1z1-106認定の有効な試験問題集解答学習ガイド！（最新の62問題)
1z1-106問題集で時間限定！無料アクセスせよ
質問 # 36
Which two are true about using Ksplice?
- A. The Ksplice client is freely available to all customers.
- B. Ksplice has two clients; each can run in three different modes.
- C. Ksplice can be used without a network connection
- D. Yum cannot upgrade a kernel patched by Ksplice
- E. It can patch the kernel without shutting down the system.
正解：D、E
質問 # 37
Which are three of the network bonding modes supported in Oracle Linux 8?
- A. Multicast
- B. Round-robin
- C. Split Horizon
- D. 802.3ad
- E. Active Backup
- F. Poison Reverse
- G. Passive Backup
正解：B、D、E
質問 # 38
Examine these commands, which execute successfully:
# firewall-cmd --zone=public --add-service=cockpit --permanent
# firewall-cmd --zone=public --add-port=1313/tcp --permanent
# firewall-cmd --reload
Which are true upon execution?
- A. Port 1313 blocks all traffic for the public zone except for ingress traffic to the Cockpit service.
- B. Egress traffic is allowed for the Cockpit service only when using port 1313.
- C. The Cockpit service is added only to the public zone.
- D. The custom Cockpit service configuration file is updated in /usr/lib/firewalld/services.
- E. Runtime firewall configuration is not lost when the firewalld process is restarted or the system is rebooted.
正解：C、E
解説：
Explanation of Answer A:The commandfirewall-cmd --zone=public --add-service=cockpit --permanentadds the Cockpit service to the public zone permanently. This means that the service is explicitly allowed only within the public zone, not in any other zones.
Explanation of Answer C:Using the--permanentflag withfirewall-cmdcommands ensures that the changes are stored in the firewalld configuration and are persistent across reboots. Therefore, when thefirewalldservice restarts or the system reboots, the runtime configuration will not be lost, and the changes will remain in effect.
質問 # 39
Examine this command and output:
$ ftp host01.example.com
Connected to host01.example.com (192.168.40.131).
220 (vsFTPd 3.0.2)
Name (host01.example.com:oracle):
After entering a carriage return, this error message is displayed:
530 Permission denied
Login Failed
ftp>
Why is the oracle user denied access to the FTP server on host01.example.com?
- A. The oracle user is listed in /etc/vsftpd/user_list and USERLIST_ENABLE is set to YES in /etc/vsftpd/vsftpd.conf.
- B. The oracle user is listed in /etc/vsftpd/ftpusers.
- C. The oracle user is listed in /etc/vsftpd/user_list and USERLIST_ENABLE is set to NO in /etc/vsftpd/vsftpd.conf.
- D. The oracle user does not exist on host01.example.com.
- E. LOCAL_ENABLE is set to NO in /etc/vsftpd/vsftpd.conf.
正解：B
質問 # 40
Examine the contents of the /etc/exports file on an NFS server:
/status *(rw,async)
/usr/shared/tools *(all-squash,anonuid=501,anongid=501,ro)
/projects/big *(ro) pteam(rw)
The NFS server exports /usr/shared/tools to NFS clients. Which statement is true?
- A. All clients except those with a local 501 user can mount /usr/shared/tools read-only.
- B. All clients can mount /usr/shared/tools read-only and NFS explicitly maps all requests to the UID and GID of the privileged local 501 user.
- C. All clients can mount /usr/shared/tools read-only and NFS ignores the directives defined by the anonuid and anongid options.
- D. All clients can mount /usr/shared/tools read-only and all-squash overrides explicit mapping of the UID and GID defined by anonuid and anongid.
- E. All clients can mount /usr/shared/tools read-only and NFS explicitly maps all requests to the UID and GID of the unprivileged local 501 user.
正解：E
解説：
* Option C (Correct):Theall-squashoption in the/etc/exportsfile maps all user and group requests from remote systems to the anonymous user (nfsnobody) on the NFS server. However, because theanonuidandanongidoptions are specified with501, all incoming requests are explicitly mapped to the UID and GID of the unprivileged local user with UID 501 and GID 501. Thero(read-only) option allows all clients to mount/usr/shared/toolsas read-only.
* Option A (Incorrect):This is incorrect because all clients can mount the directory, but all users' requests are squashed to UID 501. There is no exception for local 501 users.
* Option B (Incorrect):The answer is incorrect because it incorrectly states "privileged local 501 user." The UID 501 is typically an unprivileged user.
* Option D (Incorrect):Theall-squashoption does not override the UID and GID explicitly defined byanonuidandanongid. Instead, it maps all remote requests to these values.
* Option E (Incorrect):Theanonuidandanongiddirectives are not ignored; they are explicitly used to map all requests to the specified UID and GID.
Oracle Linux Reference:For more information on NFS exports and options, refer to:
* OracleLinux 8: Managing NFS and NIS
* man exportsfor details on export options.
質問 # 41
Examine this command:
# nft add rule inet filter input tcp dport 80 drop
Which two statements are true upon execution?
- A. The rule updates the configuration on disk.
- B. The rule is applied to both IPv4 and IPv6 packets.
- C. TCP packets inbound on port 80 are dropped.
- D. The rule applies to the input table.
- E. TCP packets outbound on port 80 are dropped.
- F. All traffic inbound on port 80 is dropped.
正解：B、C
解説：
* Option A (Correct):The rule is applied to both IPv4 and IPv6 packets. Theinettable is used for filtering both IPv4 and IPv6 traffic, and since the rule is added to theinettable, it affects both IP versions.
* Option E (Correct):The rule drops TCP packets inbound on port 80. The rule specifies theinputchain in thefiltertable, and it drops (drop) all TCP traffic (tcp) destined for port 80 (dport 80), which means any incoming TCP traffic on port 80 will be dropped.
* Option B (Incorrect):The command does not automatically update the configuration on disk; the rule is applied immediately in memory but does not persist across reboots unless explicitly saved.
* Option C (Incorrect):The rule specifies TCP packets only, not all traffic. Therefore, it does not drop traffic for protocols other than TCP.
* Option D (Incorrect):Although this statement is correct, it is less specific than Option A, which is more accurate because it mentions both IP versions.
* Option F (Incorrect):The rule applies to inbound traffic, not outbound, so it does not drop outbound traffic.
Oracle Linux Reference:Refer to:
* OracleLinux 8: Managing Firewall Rules with nftables
質問 # 42
Which command configures a fully functional and accessible interface on VLAN 800?
- A. modprobe 8021q ip link add link eth0 name eth0.800 type vlan id 800 ip address add 10.135.1.120/24 dev eth0.800 ip link set eth0.800 up
- B. modprobe 8021q ip address add 10.135.1.120/24 dev eth0.800 ip link set eth0.800 up
- C. modprobe 8021q ip link add link eth0 name eth0.800 type vlan id 800 ip link set eth0.800 up
- D. modprobe 8021q ip link add link eth0 name eth0.800 VLAN 800 ip address add 10.135.1.120/24 dev eth0.800 ip link set eth0.800 up
正解：A
解説：
* Option C (Correct):This command sequence first loads the 802.1q module needed for VLAN tagging, then creates a VLAN interface (eth0.800) on the base interface (eth0), assigns an IP address (10.135.1.120/24), and sets the VLAN interface up.
* Option A, B, D (Incorrect):These options have syntactical errors or missing parameters that make them incorrect for setting up a fully functional and accessible VLAN interface.
Oracle Linux Reference:Refer to:
* OracleLinux 8: Configuring VLANs
質問 # 43
Examine this command:
# auditctl -w /etc/passwd -p w -k pass
Which two statements are true upon execution?
- A. An audit rule is defined with the keyword pass.
- B. A write occurs to /etc/audit/rules.d/audit.rules.
- C. An audit rule is defined that creates a log entry every time /etc/passwd is read.
- D. A write occurs to /etc/audit/audit.rules.
- E. An audit is defined that creates a log entry every time a write occurs to /etc/passwd.
正解：A、E
質問 # 44
Which two statements are true about removing a physical volume (PV) from a volume group (VG)?
- A. It cannot be removed when it is part of an active VG.
- B. It can be removed when an inactive logical volume is on the VG.
- C. It can be removed only after removing it from its VG by using vgreduce.
- D. It can be removed when an active VG has mounted file systems by running vgexport.
