
Verified 1Z0-106 Q&As - Pass Guarantee 1Z0-106 Exam Dumps
Check the Free demo of our 1Z0-106 Exam Dumps with 62 Questions
Oracle 1Z0-106 certification exam is designed for IT professionals who are seeking to validate their skills and knowledge in advanced system administration on Oracle Linux 8. Oracle Linux 8 Advanced System Administration certification is intended for individuals who have experience working with Oracle Linux systems and are seeking to enhance their knowledge and skills in administering complex Linux environments.
NEW QUESTION # 13
Which command configures a fully functional and accessible interface on VLAN 800?
- A. modprobe 8021q ip link add link eth0 name eth0.800 type vlan id 800 ip link set eth0.800 up
- B. modprobe 8021q ip link add link eth0 name eth0.800 VLAN 800 ip address add 10.135.1.120/24 dev eth0.800 ip link set eth0.800 up
- C. modprobe 8021q ip address add 10.135.1.120/24 dev eth0.800 ip link set eth0.800 up
- D. modprobe 8021q ip link add link eth0 name eth0.800 type vlan id 800 ip address add 10.135.1.120/24 dev eth0.800 ip link set eth0.800 up
Answer: D
Explanation:
* Option C (Correct):This command sequence first loads the 802.1q module needed for VLAN tagging, then creates a VLAN interface (eth0.800) on the base interface (eth0), assigns an IP address (10.135.1.120/24), and sets the VLAN interface up.
* Option A, B, D (Incorrect):These options have syntactical errors or missing parameters that make them incorrect for setting up a fully functional and accessible VLAN interface.
Oracle Linux Reference:Refer to:
* OracleLinux 8: Configuring VLANs
NEW QUESTION # 14
You must add an additional swap device and you add this entry to /etc/fstab:
/.swapfile none swap defaults 0 0
Examine these commands and output:
# dd if=/dev/zero of=/.swapfile bs=1024 count=1048576
1048576+0 records in
1048576+0 records out
1073741824 bytes (1.1 GB, 1.0 GiB) copied, 4.32499 s, 248 MB/s
# swapon -a
swapon: /.swapfile: insecure permissions 0644, 0600 suggested.
swapon: /.swapfile: read swap header failed
Which two actions must you perform to add this swap device?
- A. Execute swapon -L swapfile /.swapfile after adding a label.
- B. Use a physical disk partition type of 82 (Linux swap).
- C. Execute swapon -all.
- D. Assign a label to the .swapfile file by using the swaplabel command.
- E. Initialize the .swapfile file by using the mkswap command.
- F. Change defaults to user in the /etc/fstab entry.
Answer: E,F
NEW QUESTION # 15
Examine this command:
$ podman run -name=oracleshell -it oraclelinux:8 -slim
Which two statements are true upon execution?
- A. The container named oracleshell must already exist; otherwise, the command fails.
- B. The command fails if the oraclelinux:8 -slim image does not exist on the local machine.
- C. The container is created and started in a single command.
- D. The container creates and starts an interactive shell.
- E. The container is removed by typing exit at the bash shell prompt.
Answer: C,D
NEW QUESTION # 16
Examine this command and output:
$ ftp host01.example.com
Connected to host01.example.com (192.168.40.131).
220 (vsFTPd 3.0.2)
Name (host01.example.com:oracle):
After entering a carriage return, this error message is displayed:
530 Permission denied
Login Failed
ftp>
Why is the oracle user denied access to the FTP server on host01.example.com?
- A. LOCAL_ENABLE is set to NO in /etc/vsftpd/vsftpd.conf.
- B. The oracle user does not exist on host01.example.com.
- C. The oracle user is listed in /etc/vsftpd/ftpusers.
- D. The oracle user is listed in /etc/vsftpd/user_list and USERLIST_ENABLE is set to NO in /etc/vsftpd
/vsftpd.conf. - E. The oracle user is listed in /etc/vsftpd/user_list and USERLIST_ENABLE is set to YES in /etc/vsftpd
/vsftpd.conf.
