Advanced Access Control - Solaris 9 System Administrator - page 295

Answer A is correct. Answer B is the format of the profile attributes database
file. Answer C is the format of the authorization attributes database file.
Answer D is the format of the execution attributes database file.

Question 10

Which of the following commands will remove group read permission only from
file1 ?
❍ A. setfacl -s g::--- file1

❍ B. setfacl -m g::--- file1

❍ C. setfacl -d g::--- file1

❍ D. setfacl -c g::---file1

Answer B is correct. All the other answers use incorrect format for the
setfacl command and will fail.