Crucial Exams

CompTIA Linux+ XK0-006 (V8) Practice Question

A security engineer is auditing sudo privileges and discovers the following entry in /etc/sudoers.d/qa:

%qa    ALL=(root) NOPASSWD: /usr/bin/python3 /opt/scripts/db-maint.py

Which statement BEST describes the security implication of leaving this NOPASSWD rule in place?

  • Any process running under a qa member's UID can execute the script as root without entering a password, so a compromised session can escalate privileges instantly.

  • The rule suppresses sudo's syslog and audit records for successful runs, making the action effectively invisible to logging systems.

  • Because the command path is fully qualified, sudo will still demand the root password; NOPASSWD only overrides authentication for commands matched by wildcards.

  • QA group members will be asked for their password the first time in each session; the tag only removes repeated prompts once sudo's credential cache is active.

CompTIA Linux+ XK0-006 (V8)
Security
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot