1Z0-821 practice question 16 of 30

You have already generated a 256-bit AES raw key and named the keystore file /mykey. You need to use the key to create an encrypted file system. Which command should you use to create a ZFS encrypted file system named pool1/encrypt using the /mykey keystore?

Full set: 243 questions
Answer options
A: zfs create - o encryption = /mykey pool1/encrypt
B: zfs create - o encryption = 256-ccm - o keysource = raw, file : ///my key pool1/encrypt Correct answer
C: zfs create - o encryption = AES keysource = /mykey pool1/encrypt
D: zfs create - o encryption = on keystore = /mykey pool1/encrypt
Correct Answer:
B. zfs create - o encryption = 256-ccm - o keysource = raw, file : ///my key pool1/encrypt
Explanation

Example: Encrypting a ZFS File System by Using a Raw Key In the following example, an aes-256-ccm encryption key is generated by using the pktool command and is written to a file, /cindykey.file. # pktool genkey keystore=file outkey=/cindykey.file keytype=aes keylen=256 Then, the /cindykey.file is specified when the tank/home/cindy file system is created. # zfs create -o encryption=aes-256-ccm -o keysource=raw, file:///cindykey.file tank/home/cindys

Scroll to Top