Exam SY0-601 topic 1 question 232 discussion

Actual exam question from CompTIA's SY0-601

Question #: 232
Topic #: 1

During a security assessment, a security analyst finds a file with overly permissive permissions. Which of the following tools will allow the analyst to reduce the permissions for the existing users and groups and remove the set-user-ID bit from the file?

A. ls
B. chflags
C. chmod
D. lsof
E. setuid

Show Suggested Answer

Suggested Answer: C 🗳️

by chipdomcobb at Oct. 8, 2022, 8:48 a.m.

Comments

Submit Cancel

chipdomcobb

Highly Voted 2 years, 8 months ago

The setuid part threw me, but from what I read at the link below, it appears this action can be done with chmod, so I'm going with C. https://serverfault.com/questions/238962/how-do-i-clear-the-s-permission-on-a-directory-in-linux

upvoted 5 times

...

LordJaraxxus

Most Recent 1 year, 3 months ago

Selected Answer: C

You use the chmod (short for change mode) command to change permissions on files.

upvoted 1 times

...

sujon_london

1 year, 10 months ago

Selected Answer: C

the key difference is that setuid is a specific permission that affects how an executable file is executed (with the privileges of the owner), while chmod is a command used to modify the read, write, and execute permissions of files and directories.

upvoted 3 times

sujon_london

1 year, 10 months ago

The setuid permission (short for “set user ID”) is a special permission that can be assigned to executable files. When an executable file has the setuid permission enabled, it runs with the privileges of the owner of the file, rather than the user who executed it. This is often used to allow regular users to run certain programs with elevated privileges without needing to provide a password. For example, the passwd command needs elevated privileges to modify password files, so it often has the setuid permission set. chmod: chmod is a command used to change the permissions of files and directories. It’s used to modify the read, write, and execute permissions for different users (owner, group, others) on a file or directory. chmod is a command-line utility that allows you to set permissions explicitly using either numeric modes (e.g., 644, 755) or symbolic modes (e.g., +rwx, -x).

upvoted 2 times

...

ApplebeesWaiter1122

1 year, 11 months ago

Selected Answer: C

The chmod command is used to change file permissions in Unix-like operating systems. It allows the security analyst to modify the permissions for the existing users and groups on the file. The analyst can use specific flags with chmod to reduce the permissions on the file and remove the set-user-ID (setuid) bit, which allows a program to be executed with the permissions of its owner, even when run by a different user. The other options listed: A. ls is used to list files and directories and view their permissions, but it does not modify permissions. B. chflags is used to change file flags on some Unix-like systems, but it does not modify permissions. D. lsof is used to list open files and the processes that opened them, it does not modify permissions. E. setuid is not a command, but rather a concept related to the set-user-ID bit in file permissions.

upvoted 3 times

...

SophyQueenCR82

2 years, 3 months ago

The correct answer is C. "chmod" is a command used in Unix-based systems to change the permissions of files and directories. It can be used to reduce the permissions for existing users and groups and remove the set-user-ID from a file. Option A ("1a") is not a valid command, and option B ("chflags") is used to change file system flags. Option D ("leof") is not a valid command, and option E ("setuid") is a permission bit that sets the effective user ID when a file is executed, rather than changing file permissions.

upvoted 3 times

...

Knowledge33

2 years, 7 months ago

Selected Answer: C

Chmod is the Linux command used to change access permissions of a file. The general form of the command is chmod <options> <permissions> <filename>

upvoted 1 times

...