Tuning File Permissions with Access Control Lists
Which of the following allows a systems administrator to tune permissions for a file?
Community Votes
100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
This question tests the definition of ACLs versus broader security concepts like least privilege; the trap is confusing the principle (least privilege) with the implementation tool (ACL).
An access control list (ACL) is the mechanism that allows systems administrators to tune permissions for specific files, defining exactly which users or processes can access them.
Learners often select 'Least privilege' because it is a core security principle related to permissions, but they fail to recognize that 'least privilege' is a concept/goal, whereas an ACL is the actual technical object used to enforce those permissions on a file.
Community Discussion (3 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
An Access Control List (ACL) is a table or data structure attached to an object (such as a file or directory) that specifies which users or system processes are granted access and what operations (read, write, execute) are allowed. When a systems administrator needs to 'tune' or adjust these specific permissions for a single file, they modify the ACL associated with that file. This makes ACL the direct technical answer to the scenario.Why the Other Options Are Wrong
Patching involves applying updates to software to fix vulnerabilities, not managing user permissions. Configuration enforcement is a broad term for ensuring systems adhere to security policies, often via group policy or configuration management tools, rather than a specific file-level permission mechanism. Least privilege is a security principle stating that users should only have the minimum access necessary; while ACLs help enforce this principle, 'least privilege' itself is not a tool or object that an administrator tunes on a file.Community Comment Notes
The community consensus strongly supports B. As one commenter noted, 'Tuning permissions for a file refers to adjusting the access controls... essentially controlling who can access and modify the file.' Another explained that an ACL allows specifying 'which users or system processes are granted access,' confirming the direct link between the action and the object.Exam Strategy
Always distinguish between security principles (like least privilege or separation of duties) and the technical mechanisms used to implement them (like ACLs, MAC, or RBAC). If the question asks for a 'tool', 'mechanism', or 'object', choose the specific technology, not the abstract concept.
Frequently Asked Questions
Why isn't Least Privilege the correct answer?
Least privilege is a security principle or goal, not a specific technical object or list. You use an ACL to ENFORCE least privilege, but you don't 'tune' the principle itself on a file.
What is the difference between Patching and ACLs?
Patching fixes software vulnerabilities by updating code. ACLs manage access rights (permissions) for users and processes to read or write files. They serve completely different functions.
Related Analysis
Practice All SY0-701 Questions
Access 100 questions with complete answers and detailed explanations.
View Full SY0-701 Practice Test →