Linux Security and Hardening GSEC Practice Questions (Page 8)

Questions 36–37

1. 36foundation · easy

   What is the primary purpose of the sudo command in Linux?

   • ATo switch to the root user and remain in a root shell until the user logs out.
   • BTo change the ownership of a file to root.
   • CTo list all users who have root privileges on the system.
   • DTo allow authorized users to execute commands with the privileges of another user, typically root, based on policy rules.
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A security administrator is responsible for a mixed fleet of CentOS and Ubuntu servers. The company policy requires that all security patches be applied within 48 hours of release, but a critical application is sensitive to unexpected restarts. Which approach best balances security and stability?

   • AUse a configuration management tool to apply security updates automatically and reboot only if required by the update, with a maintenance window for reboots
   • BUse a cron job to run 'yum update' or 'apt upgrade' every night and reboot if the kernel was updated
   • CManually apply all updates during the next scheduled maintenance window, which occurs every 30 days
   • DDisable automatic updates and rely on the application's built-in security features
   Reveal Solution Discussion Select an answer first