Which Computer Security Concept Is Violated When a Web Server

question 7

Multiple Choice

Which computer security concept is violated when a web server is written that uses the "root" account for all interactions with a Linux system?

• A) principle of least privilege
• B) PermitRootLogin
• C) certificate-based authentication
• D) RBAC

---

Definitions:

SEC

Abbreviation for the Securities and Exchange Commission, a U.S. federal agency responsible for enforcing federal securities laws and regulating the securities industry.

1933 Act

The Securities Act of 1933, a U.S. legislation that requires detailed disclosure of financial information from issuers of public securities to protect investors.

Permanent Resident

An individual who has been granted the legal right to live indefinitely within a country other than their nationality.

Issuer

An entity that develops, registers, and sells securities to finance its operations, such as corporations or governmental bodies issuing bonds or stocks.