easyMultiple ChoiceObjective-mapped
XK0-006 Practice Question: Based on the exhibit, what best describes the…
Exhibit
Refer to the exhibit. ls -la /usr/bin/passwd -rwsr-xr-x 1 root root 68208 Apr 1 2024 /usr/bin/passwd
Based on the exhibit, what best describes the security implication?
⚠ Common exam trap
CompTIA often tests the distinction between SUID, SGID, and sticky bits by presenting a file listing with an 's' in the owner's execute position and expecting candidates to recognize it as SUID, not confusing it with SGID (which would be in the group position) or the sticky bit (which would be a 't' in the others position).
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The SUID bit is set, allowing users to run passwd with root privileges to change their own password.
The SUID (Set User ID) bit is set on the /usr/bin/passwd file, as indicated by the 's' in the owner's execute position (e.g., -rwsr-xr-x). This allows any user to run the passwd command with the effective UID of the file owner (root), enabling them to change their own password by writing to /etc/shadow, which is otherwise only writable by root. This is a standard security mechanism, not a vulnerability, as the passwd binary is carefully designed to only allow password changes for the invoking user.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The SUID bit is set, allowing users to run passwd with root privileges to change their own password.
Why this is correct
The 's' in the user execute position indicates SUID.
- ✗
The file is world-writable.
Why it's wrong here
World permissions are 'r-x' (read and execute), not writable.
- ✗
The SGID bit is set, allowing users to run passwd with group root.
Why it's wrong here
SGID would show 's' in the group execute position, which is not the case here ('x' in group).
- ✗
The sticky bit is set, preventing deletion of the file.
Why it's wrong here
Sticky bit would show 't' at the end of the permissions, not present.
Go deeper
Related to this question
Learn chapter
File Permissions and Ownership
Key term
passwd
passwd is a command-line utility used on Linux and Unix-like systems to change a user's password, typically stored in an encrypted format in the /etc/shadow file.
Key term
User
A user is any person, system, or device that interacts with an IT service, resource, or identity system, typically authenticated through credentials and authorized to perform specific actions.
About these practice questions
One of 979 original XK0-006 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This XK0-006 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the XK0-006 exam.