327.1 Discretionary Access Control (weight: 3) LPIC-3-SECURITY Practice Questions (Page 4)

Questions 16–19

1. 16expert · medium

   An administrator needs to copy a file from one server to another while preserving extended attributes. The destination file system supports extended attributes. Which command should be used?

   • Arsync -a /source/file /destination/
   • Bcp -p /source/file /destination/
   • Ccp -a /source/file /destination/
   • Dscp /source/file /destination/
   Reveal Solution Discussion Select an answer first
2. 17application · easy

   An administrator needs to remove all ACL entries from a file, reverting it to standard Unix permissions. Which command accomplishes this?

   • Asetfacl -x u:alice /path/to/file
   • Bchmod 644 /path/to/file
   • Csetfacl -b /path/to/file
   • Dgetfacl -r /path/to/file
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   An administrator needs to set an extended attribute that can only be modified by root and is used by a security module. Which namespace should be used?

   • Auser
   • Bsystem
   • Ctrusted
   • Dsecurity
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   An administrator is configuring a directory /srv/uploads with the following requirements: users in the 'uploaders' group can add files, but cannot delete or rename files they do not own. Additionally, files created in the directory must be readable by the 'reviewers' group. The directory is owned by root:uploaders with permissions 1770. Which set of commands meets all requirements?

   • Asetfacl -m d:g:reviewers:r-- /srv/uploads
   • Bchmod 1770 /srv/uploads && setfacl -m g:reviewers:r-x /srv/uploads
   • Cchmod 2770 /srv/uploads && setfacl -m d:g:reviewers:r-- /srv/uploads
   • Dsetfacl -m g:reviewers:r-- /srv/uploads
   Reveal Solution Discussion Select an answer first