Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

LPI 701-100 Exam - Topic 12 Question 8 Discussion

Which security issues exist for most publicly available Vagrant boxes? (Choose three correct answers.)
A) They accept SSH logins from the user vagrant with the password vagrant. and B) They accept SSH logins from the user vagrant with a publicly available SSH key pair. and C) The vagrant user can use sudo to obtain root privileges without additional authentication.
D) Their whole file system, including configuration files, is writable by any user, including vagrant.
E) They export their file system via NFS with full write permissions without any additional restrictions.

LPI 701-100 Exam - Topic 12 Question 8 Discussion

Actual exam question for LPI's 701-100 exam
Question #: 8
Topic #: 12
[All 701-100 Questions]

Which security issues exist for most publicly available Vagrant boxes? (Choose three correct answers.)

Show Suggested Answer Hide Answer
Suggested Answer: A, B, C

Reference https://www.vagrantup.com/docs/boxes/base.html


by Bernardo at May 07, 2022, 11:49 AM

Limited Time Offer

25%

Off

Get Premium 701-100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Stephen
10 months ago
I disagree, E is actually pretty common in some setups.
upvoted 0 times
...
Jamal
10 months ago
D is a problem, but E seems less common.
upvoted 0 times
...
Jacinta
10 months ago
Wait, they really allow SSH logins with just "vagrant"? That's wild!
upvoted 0 times
...
Kerry
10 months ago
I think B is a big risk too.
upvoted 0 times
...
Micaela
11 months ago
A and C are definitely issues!
upvoted 0 times
...
Eden
11 months ago
I vaguely recall that using a publicly available SSH key pair is a common issue, but I can't remember if it's specifically mentioned in this question.
upvoted 0 times
...
Doretha
11 months ago
I practiced a similar question where we talked about file system permissions. I feel like the writable file system for the vagrant user could be a valid concern.
upvoted 0 times
...
Vallie
11 months ago
I think there's something about the vagrant user having sudo access without needing a password, but I'm not entirely sure if that's one of the options here.
upvoted 0 times
...
Beatriz
11 months ago
I remember discussing how the default SSH login for the vagrant user is a big security risk, especially with the password being 'vagrant'.
upvoted 0 times
...
Nancey
11 months ago
Hmm, I'm a bit unsure about this one. The question mentions that the memorandum is protected by a legal professional privilege, but I'm not sure if that means the privilege belongs to the attorney or the client. I'll need to think this through carefully.
upvoted 0 times
...
Johnna
11 months ago
Okay, I've got a strategy for this. I'll read through the options and try to identify which one best aligns with the ethical responsibilities of a manager, rather than just their general management duties. That should help me narrow it down.
upvoted 0 times
...
Vicky
11 months ago
Proactively identifying fraud risks seems like the core objective. I'd probably choose option A, but I'm not 100% certain.
upvoted 0 times
...
Laura
11 months ago
Based on my understanding of NetFlow and SNMP, the SNMP table option should be added under the flow record. That's where the interface information is captured, so that's the logical place to integrate the SNMP data.
upvoted 0 times
...

Save Cancel