User brian changes the permissions for db_data this command: chmod 4755 db_data
What is true?

1. A. db_data now has permissions rwsr-xr-x and can be deleted only by user brian.
2. B. db_data now has permissions rwsr-xr-x and, if executed, will inn with the permissions of user brian.
3. C. db_data now has permissions rwxr-sr-x and can be deleted only by members of the group owning it.
4. D. The permissions for db_data cannot be determined, because the permissions prior to the change have not been specified.
5. E. db_data must be an ordinary file, because special permissions cannot be set on a directory.

Correct Answer: C
Use the chmod command to change permissions for a file or directory. You must be the owner of a file or directory, or have root access, to change its permissions.
Here we do not know if brian owns db_data. Note:
Permission 7 full
6 read and write
5 read and execute 4 read only
3 write and execute 2 write only
1 execute only
0 none
0 --- no permission 1 --x execute
2 -w- write
3 -wx write and execute 4 r-- read
5 r-x read and execute 6 rw- read and write
7 rwx read, write and execut
Solaris: Solaris Advanced User's Guide

The ZFS configuration on your server is:
Pool1 6.67G31K/pool Pool1/data31K31K/data
Select the three commands that you would use to 1. Create, 2. List, and 3. Delete a snapshot of the /data file system.

1. A. zfs snapshot pool1/data@now
2. B. zfs create snapshot pool1/data@now
3. C. zfs list -t snapshot
4. D. zfs list -t snapshot pool1/data
5. E. zfs destroy pool1/data@now
6. F. zfs destroy snapshot pool1/data@now

Correct Answer: ADE
A: Snapshots are created by using the zfs snapshot command, which takes as its only argument the name of the snapshot to create.
D: You can list snapshots as follows:
# zfs list -t snapshot
E: Snapshots are destroyed by using the zfs destroy command. For example:
# zfs destroy tank/home/ahrens@now

Examine this command and its output:
$ zfs list -r -t all tank
Name USED AVAIL REFER MOUNTPOINT
tank 2.41G 2.43G 32K /tank
tank/database 2.41G 2.43G 2.41G /tank/database tank/[email protected] 20K - 2.00G –
Next you execute:
# zfs destroy tank/database
Which statement is true about the result of executing this command?

1. A. It destroys the tank/database dataset.
2. B. It destroys tank/database and all descendant datasets.
3. C. It fails because the tank/[email protected] snapshot depends on the tank/database dataset.
4. D. It fails because the tank/[email protected] clone depends on the tank/database dataset.
5. E. It fails because the tank/database data set is not empty.

Correct Answer: C

A change in your company’s security policy now requires an audit trial of all administrators assuming the sysadm role, capturing:
There are two command necessary to accomplish this change. One is a rolemod command. What is the other?

1. A. auditconfig set policy=argv
2. B. auditconfig -setpolicy +argv
3. C. auditconfig -setflags lo, ex sysadm
4. D. auditconfig set flags=lo, ex sysadm

Correct Answer: B
Audit Significant Events in Addition to Login/Logout (see step 2 below)
Use this procedure to audit administrative commands, attempts to invade the system, and other significant events as specified by your site security policy.
For all users and roles, add the AUE_PFEXEC audit event to their preselection mask.
# usermod -K audit_flags=lo, ps:no username
# rolemod -K audit_flags=lo, ps:no rolename
# auditconfig -setpolicy +argv
3- Record the environment in which audited commands are executed.
# auditconfig -setpolicy +arge
Note: [-t] -setpolicy [+|-]policy_flag[, policy_flag ...]
Set the kernel audit policy. A policy policy_flag is literal strings that denotes an audit policy. A prefix of + adds the policies specified to the current audit policies. A prefix of - removes the policies specified from the current audit policies. No policies can be set from a local zone unless the perzone policy is first set from the global zone.

user1, while in his home directory, is attempting to run the following command in his home directory: cp bigfile verybig
The system displays the following error:
cp: cannot create verybig: Disc quota exceeded
Your initial troubleshooting shows that the df -h command indicates he is at 100% capacity. What command would you use to increase the disk space available to the user?

1. A. zfs get quota rpool/export/home/user1
2. B. zfs userused@user1
3. C. zfs quota=none /rpool/export/home/user1
4. D. df -h | grep user1
5. E. zfs set quota=none /rpool/export/home/user1

Correct Answer: E
ZFS quotas can be set and displayed by using the zfs set and zfs get commands. We can remove the quota restriction by setting to quota to none.