SSCP Systems and Application Security Practice Question
A system administrator is hardening a Linux server. After installing the OS, which of the following steps should be taken to ensure that only authorized users can execute commands with elevated privileges?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Edit the /etc/sudoers file to restrict sudo access
The /etc/sudoers file controls which users can run commands as root via sudo. Proper configuration is essential for privilege escalation control.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Edit the /etc/sudoers file to restrict sudo access
Why this is correct
Restricting sudo access ensures only authorized users can elevate privileges.
- ✗
Enable auditd to log all commands
Why it's wrong here
Auditd logs commands but does not control who can run them with elevated privileges.
- ✗
Configure PAM to enforce password complexity
Why it's wrong here
Password complexity relates to authentication, not authorization to use sudo.
- ✗
Set the setuid bit on critical binaries
Why it's wrong here
setuid allows binaries to run with the owner's privileges; it does not restrict which users can execute them.
Go deeper
Related to this question
About these practice questions
This SSCP question is part of Courseiva's 920-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.