Answer: E
Explanation:
The530 Permission deniederror indicates that the user is not allowed to log in. In vsFTPd, if theUSERLIST_ENABLEoption is set toYESin/etc/vsftpd/vsftpd.conf, and theoracleuser is listed in/etc/vsftpd
/user_list, that user is explicitly denied access to the FTP server.
NEW QUESTION # 17
Which two default user account settings are contained in /etc/login.defs?
- A. Group hashed passwords.
- B. User hashed passwords.
- C. Password aging controls.
- D. Decryption method used to decrypt passwords.
- E. Encryption method used to encrypt passwords.
Answer: C,E
NEW QUESTION # 18
Examine this segment of /etc/rsyslog.conf:
# Log all kernel messages to the console.
# Logging much else clutters up the screen.
#kern.* /dev/console
# Log anything (except mail) of level info or higher.
# Don't log private authentication messages!
*.info;mail.none;authpriv.none;cron.none /var/log/messages
# The authpriv file has restricted access.
authpriv.* /var/log/secure
# Log all the mail messages in one place.
mail.* -/var/log/maillog
# Log cron stuff
cron.* /var/log/cron
# Everybody gets emergency messages
*.emerg :omusrmsg:*
Now examine this log output:
less
Nov 9 20:32:16 server02 sudo[4570]: pam_unix(sudo:session): session opened for user opc (uid=0) Nov 9 20:32:17 server02 sudo[4570]: pam_unix(sudo:session): session closed Nov 9 20:32:24 server02 unix_chkpwd[4661]: password check failed for user Nov 9 20:32:24 server02 su[4581]: pam_unix(su:auth): authentication failed; logname= uid=1000 euid=0 tty=pts/0 ruser=opc rhost= user=root Which setting enabled the reporting of this log file output?
- A. #kern.* /dev/sssd/sssd.log
- B. authpriv.* /var/log/auth
- C. *.emerg *
- D. *.info;mail.none;authpriv.none;cron.none /var/log/messages
- E. cron.* /var/log/cron
Answer: B
Explanation:
* Option A (Correct):The configuration lineauthpriv.* /var/log/authwould direct all messages of theauthprivfacility (which includes sensitive authentication messages) to the/var/log/authfile. The log entries provided, which include authentication-related messages from PAM (pam_unix), would be logged due to this setting.
* Option B (Incorrect):The*.emerg *setting logs emergency messages to all users, not specifically the provided log output.
* Option C (Incorrect):This setting logs various non-authentication-related messages to/var/log
/messages. It specifically excludesauthpriv.
* Option D (Incorrect):This setting appears to be commented out and incorrect for the logging behavior described.
* Option E (Incorrect):Thecron.*setting logs cron messages, unrelated to the provided authentication logs.
Oracle Linux Reference:Refer to:
* OracleLinux 8: System Logging with rsyslog
NEW QUESTION # 19
Which two statements are true about fdisk?
- A. It can partition disks larger than 2 TB by using a GPT partition table.
- B. It can divide logical devices into one or more block disks called partitions.
- C. It cannot partition disks larger than 2 TB by using a GPT partition table.
- D. It understands GPT, MBR, and HFS partition tables.
- E. fdisk -l displays disk size information for all disks.
Answer: C,E
Explanation:
* Option B (Correct):Thefdisk -lcommand lists information about all available disks, including their sizes, partition tables, and partition details.
* Option E (Correct):fdiskcannot handle disks larger than 2 TB because it is limited to the Master Boot Record (MBR) partitioning scheme. To manage larger disks (over 2 TB), the GUID Partition Table (GPT) is required, andfdiskdoes not fully support GPT.
* Option A (Incorrect):fdiskdoes not support HFS (Hierarchical File System, used by macOS). It primarily supports MBR and has limited support for GPT.
* Option C (Incorrect):fdiskdoes not support partitioning disks larger than 2 TB with GPT; gdiskorpartedshould be used instead.
* Option D (Incorrect):fdiskdoes not divide logical devices into block disks called partitions; it operates on physical storage devices to create partitions.
