CAS-005 · Question #81
A systems engineer is configuring a system baseline for servers that will provide email services. As part of the architecture design, the engineer needs to improve performance of the systems by…
The correct answer is A. SELinux. SELinux (Security-Enhanced Linux) is a mandatory access control (MAC) system that enforces strict policies to prevent unauthorized access, privilege escalation, and inter-process interference. It also uses access vector caches to enhance performance, making it the most…
Question
A systems engineer is configuring a system baseline for servers that will provide email services. As part of the architecture design, the engineer needs to improve performance of the systems by using an access vector cache, facilitating mandatory access control and protecting against:
- Unauthorized reading and modification of data and programs
- Bypassing application security mechanisms
- Privilege escalation
- interference with other processes
Which of the following is the most appropriate for the engineer to deploy?
Options
- ASELinux
- BPrivileged access management
- CSelf-encrypting disks
- DNIPS
How the community answered
(45 responses)- A82% (37)
- B2% (1)
- C11% (5)
- D4% (2)
Explanation
SELinux (Security-Enhanced Linux) is a mandatory access control (MAC) system that enforces strict policies to prevent unauthorized access, privilege escalation, and inter-process interference. It also uses access vector caches to enhance performance, making it the most appropriate choice for this scenario.
Community Discussion
No community discussion yet for this question.