Certified In Cybersecurity CC · Free Practice Question Medium
Question 81
You are configuring an Access Control List (ACL) for a file on a Linux server. The system administrators should be able to read and modify the file, but not execute it. The developers should be able to read and execute the file, but not modify it. Which of the following ACL setups would best meet these requirements?
-
A
System Administrators: Read/Write, Developers: Read/Write/Execute
-
B
System Administrators: Read/Write/Execute, Developers: Read
-
C
System Administrators: Read/Write, Developers: Read/Execute
-
D
System Administrators: Read, Developers: Write
Reveal correct answer
Correct answer: C
Explanation
Correct Answer: C. System Administrators: Read/Write, Developers: Read/Execute
This ACL meets the requirements because it gives system administrators read/write access and developers read/execute access, adhering to the principle of least privilege.
Incorrect Answers:
A. This ACL does not meet the requirements because it gives developers write access to the file, which they do not need.
B. This ACL does not meet the requirements because it gives system administrators execute access and denies developers the ability to execute the file, both of which are contrary to the requirements.
D. This ACL does not meet the requirements because it only gives system administrators read access (they need write access) and gives developers write access (they need read and execute access).
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
