LX0-104 · Question #411
How does AppArmor configure its access control settings?
The correct answer is D. A profile is assigned per application that specifies the system resources available to the application.. AppArmor configures access control by assigning specific profiles to individual applications, which define the system resources and capabilities each application is permitted to access.
Question
Options
- AAppArmor does not require any configuration.
- BAppArmor inspects the Linux system to determine which applications are installed and configures
- CAppArmor relies on precompiled policies. These policies are updated with new releases or can be
- DA profile is assigned per application that specifies the system resources available to the application.
How the community answered
(27 responses)- B7% (2)
- C4% (1)
- D89% (24)
Why each option
AppArmor configures access control by assigning specific profiles to individual applications, which define the system resources and capabilities each application is permitted to access.
AppArmor explicitly requires configuration through profiles to enforce security policies on applications.
AppArmor does not automatically inspect the system and configure itself; it relies on predefined or manually created profiles.
While AppArmor can use precompiled or packaged profiles, the fundamental mechanism is assigning a profile per application, not just relying on generic precompiled policies in the way described.
AppArmor operates on an application-centric basis, using profiles that explicitly list what an application is allowed to do, such as reading or writing specific files, network access, or executing other programs, thereby confining the application's actions.
Concept tested: AppArmor configuration mechanism
Source: https://apparmor.net/features/
Topics
Community Discussion
No community discussion yet for this question.