Larry manages a Linux server. Occasionally, he needs to run commands that require root-level privileges. Management wants to ensure that an attacker cannot run these commands if the attacker compromises Larry’s account. Which of the following is the best choice?Group of answer choicesAdd Larry’s account to the administrator’s group.Add Larry’s account to the LocalSystem account.Grant Larry sudo access.Give Larry the root password.
Question
Larry manages a Linux server. Occasionally, he needs to run commands that require root-level privileges. Management wants to ensure that an attacker cannot run these commands if the attacker compromises Larry’s account. Which of the following is the best choice?Group of answer choicesAdd Larry’s account to the administrator’s group.Add Larry’s account to the LocalSystem account.Grant Larry sudo access.Give Larry the root password.
Solution
The best choice would be to grant Larry sudo access. Here's why:
-
Adding Larry’s account to the administrator’s group: This would give Larry administrative privileges, but it wouldn't necessarily prevent an attacker who compromises Larry's account from running commands with root-level privileges.
-
Adding Larry’s account to the LocalSystem account: This is not applicable in a Linux environment. LocalSystem is a powerful account in Windows, not Linux.
-
Grant Larry sudo access: This is the best choice. The sudo command in Linux allows users to run programs with the security privileges of another user (normally the superuser, or root). By granting Larry sudo access, he can run commands that require root-level privileges, but he'll need to enter his password each time. This means that if an attacker compromises Larry's account, they would also need his password to run these commands.
-
Give Larry the root password: This is not a good choice because if an attacker compromises Larry's account, they could easily gain root access if they also have the root password.
Similar Questions
QuestionA Linux server administrator wants to elevate their privileges. Which of the following commands makes elevating an account possible? (Select all that apply.)A.suB.passwdC.sudoD.chown
In Linux the sudo command is used toGroup of answer choicesSubstitute one users privileges for anotherRun programs with the security privileges of root"Login as another user, usually root"Elevate the privilege of the command being run
Which of the following is a privilege or action that can be taken on a system?answerDACLPermissionsSACLUser rights
You want to grant a group called "developers" the ability to run any command as root without a password prompt. What entry should be added to the sudoers file?1.0 Marksdevelopers ALL=(ALL) NOPASSWD: ALLALL developers=(ALL) NOPASSWD: ALLdevelopers ALL=(ALL) NOPASSWD: *ALL=(ALL) NOPASSWD: developers ALL%developers ALL=(ALL) NOPASSWD: ALL
You want to grant a group called "developers" the ability to run any command as root without a password prompt. What entry should be added to the sudoers file?1.0 Marks%developers ALL=(ALL) NOPASSWD: ALLALL developers=(ALL) NOPASSWD: ALLdevelopers ALL=(ALL) NOPASSWD: *ALL=(ALL) NOPASSWD: developers ALLdevelopers ALL=(ALL) NOPASSWD: ALL
Upgrade your grade with Knowee
Get personalized homework help. Review tough concepts in more detail, or go deeper into your topic by exploring other relevant questions.