Question 230
A support engineer has remediated: A user without authorization attempts to create one-time at tasks despite a deny policy. What is the decisive acceptance check?
Explanation
Correct Answer
Acceptance requires An authorized operator can schedule a job while the blocked user is denied. The improvement follows from The at access files determine who may submit one-time scheduled work and is achieved by Check /etc/at.allow and /etc/at.deny according to the installed at policy.
Incorrect Answers
The required verification is An authorized operator can schedule a job while the blocked user is denied, not a result meant for An automated task must run at system startup even if no user logs into a shell.
This alternative addresses the separate case “A terminated contractor should no longer log in while the home directory is retained for legal review”. Verify that A controlled login fails while the retained home remains available to the authorized reviewer. The deciding requirement here is “An authorized operator can schedule a job while the blocked user is denied”.
The related but distinct situation is “An administrator needs to remove a pending one-time job identified in the at queue”. Acceptance requires The chosen job number disappears from atq while unrelated entries remain. For the stated problem, “An authorized operator can schedule a job while the blocked user is denied” addresses the central condition.