7.4.4 Practice Questions

Question 4 of 10

Listen to exam instructions You are troubleshooting a file access issue for an employee and want to view some ACL assignments. Select the command you would use to view these assignments from the drop-down list below. Correct Answer: getfacl Explanation You can use the getfacl command to view ACL assignments.

Question 3 of 10

Which of the following are the MOST effective tasks you can perform when trying to resolve a file access issues? (Select two.) Answer Make sure that the user's Caps Lock is off. Check the ACL list for the file. Check the quota assignment for the user. Make sure that the user does not have too many privileges. Check the standard permission system. Correct Answer: Check the ACL list for the file. Check the standard permission system. Explanation When a user can't access a file or folder resource on a Linux system after having logged in, this typically means that a file permission is blocking access. Permissions and file rights are assigned to users and groups, through the standard permission system, through access control lists (ACLs), or through other extended attributes. Checking for these is the first and most effective task you can do to try to resolve a file access issue. A common issue when logging in is having the Caps Lock on. Because passwords are case-sensitive, a user may be typing the password correctly, but the case of the letters is incorrect. Too many user privileges is a privilege elevation issue. Privilege elevation issues are more of a concern from a security perspective. When too many privileges are granted to a user, that user becomes an attack vector for a hacker. An insufficient quota assignment is a quota issue. Frequently, quotas are defined for all users on a system collectively. These restrictions can be sufficient for most users, but leave one user, such as one that has the responsibility of moving or copying files across systems, with insufficient access.

Question 10 of 10

You need to increase the quota on a volume for a certain employee. Select the command you would use to increase the employee's quota from the drop-down list below. Correct Answer: setquota

Question 5 of 10

Listen to exam instructions Which of the following is a common user login issue? Answer There is an insufficient quota assignment. Caps Lock is on. There are too many user privileges. File permissions are blocking access. Correct Answer: Caps Lock is on. Explanation A common issue when logging in is having the Caps Lock on. Because passwords are case-sensitive, a user may be typing the password correctly, but the case of the letters is incorrect. File permissions blocking access is a common user file access issue. When a user can't access a file or folder resource on a Linux system after having logged in, it typically means that a file permission is blocking access. Too many user privileges is a privilege elevation issue. Privilege elevation issues are more of a concern from a security perspective. When too many privileges are granted to a user, that user becomes an attack vector for a hacker. An insufficient quota assignment is a quota issue. Frequently, quotas are defined for all users on a system collectively. These restrictions can be sufficient for most users, but leave one user, such as one that has the responsibility of moving or copying files across systems, with insufficient access.

Question 8 of 10

Listen to exam instructions An employee in your company has just been assigned to re-organize corporate files on the company network for the Training Department. The employee is a member of the group that has full rights to those files. However, as soon as the employee starts copying and moving files, an error message is displayed that does not allow the files to be moved. Which of the following is the MOST likely cause of the issue? Answer: The employee's quota is not large enough. The employee does not have enough privileges. The employee has time-of-day restrictions. The employee is not the owner of the files. Correct Answer: The employee's quota is not large enough. Explanation Quotas are assigned per disk volume and can be enabled or disabled as needed. Frequently, quotas are defined for all users on a system collectively. These restrictions can be sufficient for most users, but leave one user, such as the employee who is re-organizing the Training Department files, with insufficient access. In this case, you should probably increase the quota size for that employee. Time-of-day restrictions are normally an issue with the ability of a user to log in. In this case, the employee is already logged in to the network. While file ownership might be an issue, the employee does have full rights to the files and should be able to copy and move them to different locations. Privileges are normally associated with privilege elevation issues. This is not a likely issue to address in this particular case.