Oracle Linux Reference:Refer to:
* OracleLinux 8: Managing Disks and Partitions
* man fdiskfor more details on the usage and limitations of thefdiskutility.
NEW QUESTION # 20
Which two statements are true about control groups (cgroups) in Oracle Linux 8?
- A. The cgroups filesystem allows limits to be overwritten in the lower levels of the hierarchy.
- B. Different controllers from cgroups version 1 and cgroups version 2 cannot be used at the same time.
- C. Oracle Linux 8 implements cgroups v2 by default.
- D. A cgroup is a collection of processes bound to a set of limits or parameters defined in the cgroups filesystem.
- E. Cgroups allow processes to be organized into hierarchical groups whose resource usage cannot be limited and monitored.
Answer: C,D
Explanation:
Explanation of Answer A:Oracle Linux 8 uses cgroups version 2 (cgroups v2) by default. cgroups v2 is a unified hierarchy system that introduces improvements over version 1, including a simplified interface and better resource management capabilities.
Explanation of Answer B:A control group (cgroup) is a mechanism for grouping processes and setting limits or parameters on their resource usage, such as CPU, memory, or I/O. These limits and parameters are configured and managed through the cgroups filesystem.
NEW QUESTION # 21
Examine this command:
# ssh -L 5011:127.0.0.1:80 [email protected] -f sleep 30
Which two are true upon execution?
- A. An SSH connection process is forked to the background.
- B. A reverse tunnel is created back to the local host on port 80.
- C. A socket remains open for 30 minutes unless a connection is established.
- D. A web server is listening on port 5011.
- E. A local port forward is created between client and server.
Answer: A,E
Explanation:
Explanation of Answer B:The commandssh -L 5011:127.0.0.1:80 [email protected] -f sleep 30creates a local port forward. This means port5011on the client machine is forwarded to port80on the remote machine (10.10.2.20) using the SSH connection.
Explanation of Answer E:The-foption of thesshcommand causes the SSH connection process to fork to the background after authentication is complete. Thesleep 30command keeps the SSH connection alive for 30 seconds.
NEW QUESTION # 22
Which two methods of changing kernel parameters can you use to modify values for the running system?
- A. Using the echo command to write values to specific files in the /sys directory.
- B. Issuing the sysctl -w command to write values to specific files in the /sys directory.
- C. Issuing the sysctl -w command to write values to specific files in the /proc/sys directory.
- D. Adding to or modifying parameters and values in the /etc/sysctl.conf file followed by issuing the sysctl -p command.
- E. Using the echo command to write values to specific files in the /proc/sys directory.
Answer: C,E
NEW QUESTION # 23
Which two directories store PAM authentication modules?
- A. /lib/security
- B. /etc/pam.d
- C. /usr/lib
- D. /lib64/security
- E. /var/lib
Answer: A,D
Explanation:
* Option A (Correct):/lib64/securityis a common directory where PAM (Pluggable Authentication Module) libraries are stored for 64-bit systems.
* Option D (Correct):/lib/securityis another directory where PAM libraries are stored, usually on 32-bit systems or as a fallback for 64-bit systems.
* Option B (Incorrect):/etc/pam.dcontains configuration files for PAM modules but does not store the modules themselves.
* Option C (Incorrect):/usr/libis a general directory for libraries but does not specifically store PAM modules.
* Option E (Incorrect):/var/libis typically used for variable state information and is not relevant for storing PAM modules.
Oracle Linux Reference:Refer to:
* OracleLinux 8: Managing Authentication
NEW QUESTION # 24
Which two statements are true about naming network interfaces?
- A. Consistent device naming is enabled by default.
- B. The udev device manager uses a random number if all other schemes fail.
- C. Device names cannot be manually configured.
- D. Device names incorporate the physical location and hot plug slot index number.
- E. The udev device manager generates device names based on a series of schemes.
Answer: A,E
NEW QUESTION # 25
Which mdadm command creates a RAID-1 device consisting of two block volumes and one spare device?
