B:

Note: You can create custom AI manifests for particular clients.

Create a custom XML AI manifest file. This method is best suited to an environment where few

systems require custom provisioning. Most systems to be installed have identical or similar hardware

and will be provisioned identically.

Write a script that dynamically creates an AI manifest for each client at installation time. Use this

method to create a custom installation for each client, based on client characteristics discovered at

installation time.

E: AI Server Software Requirements include

Software package repository

Ensure that the install server can access an IPS software package repository. AI requires the

install/installadm package.

F: Install Server Requirements

Any system that meets these requirements can be used as an AI install server, including laptops,

desktops, virtual machines, and enterprise servers. The install server can be either an x86 machine or

a SPARC machine. An x86 install server can install both SPARC and x86 clients, and a SPARC install

server can install both SPARC and x86 clients.

Note: To install clients over the network, AI requires a separate system to be an install server. On the

install server, create an AI install service to provide a net image and instructions for installing the

Oracle Solaris 11 OS on different clients.

pkg/image_root

(astring) The path to the image whose file information will be used as a cache for file data.

Incorrect answers:

A: pkg.depotd is the depot server for the image packaging system. It provides network access to the

data contained within a package repository. Clients that do not support direct access to a repository

through the file system, or for which network access is the only available or preferred method of

transport, typically use the package depot.

B: pkg/readonly(boolean)

Sets whether modifying operations, such as those initiated by pkgsend(1), are disabled. Retrieval

operations are still available. This property cannot be true when the pkg/mirror property is true. The

default value is true.

C: pkg/writable_root

(astring) The file system path to a directory to which the program has write access. This is used with

the -readonly option to enable the depot server to create files, such as search indexes, without

needing write access to the package information.

Reference: man pkg.depotd

B: The Network Status notification icon is only displayed on the desktop if you are using NWAM to

automatically configure your network.

C: All online (Wireless)

Indicates all manually enabled connections in the enabled network profile are online and that the

required number of connections in the enabled profile group (if such a group exists) are online. The

required number is the same as those described for the All online (Wired) status.

Note that at least one online connection is wireless.

Reference: Oracle Solaris Administration: Network Interfaces and Network Virtualization , Checking

the Status of Your Network Connection

How to Create an iSCSI LUN The following steps are completed on the system that is providing the storage device. 1.Create a ZFS storage pool. Example: target# zpool create sanpool mirror c2t3d0 c2t4d0 (C)2. Create a ZFS volume to be used as a SCSI LUN. (D)3. Create a LUN for the ZFS volume. Example: target# stmfadm create-lu /dev/zvol/rdsk/sanpool/vol1 Logical unit created: 600144F0B5418B0000004DDAC7C10001 4. Confirm that the LUN has been created. Example target# stmfadm list-lu LU Name: 600144F0B5418B0000004DDAC7C10001 (F) 5. Add the LUN view. This command makes the LUN accessible to all systems. target# stmfadm add-view 600144F0B5418B0000004DDAC7C10001 How to Create the iSCSI Target This procedure assumes that you are logged in to the local system will contains the iSCSI target. Note: The stmfadm command manages SCSI LUNs. Rather than setting a special iSCSI property on the ZFS volume, create the volume and use stmfadm to create the LUN. (H) 1. Enable the iSCSI target service. target# svcadm enable -r svc:/network/iscsi/target:default (I) 2. Create the iSCSI target. target# itadm create-target Reference: Oracle Solaris Administration: Devices and File Systems, Configuring iSCSI Devices With COMSTAR

The framework enables providers of cryptographic services to have their services used by many

consumers in the Oracle Solaris operating system. Another name for providers is plugins. The

framework allows three types of plugins:

* User-level plugins - Shared objects that provide services by using PKCS #11 libraries, such as

pkcs11_softtoken.so.1.

* Kernel-level plugins - Kernel modules that provide implementations of cryptographic algorithms in

software, such as AES.

Many of the algorithms in the framework are optimized for x86 with the SSE2 instruction set and for

SPARC hardware.

* Hardware plugins - Device drivers and their associated hardware accelerators. The Niagara chips,

the ncp and n2cp device drivers, are one example. A hardware accelerator offloads expensive

cryptographic functions from the operating system. The Sun Crypto Accelerator 6000 board is one

example.

Reference: Oracle Solaris Cryptographic Framework

http://docs.oracle.com/cd/E19963-01/html/821-1456/scf-10.html

B: Binary Signatures for Third-Party Software

The elfsign command provides a means to sign providers to be used with the Oracle Solaris

Cryptographic Framework. Typically, this command is run by the developer of a provider.

The elfsign command has subcommands to request a certificate from Sun and to sign binaries.

Another subcommand verifies the signature. Unsigned binaries cannot be used by the Oracle Solaris

Cryptographic Framework. To sign one or more providers requires the certificate from Sun and the

private key that was used to request the certificate.

C: Export law in the United States requires that the use of open cryptographic interfaces be

restricted. The Oracle Solaris Cryptographic Framework satisfies the current law by requiring that

kernel cryptographic providers and PKCS #11 cryptographic providers be signed.

Reference: System Administration Guide: Security Services, Oracle Solaris Cryptographic Framework