Question 370
What is the most direct operational risk in this situation: The security team must create a new group and set a particular numeric group identifier?
Explanation
Correct Answer
The main exposure is Duplicate or unexpected GIDs may unintentionally share group-based file access. Reduce it with Use groupadd with an approved unique GID and verify it through getent group, since Group management utilities maintain consistent names and numeric group identities.
Incorrect Answers
This option serves the scenario “A department requires an existing user to join the audit group without losing other supplementary groups”. The main exposure is Using usermod -G without append can silently remove existing group access. The present scenario is distinguished by “Duplicate or unexpected GIDs may unintentionally share group-based file access”.
It is not the most direct failure mode. The relevant mechanism is Group management utilities maintain consistent names and numeric group identities, which risks Duplicate or unexpected GIDs may unintentionally share group-based file access.
It is not the most direct failure mode. The relevant mechanism is Group management utilities maintain consistent names and numeric group identities, which risks Duplicate or unexpected GIDs may unintentionally share group-based file access.