- A. mdadm -create /dev/md0 -level=1 -raid-devices=2 /dev/xvdd1 /dev/xvdd2
- B. mdadm -create /dev/md0 -level=5 -raid-devices=2 /dev/xvdd1 /dev/xvdd2 -spare-devices=1 /dev/xvdd3
- C. mdadm -create /dev/md0 -level=0 -raid-devices=2 /dev/xvdd1 /dev/xvdd2 -spare-devices=1 /dev/xvdd3
- D. mdadm -create /dev/md0 -level=1 -raid-devices=2 /dev/xvdd1 /dev/xvdd2 -spare-devices=1 /dev/xvdd3
Answer: D
NEW QUESTION # 26
As root you configured a file system using AutoFS with default settings. In the first session, you changed to a directory under AutoFS control. In a second session, you changed to /etc. Now the idle time for the session expires. Which two statements are true about the status of the file system mounted in the first session?
- A. It remains mounted until you log out from the first session.
- B. It was unmounted when the second session began.
- C. It was unmounted from the first session when the timer expired.
- D. It remains mounted until you switch to a directory outside the current mount point.
- E. It remains mounted as long as the system is running.
Answer: A,D
Explanation:
Understanding AutoFS Behavior:
* AutoFSautomatically mounts file systems when accessed and unmounts them after a period of inactivity (default is 5 minutes).
* A file system remains mounted as long as it isactive, meaning processes are accessing files or directories within it.
Scenario Analysis:
* First Session:
* Changed to a directory under AutoFS control (mount point is active).
* Second Session:
* Changed to /etc (does not affect the first session).
* Idle Time Expires:
* AutoFS checks for idle mounts to unmount.
Implications:
* The mount point remainsactivebecause the shell in the first session is in the AutoFS directory.
* AutoFS willnotunmount the file system while it is active.
Oracle Linux Reference:
* OracleLinux 8: Configuring File Systems-Using the Automounter:
"A file system remains mounted as long as there are open files or directories within it." Correct Options:
* Option B:The file system remains mounted until you log out from the first session.
* Option E:The file system remains mounted until you switch to a directory outside the current mount point.
Why Other Options Are Incorrect:
* Option A:Incorrect because the mount does not persist indefinitely; it's unmounted when no longer active.
* Option C:Incorrect because the mount is still active; the timer does not cause unmounting in this case.
* Option D:Incorrect because the second session does not influence the mount status in the first session.
NEW QUESTION # 27
Which two statements are true about naming network interfaces?
- A. Consistent device naming is enabled by default.
- B. The udev device manager uses a random number if all other schemes fail.
- C. Device names cannot be manually configured.
- D. Device names incorporate the physical location and hot plug slot index number.
- E. The udev device manager generates device names based on a series of schemes.
Answer: A,E
Explanation:
Explanation of Answer A:Consistent network device naming is enabled by default in Oracle Linux 8. This feature ensures that network interfaces retain their names across reboots, which is important for maintaining network configuration consistency. This is managed through the Predictable Network Interface Names feature, which is part of thesystemdproject and is implemented inudev.
Explanation of Answer B:Theudevdevice manager is responsible for dynamically managing device nodes in the/devdirectory. It generates network interface names based on several naming schemes, such as the interface's physical location on the bus (likeenp0s3), MAC address, or other attributes. These schemes are used to provide consistent and predictable names for network interfaces.
NEW QUESTION # 28
Examine this command:
# cryptsetup luksOpen /dev/xvdd1 cryptfs
What happens upon execution?
- A. It creates the LUKS partition on /dev/xvdd1.
- B. It creates the /dev/mapper/xvdd1 device mapping file.
- C. It creates the /dev/mapper/xvdd1-cryptfs device mapping file.
- D. It creates the /dev/mapper/xvdd1/cryptfs device mapping file.
- E. It creates the /dev/mapper/cryptfs device mapping file.
Answer: E
Explanation:
The commandcryptsetup luksOpen /dev/xvdd1 cryptfsis used to open an encrypted LUKS partition. This command maps the encrypted block device/dev/xvdd1to a decrypted block device that is accessible under/dev
/mapper/cryptfs.
