LFCS User and Group Management Practice Test 2 — 15 Questions

Question 1

A user named 'charlie' has just been added to the 'devops' group. However, when 'charlie' runs 'sudo -l', no sudo entries are shown. What is the most likely cause?

Accepted Answer

'charlie' must log out and log back in for the group change to take effect.. Option B is correct because when a user is added to a new group, the group membership is only applied to new login sessions. The `sudo -l` command checks the user's current group memberships, which are cached at login time. Since 'charlie' was added to the 'devops' group while already logged in, the new group membership is not reflected until 'charlie' logs out and logs back in, or uses `newgrp` or `sg` to start a new session with the updated groups.

Answer

'charlie' is not listed by name in the sudoers file.

Answer

'charlie' is also a member of another group that restricts sudo.

Answer

The systemctl command is not executable by 'charlie'.

Answer

The sudoers file has a syntax error.

Question 2

Scenario: You are managing a Linux server that hosts a web application. The application runs under the user 'webapp' and the group 'webgroup'. Recently, a new intern 'john' (username 'john') needs to be able to view and modify files in /var/www/html, which is owned by root:webgroup with permissions 775. John is currently a member of the group 'staff', but not 'webgroup'. The security policy requires that John must be able to edit files without using sudo, and his primary group must remain 'staff'. Which of the following actions should you take to meet the requirements?

Accepted Answer

Add John to the 'webgroup' supplementary group with 'usermod -a -G webgroup john'.. Option A is correct because adding John to the 'webgroup' supplementary group with `usermod -a -G webgroup john` grants him group-level access to /var/www/html (owned by root:webgroup with permissions 775) without changing his primary group 'staff'. This allows him to view and modify files as a member of 'webgroup', satisfying the security policy that he must not use sudo and his primary group must remain unchanged.

Answer

Change the group ownership of /var/www/html to 'staff' and set the setgid bit.

Answer

Change John's primary group to 'webgroup' with 'usermod -g webgroup john'.

Answer

Set the setgid bit on /var/www/html with 'chmod g+s /var/www/html'.

Question 3

Arrange the steps to configure a new user account with sudo privileges on a Linux system.

Question 4

Order the steps to create a systemd service unit that runs a script at boot.

Question 5

Order the steps to set up passwordless SSH key-based authentication.

Question 6

Match each Linux boot component to its description.

Question 7

Match each Linux filesystem hierarchy standard (FHS) directory to its purpose.

Question 8

Match each logical volume management (LVM) term to its definition.

Question 9

A system administrator needs to create a user account for a temporary contractor. The account should have a home directory under /home/contractors, the login shell should be /bin/bash, and the user should be a member of the 'contractors' group. Which command accomplishes this?

Accepted Answer

useradd -m -d /home/contractors/tempuser -s /bin/bash -g contractors tempuser. Option B is correct because useradd -m creates a home directory, -d specifies the home directory path, -s sets the shell, and -g sets the primary group. Option A is wrong because -G sets supplementary groups, not primary. Option C wrongly uses -h for home. Option D wrongly uses -p for password.

Answer

useradd -m -d /home/contractors/tempuser -s /bin/bash -G contractors tempuser

Answer

useradd -m -h /home/contractors/tempuser -s /bin/bash -g contractors tempuser

Answer

useradd -m -d /home/contractors/tempuser -s /bin/bash -p contractors tempuser

Question 10

A security policy requires that a user's password must expire 90 days after last change, and the user must change it immediately on next login. The last password change was 30 days ago. Which set of commands achieves this?

Accepted Answer

chage -M 90 user1; chage -d 0 user1. Option A is correct because chage -M 90 sets maximum days to 90, and chage -d 0 forces password change on next login. Option B sets warning days, not forced change. Option C sets inactivity period. Option D sets minimum days before change.

Answer

chage -M 90 user1; chage -m 1 user1

Answer

chage -M 90 user1; chage -W 7 user1

Answer

chage -M 90 user1; chage -I 5 user1

Question 11

An administrator needs to create a system user that runs a service (no login, no home directory). Which command is appropriate?

Accepted Answer

useradd -r -M myservice. Option C is correct because useradd -r creates a system account (UID < 1000 typically), -M suppresses home directory creation. Option A creates a regular user with home. Option B creates system user but with home. Option D creates regular user without home.

Answer

useradd -r myservice

Answer

useradd -r -m myservice

Answer

useradd -M myservice

Question 12

Existing user 'jdoe' is a member of groups 'users' (primary) and 'staff'. The administrator needs to add 'jdoe' to group 'projectx' while preserving existing supplementary group memberships. Which command achieves this?

Accepted Answer

usermod -a -G projectx jdoe. Option A is correct because usermod -a -G appends to supplementary groups without removing others. Option B (-G alone) would replace all supplementary groups with only 'projectx', losing 'staff'. Option C and D alter primary group.

Answer

usermod -g projectx -G projectx jdoe

Answer

usermod -g projectx jdoe

Answer

usermod -G projectx jdoe

Question 13

An administrator needs to delete user 'obsolete' and remove its home directory and mail spool. Which command should be used?

Accepted Answer

userdel -r obsolete. Option C is correct because userdel -r removes home directory and mail spool. Option A (-f) forces but does not remove files. Option B deletes group, not user. Option D without -r leaves files behind.

Answer

userdel -f obsolete

Answer

userdel obsolete

Answer

groupdel obsolete

Question 14

A company follows the principle of least privilege. Several developers need sudo access to run specific commands like systemctl and journalctl. What is the best practice for granting this access?

Accepted Answer

Create a new group 'devops', add developers to it, and create a sudoers drop-in file with rules for specific commands. Option B is correct because creating a group (e.g., 'devops') and adding a sudoers rule for that group via a file in /etc/sudoers.d is manageable and follows best practice. Option A gives full root access to the group. Option C modifies a user's own login, not sudo. Option D uses visudo default file but adding users directly is less scalable.

Answer

Use 'usermod -a -G sudo' for each developer and edit /etc/sudoers manually with visudo

Answer

Add all developers to the 'wheel' group and configure %wheel ALL=(ALL) ALL

Answer

Edit /etc/sudoers directly to add each developer username with command restrictions

Question 15

A user reports that they cannot log in via SSH. The system administrator checks that the account is not locked, the password is correct, and the shell is valid. However, the user's home directory is owned by root instead of the user. What is the most likely cause of the login failure?

Accepted Answer

The home directory ownership is incorrect, causing SSH PAM session module to reject login. Option D is correct because SSH uses PAM, and the pam_unix module checks that the home directory is owned by the user and not writable by others. If owned by root, SSH may deny login for security reasons. Option A (shadow file) would be different if permission wrong. Option B (nologin) would affect all users. Option C (shell not in /etc/shells) would give a different error.

Answer

The user's login shell is not listed in /etc/shells

Answer

The /etc/nologin file exists

Answer

The user's entry in /etc/shadow is corrupted

LFCS User and Group Management Practice Test 2 — 15 Questions

Exhibit

LFCS User and Group Management Practice Test 2 — 15 Questions

Exhibit