LFCA: Linux Foundation Certified IT Associate

Question

A Linux administrator is setting up a least-privilege environment for user alice, who belongs to the devops team. Her sole job responsibility is restarting the nginx service on a web server. Which of the following configurations best follows the principle of least privilege?

Explanation

The principle of least privilege requires granting only the minimum permission needed for the assigned task. A sudoers entry limited to running systemctl restart nginx lets alice restart that one service without granting general root access, unrestricted sudo access, or setuid access to systemctl.

LFCA: Linux Foundation Certified IT Associate

AstroTutor

Notes

Readiness

QuestionQ113

Community Discussion