Topic 110 · Security
110.1 Perform security administration tasks
Step 1 of 9 · weight 3
Do not touch blindly
Weight 3. Defaults are a starting point, not a proof that the host is safe. Read them, then verify the permissions, accounts, and settings that are actually in effect.
- A service that cannot write is not fixed by chmod 777. That mode gives everyone read, write, and execute
- Hacker, in the exam contrast, is someone who studies and solves. Cracker is someone who breaks in without authority. Everyday speech mixes the two
- Order for this map: su, sudo, who/w/last, passwd/chage, SUID/SGID, ulimit, sockets, nmap
Exam note
If the question is about a quick permission widening, the safe answer is to verify the real cause first.