* Option A (Correct):This is correct because thecryptsetup luksOpencommand creates a device mapping under/dev/mapper/with the name specified (cryptfsin this case). This mapping allows you to access the encrypted content of/dev/xvdd1through the decrypted virtual device/dev/mapper/cryptfs.
* Options B, C, D, E (Incorrect):These options are incorrect because they do not accurately reflect the standard behavior of thecryptsetup luksOpencommand. The device created will always be in the format
/dev/mapper/<name>where<name>is the alias specified in the command.
Oracle Linux Reference:For more information, refer to:
* OracleLinux 8: Managing Storage Devices
* man cryptsetupfor more details on theluksOpencommand and LUKS management.
NEW QUESTION # 29
Which two actions are performed by the logrotate utility?
- A. encrypted log files
- B. hashing log files
- C. rotating log files as specified
- D. duplicating log files
- E. compressing log files
Answer: C,E
Explanation:
Understanding logrotate:
* The logrotate utility manages log files by rotating, compressing, and removing them based on configuration.
* It helps prevent log files from consuming excessive disk space.
Option A: Rotating Log Files as Specified
* Explanation:
* logrotate rotates logs according to the specified criteria (size, time interval).
* Rotation involves renaming the current log file and starting a new one.
* Oracle Linux Reference:
* OracleLinux 8: Managing Log Files-Using logrotate:
"The logrotate utility simplifies the administration of log files by automatically rotating, compressing, and removing log files." Option C: Compressing Log Files
* Explanation:
* logrotate can compress old log files after rotation to save disk space.
* Compression is typically done using gzip.
* Oracle Linux Reference:
* OracleLinux 8: Managing Log Files-Configuring logrotate:
"You can configure logrotate to compress rotated log files by using the compress option."
NEW QUESTION # 30
Which two statements are true about container technology?
- A. A container application built on a bare metal system cannot run on virtual machines or cloud instances.
- B. Containers package an application with the individual runtime stack.
- C. A container application is dependent on the host operating system and kernel version.
- D. Podman requires a running daemon to function and to enable containers to start and run without root permissions.
- E. Podman, Buildah, and Skopeo are independent tools to create, run, and manage container applications across compatible Oracle Linux systems.
Answer: C,E
Explanation:
* Option B (Correct):Container applications are dependent on the host operating system's kernel because containers share the OS kernel, unlike virtual machines, which use a hypervisor. Compatibility of the host OS kernel version is required to run containers.
* Option D (Correct):Podman, Buildah, and Skopeo are container tools for managing container applications. Podman runs containers without requiring a daemon like Docker, Buildah is used to build container images, and Skopeo is used for transferring container images. These tools can operate independently of one another, providing a flexible and modular approach to container management on Oracle Linux.
* Option A (Incorrect):Container applications built on bare metal can run on virtual machines or cloud instances as long as the environment supports the container runtime.
* Option C (Incorrect):Containers do not package the entire runtime stack; they include the application and its dependencies but rely on the host OS for the kernel.
* Option E (Incorrect):Podman does not require a running daemon; one of its advantages over Docker is that it can run containers in rootless mode without needing a persistent daemon.
Oracle Linux Reference:Refer to:
* OracleLinux 8: Podman and Containers Guide
* man podman,man buildah,man skopeofor further details on these tools.
NEW QUESTION # 31
Which two statements are true about the at and batch commands?
- A. Both at and batch read from standard input, or you can specify a file and execute the commands with the -f option.
- B. at executes a one-time task to run at a specific time.
- C. at schedules the execution of recurring tasks.
- D. batch executes a task when the system load average is greater than 0.8.
- E. batch schedules the execution of recurring tasks.
Answer: A,B
NEW QUESTION # 32
Which two statements are true about fdisk?
- A. It can partition disks larger than 2 TB by using a GPT partition table.
- B. It can divide logical devices into one or more block disks called partitions.
- C. It understands GPT, MBR, and HFS partition tables.
- D. fdisk -l displays disk size information for all disks.
- E. It cannot partition disks larger than 2 TB by using a GPT partition table.
