hardMultiple ChoiceObjective-mapped
SSCP Practice Question: Refer to the exhibit
Exhibit
[user@server ~]$ getfacl /data/project # file: /data/project getfacl: Removing leading '/' from absolute path names # owner: projectadmin # group: projectdev user::rwx user:alice:rwx group::r-x mask::rwx other::---
Refer to the exhibit. User bob, a member of the projectdev group, attempts to create a new file in /data/project but gets 'Permission denied'. What is the most likely reason?
⚠ Common exam trap
ISC2 often tests the misconception that the 'other' permission applies to group members, when in fact group permissions take precedence for users in the group, and the umask only affects newly created files, not the directory's existing permissions.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The group permission (r-x) and the mask (rwx) combine to limit bob to read and execute only
The directory /data/project has group permissions set to r-x (read and execute) for the projectdev group, and the umask is set to rwx (000), meaning no bits are masked. However, the group permission explicitly denies write access. Since bob is a member of projectdev, his effective permissions are limited to read and execute, preventing file creation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The group permission (r-x) and the mask (rwx) combine to limit bob to read and execute only
Why this is correct
The effective group permission is determined by the ACL group entry (r-x) and the mask (rwx) – the more restrictive is applied, resulting in r-x, which lacks write.
- ✗
Bob is not the owner of the directory
Why it's wrong here
While owner has rwx, group and other can be restrictive; not being owner does not automatically deny write if group permissions allow it.
- ✗
Bob's effective permissions are limited by the user:alice entry
Why it's wrong here
The user:alice entry applies only to user alice; bob does not have that specific ACL entry.
- ✗
The 'other' permission is '---', blocking all access for users not in the file's user or group
Why it's wrong here
Bob is in the group projectdev, so he is not 'other'; he is covered by the group entry.
Go deeper
Related to this question
About these practice questions
One of 920 original SSCP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.