- E. It can be removed when it is part of an active VG.
正解：B、C
解説：
To remove a physical volume (PV) from a volume group (VG), it must first be removed using thevgreducecommand. This operation ensures that the VG no longer contains any references to the PV being removed.
Explanation of Answer D:A physical volume can be removed if there are no active logical volumes (LVs) on the VG that require space from that PV. If the LV is inactive, the PV can be safely removed from the VG.
質問 # 45
Which mdadm command creates a RAID-1 device consisting of two block volumes and one spare device?
- A. mdadm -create /dev/md0 -level=1 -raid-devices=2 /dev/xvdd1 /dev/xvdd2
- B. mdadm -create /dev/md0 -level=1 -raid-devices=2 /dev/xvdd1 /dev/xvdd2 -spare-devices=1 /dev
/xvdd3 - C. mdadm -create /dev/md0 -level=0 -raid-devices=2 /dev/xvdd1 /dev/xvdd2 -spare-devices=1 /dev
/xvdd3 - D. mdadm -create /dev/md0 -level=5 -raid-devices=2 /dev/xvdd1 /dev/xvdd2 -spare-devices=1 /dev
/xvdd3
正解：B
解説：
The correct command to create a RAID-1 device (mirroring) consisting of two block volumes with one spare device is optionC:mdadm -create /dev/md0 -level=1 -raid-devices=2 /dev/xvdd1 /dev/xvdd2 -spare- devices=1 /dev/xvdd3.
* RAID Level 1:RAID-1, also known as mirroring, involves creating an exact copy (or mirror) of a set of data on two or more disks. This ensures data redundancy; if one disk fails, the other can still provide the data.
* mdadm Command Structure:Themdadmcommand is used to manage and monitor RAID devices on Linux. To create a new RAID array, the--createoption is used, followed by several parameters:
* /dev/md0: The name of the RAID device to be created.
* --level=1: Specifies RAID level 1 (mirroring).
* --raid-devices=2: Indicates the number of active devices (two in this case) to be used in the RAID array.
* /dev/xvdd1 /dev/xvdd2: The two block devices that will form the RAID-1 array.
* --spare-devices=1 /dev/xvdd3: Specifies one spare device (/dev/xvdd3). A spare device is used to automatically replace a failed device in the RAID array.
* Option Analysis:
* A.Incorrect because it specifies RAID level 5 (--level=5), which requires at least three devices and does not match the requirement for RAID-1.
* B.Incorrect because it does not include the--spare-devices=1option, meaning there is no spare device included in this configuration.
* C.Correct as it specifies RAID-1 (--level=1), two active devices (--raid-devices=2), and one spare device (--spare-devices=1).
* D.Incorrect because it specifies RAID level 0 (--level=0), which is a striped set (no redundancy), not a mirrored set (RAID-1).
Oracle Linux Reference:For more detailed information aboutmdadmand RAID configurations in Oracle Linux
8, refer to the following Oracle Linux documentation:
* OracleLinux 8 Managing Storage Devices - RAID Configuration
* OracleLinux 8 mdadm Manual
These references provide comprehensive details on RAID levels,mdadmcommand syntax, and options for creating and managing RAID arrays in Oracle Linux.
質問 # 46
Which is true about the /etc/sysconfig directory in an Oracle Linux 8 system?
- A. It is used to access device and device driver information.
- B. Files in this directory hierarchy contain information about running processes.
- C. Files in this directory hierarchy contain information about system hardware.
- D. Its contents depend on the packages installed on the system.
正解：D
質問 # 47
Examine this content from /etc/chrony.conf:
...
pool pool.ntp.org offline
driftfile /var/lib/chrony/drift
keyfile /etc/chrony.keys
...
Which statement is true about pool.ntp.org?
- A. chronyd takes pool.ntp.org offline automatically when sending a request to the pool fails.
- B. chronyd does not poll pool.ntp.org until it is enabled to do so by chronyd.
- C. chronyd polls a maximum of 3 sources from pool.ntp.org after it is enabled.
- D. chronyd does not poll pool.ntp.org until it is enabled to do so by chronyc.
