A.

Solaris auditing

Explanation: Solaris auditing keeps a record of how the system is being used. The audit
service includes tools to assist with the analysis of the auditing data.

Incorrect:
not C: Basic Audit Reporting Tool
BART is a file tracking tool that operates entirely at the file system level. Using BART gives
you the ability to quickly, easily, and reliably gather information about the components of
the software stack that is installed on deployed systems. Using BART can greatly reduce
the costs of administering a network of systems by simplifying time-consuming
administrative tasks.
Note:
* The audit service makes the following possible:
Monitoring security-relevant events that take place on the host
Recording the events in a network-wide audit trail
Detecting misuse or unauthorized activity
Reviewing patterns of access and the access histories of individuals and objects
Discovering attempts to bypass the protection mechanisms
Discovering extended use of privilege that occurs when a user changes identity

* Auditing is the collecting of data about the use of system resources. The audit data
provides a record of security-related system events. This data can then be used to assign
responsibility for actions that take place on a host. Successful auditing starts with two
security features: identification and authentication. At each login, after a user supplies a
user name and password, a unique audit session ID is generated and associated with the
user's process. The audit session ID is inherited by every process that is started during the
login session. Even if a user changes identity within a single session, all user actions are
tracked with the same audit session ID.

D.

svccfg –s application/pkg/server:default listcust –L

Explanation: Example:
List all configuration changes that have been made in the SMF configuration repository to
the name-service/switch service:
# svccfg -s name-service/switch listcust –L

E.

dladm create-etherstub vswitchweb1

Explanation: Create the etherstub.
global# dladm create-etherstub etherstub
Create a VNIC over the etherstub.
global# dladm create-vnic -l etherstub vnic

Note: Etherstubs / Virtual Switches
The Etherstub is craeated as a dummy device to connect the various virtual NICs. User can
imagine etherstub as a Virtual Switch to help visualize the virtual network as a replacement
for a physical network where each physical switch is replaced by a virtual switch.

B.

 Set the default_template property in the system/zones service to your company
template.

Explanation: create uses a default template of SYSdefault. The default template can be
changed on a system-wide basis using the default_template SMF property of the
svc:/system/zones:default service.
Note:
create [-F] [ -a path |-b | -t template]
Create an in-memory configuration for the specified zone. Use create to begin to configure
a new zone

C.

  local

Explanation: The zfs get command supports the -H and -o options, which are designed for
scripting. You can use the -H option to omit header information and to replace white space
with the Tab character. Uniform white space allows for easily parseable data. You can use
the -o option to customize the output in the following ways:
* The literal name can be used with a comma-separated list of properties as defined in the
Introducing ZFS Properties section.
* A comma-separated list of literal fields, name, value, property, and source, to be output
followed by a space and an argument, which is a comma-separated list of properties.
The following example shows how to retrieve a single value by using the -H and -o options
of zfs get:
# zfs get -H -o value compression tank/home
on

C.

By default, the minimum free space is 1 MB.

Explanation: Dump Parameter: minimum free space
Minimum amount of free space required in the savecoredirectory after
saving crash dump files. If no minimum free space has been configured, the
default is one Mbyte.

C.

 acts as a deterrent

Explanation: The audit service makes the following possible:
Monitoring security-relevant events that take place on the host
Recording the events in a network-wide audit trail
Detecting misuse or unauthorized activity
Reviewing patterns of access and the access histories of individuals and objects
Discovering attempts to bypass the protection mechanisms
Discovering extended use of privilege that occurs when a user changes identity
Incorrect:
Not A: auditing does not prevent attempts to bypass the protection mechanisms, it just
discovers them.

A.

An error message will be sent to standard error.

Explanation: root@solaris:~# zfs snapshot pool1/sales/qrreports@qrreportroot@solaris:~#
zfs list -t snapshot -r pool1/sales/qrreportsNAME USED AVAIL REFER
MOUNTPOINTpool1/sales/qrreports@qrreport 0 - 31K -root@solaris:~# zfs send -i
pool1/sales/qrreports@qrreport pool1/sales/qrreports@mth2qtrreportError: Stream can not
be written to a terminal.You must redirect standard output.