easyMultiple ChoiceObjective-mapped
FC0-U71 Practice Question: A small business uses a single Linux server to…
A small business uses a single Linux server to host a custom inventory management application written in Python. The application reads from a CSV file on the server to display current stock levels. Recently, users have reported that the inventory numbers are incorrect and sometimes the application crashes with a 'Permission denied' error when trying to save updates. The server has two user accounts: 'admin' (with sudo privileges) and 'app_user' (a standard user under which the application runs). The CSV file is located at /var/data/inventory.csv and currently has permissions -rw-rw---- and owner root:root. The application code uses the open() function to read and write the file. Which of the following actions should be taken to resolve the issue?
⚠ Common exam trap
A common mix-up: candidates assume changing file permissions to 644 (read for all) or changing the owner to the application user is sufficient, overlooking that the application needs write access and that group-based permissions provide a secure, least-privilege solution.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Change the group ownership to a group that includes 'app_user' and ensure the file has group write permission.
The application runs as 'app_user', which needs to write to /var/data/inventory.csv. The file is owned by root:root with permissions -rw-rw----, meaning only root and the root group can write. Changing the group ownership to a group that includes 'app_user' and granting group write permission (e.g., chown root:app_group /var/data/inventory.csv; chmod 664 /var/data/inventory.csv) allows the application to write without elevating privileges or exposing the file to all users.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Modify the application to run as 'admin' using sudo.
Why it's wrong here
Running as admin is a security risk and not necessary.
- ✗
Set the file permissions to 644 so all users can read the file.
Why it's wrong here
This only adds read access; the application needs write access.
- ✗
Change the file owner to 'app_user' and set permissions to 755.
Why it's wrong here
This would work but is less secure and prevents admin from managing the file easily.
- ✓
Change the group ownership to a group that includes 'app_user' and ensure the file has group write permission.
Why this is correct
This grants the application write access while maintaining security.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 988 original FC0-U71 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This FC0-U71 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the FC0-U71 exam.