正解：D
質問 # 48
The ss command was invoked with options to:
* limit output to all listening and non-listening TCP ports
* display ports instead of the protocols that typically use those ports
* display all available internal TCP information
* display only connections whose source or destination port is 80
Which two results are produced by the command?
- A. LISTEN 0 511 *:80 *:* cubic cwnd:10
- B. UNCONN 0 0 [::1]:323 [::]:*
- C. icmp6 UNCONN 0 0 *:58 *:*
- D. tcp CLOSE-WAIT 32 0 server.example.com:44732 12.21.0.15:https
- E. ESTAB 0 0 10.12.18.92:50384 169.254.169.254:80 cubic wscale:9,7 rto:201 rtt: 0.226/0.113 ato:40 mss:8948 pmtu:9000 rcvmss:1728 advmss:8948 cwnd:10 bytes_sent:142 bytes_acked:143 bytes_received:1728 segs_out:4 segs_in:3 data_segs_out:1 data_segs_in:1 send 3167433628bps lastsnd:
11351 lastrcv: 11351 lastack:11351 pacing_rate 6334867256bps delivery_rate 504112672bps delivered:
2 app_limited rcv_space:62720 rcv_ssthresh:56588 minrtt:0.142
正解：A、E
解説：
Explanation of Answer C:Thesscommand can be used to display all available internal TCP information, including established connections with detailed TCP metrics, which matches the output in Answer C.
Explanation of Answer D:Thesscommand can display listening ports (TCP in this case) with details like congestion control algorithms (cubic), which aligns with Answer D. The output indicates a listening TCP socket on port 80.
質問 # 49
Which command produces human-readable timestamps in kernel ring buffer messages?
- A. dmesg -x
- B. dmesg -T
- C. dmesg -W
- D. dmesg -t
正解：B
解説：
* Option C (Correct):Thedmesg -Tcommand converts the timestamps in the kernel ring buffer messages to a human-readable format. The defaultdmesgoutput shows the timestamps in a raw format (seconds since the kernel started), while the-Toption translates these timestamps into a human-readable date and time.
* Option A (Incorrect):The-toption is used to remove the timestamps entirely from the output.
* Option B (Incorrect):The-xoption provides extended information about the message (e.g., facility, level).
* Option D (Incorrect):The-Woption waits for new messages and does not convert timestamps to a human-readable format.
Oracle Linux Reference:Refer to:
* man dmesgfor more details ondmesgoptions.
質問 # 50
Examine this command:
# cryptsetup luksOpen /dev/xvdd1 cryptfs
What happens upon execution?
- A. It creates the /dev/mapper/cryptfs device mapping file.
- B. It creates the /dev/mapper/xvdd1/cryptfs device mapping file.
- C. It creates the /dev/mapper/xvdd1-cryptfs device mapping file.
- D. It creates the LUKS partition on /dev/xvdd1.
- E. It creates the /dev/mapper/xvdd1 device mapping file.
正解：A
質問 # 51
Examine this network configuration:
NAME="ens4"
DEVICE="ens4"
ONBOOT=no
NETBOOT=yes
IPV6INIT=yes
BOOTPROTO=none
IPADDR=192.168.2.5
PREFIX=24
GATEWAY=192.168.2.1
TYPE=Ethernet
Which two statements are true after executing nmcli con mod ens4 ipv4.method auto?
- A. Interface ens4 automatically starts on boot.
- B. BOOTPROTO value is set to dhcp.
- C. Interface ens4 is assigned an IP address of 192.168.2.5.
- D. IPADDR value is considered null.
- E. ONBOOT value is set to yes.
- F. ONBOOT value is set to dhcp.
正解：B、D
解説：
Explanation of Answer B:When executingnmcli con mod ens4 ipv4.method auto, theipv4.methodparameter is set toauto, which configures the interface to obtain its IP address using DHCP. This means that theBOOTPROTOvalue in the configuration is set todhcp.
Explanation of Answer D:Whenipv4.methodis set toauto(DHCP), any static IP address specified inIPADDRis considered null because the interface will now obtain its IP address from a DHCP server, making the manually set IP address irrelevant.
質問 # 52
Which two statements are true about the GRUB 2 bootloader?
- A. It can load many free operating systems directly and chain-load proprietary operating systems.
