CompTIA Linux+ XK0-006 (V8) Practice Question

The correct answer is to set anonymous_enable=NO. This directive explicitly controls whether anonymous logins are permitted. Setting it to NO is the standard and direct way to disable anonymous FTP access, addressing the security finding. chroot_local_user=YES is a security best practice that jails local users to their home directory and does not control anonymous access. seccomp_sandbox=YES is a security feature that restricts the system calls the daemon can make, but it does not manage user authentication. listen=YES configures vsftpd to run in standalone mode, making it listen for incoming connections, but it does not control the authentication policy for those connections.