Summary

Role-Based Access Control is slowly changing Solaris away from a monolithic administrative model where power is concentrated around a single superuser, to a more distributed set of delegated authorities to execute discrete tasks. While this removes the risk inherent in a centralized model, it also makes effectively managing multiple administrators difficult.

Questions

1.	What is the purpose of sudo? Upgrade the su command. Revert the effects of so. Allow privileged roles to be assigned to users. Allow RBAC databases to be updated.
2.	What is the main configuration file for sudo? /etc/sudo /etc/sudoers /var/sudo /etc/susers
3.	Which of the following is not an RBAC role? Primary Administrator System Administrator Operator Security Administrator
4.	What is an RBAC profile? Definitions stored in each user’s .profile file A command for which an authorization can be granted A role for which an authorization can be granted A user who is allowed to execute RBAC commands
5.	What is an RBAC authorization? A privilege granted to a role A privilege granted to a profile A privilege granted to a user A Kerberos security level
6.	What is the purpose of the smexec command? Execute commands using the su facility. Execute commands using the sudo facility. Execute commands symmetrically. Create, read, update, and delete rows in the exec_attr database.
7.	What is the purpose of the smmultiuser command? Allocate one role to multiple users. Execute commands symmetrically for multiple users. To perform batch functions. Create, read, update, and delete rows in the exec_attr database.
8.	What is the purpose of the smuser command? Allocate multiple roles to single users Execute commands symmetrically for multiple users. To perform user account operations. Create, read, update, and delete rows in the exec_attr database.

Answers

1.	C. The purpose of sudo is to allow privileged roles to be assigned to users.
2.	B. /etc/sudoers is the main configuration file for sudo.
3.	D. Security Administrator is not an RBAC role.
4.	C. An RBAC profile is a role for which an authorization can be granted.
5.	A. An RBAC authorization is a privilege granted to a role.
6.	D. The purpose of the smexec command is to create, read, update, and delete rows in the exec_attr database.
7.	C. The purpose of the smmultiuser command is to perform batch functions.
8.	C. The purpose of the smuser command is to perform user account operations.