CompTIA Linux+ practice questions

1. Question 1 of 25

   A server is experiencing intermittent connection issues. Some connections to the Internet work as intended, but some fail as if there is no connectivity. The systems administrator inspects the server configuration:

   

   Which of the following is MOST likely the cause of the issue?

   • AAn internal-only DNS server is configured.
   • BThe IP netmask is wrong for ens3.
   • CTwo default routes are configured.
   • DThe ARP table contains incorrect entries.

   Show answer

   Correct answer: B

   How others answered

   • B75%

   Explanation

   well the 89 networks definitely have a subnet ID problem, but I'm not sure if that's the reason there is a problem here.

   Adapted from community discussion by TheRealManish · 2023-11-26 · 4 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   View community discussion4

   Candidate context

   Question 1 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by XK0-005 or CertExamHQ.

   1. T

      TheRealManish

      2023-11-26

      Selected B4 upvotes

      well the 89 networks definitely have a subnet ID problem, but I'm not sure if that's the reason there is a problem here.

   2. C

      Ckl22

      2023-12-24

      Selected B1 upvote

      Technically B is the best answer here, but its not best practice to have two default-routes configured. It overcomplicates the network configuration, and also the troubleshooting when an issue arises. A floating static route for a specific destination address is the better solution.

   3. D

      Damon54

      2024-09-09

      Selected B1 upvote

      B. The IP netmask is wrong for ens3. - the IP of the GW is certainly wrong C. Two default routes are configured. - actually having a double default can use problems D. The ARP table contains incorrect entries. , you see two IP and MAC associated with the same network card...

   4. N

      Nvoid

      2023-11-29

      2 upvotes

      oh shit!!! good call Manish!! i just realized that the real answer is D, looks at `ens3` interface in the arp table!! it's showing twice and it's the main default gateway, you're a genius!! i'm glad a looked at this again!

2. Question 2 of 25

   A development team asks an engineer to guarantee the persistency of journal log files across system reboots. Which of the following commands would accomplish this task?

   • Agrep -i auto /etc/systemd/journald.conf && systemctl restart systemd-journald.service
   • Bcat /etc/systemd/journald.conf | awk '(print $1,$3)'
   • Csed -i 's/auto/persistent/g' /etc/systemd/journald.conf && sed -i 'persistent/s/ˆ#//q' /etc/systemd/journald.conf
   • Djournalctl --list-boots && systemctl restart systemd-journald.service

   Show answer

   Correct answer: C

   How others answered

   • C82%
   • A18%

   Explanation

   The command sed -i 's/auto/persistent/g' /etc/systemd/journald.conf && sed -i 'persistent/s/^#//q' /etc/systemd/journald.conf attempts to modify the /etc/systemd/journald.conf file to enable persistent journal storage. Here is a breakdown of the command: sed: a command-line utility for processing text -i: a command-line option that instructs sed to edit the file in place, rather than outputting the edited text to the console 's/auto/persistent/g': the sed command to be executed. This command consists of three parts: s: a command to substitute (replace) text auto: the search pattern to look for in the file persistent: the replacement pattern to replace the search pattern g: a global option that means to replace all occurrences of the search pattern in the file, not just the first occurrence.

   Adapted from community discussion by linux_admin · 2023-08-13 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   View community discussion4

   Candidate context

   Question 2 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by XK0-005 or CertExamHQ.

   1. L

      LKRISB

      2023-11-19

      4 upvotes

      C. sed -i 's/auto/persistent/g' /etc/systemd/journald.conf && sed -i '/persistent/s/^#//' /etc/systemd/journald.conf Explanation: The first part of the command, sed -i 's/auto/persistent/g' /etc/systemd/journald.conf, replaces all occurrences of "auto" with "persistent" in the /etc/systemd/journald.conf file. This ensures that the journal log files are set to be persistent. The second part of the command, sed -i '/persistent/s/^#//' /etc/systemd/journald.conf, removes the comment character '#' from the line that contains "persistent" in the /etc/systemd/journald.conf file. This activates the persistence configuration. By combining these two sed commands, the configuration file is modified to enable the persistence of journal log files across system reboots.

   2. M

      MissAllen

      2023-05-05

      4 upvotes

      I don't see any correct answer, but C is the closest. A is not correct because command one searches for the pattern "auto" in the file /etc/systemd/journald.conf, ignoring case. It will find it, thereby causing command two to execute. Restarting the journald service doesn't help if you made no changes to the .conf file!. Answer C searches for the pattern "auto", globally in the same file, but replaces it with the pattern "persistent", in the file (that is the -i option). That's great, but I tested it with command two and get an error. I suggest command two be the restart of the journald service.

   3. L

      linux_admin

      2023-08-13

      2 upvotes

      The command sed -i 'persistent/s/^#//q' /etc/systemd/journald.conf attempts to remove a comment symbol # before the word "persistent" in the /etc/systemd/journald.conf file. sed: a command-line utility for processing text -i: a command-line option that instructs sed to edit the file in place, rather than outputting the edited text to the console 'persistent/s/^#//q': the sed command to be executed. This command consists of three parts: persistent: the search pattern to look for in the file /: a delimiter that separates the search pattern from the replacement pattern ^#//q: the replacement pattern and a command to quit after the first match is found. The ^# means "replace the first occurrence of a comment symbol at the beginning of the line with nothing," and the q means "quit immediately after the replacement is made." Note that the persistent search pattern and the # comment symbol are separated by a caret (^) character, which is a regular expression metacharacter that matches the start of a line.

   4. L

      linux_admin

      2023-08-13

      Selected C2 upvotes

      The command sed -i 's/auto/persistent/g' /etc/systemd/journald.conf && sed -i 'persistent/s/^#//q' /etc/systemd/journald.conf attempts to modify the /etc/systemd/journald.conf file to enable persistent journal storage. Here is a breakdown of the command: sed: a command-line utility for processing text -i: a command-line option that instructs sed to edit the file in place, rather than outputting the edited text to the console 's/auto/persistent/g': the sed command to be executed. This command consists of three parts: s: a command to substitute (replace) text auto: the search pattern to look for in the file persistent: the replacement pattern to replace the search pattern g: a global option that means to replace all occurrences of the search pattern in the file, not just the first occurrence.

3. Question 3 of 25

   A Linux administrator was asked to run a container with the httpd server inside. This container should be exposed at port 443 of a Linux host machine while it internally listens on port 8443. Which of the following commands will accomplish this task?

   • Apodman run -d -p 443:8443 httpd
   • Bpodman run -d -p 8443:443 httpd
   • Cpodman run –d -e 443:8443 httpd
   • Dpodman exec -p 8443:443 httpd

   Show answer

   Correct answer: A

   How others answered

   • A57%
   • B43%

   Only 57% agreed on this answer — treat it as contested rather than settled.

   Explanation

   https://www.howtoforge.com/getting-started-with-podman-manage-images-container-and-volumes/ which is mentioned by Rob74613 also indicates host:container so A is correct Manage Containers At this stage, we learned about container image management. And the next step, we will learn how to create and manage containers with Podman. To create a new container, we can use 'podman run' command as below. podman run -d -p 8000:80 --name hakase-nginx docker.io/library/nginx The command will create a new container named 'hakase-nginx' based on the nginx image and will expose the port 8000 on the host machine. Details command options: -d - keep the container running in the background and just print the container ID as a result. -p 8000:80 - port mapping for container and the host system. Port 8000 on the host machine, and port 80 on the container. --name hakase-nginx - specify the container name with 'hakase-nginx'. Now display all running containers on the system.

   Adapted from community discussion by BryanSME · 2023-12-19 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   View community discussion4

   Candidate context

   Question 3 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by XK0-005 or CertExamHQ.

   1. B

      BryanSME

      2023-12-19

      2 upvotes

      https://www.howtoforge.com/getting-started-with-podman-manage-images-container-and-volumes/ which is mentioned by Rob74613 also indicates host:container so A is correct Manage Containers At this stage, we learned about container image management. And the next step, we will learn how to create and manage containers with Podman. To create a new container, we can use 'podman run' command as below. podman run -d -p 8000:80 --name hakase-nginx docker.io/library/nginx The command will create a new container named 'hakase-nginx' based on the nginx image and will expose the port 8000 on the host machine. Details command options: -d - keep the container running in the background and just print the container ID as a result. -p 8000:80 - port mapping for container and the host system. Port 8000 on the host machine, and port 80 on the container. --name hakase-nginx - specify the container name with 'hakase-nginx'. Now display all running containers on the system.

