A new employee needs to be granted sudo privileges to run specific system commands but should not have full root access. The administrator wants to allow the user to run only 'systemctl restart' and 'systemctl status' commands. Which configuration approach is correct?

Create a sudoers file in /etc/sudoers.d/ with a line like 'user ALL=(root) /usr/bin/systemctl restart, /usr/bin/systemctl status'

Add the user to the 'wheel' group

Edit /etc/sudoers directly and add 'user ALL=(ALL) ALL'

Use 'visudo' to add 'user ALL=(root) NOPASSWD: ALL'

A system fails to boot after a kernel parameter change. The administrator needs to temporarily boot with a different kernel parameter to recover the system. Which action is most appropriate?

Interrupt the bootloader and edit the kernel command line at the GRUB prompt

Use systemctl rescue to boot into a minimal environment

Edit /etc/default/grub and run update-grub

GIAC Linux Incident Responder

Domain 1Objective 1

Linux OS Fundamentals GLIR Practice Questions (Page 4)

Part of the Linux Fundamentals and File System Analysis domain, which makes up ~35% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~25–42 in this domain), expect 6–11 from this objective — we provide 62 practice questions to prepare you well beyond it. (estimate)

62questions here

13free pages

18concepts

18 Concepts in This Objective

Linux Boot Process
Runlevels and Targets
Systemd Essentials
File System Hierarchy Standard (FHS)
File Types and Permissions
Special Permissions and Attributes
Hard Links and Symbolic Links
Mounting and Unmounting File Systems
Disk Usage and Inodes
Process Management
Environment Variables and Shell Configuration
Package Management
Logging and Journaling
System Monitoring and Performance
User and Group Management
Networking Fundamentals
Service and Socket Activation
System Initialization and Configuration Files

Questions 16–20

16application · easy
An analyst is investigating a disk-full condition on a Linux server. The /var partition is 100% full, but the root filesystem has space. Which directory is the most likely place to find large files that can be safely cleaned or compressed?
Select an answer first
17application · medium
A new employee needs to be granted sudo privileges to run specific system commands but should not have full root access. The administrator wants to allow the user to run only 'systemctl restart' and 'systemctl status' commands. Which configuration approach is correct?
Select an answer first
18foundation · easy
Which command shows disk space usage for mounted filesystems?
Select an answer first
19expert · hard
A system fails to boot after a kernel parameter change. The administrator needs to temporarily boot with a different kernel parameter to recover the system. Which action is most appropriate?
Select an answer first
20foundation · easy
Which file is used to configure kernel parameters at runtime?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GLIR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GLIR” is a trademark of its owner, used for identification only.

Linux OS Fundamentals GLIR Practice Questions (Page 4)

Questions 16–20

An analyst is investigating a disk-full condition on a Linux server. The /var partition is 100% full, but the root filesystem has space. Which directory is the most likely place to find large files that can be safely cleaned or compressed?

A new employee needs to be granted sudo privileges to run specific system commands but should not have full root access. The administrator wants to allow the user to run only 'systemctl restart' and 'systemctl status' commands. Which configuration approach is correct?

Which command shows disk space usage for mounted filesystems?

A system fails to boot after a kernel parameter change. The administrator needs to temporarily boot with a different kernel parameter to recover the system. Which action is most appropriate?

Which file is used to configure kernel parameters at runtime?

Keep studying — Linux Fundamentals and File System Analysis