A Linux administrator needs to grant a specific user, 'john', read and write access to a file that is owned by 'root' and has permissions 640. The administrator does not want to change the file's owner or group. Which command should they use?

setfacl -m u:john:rw /path/to/file

A Linux server hosts a multi-user application. The application's data directory /data/app is owned by root:appgroup with permissions 770. Users in appgroup need to create and modify files in this directory, but files created by one user should not be readable by other users in the group. The administrator wants to enforce this without changing the application's behavior. Which approach is the most appropriate?

Set the sticky bit on the directory and change the directory permissions to 1770.

Set the setgid bit on the directory and configure a default ACL that grants rwx to the owning user and --- to the group.

Configure SELinux to enforce a policy that denies read access to files created by other users.

Use chmod 700 on the directory and add each user to a separate group.

A Windows workstation is infected with a rootkit that hides processes and network connections. The security team wants to use a built-in Windows tool to detect and remove the rootkit. Which tool should they use?

Windows Defender Firewall with Advanced Security

System File Checker (sfc /scannow)

EC-CouncilSOC Essentials

Domain 1Objective 4

Windows and Unix/Linux Security SCE Practice Questions (Page 2)

Part of the Computer Network and Security Fundamentals domain, which makes up ~16% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

11concepts

11 Concepts in This Objective

Windows Security Architecture
Windows Authentication and Authorization
Windows Security Policies and Group Policy
Windows Auditing and Logging
Windows Defender and Built-in Security Tools
Unix/Linux Security Architecture
Unix/Linux Authentication and PAM
Unix/Linux File Permissions and Access Control
Unix/Linux Security Hardening
Unix/Linux Auditing and Logging
Unix/Linux Security Tools

Questions 6–10

6application · medium
A Linux administrator needs to grant a specific user, 'john', read and write access to a file that is owned by 'root' and has permissions 640. The administrator does not want to change the file's owner or group. Which command should they use?
Select an answer first
7expert · hard
A Linux server hosts a multi-user application. The application's data directory /data/app is owned by root:appgroup with permissions 770. Users in appgroup need to create and modify files in this directory, but files created by one user should not be readable by other users in the group. The administrator wants to enforce this without changing the application's behavior. Which approach is the most appropriate?
Select an answer first
8foundation · easy
After a user successfully logs on to Windows, which object is attached to the user's processes and threads to identify the user and their group memberships during access checks?
Select an answer first
9expert · medium
A Windows workstation is infected with a rootkit that hides processes and network connections. The security team wants to use a built-in Windows tool to detect and remove the rootkit. Which tool should they use?
Select an answer first
10foundation · easy
Which Windows event log contains records of logon attempts, account management, and policy changes?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SCE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “SCE” is a trademark of its owner, used for identification only.

Windows and Unix/Linux Security SCE Practice Questions (Page 2)

Questions 6–10

A Linux administrator needs to grant a specific user, 'john', read and write access to a file that is owned by 'root' and has permissions 640. The administrator does not want to change the file's owner or group. Which command should they use?

After a user successfully logs on to Windows, which object is attached to the user's processes and threads to identify the user and their group memberships during access checks?

A Windows workstation is infected with a rootkit that hides processes and network connections. The security team wants to use a built-in Windows tool to detect and remove the rootkit. Which tool should they use?

Which Windows event log contains records of logon attempts, account management, and policy changes?

Keep studying — Computer Network and Security Fundamentals