A cryptographically signed patch provides system administrators with assurance that the patch possesses certain qualities. Which two qualities are assured when a patch signature is verified? (Choose two.)

A security administator has a requirement to make an encrypted backup copy of an application and its data, using the AES algorithm, so that it can be safely transmitted to a partner. Which two command sequences can be used to generate an encrypted backup of the files under /app1? (Choose two.)

You have been asked to grant the user ennovy, a member of the staff group, read and write access to the file /app/notes which has the following properties: ls -l /app/notes -rw-rw—- 1 root app 0 Jun 6 15:11 /app/notes Which options will NOT grant the user the ability to read and write the file?

A new security related patch has been released for the Solaris OS. This patch needs to be applied to the system that functions as your web server. The web server is configured to run in a non-global zone. Can you just use patchadd to apply the patch to the global zone to update the web server zone?

You have been asked to implement defense in depth for network access to a system, where a web server will be running on an Internet-facing network interface. Which is NOT contributing to the defense in depth?

Which are two advantages of the Service Management Facility compared to the init.d startup scripts? (Choose two.)

To harden a newly installed Solaris OS, an administrator is required to make sure that syslogd is configured to NOT accept messages from the network. Which supported method can be used to configure syslogd like this?

Which two commands are part of Sun Update Connection? (Choose two.)

The /etc/default/passwd file contains a number of configuration parameters that can be used to constrain the character composition of user passwords. What is one of the dangers of having password composition too tightly constrained?

A security administrator creates a directory called prevoy with the following access control policy: $ getfacl prevoy # file: prevoy # owner:
secadm # group: secadm user::rwx group::r-x #effective:r-x mask:r-x other:r-x default:user::r– default:user:sysadm:rw- default:group::r– default:group:sysadm:rw- default:mask:rwx default:other:— Into this directory, the security administrator creates a file called secrets. The ls command reports the following for the prevoy directory and secrets file: $ ls -ld . secrets drwxr-xr-x+ 2 secadm secadm 512 Jun 6 16:38 . -r–r—–+ 1 secadm secadm 0 Jun 6 16:38 secrets Which two actions can be successfully taken by the sysadm role? (Choose two.)