ECSA v10: EC-Council Certified Security Analyst v10

By ECCouncil · Question Mode

QuestionQ89

VerifiedPenetration Testing Essential Concepts

Tom is a networking manager at XYZ Inc. He and his team were tasked with storing and updating confidential files located on a remote server by using the Network File System (NFS) client-server application protocol. Because the files are confidential, Tom was instructed to perform the operation securely by restricting access to only his team. As instructed, to use NFS securely, he used a process that limits superuser access privileges to only his team through authentication based on the identities of the team personnel.

Identify the method Tom employed to secure access controls in NFS?

Explanation

Root squashing is an NFS export security control that maps a remote root user’s UID/GID to an anonymous, unprivileged identity, preventing that client’s superuser account from having unrestricted root access to the exported file system. nosuid affects setuid/setgid execution, noexec prevents execution, and suid concerns set-user-ID behavior rather than NFS remote-root access.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!