File permissions and access control in Cybersecurity - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding Basic File Permission Types

Which of the following best describes the write permission on a file in a typical operating system?

A Allows a user to modify or delete the contents of the file.

B Allows a user to execute the file as a program or script.

C Allows a user to view the contents of the file without making changes.

D Allows a user to change the ownership of the file.

💡 Hint

Think about what it means to be able to change a file's content.

The write permission allows a user to modify or delete the contents of a file. Viewing is controlled by read permission, and execution is controlled by execute permission.

📋 Factual

intermediate

File Permission Representation in Unix

In Unix-like systems, what does the permission string -rwxr-x--x indicate about the file's access?

A Owner has no permissions; group can read and execute; others can write only.

B Owner can read and write; group can execute only; others have no permissions.

C Owner can execute only; group can read and write; others can read only.

D Owner can read, write, execute; group can read and execute; others can execute only.

💡 Hint

Break down the string into owner, group, and others permissions.

The string -rwxr-x--x means: owner has read (r), write (w), execute (x); group has read (r), no write (-), execute (x); others have no read (-), no write (-), execute (x).

🚀 Application

advanced

Applying Access Control Lists (ACLs)

A file has standard permissions set to rw-r-----. The owner is Alice, the group is 'staff'. An ACL entry grants user Bob read and write access. What is the effective permission for Bob?

A Bob has read and write access due to the ACL entry.

B Bob has no access because he is not the owner or in the group.

C Bob has read-only access because of the group permissions.

D Bob has execute permission only.

💡 Hint

ACLs can grant specific permissions beyond standard owner/group/others.

ACL entries override standard permissions for specified users. Since Bob has an ACL granting read and write, he can access the file accordingly.

🔍 Analysis

advanced

Analyzing Permission Risks

Which of the following file permission settings poses the greatest security risk on a multi-user system?

A File permissions set to <code>rw-r-----</code> with owner and group properly assigned.

B File permissions set to <code>r--r-----</code> with restricted write access.

C File permissions set to <code>rwxrwxrwx</code> allowing all users full access.

D File permissions set to <code>rw-r-----</code> but with no execute permission.

💡 Hint

Consider what happens when everyone can read, write, and execute a file.

Permissions rwxrwxrwx allow anyone to read, modify, or execute the file, which can lead to unauthorized changes or execution of malicious code.

❓ Reasoning

expert

Determining Effective Permissions with Multiple Groups

User Charlie belongs to groups 'dev' and 'qa'. A file has owner 'Alice', group 'dev', and permissions rw-r-----. The 'qa' group has an ACL entry granting read access to the file. What is Charlie's effective permission?

A Charlie has execute permission due to group membership.

B Charlie has read-only access because of the ACL entry for 'qa' group.

C Charlie has no access because only the owner has write permission.

D Charlie has read and write access because he is in the 'dev' group.

💡 Hint

Consider how ACLs and group memberships combine to determine access.

Charlie is in 'dev' and 'qa'. The file's group is 'dev' with read permission only for group. The ACL grants 'qa' group read access. Both grant read access, so Charlie can read but not write.