What is a key difference between NFSv4 ACLs and POSIX ACLs?

NFSv4 ACLs are stored in extended attributes, while POSIX ACLs are stored in the inode

NFSv4 ACLs only support read and write permissions

NFSv4 ACLs support named users and groups, while POSIX ACLs do not

NFSv4 ACLs use a single ACE type for allow and deny, while POSIX ACLs use separate entries

A Linux client mounts an NFSv4 share that supports NFSv4 ACLs. The administrator wants to grant a specific user read and write access to a file without changing the owning group. Which command should the administrator use?

nfs4_setfacl -m u:alice:rw file.txt

nfs4_setfacl -a A:user:alice:rw file.txt

A security auditor flags that an organization's NFSv3 environment transmits file data in plaintext and relies on IP-based host authentication. The team plans to migrate to NFSv4.1 and must ensure data confidentiality and strong mutual authentication between the client and server. Which combination of NFSv4 features should the administrator implement?

Enable LIPKEY with a public key infrastructure and use sec=krb5i for integrity only.

Use sec=sys with the 'no_root_squash' export option to preserve client UIDs and rely on the pseudo filesystem for isolation.

Configure sec=spkm3 with a shared secret file distributed to all clients.

Enable Kerberos (sec=krb5p) and rely on the RPCSEC_GSS security layer for encryption and mutual authentication.

LPIC-3 Security

Domain 3Objective 3

327.3 Network File Systems (weight: 3) LPIC-3-SECURITY Practice Questions (Page 2)

Part of the Topic 327: Access Control domain, which makes up ~19% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–11 in this domain), expect 2–4 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

10concepts

Questions 6–10

6foundation · easy
What is a key difference between NFSv4 ACLs and POSIX ACLs?
Select an answer first
7foundation · easy
Which CIFS security mode uses a challenge-response mechanism with a shared secret?
Select an answer first
8application · medium
A Linux client mounts an NFSv4 share that supports NFSv4 ACLs. The administrator wants to grant a specific user read and write access to a file without changing the owning group. Which command should the administrator use?
Select an answer first
9application · medium
A security auditor flags that an organization's NFSv3 environment transmits file data in plaintext and relies on IP-based host authentication. The team plans to migrate to NFSv4.1 and must ensure data confidentiality and strong mutual authentication between the client and server. Which combination of NFSv4 features should the administrator implement?
Select an answer first
10foundation · easy
Which tool is used to map Windows SIDs to Linux UIDs for CIFS?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to LPIC-3-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “LPIC-3-SECURITY” is a trademark of its owner, used for identification only.

327.3 Network File Systems (weight: 3) LPIC-3-SECURITY Practice Questions (Page 2)

Questions 6–10

What is a key difference between NFSv4 ACLs and POSIX ACLs?

Which CIFS security mode uses a challenge-response mechanism with a shared secret?

A Linux client mounts an NFSv4 share that supports NFSv4 ACLs. The administrator wants to grant a specific user read and write access to a file without changing the owning group. Which command should the administrator use?

Which tool is used to map Windows SIDs to Linux UIDs for CIFS?

Keep studying — Topic 327: Access Control