> ## Documentation Index > Fetch the complete documentation index at: https://linux-plus.ipoint-labs.com/llms.txt > Use this file to discover all available pages before exploring further. # Domain 3 Review Quiz > 13 practice questions for Domain 3. Configuring Permissions. 13 practice questions covering **Configuring Permissions**. Read the question, take answers from the room, then reveal.

{ "A systems administrator wants to prevent the current contents of a file from being overwritten and wants to allow new additions at the end of the file. Which of the following commands should the administrator use?" }

Answer: C

{ "The chattr +a command sets the append-only attribute on a file. This prevents overwriting or deletion of existing contents, while still allowing new data to be appended to the end of the file." }

{ "A systems administrator attempts to edit a file as root, but receives the following error: Which of the following commands allows the administrator to edit the file?" } 

      
        { "# vi /etc/resolv.conf\n\"/etc/resolv.conf\" E212: Can't open file for writing\n# lsattr /etc/resolv.conf\n----i----------- /etc/resolv.conf" }

Answer: B

{ "The lsattr output shows the immutable (i) attribute set on /etc/resolv.conf. This prevents any modifications, even by root. Running chattr -i removes the immutable flag, allowing the administrator to edit the file." }

{ "A user on a Linux VM is running /work/test.sh Bash script and receives the following error: bash: /work/test.sh: Permission denied After further investigation, the user receives the following outputs: Which of the following commands should a systems administrator run to fix the issue?" }

Answer: A

{ "The script /work/test.sh already has execute permissions (-rwxr--r--), but the filesystem is mounted with the noexec option, which prevents execution of binaries and scripts. Remounting the filesystem with the exec option allows execution of the script." }

{ "Which of the following commands sets all the directories' permissions recursively in the user's home directory and makes them accessible only to the user?" }

Answer: B

{ "This command searches for all directories within the user’s home directory and sets their permissions to allow access only by the owning user, ensuring privacy and proper access control." }

{ "A systems administrator receives reports from users who are having issues while trying to modify newly created files in a shared directory. The administrator sees the following outputs: Which of the following provides the best resolution to this issue?" }

Answer: D

{ "Setting the setgid bit on the shared directory ensures that all newly created files and subdirectories inherit the directory’s group ownership, allowing all group members to modify files consistently without manual intervention." }

{ "A Linux administrator has been informed that user alpha is able to successfully access the /project2/data/ directory, but user beta is not. The administrator observes the following during troubleshooting: The directory permissions are as follows: Which of the following would most likely cause the access discrepancy?" }

Answer: D

{ "The directory has an ACL entry explicitly granting user alpha read and execute permissions. This user-specific ACL allows alpha to access the directory regardless of standard owner, group, or other permissions, while user beta has no such ACL entry and therefore cannot access it under the same conditions." }

{ "A systems administrator is creating a new shared directory. Which of the following commands ensures all users from the same group will be able to work with the newly created files?" }

Answer: B

{ "Setting the setgid bit on a shared directory causes newly created files and subdirectories to inherit the directory’s group ownership, allowing members of the same group to collaborate consistently on new files." }

{ "User1 reports \"access denied\" errors while trying to execute app. Given the following outputs: Which of the following options will remediate this issue?" }

Answer: A

{ "According to the output of getfacl app, user1 has only \"rw\" (read and write) permissions, but lacks \"x\" (execute). Without execute permission, user1 cannot run the file. To allow user1 to execute app, you must update the ACL to add execute permission (e.g., setfacl -m u:user1:rwx app). Modifying \"others\" permissions (option B) is not secure or necessary, adding user1 to the wheel group (option C) is unrelated, and moving the file (option D) does not resolve permission issues." }

{ "A Linux administrator tries to install Ansible in a Linux environment. One of the steps is to change the owner and the group of the directory /opt/Ansible and its contents. Which of the following commands will accomplish this task?" }

Answer: B

{ "The -R flag applies the ownership change recursively, setting both the user and group of /opt/Ansible and all files/subdirectories within it to Ansible." }

{ "An administrator set up a new user account called \"test\". However, the user is unable to change their password. Given the following output: Which of the following is the most likely cause of this issue?" } 

      
        { "# ls -l /bin/passwd\n-rwxr-xr-x. 1 root root 32656 Jul  9 11:24 /bin/passwd" }

Answer: A

{ "For normal users to change their own password, /bin/passwd must have the SUID bit set (permissions should be -rwsr-xr-x). The SUID bit allows users to run the program with the permissions of the file owner (root), which is required to update /etc/shadow. The provided output shows /bin/passwd does not have the SUID bit (no 's' in the owner's execute field). As a result, user \"test\" receives an \"Authentication token manipulation error\". The password can be changed as root, which confirms it's a permissions/SUID issue." }

{ "A Linux administrator is changing the default system umask. The newly created files should have the -rw-r----- permission, and the newly created directories should have the drwxr----x permission. Which of the following commands should the administrator use?" }

Answer: C

{ "The umask value subtracts permission bits from the system defaults (- files: 0666, directories: 0777). With umask 0036 (octal): - Files get 0666 & ~0036 = 0640 → -rw-r----- - Directories get 0777 & ~0036 = 0741 → drwxr----x None of the other umask values produce both of these target permissions." }

{ "A user is experiencing issues creating files in the folder /home/testuser/testdir/. The administrator gathers the following information: Which of the following commands should the administrator use to solve the issue? (Choose two.)" } 

      
        { "$ ls -ld /home/testuser/testdir/\ndrwxr-xr-x. 2 root testuser 4096 Sep  3 10:12 /home/testuser/testdir/\n$ id testuser\nuid=1001(testuser) gid=1001(testuser) groups=1001(testuser)" }

Choose two.

Answer: AD

{ "The issue likely stems from the permissions on the directory /home/testuser/testdir/. The output shows that testdir has permissions of drwxr-xr-x, meaning: - The owner (root) has read, write, and execute (rwx) permissions. - The group (testuser) and others have only read and execute (r-x) permissions, but no write permission. Since the user testuser is not the owner (root) but belongs to the group testuser, they need write permissions for the group to create files. - chmod u+w /home/testuser/testdir/ - Grants write permission to the owner (root) (not effective in this case, since testuser is not root). - chmod g+w /home/testuser/testdir/ - Grants write permission to the group, allowing members of the testuser group (including the testuser account) to create files inside the directory." }

{ "Which of the following best explains why the SUID permission is set on the /bin/passwd file?" }

Answer: A

{ "The Set User ID (SUID) permission allows a file to execute with the privileges of the file owner, rather than the user who runs it. The /bin/passwd command is used by users to change their own passwords. The actual password hashes are stored in /etc/shadow, which is only writable by the root user. Since normal users do not have direct write permissions on /etc/shadow, the SUID bit on /bin/passwd enables the command to run with root privileges, allowing password changes." }