CompTIA CASP+ (CAS-004) — Question 449

A security engineer is responsible for configuring and implementing MAC on a Linux system using basic SELinux utilities. Which of the following commands represents the correct sequence to implement MAC?

Answer options

• A. apt-get install selinux-basics selinux-policy-default auditd selinux-activate reboot
• B. apt-get install selinux-basics selinux-policy-default selinux-activate reboot
• C. apt-get install selinux-policy-default auditd selinux-activate reboot
• D. apt-get install selinux-basics selinux-policy-default syslogd selinux-activate reboot

Correct answer: A

Explanation

The correct answer is A because it includes all necessary components: 'selinux-basics', 'selinux-policy-default', and 'auditd', followed by the activation and reboot steps. Options B and C miss 'auditd', which is essential for logging, while option D unnecessarily includes 'syslogd', which is not required for basic SELinux setup.