Linux+ CompTIA Linux+ Security and Access Control 2

Question 1

Which command displays the current SELinux enforcement mode?

Accepted Answer

getenforce

Answer

getenforce prints the current SELinux mode: Enforcing, Permissive, or Disabled.

Question 2

A file has permissions -rwsr-xr-x. What does the 's' in the owner execute position indicate?

Accepted Answer

SUID bit is set

Answer

An 's' in the owner execute position means the SUID (Set User ID) bit is set, causing the file to run with the owner's privileges.

Question 3

Which PAM module enforces password complexity requirements on Linux?

Accepted Answer

pam_pwquality.so

Answer

pam_pwquality.so checks password strength and enforces complexity rules such as minimum length and character classes.

Question 4

What does the 'sticky bit' do when applied to a directory like /tmp?

Accepted Answer

Allows only the file owner or root to delete files within it

Answer

The sticky bit on a directory restricts file deletion so only the file's owner, the directory's owner, or root can remove files.

Question 5

Which file defines the default password aging policy for new user accounts on a Linux system?

Accepted Answer

/etc/login.defs

Answer

/etc/login.defs contains system-wide defaults for password aging, UID/GID ranges, and other account parameters.

Linux Practice Test