Oracle Solaris 11 System Administrator — Question 7

Review the output from a ZFS file system:
NAME PROPERTY VALUE SOURCE
pool1/encrypt encryption aes-256-ccm local
pool1/encrypt keysource raw,file:///mykey local
You need to recreate the pool1/encrypt file system exactly as it is listed above. Which two commands can you use to recreate the pool1/encrypt file system? (Choose two.)

Answer options

• A. pktool genkey keystone=file outkey=/mykey keytype=aes keylen=256
• B. genkey pktool keystore=file outkey=/mykey keytype=aes keylen=256
• C. zfs create -o encryption=aes-256-ccm -o keysource=raw,file://mykey pool1/encrypt
• D. zfs create -o encryption=aes-256-ccm -o keysource=raw,file:///mykey pool1/encrypt
• E. zfs create -o encryption=aes-256-ccm -o keysource=raw,file:///mykey source=local pool1/encrypt

Correct answer: B, C

Explanation

The correct commands for recreating the pool1/encrypt file system are B and D. Option B is incorrect due to a syntax error, while D is the only option that accurately reflects the required properties for the keysource. Options A and E do not pertain to the ZFS filesystem creation process and thus are not valid choices.