hardMultiple SelectObjective-mapped
XK0-006 Practice Question: A security audit identified that the /tmp…
A security audit identified that the /tmp directory is world-writable. Which THREE steps should be taken to secure /tmp on a Linux system? (Select THREE.)
⚠ Common exam trap
A common mix-up: candidates think removing world-writable permissions is the correct fix, but that would break system functionality; instead, the sticky bit and mount options are the proper hardening steps without breaking compatibility.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Set the sticky bit on /tmp
Setting the sticky bit on /tmp prevents users from deleting or renaming files owned by other users, even though the directory is world-writable. This is a standard security hardening measure for shared temporary directories.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Set the sticky bit on /tmp
Why this is correct
Prevents users from deleting others' files.
- ✗
Remove world-writable permission from /tmp
Why it's wrong here
Many applications require world-writable /tmp.
- ✓
Mount /tmp with the nosuid option
Why this is correct
Prevents setuid programs from running.
- ✓
Mount /tmp with the noexec option
Why this is correct
Prevents execution of binaries from /tmp.
- ✗
Mount /tmp with the exec option
Why it's wrong here
Allows execution, which is insecure.
Go deeper
Related to this question
Learn chapter
Linux Fundamentals and History
Key term
Sticky bit
The sticky bit is a special permission on Unix/Linux files and directories that restricts file deletion to the file owner, directory owner, or root user, even if others have write access.
Key term
Linux
Linux is an open-source operating system that manages computer hardware and software, widely used in servers, desktops, and embedded systems.
About these practice questions
One of 979 original XK0-006 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This XK0-006 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the XK0-006 exam.