nerdexam
CompTIA

LX0-104 · Question #300

To prevent a specific user from scheduling tasks with at, which of the following should the administrator do?

The correct answer is C. Add the specific user to /etc/at.deny file.. To prevent a specific user from scheduling jobs using the at command, their username should be added to the /etc/at.deny file.

Security

Question

To prevent a specific user from scheduling tasks with at, which of the following should the administrator do?

Options

  • AAdd the specific user to /etc/at.allow file.
  • BAdd the specific user to [deny] section in the /etc/atd.conf file.
  • CAdd the specific user to /etc/at.deny file.
  • DAdd the specific user to nojobs group.
  • ERun the following: atd --deny [user].

How the community answered

(26 responses)
  • A
    4% (1)
  • B
    4% (1)
  • C
    88% (23)
  • D
    4% (1)

Why each option

To prevent a specific user from scheduling jobs using the `at` command, their username should be added to the `/etc/at.deny` file.

AAdd the specific user to /etc/at.allow file.

Adding a user to `/etc/at.allow` would *grant* them permission to use `at`, which is the opposite of the desired outcome.

BAdd the specific user to [deny] section in the /etc/atd.conf file.

/etc/atd.conf is typically for configuring the `atd` daemon itself, not for user-specific access control using a `[deny]` section.

CAdd the specific user to /etc/at.deny file.Correct

The `/etc/at.deny` file lists users who are explicitly denied permission to use the `at` command. If this file exists, users listed within it cannot schedule `at` jobs. If `/etc/at.allow` also exists, `at.allow` takes precedence, granting access only to listed users.

DAdd the specific user to nojobs group.

There is no standard "nojobs group" that controls `at` command access; access is managed via `at.allow` and `at.deny` files.

ERun the following: atd --deny [user].

`atd --deny [user]` is not a standard command or option for the `atd` daemon to deny specific users access to `at`. User access control for `at` is primarily file-based.

Concept tested: Controlling `at` command user access

Source: https://linux.die.net/man/1/at

Topics

#at command#job scheduling#access control#configuration files

Community Discussion

No community discussion yet for this question.

Full LX0-104 Practice