Question 1 of 10

Listen to exam instructions One of your employees can't access a financial document that's critical to completing a project. You've used the ls -l command to view the permissions set for the file, and you see the following: -rwxr-xr-x+ 2 root root 4096 Nov 28 18:16 finance_report_1st_quarter Which of the following in this file information indicates that you might start the troubleshooting process by checking ACLs? Answer The 4096 number The rwx characters at the beginning of the permissions The - character The + character Correct Answer: The + character Explanation If the ls -l command lists a plus sign (+) at the end of the permissions, it is likely something to be addressed through ACLs. The first character at the beginning of the permissions simply indicates a special file. For example, a d indicates a directory. If a - character is displayed, it means that the file is a normal file. In this case, the 4096 number indicates the size of the file. The first three permissions (in this case, rwx) indicate the user permissions. While these can impact access to the file, they do not necessarily indicate that you need to check the ACLs to resolve the issue. References TestOut Linux Pro 6.0 - 7.4 Troubleshoot User Issues q_user_permission_issues_acl_plus.question.fex

Question 6 of 10

Listen to exam instructions Which of the following are common login issues? Answer: Expired accounts Group ownership Caps Lock is on Time-of-day restrictions Insufficient quota Access control lists Too many privileges Correct Answer: Caps Lock is on Time-of-day restrictions Expired accounts Explanation Listed below are common login issues: Caps Lock is on - Typing the correct password but with the wrong case because Caps Lock is engaged. Expired or locked account - Trying to access an account that has been disabled or locked. Time-of-day restrictions - Some systems restrict access based on business hours. Forgotten passwords - Some users simply mistype or do not remember their own password. Case-sensitivity in the password - Linux is case-sensitive, including for passwords. Access control lists and group ownership are normally associated with user file access issues. An insufficient quota is often the cause of not being able to manage files on a network, but is not associated with login issues. Too many privileges is often the cause of privilege elevation issues, which can cause security issues if a hacker is able to get into a user account with elevated privileges.

Question 9 of 10

Listen to exam instructions Which of the following is a common privilege elevation issue? Answer There is an insufficient quota assignment. There are too many user privileges. File permissions are blocking access. Caps Lock is on. Correct Answer: There are too many user privileges. Explanation Too many user privileges is a privilege elevation issue. Privilege elevation issues are more of a concern from a security perspective. When too many privileges are granted to a user, that user becomes an attack vector for a hacker. A common issue when logging in is having Caps Lock on. Because passwords are case-sensitive, a user may be typing the password correctly, but the case of the letters is incorrect. File permissions blocking access is a common user file access issue. When a user can't access a file or folder resource on a Linux system after having logged in, this typically means that a file permission is blocking access. An insufficient quota assignment is a quota issue. Frequently, quotas are defined for all users on a system collectively. These restrictions can be sufficient for most users, but leave one user, such as one that has the responsibility of moving or copying files across systems, with insufficient access.

Question 7 of 10

Which of the following commands is useful when trying to troubleshoot user file access issues? Answer pwd touch ls -l ls Correct Answer: ls -l Explanation The ls -l command lists files along with their permissions, the number of links, owner name, owner group, file size, time of last modification, and the file or directory name. The permissions and group ownership information is especially useful when troubleshooting file access issues. The ls command simply displays a list of files without any useful information for troubleshooting file access issues. The pwd command displays your present working directory. The touch command creates an empty file. References TestOut Linux Pro 6.0 - 7.4 Troubleshoot User Issues q_user_permission_issues_ls_l_lp6.question.fex

Question 2 of 10

Your corporate network has been attacked by a hacker. You suspect that they've been able to gain access to the system through a user account that has access to all commands through sudo. Which of the following user permission issue types do you MOST likely need to resolve? Answers: Quota issue Privilege elevation issue User file access issue Login issue Correct Answer: Privilege elevation issue Privilege elevation issues are a concern from a security perspective. In this case, too many privileges have been granted to the hacked user (including sudo privileges). The system has become compromised, and the hacker has full access to all commands through sudo. Login issues have more to do with incorrectly entering a password. In this case, the hacker has already accessed the user account with the correct password, so this type of issue isn't relevant. User file access issues deal with file permissions and, in this case, would probably not resolve the sudo issue. Quota issues often result in the inability to manage files properly. In this case, the quota assignment for the user is not the issue you're trying to resolve.