nerdexam
Linux_Foundation

LFCA · Question #40

A software development team uses a single physical server for testing the latest code in multiple environments: development, pre-production, and production. What is the recommended approach to…

The correct answer is D. Use different user/group IDs for deploying and running workload in each environment. To maintain basic security on a shared server, use distinct user and group IDs for deploying and running workloads in each environment, enforcing separation of privileges and access control.

Submitted by skyler.x· May 4, 2026Security

Question

A software development team uses a single physical server for testing the latest code in multiple environments: development, pre-production, and production. What is the recommended approach to maintain the basic security of these environments?

Options

  • AAssign different developers on the team to work on test, pre-prod. and prod code.
  • BImplement peer review for all the changes deployed into any of the environments
  • CDevelop and deploy each environment with its own set of software tools.
  • DUse different user/group IDs for deploying and running workload in each environment.

How the community answered

(35 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    3% (1)
  • D
    91% (32)

Why each option

To maintain basic security on a shared server, use distinct user and group IDs for deploying and running workloads in each environment, enforcing separation of privileges and access control.

AAssign different developers on the team to work on test, pre-prod. and prod code.

Assigning different developers does not inherently provide technical separation or security boundaries on a shared server; it is a process control.

BImplement peer review for all the changes deployed into any of the environments

Implementing peer review is a good development practice for code quality and security, but it does not provide runtime isolation or access control between environments on a single server.

CDevelop and deploy each environment with its own set of software tools.

Developing and deploying each environment with its own set of software tools might be resource-intensive and doesn't inherently create security isolation; the core issue is the privilege separation on the shared host.

DUse different user/group IDs for deploying and running workload in each environment.Correct

Using different user/group IDs for deploying and running workloads in each environment on a shared server is crucial for basic security. This implements the principle of least privilege, ensuring that actions in one environment do not inadvertently or maliciously affect another by restricting access based on identity.

Concept tested: Server environment security (principle of least privilege)

Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/implement-least-privilege

Topics

#User and Group Management#Access Control#Environment Isolation#Linux Security

Community Discussion

No community discussion yet for this question.

Full LFCA Practice