Security XK0-006 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which command grants the owner read and write permissions, and the group read permission, on a file named report.txt?

   • Achmod 640 report.txt
   • Bchmod 644 report.txt
   • Cchmod 660 report.txt
   • Dchmod 600 report.txt
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which command is used to change the SELinux type of a file without altering its user or role labels?

   • Asetsebool -P httpd_can_network_connect on
   • Bchown :httpd /var/www/html/index.html
   • Cchcon -t httpd_sys_content_t /var/www/html/index.html
   • Drestorecon -v /var/www/html/index.html
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A user 'carol' needs read access to a file in a directory that is owned by root and has permissions 750. The directory is shared with the 'sales' group, and carol is not a member. The administrator wants to grant carol read access to the file without changing the directory permissions or adding carol to the sales group. What should the administrator do?

   • AUse setfacl -m u:carol:r /path/to/file
   • BUse chmod o+r /path/to/file
   • CUse chown carol /path/to/file
   • DAdd carol to the sales group.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   During a security audit, the auditor asks for a list of all world-writable files on the system, as these can be security risks. Which command should the administrator use?

   • Afind / -perm -002 -type f
   • Bls -l / | grep '^...w'
   • Cfind / -perm -1000 -type f
   • Dfind / -perm -222 -type f
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which tool reads SELinux denial messages from the audit log and generates a policy module that can be used to allow the denied actions?

   • Aausearch
   • Baudit2allow
   • Csetenforce
   • Dsealert
   Reveal Solution Discussion Select an answer first