- B. It understands file systems and kernel executable formats, allowing the loading of operating systems without recording the on-disk physical location of the kernel.
- C. Its configuration can be changed by editing /etc/default/grub2 and executing grub2-mkconfig to regenerate grub2.cfg.
- D. Its configuration file is /boot/grub2/grub2.conf on BIOS-based systems.
正解：A、B
質問 # 53
Examine this output:
Last metadata expiration check: 4:30:21 ago on Mon 26 Oct 2020 03:09:52 PM GMT Installed Packages Name : gzip Version : 1.9 Release : 9.el8 Architecture : x86_64 Size : 412 k Source : gzip-1.9-9.el8.src.rpm Repository : @System From repo : anaconda Summary : The GNU data compression program URL :
http://www.gzip.org/
License : GPLv3+ and GFDL
Description : The gzip package contains the popular GNU gzip data compression program. Gzipped files have a .gz extension.
Gzip should be installed on your system, because it is a very
commonly used data compression program.
Which command generated it?
- A. dnf info /usr/bin/gzip
- B. dnf provides /usr/bin/gzip
- C. dnf list /usr/bin/gzip
- D. dnf search /usr/bin/gzip
正解：A
解説：
Thednf infocommand provides detailed information about an installed package. When used with the path of a binary (such as/usr/bin/gzip), it shows the package that provides the binary along with detailed information like the version, release, architecture, size, source, repository, summary, URL, and license.
質問 # 54
Examine this command:
$ podman run -name=oracleshell -it oraclelinux:8 -slim
Which two statements are true upon execution?
- A. The container creates and starts an interactive shell.
- B. The container is created and started in a single command.
- C. The container named oracleshell must already exist; otherwise, the command fails.
- D. The container is removed by typing exit at the bash shell prompt.
- E. The command fails if the oraclelinux:8 -slim image does not exist on the local machine.
正解：A、B
解説：
Understanding the Command:
$ podman run --name=oracleshell -it oraclelinux:8-slim
(Note: The image is likely oraclelinux:8-slim without a space.)
* podman run:Creates and starts a new container.
* --name=oracleshell:Assigns the name oracleshell to the container.
* -it:Runs the container in interactive mode with a pseudo-TTY.
* oraclelinux:8-slim:Specifies the image to use.
Option A: The container creates and starts an interactive shell.
* Explanation:
* The -it option runs the container interactively.
* If no command is specified, it executes the default command in the image (usually /bin/bash).
* This provides an interactive shell inside the container.
* Oracle Linux Reference:
* OracleLinux 8: Managing Containers-Running Containers Interactively:
"You can run a container in interactive mode using the -i and -t options together." Option D: The container is created and started in a single command.
* Explanation:
* The podman run command handles both creation and starting of the container.
* There's no need to create the container separately.
* Oracle Linux Reference:
* OracleLinux 8: Managing Containers-Creating and Running Containers:
"The podman run command creates and starts a container in one operation." Why Other Options Are Incorrect:
Option B:The container does not need to pre-exist; podman run creates it if it doesn't exist.
Option C:If the image doesn't exist locally, podman will attempt to pull it from the registry.
* Oracle Linux Reference:
* OracleLinux 8: Managing Containers-Pulling Images:
"If you attempt to run a container with an image that does not exist locally, Podman automatically pulls the image from a registry." Option E:The container is not removed upon exit unless the --rm option is used.
* Oracle Linux Reference:
* OracleLinux 8: Managing Containers-Automatically Removing Containers:
"Use the --rm option to automatically remove the container when it exits." Conclusion:
* Correct Options:A, D
* Summary:The command creates and starts a new container named oracleshell and opens an interactive shell session inside it.
質問 # 55
Which mdadm command creates a RAID-1 device consisting of two block volumes and one spare device?
- A. mdadm -create /dev/md0 -level=1 -raid-devices=2 /dev/xvdd1 /dev/xvdd2
- B. mdadm -create /dev/md0 -level=1 -raid-devices=2 /dev/xvdd1 /dev/xvdd2 -spare-devices=1 /dev/xvdd3
- C. mdadm -create /dev/md0 -level=0 -raid-devices=2 /dev/xvdd1 /dev/xvdd2 -spare-devices=1 /dev/xvdd3
- D. mdadm -create /dev/md0 -level=5 -raid-devices=2 /dev/xvdd1 /dev/xvdd2 -spare-devices=1 /dev/xvdd3
正解：B
質問 # 56
Which two default user account settings are contained in /etc/login.defs?
