The organization's policy requires that no file on this network share can elevate privileges through the setuid or setgid bits. Which single additional mount option should you add to the option list to satisfy the policy while preserving the existing behaviors?
The nosuid mount option tells the kernel to ignore the set-user-ID and set-group-ID permission bits (and associated file capabilities) on any executable located in the mounted filesystem. As a result, binaries on the share cannot gain elevated privileges, which is exactly what the policy demands.
nosuid - Correct. It disables honoring of SUID/SGID bits, preventing privilege escalation from this mount.
nodev - Only stops character or block special devices from being interpreted; it does not affect SUID/SGID execution.
noexec - Blocks all binary execution from the filesystem; while it also eliminates SUID effects, it is more restrictive than required and would break legitimate executables that do not need elevated privileges.
sync - Forces synchronous I/O and has no impact on SUID/SGID behavior.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the purpose of the 'nosuid' mount option?
Open an interactive chat with Bash
Why is 'nodev' not the correct choice in this scenario?
Open an interactive chat with Bash
How is 'noexec' different from 'nosuid'?
Open an interactive chat with Bash
CompTIA Linux+ XK0-006 (V8)
System Management
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .