Review web01's audit evidence

Objectives

Priya's colleague prepared six statements for the auditor. Accept only the ones that are true and backed by the evidence described. Reject the rest and pick the single root problem.

Reason codes: weak-permission means a file or folder is open to the wrong people. Not-applied means a change was claimed but never really took effect. Wrong-evidence means the proof does not show what is claimed. Log-risk means logs could be lost or erased.

Verdicts are accept or reject. Every rejection needs one reason code from: weak-permission | not-applied | wrong-evidence | log-risk.

LX-1 | /etc/shadow is -rw-r--r--, which is fine because the passwords are hashed.
LX-2 | Patching is done: the ticket shows apt update ran on Monday. No upgrade or reboot is recorded.
LX-3 | Root login is disabled: sshd -T prints permitrootlogin no.
LX-4 | The firewall is safe: the change request from last year says default deny. No current ufw status output is attached.
LX-5 | Logs are kept for one year in /var/log on web01 only.
LX-6 | find /etc -perm -o+w returned no files on today's scheduled run, and the output is attached with a timestamp.

Step-by-step hints

The guided walkthrough, in full. It is free: no XP cost, and it does not touch the paid hint ladder or the reveal gate.

1. Step 1

   Read the request before the artefact

   Judge each statement on its own. A true sounding sentence still needs the right proof.

2. Step 2

   Judge every line, including the boring ones

   Give every statement a verdict, even the ones that look obviously fine.

   Every line in the fixture carries a verdict

3. Step 3

   Separate what is wrong from what is merely ugly

   Accept statements that show the live setting with a command output or a dated scheduled check.

   Accept and reject land on the right lines

4. Step 4

   Say why, in the vocabulary the programme uses

   For each rejection pick the one reason code that describes the real problem.

   Each rejection cites a valid reason code

Rules summary

• XP on pass

  50 bonus XP the first time every check goes green.

• Paid hints

  2 available. Each costs 25% of the lab XP (about 13 XP).

• Reveal solution

  Scores 0 XP and unlocks only after 3 check runs.

• Attempt cap

  60 check runs per learner. The runner warns you in the last 10.

• Drafts

  Your editor content is saved in this browser, so a reload will not lose work.

• Walkthrough

  Always free and never penalised: use it before spending a hint.