Question 1

Which of the following is a valid permission in the Linux file system?

Accepted Answer

"Write" is a valid permission in the Linux file system, allowing the user to make changes to the file, but not necessarily execute it or change its ownership. "Full Control," "Modify," and "Change" are not valid Linux file system permissions.

Question 2

Windows computers can make a shared drive look like a local drive by mapping.

Accepted Answer

Mapping a shared drive allows it to be accessed and managed like a local drive on the computer.

Question 3

You are explaining to a colleague how to make a shared resource available on a Linux file system. Which of the following terms best describes what you should tell him?

Accepted Answer

To make a shared resource available on a Linux file system, you need to mount a volume. Mapping a drive letter or volume is a term typically used in Windows operating systems, and is not applicable to Linux.

Question 4

Which permission to a folder should you give a user if that user should be able to create files but not read or execute files in that folder?

Accepted Answer

Giving the user "Write" permission will allow them to create files in the folder, but they will not have the ability to read or execute any files already present in the folder. The "Modify" and "Full control" permissions would give more access than necessary for this specific scenario, and the "Read & Execute" permission would permit the user to access and execute files in the folder, which is not desired.

Question 5

You need to create a user on your Red Hat Enterprise Linux system. What command should you use?

Accepted Answer

The correct command to create a user on a Red Hat Enterprise Linux system is useradd.

Question 6

You have a multi-domain Windows Server 2008 forest. You need to make a shared folder available to users from several domains. What type of group should you create to add the users to and assign permissions to the resource?

Accepted Answer

Universal groups can contain users and groups from any domain in the forest, which makes them ideal for granting access to resources that need to be shared across multiple domains. Global groups are limited to the domain in which they are created, and domain local groups are used to grant access within a specific domain. Local groups are only used for granting access on the local computer.

Question 7

Which of the following is NOT a function of a directory service?

Accepted Answer

A directory service is responsible for centralizing user management, such as user authentication and authorization, defining user roles and access rights, managing group policies, and providing centralized administrative control over network resources. It does not decentralize user management.

Question 8

A user is complaining that he cannot open a file in a shared folder. He is able to open other files in the same shared folder. Which of the following could be the problem?

Accepted Answer

If the user has Read sharing permission but has a Deny permission on the file, it would prevent them from opening that specific file while still allowing access to the other files in the shared folder. The other options, such as network connectivity issues or incorrect password entry, would likely prevent access to the entire shared folder, not just one file. Lack of Read share permission would also prevent access to the entire shared folder.

Question 9

Which of the following is NOT included in the Linux password (/etc/passwd)file?

Accepted Answer

The Linux password (/etc/passwd) file includes the user name, UID, home directory location, and encrypted password. User permissions are not stored in this file. They are instead stored in a separate file called /etc/shadow.

Question 10

In Linux,a network drive that is attached to the file system is called a mapped drive.

Accepted Answer

In Linux, a network drive that is attached to the file system is called a mounted drive, not a mapped drive. Mapping is a term typically used in Windows operating systems.

Question 11

Which account feature can be configured to prevent a user from logging in after incorrectly entering the password a number of times?

Accepted Answer

Account lockout is a security feature that can be configured to prevent a user from logging in after entering the incorrect password a specified number of times. This can prevent brute force attacks and unauthorized access to the account. The account can be automatically unlocked after a certain period of time or manually unlocked by an administrator. Options A, B, and D do not address this specific security concern.

Question 12

To protect user's passwords on a Linux system,they can be kept in a file only available to the system administrator. What is the name of that file?

Accepted Answer

The file that stores encrypted passwords for Linux users is called /etc/shadow. It is only accessible by the system administrator and contains information such as the username, the encrypted password, and the date of the last password change. The /etc/passwd file, on the other hand, contains basic user information but does not store encrypted passwords. Choices A, B, and D are incorrect.

Question 13

Global groups are used to hold user accounts while domain local groups are used to hold Global groups and provide access to resources.

Accepted Answer

Global groups are used to organize and manage user accounts, while domain local groups are used to grant permissions and privileges to resources such as files, folders, and printers. Global groups can be nested inside domain local groups to simplify the process of administering access to resources.

Question 14

It is preferable to assign permissions to individual users rather than groups because the amount of work for the administrator is reduced.

Accepted Answer

Assigning permissions to groups rather than individual users helps with efficient management and reduces the workload for administrators as they can manage permissions for multiple users at once, rather than changing permissions for each individual user separately.

Question 15

Which of the following password security options enables the server to 'remember' a user's previous passwords?

Accepted Answer

Enforce password history option enables the server to remember a user's previous passwords and prevents users from reusing the same password. This enhances password security as it hinders the possibility of attackers guessing the user's password by repeatedly trying the same password. Minimum password length ensures that users choose a password with a certain length, passwords must meet complexity requirements ensure that strong passwords are set, and the minimum password age determines the length of time a user must wait before changing the password again. None of these options enable the server to remember a user's previous passwords.

Question 16

NFS is used by UNIX/Linux systems to mount a shared partition as a drive letter.

Accepted Answer

NFS (Network File System) is used by UNIX/Linux systems to mount a shared partition, but it does not use drive letters like Windows; instead, it integrates the shared partition into the local file system hierarchy.

Question 17

You have shared a folder on a Windows server that is a part of a domain. You need to assign permissions to users so they can access the shared folder. Which type of group will you use to make the permissions assignment?

Accepted Answer

When sharing a folder on a Windows server that is a part of a domain, you will want to use a domain local group to assign permissions to users. Domain local groups are used to assign permissions within a single domain and can be added to global or universal groups to provide access to resources in other domains. Using a local group would limit access to only the local machine and global or universal groups would provide broader access than necessary for this scenario.

Question 18

You have just successfully created a user named acoulter on your Red Hat Enterprise Linux system. You left the password blank so the user can easily log on and create her own password. The user calls you and informs you she cannot logon. She has tried several times and has used a blank password but still cannot logon. What is likely to be the problem?

Accepted Answer

Since the password was left blank, the account is likely disabled by default for security reasons. The user will need to set a password to enable the account.

Question 19

You manage a multi-domain network,DomainA,DomainB,and DomainC. You have users from each domain that must have permission to a shared folder in DomainB. Which of the following represents the correct method of assigning these users permissions?

Accepted Answer

A Universal group can be used to add users from different domains and provide them access to resources in any domain within the forest. It simplifies administration, reduces account management overheads, and provides a consistent level of access control across different domains. Therefore, creating a Universal group, adding users from all domains, and assigning permissions to the share for the Universal group is the best choice. Option A is incorrect because creating multiple Global groups will complicate administration and result in the need to modify the permissions of each group separately. Option B is incorrect because you would have to add the respective Local groups of all domains to the permissions list, which can be cumbersome to manage. Option D is incorrect because creating multiple Global groups and assigning them individually to the share could result in scalability and maintenance issues.

Question 20

Which of the following is true about permissions on an NTFS volume?

Accepted Answer

When a file is moved to another volume, it inherits the permissions of the destination folder.

Quiz 10: Resource Sharing Over a Network