327.1 Discretionary Access Control (weight: 3) LPIC-3-SECURITY Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the purpose of a default ACL on a directory?

   • AIt sets permissions for the directory itself
   • BIt is automatically applied to new files and subdirectories created within the directory
   • CIt overrides the system-wide umask for all users
   • DIt prevents any user from deleting files in the directory
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which command sets the SUID bit on the executable file /usr/local/bin/backup?

   • Achmod g+s /usr/local/bin/backup
   • Bchmod 755 /usr/local/bin/backup
   • Cchmod +s /usr/local/bin/backup
   • Dchmod u+s /usr/local/bin/backup
   Reveal Solution Discussion Select an answer first
4. 8application · easy

   An administrator needs to verify whether a file has any extended attributes set. Which command provides a list of attribute names for the file?

   • Agetfattr -n user.test /path/to/file
   • Blsattr /path/to/file
   • Cgetfacl /path/to/file
   • Dgetfattr -d /path/to/file
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is an attribute class in the context of extended attributes?

   • AA set of permissions that apply to all files in a directory
   • BA type of file system that supports extended attributes
   • CA grouping of extended attributes based on their namespace and access restrictions
   • DA command used to manage extended attributes
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A team shares a directory /srv/data where multiple users create files. The administrator wants all new files to be owned by the group 'team' regardless of the creator's primary group. Which command achieves this?

   • Achmod 2775 /srv/data
   • Bchmod u+s /srv/data
   • Cchmod g+s /srv/data
   • Dchown :team /srv/data
   Reveal Solution Discussion Select an answer first