2.4 Given a scenario, configure and execute remote connectivity for system management

Question 1

Command: su

Answer 1

Substitute User, allows switching accounts to run commands as a user, i.e. root
Syntax: su -[user]

Question 2

Command: sudo

Answer 2

allows user to execute commands using elevated privileges assigned by system admin
Syntax: sudo [….command]

Question 3

What is the best security practice regarding the su and sudo commands?

Answer 3

Instead of allowing admins to use the su command, use the sudo structure to assign specific rights to specific admins

Question 4

What file contains the admin rights assigned to specific users?

Answer 4

/etc/sudoers

Question 5

What is visudo used for?

Answer 5

To edit the /etc/sudoers file and assign admin permissions to users

Question 6

What switch is used with visudo to check the file?

Answer 6

-c checks for syntax errors before saving

Question 7

What switch is used with visudo to specify a file location, other than default location /etc/sudoers?

Answer 7

-f

Question 8

What switch for visudo can be used to also check for errors, such as non-existent users/groups?

Answer 8

-s checks file in strict mode

Question 9

What switch for visudo outputs the file in JSON format?

Answer 9

-x

Question 10

Command: pkexec

Answer 10

an alternate to sudo, allowing the command to execute with elevated privileges
Syntax: pkexec [command]

Question 11

Why should sudo be used instead of pkexec?

Answer 11

sudo is more flexible and has better security than pkexec