Policy says passwords must be changed at least every 90 days, and the account carol must comply. Which command sets that maximum password age?
LPIC-1 Exam 102-500, objective 107. Administrative tasks medium
Machine-checked — no person has signed for it. This question was read against the source cited below by an automated pass, which found no contradiction. That is a weaker claim than it sounds: the same kind of process wrote the question, so it can confirm its own mistake.
Treat it as a good draft rather than as settled fact, and read the source below before you rely on it. It is not used in mock exams here — only questions a person has signed for are.
How these questions are written — where each question comes from, what the verification ledger records, and what happens when one is found wrong.
The options
Not correct chage -m 90 carol
Wrong. Lowercase -m sets the MINIMUM number of days between password changes. Setting it to 90 would forbid carol from changing her password again for 90 days, which is close to the opposite of the intent.
Not correct chage -W 90 carol
Wrong. -W sets the warning period: how many days before expiry the user starts being warned at login. It does not expire anything.
Not correct chage -E 90 carol
Wrong. -E sets an account expiry DATE, after which the account itself is disabled entirely. It takes a date (or days since 1970-01-01), not a password lifetime.
Correct chage -M 90 carol
Correct. Uppercase -M sets the maximum number of days a password remains valid. After 90 days carol is forced to choose a new one at login.
Why
chage edits the aging fields of /etc/shadow: -m minimum days, -M maximum days, -W warning days, -I inactive days after expiry, -E account expiry date, -d last change date. `chage -l carol` prints all of them in readable form. The defaults for newly created accounts come from PASS_MIN_DAYS, PASS_MAX_DAYS and PASS_WARN_AGE in /etc/login.defs.
Where this comes from
- Cited
- LPI exam objective 107.1
- What it says
- Manage password aging information for accounts.
Practise this
Reading one question is not practice. The trainer will draw a short set from objective 107 and space the ones you get wrong.
More questions on this objective
- The account alice already belongs to the supplementary groups audio and video. You must additionally put her in the group developers while keeping her existing memberships. Which command does that? machine-checked
- A departing employee's account bob must be deleted together with his home directory and mail spool. Which command does all of that in one step? machine-checked
- You want every newly created account to start with a company-standard .bashrc already in its home directory. Where do you place that file? machine-checked
- On a host whose accounts come partly from local files and partly from a directory service, `grep alice /etc/passwd` returns nothing even though `id alice` works. Which command shows alice's account entry the way the system itself resolves it? machine-checked
- A line in /etc/group reads `developers:x:1500:alice,bob`. What does the final field contain? machine-checked
- Select the THREE statements that correctly describe /etc/shadow on a typical Linux system. machine-checked