On Linux/Unix based Web servers, what privilege should the daemon service be run under?

The correct answer is A. Something other than root. Following the principle of least privilege, web server daemon services should run as a non-root, unprivileged user (e.g., 'www-data', 'apache', or 'nginx'). Running a daemon as root is extremely dangerous - if the service is compromised, the attacker gains full root access to…

Submitted by zhang_li· Apr 18, 2026Computer Forensics Investigation Process

Question

Options

ASomething other than root
BRoot
CGuest
DYou cannot determine what privilege runs the daemon service

How the community answered

(19 responses)

A
89% (17)
C
5% (1)
D
5% (1)

Explanation

Following the principle of least privilege, web server daemon services should run as a non-root, unprivileged user (e.g., 'www-data', 'apache', or 'nginx'). Running a daemon as root is extremely dangerous - if the service is compromised, the attacker gains full root access to the system. Running under a restricted account limits the damage an attacker can do. This is a fundamental security best practice for all server-side daemon processes.

Topics

#Linux/Unix Security#Web Server Security#Privilege Escalation Prevention#Daemon Privileges

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice