Which command removes the default ACL entries from a directory named dir1?

• A. setfacl --remove-defaults dir1
• B. setfacl -d --remove dir1
• C. setfacl --clear-default dir1
• D. setfacl --remove-default dir1

Answer: (D)

Default ACLs define permissions that are automatically applied to new files created inside a directory. To remove those default entries from dir1, use the option that explicitly deletes the default ACLs. The correct command is setfacl --remove-default dir1. This clears any default ACLs so that new items created in dir1 won’t inherit those inherited permissions. Existing files inside the directory aren’t affected by this change; only future creations inherit from the directory’s ACLs. The other forms are not valid or do not perform the intended action, such as using a plural form or an option that doesn’t match the syntax for removing default entries.