Which command displays the capabilities currently assigned to a specific binary file?
Correct Answer: A
The getcap command displays any file capabilities that have been assigned to a specific binary using setcap. This allows an administrator to audit which executables on a system have been granted elevated capabilities beyond the standard permission model. setcap, by contrast, is used to assign capabilities to a file, while capsh --print displays the capabilities of the current running shell process rather than those statically attached to a specific binary file.
Question 67
Which command revokes ACL-based write access for groups and named users on the file afile?
