CompTIA Linux+ (XK0-004) — Question 203

A Linux administrator is configuring a server to log security events for the ping command while allowing the request to occur. The Linux server is using AppArmor to manage its security services.
Which of the following commands is the BEST option?

Answer options

• A. aa-complain /bin/ping
• B. aa-disable /bin/ping
• C. aa-unconfined /bin/ping
• D. aa-enforce /bin/ping

Correct answer: A

Explanation

The command 'aa-complain /bin/ping' allows the ping command to run while logging any security events, which is the desired configuration. The other options either disable security enforcement entirely or enforce strict policies, which would not allow for logging of events while permitting the execution of ping.