Answer: A,D
NEW QUESTION # 33
Examine the contents of the /etc/exports file on an NFS server:
/status *(rw,async)
/usr/shared/tools *(all-squash,anonuid=501,anongid=501,ro)
/projects/big *(ro) pteam(rw)
The NFS server exports /usr/shared/tools to NFS clients. Which statement is true?
- A. All clients can mount /usr/shared/tools read-only and NFS explicitly maps all requests to the UID and GID of the unprivileged local 501 user.
- B. All clients can mount /usr/shared/tools read-only and all-squash overrides explicit mapping of the UID and GID defined by anonuid and anongid.
- C. All clients except those with a local 501 user can mount /usr/shared/tools read-only.
- D. All clients can mount /usr/shared/tools read-only and NFS explicitly maps all requests to the UID and GID of the privileged local 501 user.
- E. All clients can mount /usr/shared/tools read-only and NFS ignores the directives defined by the anonuid and anongid options.
Answer: A
NEW QUESTION # 34
The ss command was invoked with options to:
* limit output to all listening and non-listening TCP ports
* display ports instead of the protocols that typically use those ports
* display all available internal TCP information
* display only connections whose source or destination port is 80
Which two results are produced by the command?
- A. LISTEN 0 511 *:80 *:* cubic cwnd:10
- B. ESTAB 0 0 10.12.18.92:50384 169.254.169.254:80 cubic wscale:9,7 rto:201 rtt: 0.226/0.113 ato:40 mss:8948 pmtu:9000 rcvmss:1728 advmss:8948 cwnd:10 bytes_sent:142 bytes_acked:143 bytes_received:1728 segs_out:4 segs_in:3 data_segs_out:1 data_segs_in:1 send 3167433628bps lastsnd:
11351 lastrcv: 11351 lastack:11351 pacing_rate 6334867256bps delivery_rate 504112672bps delivered:
2 app_limited rcv_space:62720 rcv_ssthresh:56588 minrtt:0.142 - C. icmp6 UNCONN 0 0 *:58 *:*
- D. UNCONN 0 0 [::1]:323 [::]:*
- E. tcp CLOSE-WAIT 32 0 server.example.com:44732 12.21.0.15:https
Answer: A,B
Explanation:
Explanation of Answer C:Thesscommand can be used to display all available internal TCP information, including established connections with detailed TCP metrics, which matches the output in Answer C.
Explanation of Answer D:Thesscommand can display listening ports (TCP in this case) with details like congestion control algorithms (cubic), which aligns with Answer D. The output indicates a listening TCP socket on port 80.
NEW QUESTION # 35
Which command produces human-readable timestamps in kernel ring buffer messages?
- A. dmesg -x
- B. dmesg -t
- C. dmesg -T
- D. dmesg -W
Answer: C
NEW QUESTION # 36
Which two statements are true about the Linux Auditing System?
- A. Auditing modes include permissive, enforcing, and disabled.
- B. Auditing rules can log administrator attempts to access user home directories.
- C. Auditing includes security policies, each of which includes security rules, or checks, which are checked when you run a security scan.
- D. Auditing system call rules can affect system performance depending on the amount of information that is logged.
- E. Auditing can scan for Common Vulnerabilities and Exposures (CVE) and automatically apply needed patches to a system.
Answer: B,D
NEW QUESTION # 37
Which two statements are true about control groups (cgroups) in Oracle Linux 8?
- A. The cgroups filesystem allows limits to be overwritten in the lower levels of the hierarchy.
- B. Different controllers from cgroups version 1 and cgroups version 2 cannot be used at the same time.
- C. Oracle Linux 8 implements cgroups v2 by default.
- D. A cgroup is a collection of processes bound to a set of limits or parameters defined in the cgroups filesystem.
- E. Cgroups allow processes to be organized into hierarchical groups whose resource usage cannot be limited and monitored.
Answer: C,D
NEW QUESTION # 38
......
Get professional help from our 1Z0-106 Dumps PDF: https://crucialexams.lead1pass.com/Oracle/1Z0-106-practice-exam-dumps.html