FirstTry
Objective 2.1XK0-005

2.1 Summarize the purpose and use of security best practices in a Linux environment.

Objective 2.1 sits in Security, which carries 21% of the Linux+ exam. The questions below are original, written from the official objective title above, and each explanation cites the CompTIA page it rests on.

Objective title verbatim from the official objectives. CompTIA exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

2-1SecurityModerate

Rather than sharing the root password, an administrator wants each admin to run privileged commands under their own account with an audit trail. What is the best practice?

Grant sudo rights per userCorrect · your answerCorrect: per-user sudo scopes privilege and logs the actor.
Share the root password via suA shared root password gives blanket access with no individual accountability.
Add all admins to a root groupMembership in a root group provides neither per-command audit nor scoping.
Set PermitRootLogin yesEnabling direct root login weakens accountability, the opposite goal.

Correct.

Concept

Least privilege means users operate as themselves and gain extra rights only for specific tasks, which also records who performed each action.

Why A

Granting sudo rights per user lets each admin run privileged commands under their own account, leaving an audit trail.

Source

#security#best-practices#least-privilege#sudo

Now you: objective 2.1 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

2-1SecurityHard

To harden SSH, an administrator wants key-only access with no root password login. Which sshd_config combination enforces that?

Sample question 2 of 3

2-1SecurityModerate

An administrator must make user jdoe's password expire after at most 90 days to meet policy. Which command sets that maximum?

Sample question 3 of 3

2-1SecurityModerate

An administrator sets up a dedicated account for a daemon that owns its files but must never allow an interactive login. Which shell should the account have?

Full Linux+ question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Security