- A. User hashed passwords.
- B. Password aging controls.
- C. Decryption method used to decrypt passwords.
- D. Encryption method used to encrypt passwords.
- E. Group hashed passwords.
正解：B、D
質問 # 57
Examine these requirements for a host with a user oracle:
* Network services must run in a confined domain.
* The oracle user must be confined.
* The oracle user must be able to use Mozilla Firefox.
* Access to files and directories must be granted based only on SELinux contexts.
* The SELinux configuration must be persistent across system restarts.
* Users must be able to publish private HTML content.
Now examine these commands and output:
# sestatus
SELinux status: enabled
SELinuxfs mount: /sys/fs/selinux
SELinux root directory: /etc/selinux
Loaded policy name: targeted
Current mode: permissive
Mode from config file: permissive
Policy MLS status: enabled
Policy deny_unknown status: allowed
Memory protection checking: actual (secure)
Max Kernel policy version: 31
# setenforce enforcing
# semanage login -a -s guest_u oracle
# setsebool -P http_enable_homedirs on
Which requirements are satisfied?
- A. 1, 2, 3, 4, 5, 6
- B. 1, 2, 4, 5, 6
- C. 1, 2, 6
- D. 1, 2, 4, 6
- E. 1, 2, 3, 6
- F. 1, 2, 3, 5, 6
正解：B
解説：
Explanation of Answer A:
* Network services running in a confined domain: SELinux provides domain confinement for services, ensuring they run with restricted access based on their defined policies.
* The oracle user must be confined: The commandsemanage login -a -s guest_u oracleconfines theoracleuser to theguest_uSELinux user role, which is a confined role.
* Access to files and directories based only on SELinux contexts: With SELinux enabled and the policy loaded, access is governed by SELinux contexts.
* Persistent SELinux configuration across reboots: Thesetenforce enforcingcommand, combined with the appropriate policy configuration, ensures that SELinux remains in enforcing mode across reboots.
* Users able to publish private HTML content: Thesetsebool -P http_enable_homedirs oncommand enables the use of user home directories for web content, allowing users to host personal web pages.
質問 # 58
Examine this command and output:
# ausearch -k mkdir
type=SYSCALL msg=audit(1604360199.719:44733): arch=c000003e syscall=83 success=no a0=55dec0b47400 a1=lc0 a2=0 a3=0 items=2 ppid=1354 pid=284632 auid=4294967295 uid=996 gid=996 euid=998 suid=998 fsuid=998 egid=996 sgid=996 fsgid=996 tty=(none) ses=429 comm="pkla-check-auth" exe="/usr/bin/pkla-check-authorization" subj=system_u:
system_r:policykit_auth_t:s0 key="mkdir"
Which command displays the syscall in text format instead of numerical format?
- A. ausearch -I -k mkdir
- B. ausearch -sc 83 -k mkdir
- C. ausearch -r -k mkdir
- D. ausearch -a 83 -k mkdir
- E. ausearch --format text -k mkdir
正解：A、B
解説：
* Option B (Correct):The-Ior--interpretoption inausearchconverts the numerical system call numbers into their corresponding text names, making the output easier to understand.
* Option C (Correct):The-scoption specifies the system call by name (mkdir), which helps in finding audit logs related to that particular system call in text format.
* Option A, D, E (Incorrect):These options do not specifically translate the numeric system call numbers into human-readable text. OptionAfilters by the numeric ID,Dis an invalid option, andEreverses the search order but does not affect the format.
Oracle Linux Reference:Refer to:
* OracleLinux 8: Auditing and System Logs
* man ausearchfor more details on audit search and interpretation commands.
質問 # 59
......
Oracle 1z1-106試験実践テスト問題：https://www.passtest.jp/Oracle/1z1-106-shiken.html
1z1-106問題集で2025年最新のOracle 1z1-106試験問題：https://drive.google.com/open?id=1lEoi73ad_EE1dP2jPMn5fKDCXGoTOt3y