You upgraded your server to Oracle Solaris 11 and you imported zpool (pool1) that was created in
Solaris 10. You need to create an encrypted ZFS file system in pool1, but first you need to make
sure that your server supports ZFS encryption.
Which four statements are true for support of ZFS encryption?
A.
The encrypted file system must have been created in Oracle Solaris11. To encrypt a ZFS file
system from a previous version of Solaris, upgrade the zpool and create a new encrypted ZFS file
system into the encrypted ZFS file system.
B.
If you plan to create an encrypted file system in an existing zpool, the zpool must be upgraded
to ZFS version 30.
C.
ZFS encryption is integrated with the ZFS command set and no additional packages need to be
installed.
D.
ZFS encryption requires that the ZFS Dataset Encryption package be installed.
E.
If you plan to create an encrypted file system in an existing zpool, the pool must be upgraded to
ZFS version 21, minimum.
F.
Encryption is supported at the pool or dataset (file system) level.
G.
Encryption is supported at the pool level only for every file system in the pool will be encrypted.
H.
You cannot create an encrypted file system in a zpool that was created prior to oracle
Solaris11. Create a new zpool in Solaris11, create an encrypted ZFS file system in the new zpool,
and move or copy the data from the existing file system into the new encrypted file system.
Explanation:
A (not H): You can use your existing storage pools as long as they are upgraded.
You have the flexibility of encrypting specific file systems.
B(not E): Can I enable encryption on an existing pool?
Yes, the pool must be upgraded to pool version 30 to allow encrypted ZFS file systems and
volumes.
C(not D): ZFS encryption is integrated with the ZFS command set.Like other ZFS operations,
encryption operations such as key changes and rekey are performed online.
F (not G): Encryption is the process in which data is encoded for privacy and a key is needed by
the data owner to access the encoded data. You can set an encryption policy when a ZFS dataset
is created, but the policy cannot be changed.
Reference: Oracle Solaris ZFS Administration Guide, Encrypting ZFS File Systems
a b c f correct
A,B,C,F
ABCF
ABCF seems to be the answer…
however F does not make much sense.. encryption at the pool level is not supported..
but all the other answers are also incorrect.. so, maybe a typo there?
some information here
https://docs.oracle.com/cd/E26502_01/html/E29007/gkkih.html
ABCF , you can create a pool with encryption on
root@aiserver:~# zpool create -o encryption=on encryptpool c0t600144F000144FFBB
DC956A3B7AC0001d0
property ‘encryption’ is not a valid pool property
root@aiserver:~# zpool create -O encryption=on encryptpool c0t600144F000144FFBB
DC956A3B7AC0001d0
Enter passphrase for ‘encryptpool’:
Enter again:
root@aiserver:~# zfs get encryption encryptpool
NAME PROPERTY VALUE SOURCE
encryptpool encryption on local