CREST Practitioner Security Analyst (CPSA) Practice

Which of the following command options will allow a user from a specific host to log in without root permissions?

1. host +

2. host user

3. -host

4. host +@netgroup

The correct answer is: host user

The command option that allows a user from a specific host to log in without root permissions is the option that specifies access permissions for a defined user originating from that host. This option establishes a direct connection between the host and the user, facilitating user access control based on their identity and location. In many environments, configuration files and security settings, such as within SSH or system access policies, can be mapped to user-to-host conditions that determine login capabilities. By using a specific user's designation — as indicated in the option — system administrators can more effectively manage access without necessarily granting root privileges. The other options provided do not accurately define this specific and limited access. For example, simply stating "host +" does not specify a user, making it too broad a permissions statement. "-host" indicates the removal of host-related permissions and is not suitable for granting access. Lastly, "host +@netgroup" implies access based on a netgroup rather than a specific user, which changes the context of permission management significantly. In summary, focusing on user-specific permissions originating from defined hosts is key to ensuring that individuals can access systems without granting them full administrative rights.