Larry manages a Linux server. Occasionally, he needs to run commands that require root-level privileges. Management wants to ensure that an attacker cannot run these commands if the attacker compromises Larry’s account. Which of the following is the best choice?Group of answer choicesAdd Larry’s account to the LocalSystem account.Add Larry’s account to the administrator’s group.Grant Larry sudo access.Give Larry the root password.
Question
Larry manages a Linux server. Occasionally, he needs to run commands that require root-level privileges. Management wants to ensure that an attacker cannot run these commands if the attacker compromises Larry’s account. Which of the following is the best choice?Group of answer choicesAdd Larry’s account to the LocalSystem account.Add Larry’s account to the administrator’s group.Grant Larry sudo access.Give Larry the root password.
Solution
The best choice would be to grant Larry sudo access. Here's why:
-
Adding Larry's account to the LocalSystem account: This is not applicable in Linux. LocalSystem is a Windows concept.
-
Adding Larry's account to the administrator's group: In Linux, there isn't a universal "administrators" group. The equivalent would be the "root" group, but adding Larry to this group would give him constant root access, which is not secure.
-
Grant Larry sudo access: This is the best choice. The sudo command in Linux allows users to run programs with the security privileges of another user (normally the superuser, or root). By granting Larry sudo access, he can run commands with root-level privileges, but only when necessary. This minimizes the risk of an attacker gaining root access if they compromise Larry's account.
-
Give Larry the root password: This is not a good choice. If Larry has the root password, he has constant root access, which is not secure. Furthermore, if an attacker compromises Larry's account, they could potentially gain access to the root password.
Similar Questions
QuestionA Linux server administrator wants to elevate their privileges. Which of the following commands makes elevating an account possible? (Select all that apply.)A.suB.passwdC.sudoD.chown
In Linux the sudo command is used toGroup of answer choicesSubstitute one users privileges for anotherRun programs with the security privileges of root"Login as another user, usually root"Elevate the privilege of the command being run
Which of the following is a privilege or action that can be taken on a system?answerDACLPermissionsSACLUser rights
You want to grant a group called "developers" the ability to run any command as root without a password prompt. What entry should be added to the sudoers file?1.0 Marksdevelopers ALL=(ALL) NOPASSWD: ALLALL developers=(ALL) NOPASSWD: ALLdevelopers ALL=(ALL) NOPASSWD: *ALL=(ALL) NOPASSWD: developers ALL%developers ALL=(ALL) NOPASSWD: ALL
You want to grant a group called "developers" the ability to run any command as root without a password prompt. What entry should be added to the sudoers file?1.0 Marks%developers ALL=(ALL) NOPASSWD: ALLALL developers=(ALL) NOPASSWD: ALLdevelopers ALL=(ALL) NOPASSWD: *ALL=(ALL) NOPASSWD: developers ALLdevelopers ALL=(ALL) NOPASSWD: ALL
Upgrade your grade with Knowee
Get personalized homework help. Review tough concepts in more detail, or go deeper into your topic by exploring other relevant questions.