LPIC-2 System Security Practice Question
Exhibit
Refer to the exhibit. # sudoers file User_Alias ADMINS = alice, bob Cmnd_Alias SOFTWARE = /usr/bin/apt-get, /usr/bin/dpkg ADMINS ALL = SOFTWARE
Refer to the exhibit. What is the effect of this sudoers configuration?
⚠ Common exam trap
The trap here is that candidates often overlook the absence of the NOPASSWD tag and assume that any sudo entry implies passwordless execution, or they misread 'ALL' in the host field as meaning 'all commands' instead of 'all hosts'.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Users alice and bob can run apt-get and dpkg on any host as root, requiring a password.
The sudoers configuration specifies that users alice and bob are allowed to run only the commands /usr/bin/apt-get and /usr/bin/dpkg as root on any host (ALL). The absence of the NOPASSWD tag means that a password is required for these commands. The syntax 'alice,bob ALL=(root) /usr/bin/apt-get, /usr/bin/dpkg' restricts the command set and requires authentication.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Users alice and bob can run any software command on the localhost only.
Why it's wrong here
The host part is 'ALL', not 'localhost', and the command list is restricted to SOFTWARE.
- ✗
Members of ADMINS can run any command as root on any host.
Why it's wrong here
The Cmnd_Alias restricts the allowed commands to those defined in SOFTWARE.
- ✓
Users alice and bob can run apt-get and dpkg on any host as root, requiring a password.
Why this is correct
The configuration grants exactly that: the specified commands, on any host, with password prompt.
- ✗
Users alice and bob can run apt-get and dpkg without a password.
Why it's wrong here
No NOPASSWD tag is present, so a password is required.
Go deeper
Related to this question
About these practice questions
One of 507 original LPIC-2 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This LPIC-2 practice question is part of Courseiva's free LPI certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the LPIC-2 exam.