A Linux administrator discovers that a binary in /usr/local/bin has the setuid bit set, allowing any user to execute it with root privileges. The administrator needs to remove this special permission to mitigate the risk. Which command should be used?

chmod 755 /usr/local/bin/binary

chmod o-s /usr/local/bin/binary

chmod u-s /usr/local/bin/binary

chmod g-s /usr/local/bin/binary

Which systemctl command disables a service from starting at boot?

systemctl deactivate service_name

In SysVinit, what does runlevel 3 typically represent?

Multi-user mode with networking but no graphical interface

GIAC Linux Incident Responder

Domain 1Objective 1

Linux OS Fundamentals GLIR Practice Questions (Page 6)

Part of the Linux Fundamentals and File System Analysis domain, which makes up ~35% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~25–42 in this domain), expect 6–11 from this objective — we provide 62 practice questions to prepare you well beyond it. (estimate)

62questions here

13free pages

18concepts

18 Concepts in This Objective

Linux Boot Process
Runlevels and Targets
Systemd Essentials
File System Hierarchy Standard (FHS)
File Types and Permissions
Special Permissions and Attributes
Hard Links and Symbolic Links
Mounting and Unmounting File Systems
Disk Usage and Inodes
Process Management
Environment Variables and Shell Configuration
Package Management
Logging and Journaling
System Monitoring and Performance
User and Group Management
Networking Fundamentals
Service and Socket Activation
System Initialization and Configuration Files

Questions 26–30

26foundation · easy
Which command queries information about an installed package using the dnf package manager?
Select an answer first
27application · medium
A Linux administrator discovers that a binary in /usr/local/bin has the setuid bit set, allowing any user to execute it with root privileges. The administrator needs to remove this special permission to mitigate the risk. Which command should be used?
Select an answer first
28foundation · easy
Which command creates a new user account?
Select an answer first
29foundation · easy
Which systemctl command disables a service from starting at boot?
Select an answer first
30foundation · easy
In SysVinit, what does runlevel 3 typically represent?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GLIR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GLIR” is a trademark of its owner, used for identification only.

Linux OS Fundamentals GLIR Practice Questions (Page 6)

Questions 26–30

Which command queries information about an installed package using the dnf package manager?

A Linux administrator discovers that a binary in /usr/local/bin has the setuid bit set, allowing any user to execute it with root privileges. The administrator needs to remove this special permission to mitigate the risk. Which command should be used?

Which command creates a new user account?

Which systemctl command disables a service from starting at boot?

In SysVinit, what does runlevel 3 typically represent?

Keep studying — Linux Fundamentals and File System Analysis