A system administrator needs to allow a specific binary /usr/local/bin/backup to run with root privileges, but only when executed by members of the 'backupops' group. The binary is owned by root:backupops. Which permission configuration achieves this?

chmod 4755 /usr/local/bin/backup

chmod 4750 /usr/local/bin/backup

chmod 2750 /usr/local/bin/backup

chmod 6750 /usr/local/bin/backup

An administrator suspects that an attacker has been trying to guess passwords via SSH. Which log file and tool combination would best help confirm this activity?

Review /var/log/secure and use grep to search for 'Accepted password' entries.

Review /var/log/auth.log and use grep to search for 'Failed password' entries.

Review /var/log/messages and use grep to search for 'login' entries.

Review /var/log/syslog and use grep to search for 'sshd' entries.

A web application running on a CentOS server with SELinux in enforcing mode is unable to write to a directory /var/www/html/uploads. The directory is owned by the web server user and has correct standard permissions. Which command should the administrator run to allow the web server to write to this directory?

chmod 777 /var/www/html/uploads

chcon -t httpd_sys_rw_content_t /var/www/html/uploads

restorecon -v /var/www/html/uploads

LPI LPIC-1:Linux Administrator (101-500)

Domain 10Objective 2

110.2 Setup Host Security LPIC-1 Practice Questions (Page 2)

Part of the Topic 110: Security domain, which makes up ~3% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~1–2 in this domain), expect 1–1 from this objective — we provide 15 practice questions to prepare you well beyond it. (estimate)

15questions here

3free pages

10concepts

Questions 6–10

6application · medium
A system administrator needs to allow a specific binary /usr/local/bin/backup to run with root privileges, but only when executed by members of the 'backupops' group. The binary is owned by root:backupops. Which permission configuration achieves this?
Select an answer first
7foundation · medium
Which PAM module is commonly used to restrict which users can log in to a system by consulting a file such as /etc/security/access.conf?
Select an answer first
8application · medium
An administrator suspects that an attacker has been trying to guess passwords via SSH. Which log file and tool combination would best help confirm this activity?
Select an answer first
9application · medium
A web application running on a CentOS server with SELinux in enforcing mode is unable to write to a directory /var/www/html/uploads. The directory is owned by the web server user and has correct standard permissions. Which command should the administrator run to allow the web server to write to this directory?
Select an answer first
10foundation · easy
Which command should be used to safely edit the sudoers file?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-1

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-1” is a trademark of its owner, used for identification only.

110.2 Setup Host Security LPIC-1 Practice Questions (Page 2)

Questions 6–10

A system administrator needs to allow a specific binary /usr/local/bin/backup to run with root privileges, but only when executed by members of the 'backupops' group. The binary is owned by root:backupops. Which permission configuration achieves this?

Which PAM module is commonly used to restrict which users can log in to a system by consulting a file such as /etc/security/access.conf?

An administrator suspects that an attacker has been trying to guess passwords via SSH. Which log file and tool combination would best help confirm this activity?

Which command should be used to safely edit the sudoers file?

Keep studying — Topic 110: Security