You upgraded your server to Oracle Solaris 11 and you imported zpool (pool1) that was created in Solaris 10. You need to create an encrypted ZFS file system in pool1, but first you need to make sure…

Question

Options

• AThe encrypted file system must have been created in Oracle Solaris11.
• BIf you plan to create an encrypted file system in an existing zpool, the zpool must be upgraded to ZFS
• CZFS encryption is integrated with the ZFS command set and no additional packages need to be installed.
• DZFS encryption requires that the ZFS Dataset Encryption package be installed.
• EIf you plan to create an encrypted file system in an existing zpool, the pool must be upgraded to ZFS
• FEncryption is supported at the pool or dataset (file system) level.
• GEncryption is supported at the pool level only for every file system in the pool will be encrypted.
• HYou cannot create an encrypted file system in a zpool that was created prior to oracle Solaris11.

• A
  75% (42)
• D
  2% (1)
• E
  7% (4)
• G
  4% (2)
• H
  13% (7)

Explanation

ZFS encryption was introduced natively in Oracle Solaris 11, meaning any encrypted file system must be created (not just exist) within a Solaris 11 environment (A). Since pool1 originated in Solaris 10, you must upgrade the zpool to a version that supports the new Solaris 11 ZFS features before creating encrypted datasets within it (B). Crucially, ZFS encryption is built directly into the ZFS command set (zfs create -o encryption=...) - no separate package installation is required (C). Encryption is granular: it can be applied at the dataset (file system/volume) level independently, not forced pool-wide (F).

Why the distractors fail:

• D is the opposite of C - no separate encryption package is needed in Solaris 11.
• E is essentially a duplicate of B with subtly wrong wording and is redundant/incorrect as stated.
• G falsely claims encryption is pool-level only, when it is actually dataset-granular.
• H is too absolute - you can use a Solaris 10 zpool for encryption after upgrading it, as the question scenario itself demonstrates.

Memory tip: Think of ZFS encryption in Solaris 11 as "Born Here, Built-In, Flexible" - the encrypted FS must be born in Solaris 11 (A), the pool must be built up (upgraded) first (B), it's built-in with no extra install (C), and it's flexible at dataset level not just pool-wide (F).

No community discussion yet for this question.