nerdexam
IBM

000-221 · Question #53

Which option will prevent users in the DBA group from logging in using telnet or rlogin?

The correct answer is A. Set the rlogin user attribute to 'false1 for each user in the DBA group. In AIX, the per-user rlogin attribute in /etc/security/user controls whether a user may log in via both rlogin and telnet, and setting it to false enforces this restriction individually for targeted users.

Security

Question

Which option will prevent users in the DBA group from logging in using telnet or rlogin?

Options

  • ASet the rlogin user attribute to 'false1 for each user in the DBA group.
  • BChange the rlogin group attribute to 'false'.
  • CRemove the users in the DBA group from the/.rhosts file.
  • DDisable the automatic start up of the telnetd daemon.

How the community answered

(30 responses)
  • A
    80% (24)
  • B
    3% (1)
  • C
    3% (1)
  • D
    13% (4)

Why each option

In AIX, the per-user rlogin attribute in /etc/security/user controls whether a user may log in via both rlogin and telnet, and setting it to false enforces this restriction individually for targeted users.

ASet the rlogin user attribute to 'false1 for each user in the DBA group.Correct

AIX stores user login security attributes in /etc/security/user, and the rlogin attribute governs remote login access including both rlogin and telnet sessions. Setting rlogin=false for each user in the DBA group prevents only those users from authenticating via these protocols while leaving other users and system-wide services unaffected.

BChange the rlogin group attribute to 'false'.

The rlogin attribute is a user-level stanza setting in /etc/security/user and is not configurable at the group level in AIX security.

CRemove the users in the DBA group from the/.rhosts file.

The /.rhosts file controls trust-based host authentication for rlogin only and does not affect telnet logins or password-authenticated rlogin attempts.

DDisable the automatic start up of the telnetd daemon.

Disabling the telnetd daemon would block all users from using telnet, not just members of the DBA group.

Concept tested: AIX per-user rlogin security attribute restriction

Source: https://www.ibm.com/docs/en/aix/7.3?topic=attributes-user

Topics

#rlogin#user attributes#telnet restriction#access control

Community Discussion

No community discussion yet for this question.

Full 000-221 Practice