LPIC-1 Devices, Filesystems and FHS Practice Question
Exhibit
sysfs on /sys type sysfs (rw,nosuid,nodev,noexec,relatime) proc on /proc type proc (rw,nosuid,nodev,noexec,relatime) udev on /dev type devtmpfs (rw,nosuid,relatime,size=100m) devpts on /dev/pts type devpts (rw,nosuid,noexec,relatime,gid=5,mode=620)
Refer to the exhibit. An administrator notices that /proc is mounted with 'noexec'. What is the impact of this mount option?
⚠ Common exam trap
Watch out — candidates often confuse 'noexec' with 'nosuid' or 'nodev', thinking it affects setuid binaries or device files, when in fact 'noexec' strictly controls whether binary executables can be run directly from the filesystem.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
No binaries can be executed directly from /proc.
The 'noexec' mount option prevents the direct execution of any binary files located on the mounted filesystem. Since /proc is a virtual filesystem that contains runtime system information and process data, mounting it with 'noexec' means that no binaries can be executed directly from /proc. This is a security measure to prevent malicious code from being run from procfs, as /proc should never contain executable programs in normal operation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Device files are not interpreted.
Why it's wrong here
That is nodev.
- ✗
Setuid programs do not work.
Why it's wrong here
That is the effect of nosuid, not noexec.
- ✓
No binaries can be executed directly from /proc.
Why this is correct
noexec prevents execution of binaries on the filesystem.
- ✗
The filesystem cannot be written to.
Why it's wrong here
noexec does not restrict writes; it prevents execution.
Go deeper
Related to this question
About these practice questions
This LPIC-1 question is part of Courseiva's 527-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This LPIC-1 practice question is part of Courseiva's free LPI certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the LPIC-1 exam.