easyMultiple ChoiceObjective-mapped
CISA Practice Question: Refer to the exhibit
Exhibit
-rw-rw-rw- 1 root root 1024 Jan 1 12:00 sensitive.txt
Refer to the exhibit. An auditor finds that the file 'sensitive.txt' has world-writable permissions. Which of the following is the most appropriate remediation action?
⚠ Common exam trap
The trap here is that candidates may overcomplicate the solution by choosing encryption or ACLs, when the simplest and most direct fix is to adjust the file permissions using `chmod`.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Remove world-writable permissions using chmod 644.
The file 'sensitive.txt' has world-writable permissions, meaning any user on the system can modify or delete it. The most direct and appropriate remediation is to remove the world-writable permission using `chmod 644`, which sets the file to owner read-write, group read, and others read. This eliminates the security risk while preserving necessary access for the owner and group.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Remove world-writable permissions using chmod 644.
Why this is correct
chmod 644 sets the file to rw-r--r--, removing world-writable and providing proper access.
- ✗
Encrypt the file using GnuPG to protect its contents.
Why it's wrong here
Encryption protects content but does not fix the permissions that allow others to read or modify the file.
- ✗
Apply an ACL to restrict access only to specific users.
Why it's wrong here
While ACLs can refine access, removing world-writable is the simplest and most direct fix.
- ✗
Change the file owner to a different user using chown.
Why it's wrong here
Changing ownership does not directly address the world-writable permission issue.
Go deeper
Related to this question
About these practice questions
One of 995 original CISA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.