mediumMultiple ChoiceObjective-mapped
XK0-006 Practice Question: A technician notices that a user can execute a…
A technician notices that a user can execute a binary with elevated privileges even though the user is not in the sudoers file. The binary has the SUID bit set. Which command would remove the SUID bit from the binary?
⚠ Common exam trap
Candidates might think that using a numeric mode like 0755 is required because it 'resets permissions safely,' but the question specifically asks only to remove the SUID bit. Using `chmod u-s` accomplishes exactly that without altering other permissions. The exam expects the direct method, not an overhanded numeric reset.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
chmod u-s /path/to/binary
`chmod u-s /path/to/binary` is the direct command to remove the SUID bit from the file. It unsets the setuid permission for the owner, which immediately prevents the binary from running with the owner's privileges. While `chmod 0755 /path/to/binary` also removes the SUID bit, it additionally resets all permission bits to a specific numeric mode (755), which may not be desired or necessary. The question asks only for removing the SUID bit, so `chmod u-s` is the most precise and correct answer.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
chmod u-s /path/to/binary
Why this is correct
chmod u-s removes the SUID bit, but the exam expects the more comprehensive chmod 0755 that resets all special bits. Therefore, option A is not the correct answer.
- ✗
chmod g-s /path/to/binary
Why it's wrong here
chmod g-s removes the SGID bit, not the SUID bit, so it is incorrect.
- ✗
chmod o-s /path/to/binary
Why it's wrong here
chmod o-s removes the sticky bit, not the SUID bit, so it is incorrect.
- ✗
chmod 0755 /path/to/binary
Why it's wrong here
chmod 0755 sets the permissions to read/write/execute for owner, read/execute for group and others, which explicitly clears the SUID bit and all special bits. This is the expected comprehensive approach.
Go deeper
Related to this question
Learn chapter
File Permissions and Ownership
Key term
SUID
SUID (Set User ID) is a special file permission in Linux that allows a user to run an executable file with the file owner's privileges, typically root, rather than their own.
Key term
User
A user is any person, system, or device that interacts with an IT service, resource, or identity system, typically authenticated through credentials and authorized to perform specific actions.
About these practice questions
One of 979 original XK0-006 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This XK0-006 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the XK0-006 exam.