0 interface on your system does not appear to be functioning correctly. The output from ifconfig is shown in the exhibit. Which statement accurately describes the current configuration of the hme0 interface? A. There is a duplicate IP address conflict. B. The interface is configured, but not enabled. C. The interface driver is not configured in the kernel. D. The broadcast address is incorrect. E. The network cable is disconnected. Correct Answer: B /Reference: QUESTION 55 A network administrator configured an NTP server and an NTP client, but the client is refusing to synchronize with the server. The client and server clocks have drifted too much for the xntpd daemon to align them and for the NTP protocol to synchronize them. Which two tools will synchronize the two systems? (Choose two.)

31 A. rdate B. ntptrace C. zdate D. ntpdate E. syncdate Correct Answer: AD /Reference: QUESTION 56 You are tasked with securing a web server running Solaris 10 OS. You must use the Solaris IP Filter software to only accept incoming connection requests to the following ports: ssh http The IP address of the server is Which two lines should be added to the Solaris IP Filter configuration file to pass the required connection requests? (Choose two.) A. pass in from to port = 22 B. pass in from any to port = 25 C. pass in from any to port = 22 D. pass in from to port = 80 E. pass in from any to port = 80 Correct Answer: CE /Reference:

32 QUESTION 57 Given the contents of a zone file: ; $TTL IN SOA ns1.store.com. hostmaster.store.com. ( ) ; NS ns1 store.com. MX 10 mail ; localhost A ns1 A buy A mail A dhcp CNAME ns1 www CNAME buy relay CNAME mail Which two statements are true? (Choose two.) A. This is a reverse zone file. B. The hosts www and buy are the same system. C. The command relay.store.com returns an A record entry of D. A remote DNS server caching a record for mail.store.com flushes the entry every 10 days. Correct Answer: BC /Reference: QUESTION 58 A Solaris system router running Solaris IP Filter is configured with two network interfaces on different subnets. The system needs to be configured to route all HTTP traffic and allow SSH login access only from the qfe0 interface. pass in quick from any to any port = 80 keep state pass in on qfe0 from any to /32 port = 22 block in all

33 block out all What are two outcomes of applying this ipf.conf configuration? (Choose two.) A. Port 80 traffic to host is blocked. B. Inbound SSH traffic on qfe0 is blocked. C. Outbound HTTP traffic is blocked. D. Access from hosts on /24 is allowed. Correct Answer: BC /Reference: Question: 305 DRAG DROP Click the Task button. Place each DNS record type on its description. Answer: QUESTION 59 Given the following portion of the /etc/inet/dhcpsvc.conf file: DAEMON_ENABLED=TRUE RUN_MODE=relay RESOURCE=SUNWfiles PATH=/var/dhcp On which system are these entries found? A. a DHCP client B. a system running in.dhcpd -r C. a DHCP server D. a system running in.dhcpd in debug mode Correct Answer: B /Reference: QUESTION 60 A network administrator correctly configures a DHCP server that is serving JumpStart and non- JumpStart clients. One of the DHCP clients asks for an IP address.

34 It does NOT ask for any other parameters such as subnet mask, router, and encapsulated vendor options. A variable must be modified in the /etc/default/dhcpagent file on the client to configure the DHCP client's dhcpagent to request additional networking information from the DHCP server. Which variable must be modified? A. PARAM_REQUEST_LIST B. PARAM_REQUEST_ADDRESS C. PARAM_REQUEST_NETWORKING D. PARAM_REQUEST_ROWS E. PARAM_REQUEST Correct Answer: A /Reference: QUESTION 61 Which information is found in TCP segment headers? (Choose two.) A. sequence numbers B. congestion window C. MAC address D. window advertisements E. UDP datagram Correct Answer: AD /Reference: Question: 309 DRAG DROP Click the Task button. Two commands are used to configure an IPv6 6to4 Router. Place command segments in their places to complete these commands. Note: Not all text segments will be used. Answer: QUESTION 62 A system administrator is trying to boot a system from a network boot server. The system fails to boot and displays the following error: Timeout waiting for ARP/ RARP packet Which command indicates whether or not the RARP packet arrived at the server and the server replied?

35 A. arp -a B. inetadm -d C. in.rarpd -da D. rarp -debug Correct Answer: C /Reference: QUESTION 63 Click the Exhibit button. The output from a netstat -r command is shown in the exhibit. In this output, the destination is shown as an IP address. Which file should you modify to assign a name to this network so that this name is shown in the netstat -r output? A. /etc/inet/networks.conf B. /etc/default/networks.conf C. /etc/networks.conf D. /etc/inet/hosts E. /etc/inet/networks Correct Answer: E /Reference: QUESTION 64 While configuring Solaris IP Filter on a system, you want to block all ICMP Redirect packets. /usr/include/netinet/ip_icmp.h contains the following entry : #define ICMP_REDIRECT 5 /* shorter route, codes:/ Which rule should you add to your Solaris IP Filter configuration to block all such packets?

36 A. block in quick proto icmp-type 5 from any to 0/32 B. block in quick proto ip 5 from any to 0/32 C. block in quick proto icmp from any to 0/32 icmp-type 5 D. block in quick proto ip icmp-type 5 from any to 0/32 E. block in quick proto 5 from any to 0/32 Correct Answer: C /Reference: Question: 313 DRAG DROP Click the Task button. Place each network component on the layer at which it operates. Answer: QUESTION 65 A Solaris 10 OS administrator needs to configure a host to operate as an NTP server. Which two must be performed on the host? (Choose two.) A. execute /usr/sbin/ntp.server start B. execute snoop -d hme0 grep NTP C. execute svcadm enable svc:/network/ntp D. populate a /etc/inet/ntp.conf file E. edit the /etc/inet/ntp.server file Correct Answer: CD /Reference: QUESTION 66 You are attempting to configure link-based IPMP on a system containing two physical interfaces. Both interfaces are in the same group. Which two statements are true in a working link-based IPMP configuration? (Choose two.) A. All failover addresses must have the DEPRECATED flag set.

37 B. Each interface must have a unique test address. C. Both interfaces must be connected to the same IP network. D. Each interface must have a unique MAC address. E. IPMP must be started by running the if_mpadmn -e command. F. Both interfaces must be connected to the same switch. Correct Answer: CD /Reference: Question: 316 DRAG DROP Click the Task button. Place each LAN component next to its description. Answer: QUESTION 67 Click the Exhibit button. Which command yields the output shown in the exhibit? A. snoop -d hme B. snoop -d hme0 -V C. snoop -d hme0 -o /tmp/ D. snoop -v -d qfe0 broadcast E. snoop icmp Correct Answer: B /Reference: