A Linux administrator needs to give the 'devops' group read and write access to a shared directory, while ensuring that new files created in the directory inherit the 'devops' group as their group owner. Which command should the administrator run?

chmod 770 /shared && chgrp devops /shared

chown :devops /shared && chmod 2770 /shared

chmod 2775 /shared && chown :devops /shared

setfacl -m g:devops:rwx /shared

A Windows workstation is suspected of being infected with malware that is making outbound connections to a known command-and-control server. Which built-in Windows tool can the analyst use to view active network connections and the associated process IDs?

Get-Process | Sort-Object CPU -Descending

A Linux administrator needs to monitor file access on a sensitive directory and be able to see which user accessed which file. Which tool should they use?

auditd with auditctl rules on the directory

syslog with a custom log rotation policy

A Linux system administrator wants to enforce a policy that users must use strong passwords and that passwords expire every 90 days. Which files should they configure?

/etc/passwd and /etc/shadow for password aging and complexity

/etc/ssh/sshd_config and /etc/security/limits.conf

/etc/login.defs for password aging and /etc/security/pwquality.conf for password complexity

/etc/pam.d/system-auth and /etc/sudoers

EC-CouncilSOC Essentials

Domain 1Objective 4

Windows and Unix/Linux Security SCE Practice Questions (Page 8)

Part of the Computer Network and Security Fundamentals domain, which makes up ~16% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

11concepts

11 Concepts in This Objective

Windows Security Architecture
Windows Authentication and Authorization
Windows Security Policies and Group Policy
Windows Auditing and Logging
Windows Defender and Built-in Security Tools
Unix/Linux Security Architecture
Unix/Linux Authentication and PAM
Unix/Linux File Permissions and Access Control
Unix/Linux Security Hardening
Unix/Linux Auditing and Logging
Unix/Linux Security Tools

Questions 36–40

36foundation · easy
Which command is used to change the permissions of a file or directory in Linux?
Select an answer first
37application · medium
A Linux administrator needs to give the 'devops' group read and write access to a shared directory, while ensuring that new files created in the directory inherit the 'devops' group as their group owner. Which command should the administrator run?
Select an answer first
38application · easy
A Windows workstation is suspected of being infected with malware that is making outbound connections to a known command-and-control server. Which built-in Windows tool can the analyst use to view active network connections and the associated process IDs?
Select an answer first
39application · medium
A Linux administrator needs to monitor file access on a sensitive directory and be able to see which user accessed which file. Which tool should they use?
Select an answer first
40application · medium
A Linux system administrator wants to enforce a policy that users must use strong passwords and that passwords expire every 90 days. Which files should they configure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SCE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “SCE” is a trademark of its owner, used for identification only.