Question 1040
Original unofficial RHEL 10 RHCSA skill-check scenario: An administrator changes a user's password but assumes that also removes an old account's sudo privileges. Which ongoing practice best prevents a recurrence?
Explanation
Correct Answer
In this RHEL 10 system administration case: An administrator changes a user's password but assumes that also removes an old account's sudo privileges. Underlying reason: Credential changes do not automatically rewrite sudoers policies. The most direct, approved resolution is: Manage password credentials and sudo authorization separately according to policy. Confirm it by checking: Password access and privileged command rights match their independent approved states. Sustain the fix by: Test both login and privilege expectations after role changes. This is the INTENDED response for the best ongoing operational safeguard. It is a knowledge-check explanation, not a verified hands-on Red Hat exam answer;
Incorrect Answers
Review password aging during account provisioning. That is not sufficient for the reported RHEL task, because credential changes do not automatically rewrite sudoers policies.
Validate configured shells during onboarding. That is not sufficient for the reported RHEL task, because credential changes do not automatically rewrite sudoers policies.
Review privileged grants by task rather than convenience. That is not sufficient for the reported RHEL task, because credential changes do not automatically rewrite sudoers policies.