CompTIA Linux+ XK0-006 (V8) Practice Question

The correct answer is to create a new file within the /etc/sudoers.d directory. This file must have a name that does not contain a '.' or end in a '~', and it should have restrictive permissions, typically 0440, to prevent unauthorized modification or viewing. Creating a file named webdev_perms with the content %webdev ALL=(ALL) /usr/bin/systemctl restart apache2 and setting its permissions to 0440 is the secure and correct method.

• Creating a file with a name like webdev.conf is incorrect because sudo ignores files in /etc/sudoers.d that contain a dot in their filename to avoid issues with package manager backup files.
• Appending the rule directly to /etc/sudoers is not considered a best practice for modularity, as it can be overwritten by system updates and makes managing configurations for different applications or groups more difficult.
• Creating a file with 0664 permissions is incorrect. Files in /etc/sudoers.d are sensitive and should not be writable by the group or world, as this poses a significant security risk. sudo will ignore files with insecure permissions.