   2. L

      linux_admin

      2023-02-12

      4 upvotes

      B. podman run -d -p 8443:443 httpd The podman run command is used to run a new container, and the -d option is used to run the container in the background. The -p option is used to specify port mapping, where the first number is the port on the host machine, and the second number is the port inside the container. In this case, the container should be exposed at port 443 of the host machine, while it internally listens on port 8443.

   3. N

      nixonbii

      2023-02-25

      2 upvotes

      According to the Podman documentation, the host machine port is the first parameter in the command when used with the -p option: -p=[[ip:][hostPort]:]containerPort[/protocol] Under this construction, answer A would be correct. I know that Podman can be seamlessly aliased to Docker in Ubuntu but I am not sure if Docker uses a different construction. I also think that the fact that Podman is a daemonless application influences how it interfaces with the O/S ports and protocols.

   4. R

      Rob74613

      2023-06-27

      3 upvotes

      Answer is B Source: https://www.howtoforge.com/getting-started-with-podman-manage-images-container-and-volumes/ look at section 3: Manage Contatiners

4. Question 4 of 25

   A systems technician is working on deploying several microservices to various RPM-based systems, some of which could run up to two hours. Which of the following commands will allow the technician to execute those services and continue deploying other microservices within the same terminal section?

   • Agedit & disown
   • Bkill 9 %1
   • Cfg %1
   • Dbg %1 job name

   Show answer

   Correct answer: D

   How others answered

   • D91%

   Explanation

   D. bg %1 job name: This command puts the job associated with job ID %1 in the background and allows the technician to continue deploying other microservices in the same terminal session. The job name argument is optional and allows the technician to specify a custom name for the job. This option is suitable for the scenario described in the question. A. gedit & disown: This command opens the gedit text editor in the background and disowns it so that it is no longer associated with the terminal. This option is not relevant to deploying microservices and would not allow the technician to continue deploying other microservices in the same terminal session.

   Adapted from community discussion by linux_admin · 2024-08-13 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   View community discussion4

   Candidate context

   Question 4 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by XK0-005 or CertExamHQ.

   1. L

      linux_admin

      2024-08-13

      Selected D2 upvotes

      D. bg %1 job name: This command puts the job associated with job ID %1 in the background and allows the technician to continue deploying other microservices in the same terminal session. The job name argument is optional and allows the technician to specify a custom name for the job. This option is suitable for the scenario described in the question. A. gedit & disown: This command opens the gedit text editor in the background and disowns it so that it is no longer associated with the terminal. This option is not relevant to deploying microservices and would not allow the technician to continue deploying other microservices in the same terminal session.

   2. P

      Pinnubhai

      2024-07-08

      Selected D4 upvotes

      Answer D is the closest. A doesnt make any sense as what gedit will help in all this.

   3. K

      KnifeClown1

      2024-08-09

      Selected D1 upvote

      D. bg %1 job name The command bg %1 job name will allow the technician to execute the microservice in the background, allowing them to continue deploying other microservices within the same terminal session. The bg command stands for "background" and it is used to run a job in the background. The %1 is a job specifier, which specifies the job to be run in the background, and "job name" is the name given to the job. This allows the technician to keep the microservice running even after they have closed the terminal session.

   4. A

      angellorv

      2024-10-08

      2 upvotes

      Answer A: bg puts existing running processes in the background; while "& disown" sends the process to the bg upon execution which is what the question is implying. "...execute those services and continue deploying other microservices within the same terminal section? gedit - has nothing to do with the question or answer it's just the command used in the answer (bad choice); imagine answer A as: job name & disown

5. Question 5 of 25

   Employees in the finance department are having trouble accessing the file /opt/work/file. All IT employees can read and write the file. Systems administrator reviews the following output:

   

   Which of the following commands would permanently fix the access issue while limiting access to IT and finance department employees?

   • Achattr +i file
   • Bchown it:finance file
   • Cchmod 666 file
   • Dsetfacl -m g:finance:rw file

   Show answer

   Correct answer: D

   How others answered

   • D80%
   • B20%

   Explanation

   D. setfacl -m g:finance:rw file: This command sets a new ACL (access control list) on the file that grants read and write access to the finance group. This option would allow the finance department to access the file while also maintaining the existing permissions for IT employees. The + in the rw option means to add read and write permissions to the existing permissions. The g: specifies that the permission is being set for a group, and the finance is the name of the group.

   Adapted from community discussion by linux_admin · 2023-02-13 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   View community discussion4

   Candidate context

   Question 5 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by XK0-005 or CertExamHQ.

   1. L

      linux_admin

      2023-02-13

      Selected D3 upvotes

      D. setfacl -m g:finance:rw file: This command sets a new ACL (access control list) on the file that grants read and write access to the finance group. This option would allow the finance department to access the file while also maintaining the existing permissions for IT employees. The + in the rw option means to add read and write permissions to the existing permissions. The g: specifies that the permission is being set for a group, and the finance is the name of the group.

   2. K

      KnifeClown1

      2023-02-09

      Selected D2 upvotes

      The correct command to fix the access issue while limiting access to IT and finance department employees would be: D. setfacl -m g:finance:rw file This command sets a Access Control List (ACL) for the file with the permission "rw" (read and write) for the group "finance". This would allow the finance department employees to access the file with the necessary permissions, while the IT employees still retain their read and write permissions.

   3. T

      TheRealManish

      2022-11-25

      Selected D2 upvotes

      if we change the owner to finance, the IT group would then be considered "other" in permissions and have no rights. currently IT has rights,, so using setfacl to give finance RW rights would keep the IT groups, and give finance rights. D

   4. T

      TheRealManish

      2022-11-25

      1 upvote

      I disagree. if we change the owner to finance, the IT group would then be considered "other" in permissions and have no rights. currently IT has rights,, so using setfacl to give finance RW rights would keep the IT groups, and give finance rights. D

6. Question 6 of 25

   A Linux system is failing to boot. The following error is displayed in the serial console: [[1;33mDEPEND[Om] Dependency failed for /data. [[1;33mDEPEND[Om] Dependency failed for Local File Systems ... Welcome to emergency mode! After logging in, type "journalctl -xb" to viewsystem logs, "systemctl reboot" to reboot, "systemctl default" to try again to boot into default mode. Give root password for maintenance (or type Control-D to continue} Which of the following files will need to be modified for this server to be able to boot again?

   • A/etc/mtab
   • B/dev/sda
   • C/etc/fstab
   • D/ete/grub.conf

   Show answer

   Correct answer: C

   How others answered

   • C100%

   Explanation

   Based on the error message and symptoms described, the file that needs to be modified for this server to be able to boot again is option C, /etc/fstab. The error message indicates that the system is failing to start the /data partition, which is causing the system to go into emergency mode and preventing it from booting. The /data partition is most likely defined in the /etc/fstab file, which contains information about the file systems that are mounted at boot time.

   Adapted from community discussion by linux_admin · 2024-02-13 · 4 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   View community discussion4

   Candidate context

   Question 6 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by XK0-005 or CertExamHQ.

   1. L

      linux_admin

      2024-02-13

      Selected C4 upvotes

      Based on the error message and symptoms described, the file that needs to be modified for this server to be able to boot again is option C, /etc/fstab. The error message indicates that the system is failing to start the /data partition, which is causing the system to go into emergency mode and preventing it from booting. The /data partition is most likely defined in the /etc/fstab file, which contains information about the file systems that are mounted at boot time.

   2. K

      KnifeClown1

      2024-02-10

      Selected C2 upvotes

      The file /etc/fstab is used by the Linux system to mount file systems during boot. It contains information about file systems to be mounted, including the device name, mount point, file system type, and mount options. The error message indicates that a dependency has failed for "/data" and for local file systems, which suggests that there is an issue with one of the file systems listed in the /etc/fstab file. It is likely that the device name, mount point, file system type, or mount options for "/data" or another file system listed in /etc/fstab is incorrect or outdated, causing the system to fail to mount the file system during boot. The system administrator will need to access the /etc/fstab file and modify it to correct the issue and allow the system to boot successfully.

   3. T

      TheRealManish

      2023-11-26

      Selected C2 upvotes

      I pick C: fstab.. but i'm not really sure. . anyone else more sure?

   4. L

      lo_01234_ol

      2023-11-30

      Selected C1 upvote

      https://clay-atlas.com/us/blog/2021/07/25/linux-en-welcome-to-emergency-mode/

7. Question 7 of 25

   A systems administrator frequently connects to a remote host via SSH and a non-standard port. The systems administrator would like to avoid passing the port parameter on the command line every time. Which of the following files can be used to set a different port value for that host?

   • A/etc/ssh/sshd_config
   • B/etc/ssh/moduli
   • C~/.ssh/config
   • D~/.ssh/authorized_keys

   Show answer

   Correct answer: C

   How others answered

   • C91%

   Explanation

   The file that can be used to set a different port value for a specific remote host in SSH is option C, ~/.ssh/config. The ~/.ssh/config file is a per-user configuration file that SSH reads before connecting to a remote host. It allows users to set various SSH options for specific hosts, eliminating the need to pass these options on the command line every time.

   Adapted from community discussion by linux_admin · 2023-08-13 · 5 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   View community discussion4

   Candidate context

   Question 7 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by XK0-005 or CertExamHQ.

   1. L

      linux_admin

      2023-08-13

      Selected C5 upvotes

      The file that can be used to set a different port value for a specific remote host in SSH is option C, ~/.ssh/config. The ~/.ssh/config file is a per-user configuration file that SSH reads before connecting to a remote host. It allows users to set various SSH options for specific hosts, eliminating the need to pass these options on the command line every time.

   2. T

      TheRealManish

      2023-05-18

      4 upvotes

      A is where the server side config resides. C is where the client side config resides. they are asking about changes to client, which happen on C

   3. E

      e418137

      2024-08-09

      2 upvotes

      Ugh... these questions! "Which of the following files can be used to set a different port value for that host?" Only the server side can change the port value in '/etc/ssh/sshd_config'. By specifying the port on the client side in '~/.ssh/config', one need not specify the port every time from the command line, but this does not "set a different port value for that host." SMH. I surely hope the test is not like this.

   4. L

      lo_01234_ol

      2023-05-31

      Selected C2 upvotes

      Bottom of page here: https://askubuntu.com/questions/1110326/how-to-connect-to-a-certain-port-on-ssh

8. Question 8 of 25

   A cloud engineer needs to check the link status of a network interface named eth1 in a Linux server. Which of the following commands can help to achieve the goal?

   • Aifconfig hw eth1
   • Bnetstat -r eth1
   • Css -ti eth1
   • Dip link show eth1

   Show answer

   Correct answer: D

   How others answered

   • D75%
   • B25%

   Explanation

   looks like ip link show is the correct command as netstat -r is meant to view route information, and not the status of a network interface

   Adapted from community discussion by Ckl22 · 2023-12-29 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   View community discussion4

   Candidate context

   Question 8 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by XK0-005 or CertExamHQ.

   1. K

      KnifeClown1

      2024-02-10

      Selected D1 upvote

      The command "ip link show eth1" is the correct command to check the link status of the network interface named eth1 in a Linux server. The "ip" command is part of the iproute2 suite of networking tools, which provides a more advanced and flexible way of managing network interfaces compared to the traditional ifconfig command. The "link" subcommand of "ip" can be used to show information about network interfaces, including the link status. By adding the interface name (eth1), the command will only show information about the specified interface. The "ip link show eth1" command will display information about the eth1 interface, including the current status of the link, the speed and duplex of the connection, and the MTU (maximum transmission unit) of the interface. If the link is up and running, the status of the interface will be "UP", and if there is an issue with the link, the status will be "DOWN".

   2. L

      linux_admin

      2024-02-13

      Selected D1 upvote

      The command that can be used to check the link status of a network interface named eth1 in a Linux server is option D, ip link show eth1. The ip command is used to show or manipulate the network interfaces on a Linux system. The link option is used to display or modify the attributes of a network device, and the show option is used to display the specified device. To check the link status of eth1, the following command can be used: ip link show eth1 This command will display information about the eth1 network interface, including its status and any configured options.

   3. C

      Ckl22

      2023-12-29

      3 upvotes

      looks like ip link show is the correct command as netstat -r is meant to view route information, and not the status of a network interface

   4. A

      angellorv

      2024-04-09

      1 upvote

      Deprecated Linux networking commands and their replacements: ip, netstat and others https://dougvitale.wordpress.com/2011/12/21/deprecated-linux-networking-commands-and-their-replacements/

9. Question 9 of 25

   A Linux administrator needs to create a new user named user02. However, user02 must be in a different home directory, which is under /comptia/projects. Which of the following commands will accomplish this task?

   • Auseradd -d /comptia/projects user02
   • Buseradd -m /comptia/projects user02
   • Cuseradd -b /comptia/projects user02
   • Duseradd -s /comptia/projects user02

   Show answer

   Correct answer: A

   How others answered

   • A90%

   Explanation

   Answer is A -d, --home HOME_DIR The new user is created using HOME_DIR as the value for the user's login directory. The default is too append the LOGIN name to BASE_DIR and use that as the login directory name. The directory HOME_DIR does not have to exist but is not created if it's missing. -b, --base-dir BASE_DIR https://www.computerhope.com/unix/useradd.htm

   Adapted from community discussion by Ckl22 · 2023-12-23 · 4 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   View community discussion4

   Candidate context

   Question 9 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by XK0-005 or CertExamHQ.

   1. C

      Ckl22

      2023-12-23

      Selected A4 upvotes

      Answer is A -d, --home HOME_DIR The new user is created using HOME_DIR as the value for the user's login directory. The default is too append the LOGIN name to BASE_DIR and use that as the login directory name. The directory HOME_DIR does not have to exist but is not created if it's missing. -b, --base-dir BASE_DIR https://www.computerhope.com/unix/useradd.htm

   2. L

      linux_admin

      2024-02-13

      Selected A3 upvotes

      The command that can be used to create a new user named user02 with a different home directory under /comptia/projects is option A, useradd -d /comptia/projects user02. The -d option is used to specify the home directory of the new user. By default, the useradd command creates the home directory of the new user in /home. To specify a different home directory for the new user, the -d option should be used, followed by the path to the new home directory.

   3. K

      KnifeClown1

      2024-02-09

      Selected A2 upvotes

      A. useradd -d /comptia/projects user02 The command useradd -d /comptia/projects user02 will create a new user named user02 and set its home directory to /comptia/projects/user02. The -d option is used to specify the home directory for the user. The useradd command is used to add a new user to the system, and it creates the user's home directory by default, so there is no need to use the -m option in this case.

   4. T

      TheRealManish

      2023-11-29

      2 upvotes

      Thanks for helping me look at this again. I tried all of the options -d : created the /comptia/projects folder and set user folder to /comptia/projects -m : useradd -m is not valid.. even though -m is an option, it does not seem to work solo -b : this created a folder called user2 in /comptia/projects and assigned that as the user homedir -s : sets the shell B doesn't work. so that brings us back to what is being asked here. is it asking us to assign the user home dir to /comptia/projects? then it's a. if it's asking to assign the homedir to /comptia/projects/user2, then it's c

10. Question 10 of 25

    One leg of an LVM-mirrored volume failed due to the underlying physical volume, and a systems administrator is troubleshooting the issue. The following output has been provided:

    

    Given this scenario, which of the following should the administrator do to recover this volume?

    • AReboot the server. The volume will automatically go back to linear mode.
    • BReplace the failed drive and reconfigure the mirror.
    • CReboot the server. The volume will revert to stripe mode.
    • DRecreate the logical volume.

    Show answer

    Correct answer: B

    How others answered

    • B100%

    Explanation

    To recover an LVM-mirrored volume after a failure in one of its physical volumes, the systems administrator should replace the failed drive and reconfigure the mirror. Therefore, the correct option is B. LVM mirroring provides redundancy by creating an identical copy of a logical volume on another physical volume. If one of the physical volumes fails, the system can continue to function using the copy on the remaining volume. To recover the volume, the failed physical volume should be replaced and the mirror should be reconfigured to ensure redundancy is restored. Depending on the configuration of the volume, the system may need to be rebooted to recognize the new physical volume.

    Adapted from community discussion by linux_admin · 2024-02-13 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Red Hat documentation

    View community discussion3

    Candidate context

    Question 10 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by XK0-005 or CertExamHQ.

    1. L

       linux_admin

       2024-02-13

       Selected B2 upvotes

       To recover an LVM-mirrored volume after a failure in one of its physical volumes, the systems administrator should replace the failed drive and reconfigure the mirror. Therefore, the correct option is B. LVM mirroring provides redundancy by creating an identical copy of a logical volume on another physical volume. If one of the physical volumes fails, the system can continue to function using the copy on the remaining volume. To recover the volume, the failed physical volume should be replaced and the mirror should be reconfigured to ensure redundancy is restored. Depending on the configuration of the volume, the system may need to be rebooted to recognize the new physical volume.

    2. C

       Ckl22

       2023-12-23

       Selected B1 upvote

       Answer is B To rebuild the mirrored volume, you replace the broken drive and recreate the physical volume https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/logical_volume_manager_administration/mirrorrecover

    3. A

       Alizadeh

       2024-08-16

       Selected B1 upvote

       The correct answer is B. Replace the failed drive and reconfigure the mirror.

11. Question 11 of 25

    Select 2

    A systems administrator is notified that the mysqld process stopped unexpectedly. The systems administrator issues the following command: sudo grep –i -r ‘out of memory’ /var/log The output of the command shows the following: kernel: Out of memory: Kill process 9112 (mysqld) score 511 or sacrifice child. Which of the following commands should the systems administrator execute NEXT to troubleshoot this issue? (Select two).

    • Afree -h
    • Bnc -v 127.0.0.1 3306
    • Crenice -15 $( pidof mysql )
    • Dlsblk
    • Ekillall -15
    • Fvmstat -a 1 4

    Show answer

    Correct answer: A, F

    How others answered

    • AF100%

    Explanation

    A: i like A because it will tell us if we need to add more swap space. B: this is netcat command so not relevant C: we might need to renice, in the event that a child process was killed, but we dont know if it was the child process or not. but regargles, -15 is not a very nice number. D: listing storage doesnt help really E: invalid syntax F: not sure how this info will help. By process of elimination I am going with A to check if we can add some swap.. and F to get an overall fee for how the system is doing.. this question is ridiculus

    Adapted from community discussion by TheRealManish · 2023-11-25 · 5 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion4

    Candidate context

    Question 11 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by XK0-005 or CertExamHQ.

    1. T

       TheRealManish

       2023-11-25

       Selected A, F5 upvotes

       A: i like A because it will tell us if we need to add more swap space. B: this is netcat command so not relevant C: we might need to renice, in the event that a child process was killed, but we dont know if it was the child process or not. but regargles, -15 is not a very nice number. D: listing storage doesnt help really E: invalid syntax F: not sure how this info will help. By process of elimination I am going with A to check if we can add some swap.. and F to get an overall fee for how the system is doing.. this question is ridiculus

    2. L

       linux_admin

       2024-02-13

       2 upvotes

       Option B (nc -v 127.0.0.1 3306) is used to check if the MySQL server is running and accepting connections. It will not help troubleshoot an out-of-memory issue. Option C (renice -15 $( pidof mysql )) is used to change the priority of a running process. It will not help troubleshoot an out-of-memory issue. Option D (lsblk) is used to list information about all available block devices, including their mount points. It will not help troubleshoot an out-of-memory issue. Option E (killall -15) is used to send a signal to all processes with a particular name. It will not help troubleshoot an out-of-memory issue.

    3. N

       Nvoid

       2023-11-25

       Selected A, F2 upvotes

       We can eliminate B/C/D because they have nothing to do with it, which leaves us to `troubleshoot with A/E/F` We eliminate E because that is killing processes, not troubleshooting. We're left with A & F. A: Troubleshoot memory = yes B: open netcat on port 3306 = no C: renice -15 = no D: show block devices = no E: kill all processes in -15 = no F: Troubleshoot memory = yes

    4. V

       Veteran903

       2023-11-17

       2 upvotes

       Hello guys, the right answers are C and F, A free -h only provides info about system memory and swap space while vmstat reports virtual memory statistics, the reason why you have to pick C is because you are not killing the process itself but "sacrificing the child", doing this you will about killing or stopping the process, CompTIA wording is brutal!!! lol

12. Question 12 of 25

    A Linux user reported the following error after trying to connect to the system remotely: ssh: connect to host 10.0.1.10 port 22: Resource temporarily unavailable The Linux systems administrator executed the following commands in the Linux system while trying to diagnose this issue:

    

    Which of the following commands will resolve this issue?

    • Afirewall-cmd --zone=public --permanent --add-service=22
    • Bsystemctl enable firewalld; systemctl restart firewalld
    • Cfirewall-cmd --zone=public --permanent --add-service=ssh
    • Dfirewall-cmd --zone=public --permanent --add-port=22/udp

    Show answer

    Correct answer: C

    How others answered

    • C100%

    Explanation

    The command firewall-cmd --zone=public --permanent --add-service=ssh is used to add the SSH service to the list of allowed services in the firewall configuration of a Linux system. Here is a breakdown of the command: firewall-cmd is the command-line tool used to manage the firewall configuration in a Linux system that uses the firewalld firewall daemon. --zone=public specifies the firewall zone to which the rule should be applied. The public zone is one of the predefined zones in firewalld that is typically used for public-facing network interfaces. --permanent specifies that the rule should be made persistent across firewall reloads or system reboots. --add-service=ssh specifies that the ssh service should be allowed in the firewall configuration. The ssh service is a predefined service in firewalld that allows incoming SSH traffic on port 22.

    Adapted from community discussion by linux_admin · 2023-02-13 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Red Hat documentation

    View community discussion4

    Candidate context

    Question 12 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by XK0-005 or CertExamHQ.

    1. L

       linux_admin

       2023-02-13

       Selected C3 upvotes

       The command firewall-cmd --zone=public --permanent --add-service=ssh is used to add the SSH service to the list of allowed services in the firewall configuration of a Linux system. Here is a breakdown of the command: firewall-cmd is the command-line tool used to manage the firewall configuration in a Linux system that uses the firewalld firewall daemon. --zone=public specifies the firewall zone to which the rule should be applied. The public zone is one of the predefined zones in firewalld that is typically used for public-facing network interfaces. --permanent specifies that the rule should be made persistent across firewall reloads or system reboots. --add-service=ssh specifies that the ssh service should be allowed in the firewall configuration. The ssh service is a predefined service in firewalld that allows incoming SSH traffic on port 22.

    2. L

       linux_admin

       2023-02-13

       3 upvotes

       When the command is executed, the firewall configuration is updated to allow incoming SSH traffic on port 22 for the public zone, and the configuration change is made persistent across firewall reloads or system reboots. This allows SSH connections to be established with the system from remote hosts, provided that the SSH service is running on the system and the SSH port is not blocked by any other firewall or security measure.

    3. N

       Nvoid

       2022-11-25

       Selected C2 upvotes

       https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/security_guide/sec-working_with_zones

    4. Q

       Qubert2

       2024-10-20

       1 upvote

       C but it won't work until the firewall is reloaded with: firewall-cmd --reload

13. Question 13 of 25

    A Linux administrator copied a Git repository locally, created a feature branch, and committed some changes to the feature branch. Which of the following Git actions should the Linux administrator use to publish the changes to the main branch of the remote repository?

    • Arebase
    • Btag
    • Ccommit
    • Dpush

    Show answer

    Correct answer: D

    How others answered

    • D100%

    Explanation

    In Git, the "push" command is used to publish local changes to a remote repository. When the administrator makes changes to the feature branch, the changes are only available in the local repository. If the changes are ready to be merged into the main branch of the remote repository, the administrator can use the "push" command to upload the changes to the remote repository. This will make the changes available to others who are also working on the same repository. Before pushing the changes to the remote repository, the administrator should first ensure that the changes are committed to the local repository using the "commit" command. The administrator should also ensure that the local repository is up-to-date with the remote repository by using the "pull" command to download any changes made by others before attempting to push the changes. Once the changes are committed and the local repository is up-to-date, the administrator can use the "push" command to upload the changes to the remote repository.

    Adapted from community discussion by linux_admin · 2023-02-13 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion4

    Candidate context

    Question 13 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by XK0-005 or CertExamHQ.

    1. L

       linux_admin

       2023-02-13

       Selected D3 upvotes

       In Git, the "push" command is used to publish local changes to a remote repository. When the administrator makes changes to the feature branch, the changes are only available in the local repository. If the changes are ready to be merged into the main branch of the remote repository, the administrator can use the "push" command to upload the changes to the remote repository. This will make the changes available to others who are also working on the same repository. Before pushing the changes to the remote repository, the administrator should first ensure that the changes are committed to the local repository using the "commit" command. The administrator should also ensure that the local repository is up-to-date with the remote repository by using the "pull" command to download any changes made by others before attempting to push the changes. Once the changes are committed and the local repository is up-to-date, the administrator can use the "push" command to upload the changes to the remote repository.

    2. N

       Nvoid

       2022-11-25

       3 upvotes

       in my experience passing 4 other exams using ET, if the questions are bad or have errors from what the original should/could be, it probably won't be on the test. The solid ones that are no question usually on legit.

    3. V

       Veteran903

       2022-11-17

       3 upvotes

       The amount of wrong answers is staggering, Im stating to doubt if these are real examn questions

    4. Q

       Qubert2

       2024-10-20

       Selected D1 upvote

       There are several steps to publish local, committed changes on a local branch to the remote main branch. The final command is "push", so D is correct, but it's a bad question.

14. Question 14 of 25

    User1 is a member of the accounting group. Members of this group need to be able to execute but not make changes to a script maintained by User2. The script should not be accessible to other users or groups. Which of the following will give proper access to the script?

    • Achown user2:accounting script.sh chmod 750 script.sh
    • Bchown user1:accounting script.sh chmod 777 script.sh
    • Cchown accounting:user1 script.sh chmod 057 script.sh
    • Dchown user2:accounting script.sh chmod u+x script.sh

    Show answer

    Correct answer: A

    How others answered

    • A100%

    Explanation

    The correct option is A: chown user2:accounting script.sh chmod 750 script.sh. Explanation: The chown command will change the owner of the file to user2 and the group to accounting. The chmod command will change the file permissions to 750, which will allow the owner (user2) to read, write, and execute the file, members of the accounting group to read and execute the file, and deny all other users from accessing the file. This configuration will allow members of the accounting group to execute the script but not make any changes to it, which is the desired outcome.

    Adapted from community discussion by linux_admin · 2024-02-13 · 5 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion4

    Candidate context

    Question 14 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by XK0-005 or CertExamHQ.

    1. L

       linux_admin

       2024-02-13

       Selected A5 upvotes

       The correct option is A: chown user2:accounting script.sh chmod 750 script.sh. Explanation: The chown command will change the owner of the file to user2 and the group to accounting. The chmod command will change the file permissions to 750, which will allow the owner (user2) to read, write, and execute the file, members of the accounting group to read and execute the file, and deny all other users from accessing the file. This configuration will allow members of the accounting group to execute the script but not make any changes to it, which is the desired outcome.

    2. M

       MissAllen

       2023-11-05

       4 upvotes

       Answer A is correct. Chown command syntax is: chown username:groupname filename Adding the accounting group to the file and granting rwxr-x--- to the file provides the proper access.

    3. R

       Rob74613

       2024-06-28

       Selected A2 upvotes

       For sure A Keeps full control to User2 Grants r-x (read and execute) to the accounting group Denies any permissions to all other users

    4. W

       wajeed_sulu

       2024-01-12

       Selected A1 upvote

       I believe A is the correct answer with proper access permissions.

15. Question 15 of 25

    A Linux administrator found many containers in an exited state. Which of the following commands will allow the administrator to clean up the containers in an exited state?

    • Adocker rm --all
    • Bdocker rm $(docker ps -aq)
    • Cdocker images prune *
    • Ddocker rm --state exited

    Show answer

    Correct answer: B

    How others answered

    • B91%

    Explanation

    B. docker rm $(docker ps -aq) Explanation: The command docker ps is used to list running containers. The option -a is used to list all containers, including those in an exited state. The option -q is used to display only the container IDs. The command docker rm is used to remove containers. By using $(docker ps -aq) as a parameter to docker rm, it will remove all containers returned by the docker ps -aq command, which includes containers in an exited state.

    Adapted from community discussion by LKRISB · 2023-05-19 · 4 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion4

    Candidate context

    Question 15 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by XK0-005 or CertExamHQ.

    1. L

       LKRISB

       2023-05-19

       4 upvotes

       B. docker rm $(docker ps -aq) Explanation: The command docker ps is used to list running containers. The option -a is used to list all containers, including those in an exited state. The option -q is used to display only the container IDs. The command docker rm is used to remove containers. By using $(docker ps -aq) as a parameter to docker rm, it will remove all containers returned by the docker ps -aq command, which includes containers in an exited state.

    2. D

       DRVision

       2023-12-08

       Selected B3 upvotes

       I think B has a typo, it should be $(docker ps -aq --filter status=exited) otherwise you removed all the containers

    3. P

       POGActual

       2023-03-29

       2 upvotes

       It unfortunately cant be B, as that would remove all container. "You can review the containers on your system with docker ps. Adding the -a flag will show all containers. When you’re sure you want to delete them, you can add the -q flag to supply the IDs to the docker stop and docker rm commands: docker stop $(docker ps -a -q) docker rm $(docker ps -a -q) https://www.digitalocean.com/community/tutorials/how-to-remove-docker-images-containers-and-volumes

    4. C

       Ckl22

       2022-12-20

       Selected B1 upvote

       B is the answer "The docker ps command only shows running containers by default. To see all containers, use the -a (or --all) flag" "The example below uses docker ps -q to print the IDs of all containers that have exited (--filter status=exited), and removes those containers with the docker rm command" https://docs.docker.com/engine/reference/commandline/docker/

16. Question 16 of 25

    A Linux administrator reviews a set of log output files and needs to identify files that contain any occurrence of the word denied. All log files containing entries in uppercase or lowercase letters should be included in the list. Which of the following commands should the administrator use to accomplish this task?

    • Afind . -type f -print | xrags grep -ln denied
    • Bfind . -type f -print | xrags grep -nv denied
    • Cfind . -type f -print | xrags grep -wL denied
    • Dfind . -type f -print | xrags grep -li denied

    Show answer

    Correct answer: D

    How others answered

    • D100%

    Explanation

    D. find . -type f -print | xargs grep -li denied Explanation: find . -type f -print finds all files (-type f) in the current directory and its subdirectories (.) and prints their names (-print). xargs passes the list of file names to the grep command as arguments. grep -li denied searches for the word "denied" in the files, ignoring case (-i) and printing only the names of the files that contain the word (-l). Option A (grep -ln denied) would print the name of the file and the line number of the occurrence of "denied", but it doesn't meet the requirement of including both uppercase and lowercase occurrences. Option B (grep -nv denied) would print the name of the file and the line number of all the lines that do not contain "denied", which is not what is required. Option C (grep -wL denied) would print the name of the files that do not contain the exact word "denied" (i.e., it would exclude files that contain "permission denied" or "access denied"), which is also not what is required.

    Adapted from community discussion by linux_admin · 2024-02-13 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion4

    Candidate context

    Question 16 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by XK0-005 or CertExamHQ.

    1. L

       linux_admin

       2024-02-13

       Selected D3 upvotes

       D. find . -type f -print | xargs grep -li denied Explanation: find . -type f -print finds all files (-type f) in the current directory and its subdirectories (.) and prints their names (-print). xargs passes the list of file names to the grep command as arguments. grep -li denied searches for the word "denied" in the files, ignoring case (-i) and printing only the names of the files that contain the word (-l). Option A (grep -ln denied) would print the name of the file and the line number of the occurrence of "denied", but it doesn't meet the requirement of including both uppercase and lowercase occurrences. Option B (grep -nv denied) would print the name of the file and the line number of all the lines that do not contain "denied", which is not what is required. Option C (grep -wL denied) would print the name of the files that do not contain the exact word "denied" (i.e., it would exclude files that contain "permission denied" or "access denied"), which is also not what is required.

    2. K

       KnifeClown1

       2024-02-09

       Selected D1 upvote

       D. find . -type f -print | xargs grep -li denied The command find . -type f -print | xargs grep -li denied will accomplish the task. The find command is used to search for files in the current directory and all its subdirectories. The -type f option limits the search to regular files, and the -print option causes the names of the files to be printed. The output from the find command is then passed to xargs, which is used to execute the grep command on each file. The grep command is used to search for occurrences of the word "denied". The -l option causes grep to print only the names of the files that contain a match, and the -i option causes grep to perform a case-insensitive search, so that both uppercase and lowercase occurrences of the word "denied" will be matched.

    3. M

       MissAllen

       2023-11-05

       3 upvotes

       I disagree. Answer D is better. We need grep -i (ignore case) to ensure we search for upper or lowercase denied.

    4. T

       TheRealManish

       2023-11-06

       2 upvotes

       @MissAllen , i'm up voting you, because all of my research agrees that -i is to ignore case. However, on my centos VM, when i don't use -i it's still ignoring case by default, weird.

17. Question 17 of 25

    A systems administrator is encountering performance issues. The administrator runs a command with the following output: 09:10:18 up 457 days, 32min, 5 users, load average: 4.22 6.63 5.58 The Linux server has the following system properties: CPU 4 vCPU - Memory: 50GB - Which of the following accurately describes this situation?

    • AThe system is under CPU pressure and will require additional vCPUs.
    • BThe system has been running for over a year and requires a reboot.
    • CToo many users are currently logged in to the system.
    • DThe system requires more memory.

    Show answer

    Correct answer: A

    How others answered

    • A64%
    • B36%

    Only 64% agreed on this answer — treat it as contested rather than settled.

    Explanation

    Disagree. The system REQUIRES a reboot? I have seen plenty of servers running for more than a year. The uptime command shows that even with 4 vCPUs they are overloaded. Answer A is better.

    Adapted from community discussion by MissAllen · 2022-11-05 · 10 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion4

    Candidate context

    Question 17 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by XK0-005 or CertExamHQ.

    1. M

       MissAllen

       2022-11-05

       10 upvotes

       Disagree. The system REQUIRES a reboot? I have seen plenty of servers running for more than a year. The uptime command shows that even with 4 vCPUs they are overloaded. Answer A is better.

    2. D

       DRVision

       2023-12-08

       Selected A2 upvotes

       The output indicates that the system is under CPU pressure. The load average numbers represent the system load time over a period of 1, 5, and 15 minutes. In this case, all three numbers are higher than the number of vCPUs available (4), which suggests that the CPU is a bottleneck. Therefore, the correct answer is A. The system is under CPU pressure and will require additional vCPUs. Here’s a brief explanation of the other options: B. The system has been running for over a year and requires a reboot. While it’s true that the system has been running for over a year, this doesn’t necessarily mean it requires a reboot. Linux systems are capable of running for many years without needing a reboot. C. Too many users are currently logged in to the system. The number of users currently logged in (5) should not be a problem unless they are all running processes that are heavily consuming resources. D. The system requires more memory. There’s no information given that suggests the system is low on memory. The performance issue seems to be related to the CPU, not memory.

    3. S

       SaadiaS

       2022-11-21

       5 upvotes

       https://www.digitalocean.com/community/tutorials/load-average-in-linux

    4. K

       KnifeClown1

       2023-02-09

       Selected A1 upvote

       The correct answer is: A. The system is under CPU pressure and will require additional vCPUs. The load average (4.22 6.63 5.58) indicates that the system is under CPU pressure. The load average is the average number of tasks waiting for CPU time over a given time interval. If the load average is consistently high, it can mean that the system is struggling to keep up with demand and that more CPU resources are needed. In this case, the administrator may need to consider adding additional vCPUs to alleviate the CPU pressure.

18. Question 18 of 25

    Which of the following enables administrators to configure and enforce MFA on a Linux system?

    • AKerberos
    • BSELinux
    • CPAM
    • DPKI

    Show answer

    Correct answer: C

    How others answered

    • C100%

    Explanation

    The technology that enables administrators to configure and enforce Multi-Factor Authentication (MFA) on a Linux system is: C. PAM (Pluggable Authentication Modules) Explanation: PAM (Pluggable Authentication Modules) is a framework that allows the integration of multiple authentication schemes for Linux systems. It provides a way for administrators to configure and enforce MFA for user authentication by enabling the use of multiple factors, such as passwords, smart cards, biometrics, and others. PAM allows the configuration of authentication policies for different services and applications running on a Linux system. This makes it possible to implement MFA for specific applications or services, rather than applying it to the entire system. Additionally, PAM allows administrators to configure different authentication methods for different users or user groups, depending on their access requirements.

    Adapted from community discussion by linux_admin · 2024-08-13 · 4 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • redhat.com documentation

    View community discussion4

    Candidate context

    Question 18 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by XK0-005 or CertExamHQ.

    1. L

       linux_admin

       2024-08-13

       Selected C4 upvotes

       The technology that enables administrators to configure and enforce Multi-Factor Authentication (MFA) on a Linux system is: C. PAM (Pluggable Authentication Modules) Explanation: PAM (Pluggable Authentication Modules) is a framework that allows the integration of multiple authentication schemes for Linux systems. It provides a way for administrators to configure and enforce MFA for user authentication by enabling the use of multiple factors, such as passwords, smart cards, biometrics, and others. PAM allows the configuration of authentication policies for different services and applications running on a Linux system. This makes it possible to implement MFA for specific applications or services, rather than applying it to the entire system. Additionally, PAM allows administrators to configure different authentication methods for different users or user groups, depending on their access requirements.

    2. K

       KnifeClown1

       2024-08-09

       Selected C2 upvotes

       C. PAM (Pluggable Authentication Modules) enables administrators to configure and enforce multi-factor authentication (MFA) on a Linux system. PAM is a modular architecture that allows system administrators to specify how authentication should be performed on their systems, including the use of MFA. This can be achieved by adding additional modules to the PAM configuration, such as modules for OTPs, smart cards, or biometric authentication. PAM can also be used to integrate with external authentication systems, such as LDAP, Kerberos, or RADIUS, to enforce MFA for authentication to various services on the Linux system.

    3. M

       MissAllen

       2024-05-05

       4 upvotes

       Pluggable Authentication Modules (PAM) provide for multi-factor authentication on Linux. Answer C.

    4. S

       SaadiaS

       2024-05-22

       3 upvotes

       C is correct. Pluggable Authentication Modules allow Linux to work with Google Authenticator and other OTP tools to add two-factor security to your system. https://www.redhat.com/sysadmin/mfa-linux

19. Question 19 of 25

    A systems administrator has been unable to terminate a process. Which of the following should the administrator use to forcibly stop the process?

    • Akill -1
    • Bkill -3
    • Ckill -15
    • Dkill -HUP
    • Ekill -TERM

    Show answer

    Correct answer: C

    How others answered

    • C50%
    • B50%

    Only 50% agreed on this answer — treat it as contested rather than settled.

    Explanation

    It seems to me that the correct answer is not here. Kill -9 is the right answer, all of the other answers are wrong. Kill -1 restart process kill -3 send a control c that can be ignored kill - 15 = request a graceful shutdown that can be ignored kill -HUP same as kill -1 kill -TERM same as kill -15

    Adapted from community discussion by TheRealManish · 2022-11-19 · 13 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion4

    Candidate context

    Question 19 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by XK0-005 or CertExamHQ.

    1. T

       TheRealManish

       2022-11-19

       13 upvotes

       It seems to me that the correct answer is not here. Kill -9 is the right answer, all of the other answers are wrong. Kill -1 restart process kill -3 send a control c that can be ignored kill - 15 = request a graceful shutdown that can be ignored kill -HUP same as kill -1 kill -TERM same as kill -15

    2. B

       Blatzzy

       2023-12-11

       3 upvotes

       To forcibly stop a process, the administrator should use the -9 signal, also known as SIGKILL. Therefore, the correct option is not listed among the provided choices. If you have the option to provide a custom signal, you can use kill -9 followed by the process ID. In this case, if you must choose from the given options: B. kill -3 sends a SIGQUIT signal, which can also terminate a process, but it allows the process to perform a core dump before exiting. It's a bit less forceful than SIGKILL. So, the closest option among the given choices is B. kill -3. However, if the goal is to forcefully terminate the process, using kill -9 would be more appropriate.

    3. L

       linux_admin

       2023-02-14

       2 upvotes

       A. kill -1 (or kill -SIGHUP) - Sends a SIGHUP signal to the specified process, which typically requests the process to reload its configuration files. This may not terminate the process, so it may not be the best choice for forcibly stopping a process. B. kill -3 (or kill -SIGQUIT) - Sends a SIGQUIT signal to the specified process, which requests the process to terminate and create a core dump. This may not terminate the process, so it may not be the best choice for forcibly stopping a process. C. kill -15 (or kill -SIGTERM) - Sends a SIGTERM signal to the specified process, which requests the process to terminate gracefully. This is the default signal and is the recommended way to stop a process, as it allows the process to clean up its resources before exiting. However, some processes may not respond to the SIGTERM signal, in which case a more forceful approach may be necessary.

    4. S

       salthehash

       2023-12-02

       Selected C1 upvote

       The -15 signal (SIGTERM) is used to request a process to terminate. It allows the process to perform cleanup operations before exiting. If a process doesn't respond to SIGTERM, more aggressive signals like -9 (SIGKILL) can be used, but it does not allow the process to perform any cleanup. The administrator might resort to using -9 only if a process is unresponsive to the regular termination signals.

20. Question 20 of 25

    At what point is the Internal Certificate Authority (ICA) created?

    • ADuring the primary Security Management Server installation process.
    • BUpon creation of a certificate.
    • CWhen an administrator decides to create one.
    • DWhen an administrator initially logs into SmartConsole.

    Show answer

    Correct answer: A

    How others answered

    • A83%
    • C17%

    Explanation

    The ICA is created during the installation of the primary Security Management Server in a Check Point firewall environment. The ICA is a critical component that allows administrators to manage security policies and secure communication between security gateways in the Check Point infrastructure. The ICA provides a way to issue and manage digital certificates that are used to secure communication between the Check Point Security Management Server and the gateways. During the installation process, the ICA is created automatically, and it generates the initial CA certificate, which is used to sign other digital certificates issued to gateways, Security Management Servers, and other Check Point components. Once the ICA is created, it can be used to issue and manage certificates, which are used to establish secure communication between Check Point components. Therefore, the correct answer is: A. During the primary Security Management Server installation process.

    Adapted from community discussion by linux_admin · 2024-02-14 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion4

    Candidate context

    Question 20 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by XK0-005 or CertExamHQ.

    1. L

       linux_admin

       2024-02-14

       Selected A3 upvotes

       The ICA is created during the installation of the primary Security Management Server in a Check Point firewall environment. The ICA is a critical component that allows administrators to manage security policies and secure communication between security gateways in the Check Point infrastructure. The ICA provides a way to issue and manage digital certificates that are used to secure communication between the Check Point Security Management Server and the gateways. During the installation process, the ICA is created automatically, and it generates the initial CA certificate, which is used to sign other digital certificates issued to gateways, Security Management Servers, and other Check Point components. Once the ICA is created, it can be used to issue and manage certificates, which are used to establish secure communication between Check Point components. Therefore, the correct answer is: A. During the primary Security Management Server installation process.

    2. K

       KnifeClown1

       2024-02-08

       Selected A2 upvotes

       "The ICA (Internal Certificate Authority) is created on the Security Management Server when you configure it for the first time". Or in other words, its created in it's installation

    3. K

       kahge

       2024-08-25

       2 upvotes

       its created when SIC is being initialized But is used for other purposes https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide/Topics-SECMG/Secure-Internal-Communication.htm#:~:text=The%20ICA%20issues%20certificates%20for,Gateways%20and%20Security%20Management%20Servers.

    4. T

       TheRealManish

       2023-11-27

       1 upvote

       Unless we are specifically referring to the Checkpoint branded application called "Security Management Server". according to their install guide ICA gets installed during installation

21. Question 21 of 25

    A Linux administrator would like to use systemd to schedule a job to run every two hours. The administrator creates timer and service definitions and restarts the server to load these new configurations. After the restart, the administrator checks the log file and notices that the job is only running daily. Which of the following is MOST likely causing the issue?

    • AThe checkdiskspace.service is not running.
    • BThe checkdiskspace.service needs to be enabled.
    • CThe OnCalendar schedule is incorrect in the timer definition.
    • DThe system-daemon services need to be reloaded.

    Show answer

    Correct answer: C

    How others answered

    • C100%

    Explanation

    When you restart a Linux server, the init system (such as systemd) automatically reloads the unit files, so you don't need to explicitly run the command systemctl daemon-reload to reread the unit files. The systemctl daemon-reload command is typically used when you make changes to the unit files manually and want to inform the init system to reload the updated configuration without restarting the entire server. This command tells systemd to reparse the unit files and update its internal configuration. However, during a server restart, systemd performs a complete reload of the unit files as part of the initialization process. It reads the unit files from their defined locations and applies the configuration without the need for an explicit daemon-reload command. So, when you restart the server, systemd will automatically reload the unit files, ensuring that the updated configuration is applied, and the services are started based on the latest settings. The correct answer is C. :)

    Adapted from community discussion by mrtwister76 · 2023-05-26 · 4 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion4

    Candidate context

    Question 21 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by XK0-005 or CertExamHQ.

    1. M

       mrtwister76

       2023-05-26

       4 upvotes

       When you restart a Linux server, the init system (such as systemd) automatically reloads the unit files, so you don't need to explicitly run the command systemctl daemon-reload to reread the unit files. The systemctl daemon-reload command is typically used when you make changes to the unit files manually and want to inform the init system to reload the updated configuration without restarting the entire server. This command tells systemd to reparse the unit files and update its internal configuration. However, during a server restart, systemd performs a complete reload of the unit files as part of the initialization process. It reads the unit files from their defined locations and applies the configuration without the need for an explicit daemon-reload command. So, when you restart the server, systemd will automatically reload the unit files, ensuring that the updated configuration is applied, and the services are started based on the latest settings. The correct answer is C. :)

    2. K

       KnifeClown1

       2023-02-12

       Selected C4 upvotes

       When using systemd timers, the "OnCalendar" option is used to define when the job should run. By default, systemd timers are configured to use UTC time. If the administrator specified an incorrect OnCalendar schedule, the timer may not run as expected. To schedule a job to run every two hours, the correct OnCalendar schedule should be "0 */2 * * *". This will run the job every two hours, starting at the top of the hour (i.e., at 0 minutes past the hour). If the administrator did not specify the correct OnCalendar schedule, the timer may be set to run daily or at some other incorrect interval, which would explain the behavior observed in the log file.

    3. L

       linux_admin

       2023-02-12

       4 upvotes

       C. The OnCalendar schedule is incorrect in the timer definition. The issue of the job only running daily is likely due to an incorrect OnCalendar schedule in the timer definition. The OnCalendar directive is used in the timer definition to specify the schedule on which the timer should run. If the schedule is incorrect, the timer will not run as expected. For example, if the administrator wants the job to run every two hours, the OnCalendar directive in the timer definition should be set to *:0/2. To resolve the issue, the administrator should check the timer definition and make sure that the OnCalendar schedule is set correctly. After making the necessary changes, the administrator should reload the timer and service definitions and check the log file again to see if the job is running as expected.

    4. L

       linux_admin

       2023-02-12

       4 upvotes

       In the previous question, the answer choice D was "The system-daemon services need to be reloaded." This answer is not the most likely cause of the issue because reloading the system-daemon services will not fix an incorrect OnCalendar schedule in the timer definition. The OnCalendar directive is used in the timer definition to specify the schedule on which the timer should run. If the schedule is incorrect, the timer will not run as expected, regardless of the state of the system-daemon services. The most likely cause of the issue, as stated in answer choice C, is an incorrect OnCalendar schedule in the timer definition. To resolve the issue, the administrator should check the timer definition and make sure that the OnCalendar schedule is set correctly.

22. Question 22 of 25

    What is the main objective when using Application Control?

    • ATo filter out specific content.
    • BTo assist the firewall blade with handling traffic.
    • CTo see what users are doing.
    • DEnsure security and privacy of information.

    Show answer

    Correct answer: D

    How others answered

    • D69%
    • B15%
    • A15%

    Only 69% agreed on this answer — treat it as contested rather than settled.

    Explanation

    The main objective of using Application Control is to ensure the security and privacy of information. Explanation: Application Control is a security feature in network security appliances that is used to identify and control the applications that are allowed to access the network. The feature allows administrators to create policies that specify which applications are allowed to access the network and what actions are allowed for each application. The main objective of Application Control is to ensure the security and privacy of information by controlling the applications that are allowed to access the network. This helps to prevent unauthorized access, data leakage, and other security risks that may arise from the use of unapproved applications. By enforcing policies on allowed applications, administrators can ensure that sensitive information remains secure and confidential. Therefore, the correct answer is: D. Ensure security and privacy of information.

    Adapted from community discussion by linux_admin · 2023-08-13 · 5 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion4

    Candidate context

    Question 22 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by XK0-005 or CertExamHQ.

    1. L

       linux_admin

       2023-08-13

       Selected D5 upvotes

       The main objective of using Application Control is to ensure the security and privacy of information. Explanation: Application Control is a security feature in network security appliances that is used to identify and control the applications that are allowed to access the network. The feature allows administrators to create policies that specify which applications are allowed to access the network and what actions are allowed for each application. The main objective of Application Control is to ensure the security and privacy of information by controlling the applications that are allowed to access the network. This helps to prevent unauthorized access, data leakage, and other security risks that may arise from the use of unapproved applications. By enforcing policies on allowed applications, administrators can ensure that sensitive information remains secure and confidential. Therefore, the correct answer is: D. Ensure security and privacy of information.

    2. L

       linux_admin

       2023-08-13

       1 upvote

       Option C ("To see what users are doing") is not the main objective of using Application Control. While Application Control can provide visibility into the applications that users are accessing on the network, this is not its primary purpose. The main objective of using Application Control is to ensure the security and privacy of information by controlling and managing application usage on the network. This is achieved by creating policies that specify which applications are allowed to access the network and what actions are permitted for each application. While Application Control can be used to provide visibility into user behavior, its main focus is on controlling application usage and preventing security breaches and data leaks that may arise from the use of unapproved or malicious applications. Therefore, the primary objective of using Application Control is to ensure the security and privacy of information by controlling and managing application usage on the network, rather than simply providing visibility into user behavior.

    3. L

       linux_admin

       2023-08-13

       1 upvote

       Option B ("To assist the firewall blade with handling traffic") is not the main objective of using Application Control, as this feature is designed to control and manage application usage on the network. While it is true that Application Control can assist the firewall blade in handling traffic by identifying and classifying the applications that are being used on the network, this is not its primary objective. Application Control is designed to help prevent security breaches and data leaks by controlling which applications are allowed to access the network and what actions are permitted for each application. Therefore, the primary objective of using Application Control is to ensure the security and privacy of information by controlling and managing application usage on the network, rather than simply assisting with traffic handling.

    4. L

       linux_admin

       2023-08-13

       2 upvotes

       To whomever reads this, what motivated you to study for the Linux+ certification exam? Are you looking to improve your skills and knowledge of Linux, or are you seeking new career opportunities in the tech industry? How will CompTIA's Linux+ help you? Just curious.

23. Question 23 of 25

    A systems administrator created a web server for the company and is required to add a tag for the API so end users can connect. Which of the following would the administrator do to complete this requirement?

    • Ahostnamectl status --no-ask-password
    • Bhostnamectl set-hostname "$(perl -le "print" "A" x 86)"
    • Chostnamectl set-hostname Comptia-WebNode -H [email protected]
    • Dhostnamectl set-hostname Comptia-WebNode --transient

    Show answer

    Correct answer: C

    How others answered

    • C100%

    Explanation

    The hostnamectl set-hostname Comptia-WebNode -H [email protected] command sets the hostname of a Linux system. Here's what each option does: set-hostname Comptia-WebNode: The set-hostname option sets the hostname of the system to "Comptia-WebNode". -H [email protected]: The -H option is used to specify the remote host to connect to. In this case, the administrator is connecting to the remote host with the IP address 192.168.2.14 as the root user. This command sets the hostname of the remote host with IP address 192.168.2.14 to "Comptia-WebNode" as the root user. The new hostname will persist across reboots unless the administrator changes it again in the future.

    Adapted from community discussion by linux_admin · 2023-02-12 · 9 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion4

    Candidate context

    Question 23 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by XK0-005 or CertExamHQ.

    1. L

       linux_admin

       2023-02-12

       9 upvotes

       The hostnamectl set-hostname Comptia-WebNode -H [email protected] command sets the hostname of a Linux system. Here's what each option does: set-hostname Comptia-WebNode: The set-hostname option sets the hostname of the system to "Comptia-WebNode". -H [email protected]: The -H option is used to specify the remote host to connect to. In this case, the administrator is connecting to the remote host with the IP address 192.168.2.14 as the root user. This command sets the hostname of the remote host with IP address 192.168.2.14 to "Comptia-WebNode" as the root user. The new hostname will persist across reboots unless the administrator changes it again in the future.

    2. L

       linux_admin

       2023-02-12

       7 upvotes

       In the context of the question, a "tag" refers to a label or identifier that is used to distinguish or identify a specific object, in this case, the web server. The tag is used to make it easier for end users to connect to the web server, as they can use the tag instead of an IP address or a hostname. The tag is typically a short and descriptive string that represents the web server, such as "Comptia-WebNode" in the example.

    3. Y

       yomebo

       2024-07-15

       Selected C5 upvotes

       Honestly I just went for C since its the only one with an IP address..otherwise I dont really know whats going on

    4. R

       ryanzou

       2022-10-31

       Selected C3 upvotes

       To execute a hostnamectl command on a remote system, use the -H, --host. That is change a tag remotely in my view.

24. Question 24 of 25

    A systems administrator wants to back up the directory /data and all its contents to /backup/data on a remote server named remote. Which of the following commands will achieve the desired effect?

    • Ascp -p /data remote:/backup/data
    • Bssh -i /remote:/backup/ /data
    • Crsync -a /data remote:/backup/
    • Dcp -r /data /remote/backup/

    Show answer

    Correct answer: C

    How others answered

    • C67%
    • D33%

    Only 67% agreed on this answer — treat it as contested rather than settled.

    Explanation

    C. rsync -a /data remote:/backup/ The rsync command is used to copy files and directories from one location to another, either locally or over a network. The -a option is used to preserve the original file attributes, such as timestamps, permissions, and symbolic links. In this case, the administrator is using rsync to copy the contents of the local directory /data to the remote server remote at the location /backup/. The rsync command will copy all the files and subdirectories in /data to the remote server and preserve their original attributes.

    Adapted from community discussion by linux_admin · 2023-02-12 · 7 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    View community discussion4

    Candidate context

    Question 24 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by XK0-005 or CertExamHQ.

    1. L

       linux_admin

       2023-02-12

       7 upvotes

       C. rsync -a /data remote:/backup/ The rsync command is used to copy files and directories from one location to another, either locally or over a network. The -a option is used to preserve the original file attributes, such as timestamps, permissions, and symbolic links. In this case, the administrator is using rsync to copy the contents of the local directory /data to the remote server remote at the location /backup/. The rsync command will copy all the files and subdirectories in /data to the remote server and preserve their original attributes.

    2. L

       linux_admin

       2023-02-14

       5 upvotes

       Option A (scp -p /data remote:/backup/data) is not the correct command to achieve the desired effect of backing up the /data directory and its contents to the remote server. The scp command is used to copy files and directories between hosts over SSH, but it does not support copying directories recursively by default. Therefore, the /data directory will not be backed up completely using this command. To copy directories recursively, we would need to use the -r option with scp. In addition, we need to specify the destination directory as /backup instead of /backup/data since we want to copy the contents of the /data directory to /backup. Therefore, the correct scp command would be: scp -r /data remote:/backup

    3. L

       linux_admin

       2023-02-12

       3 upvotes

       The other options are not correct or do not achieve the desired effect. The scp command is used to copy files securely over a network, but it does not preserve the original file attributes. The ssh command is used to log into a remote server, but it does not copy files. The cp command is used to copy files locally, but it does not copy files over a network.

    4. D

       Deuteronomy

       2023-02-08

       2 upvotes

       The correct answer is still C. scp -p option does not copy sub-directories. Therefore, if there were sub-directories under /backup/data, it would not copy the entire contents. In other words, the option scp -r had to be used for A to be the correct answer.

25. Question 25 of 25

    A systems administrator made some unapproved changes prior to leaving the company. The newly hired administrator has been tasked with revealing the system to a compliant state. Which of the following commands will list and remove the correspondent packages?

    • Adnf list and dnf remove last
    • Bdnf remove and dnf check
    • Cdnf info and dnf upgrade
    • Ddnf history and dnf history undo last

    Show answer

    Correct answer: D

    How others answered

    • D100%

    Explanation

    D. dnf history and dnf history undo last The "dnf history" command displays the history of all transactions performed using the DNF package manager, including package installs, upgrades, and removals. The "dnf history undo last" command undoes the last transaction, effectively removing the package that was installed. By using these two commands, the systems administrator can reveal the system to a compliant state by removing the unapproved packages. Option A "dnf list and dnf remove last" lists the packages installed on the system, but it does not undo the last transaction. The "dnf remove last" command is not a valid command.

    Adapted from community discussion by linux_admin · 2024-08-13 · 4 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Red Hat documentation

    View community discussion4

    Candidate context

    Question 25 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by XK0-005 or CertExamHQ.

    1. M

       MaryamNesa

       2024-05-16

       6 upvotes

       D is correct. check the following link: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/managing_software_with_the_dnf_tool/assembly_handling-package-management-history_managing-software-with-the-dnf-tool#:~:text=Reverting%20transactions%201%20To%20revert%20a%20particular%20transaction%2C,last%20transaction%2C%20use%3A%20%23%20dnf%20history%20undo%20last

    2. L

       linux_admin

       2024-08-13

       Selected D4 upvotes

       D. dnf history and dnf history undo last The "dnf history" command displays the history of all transactions performed using the DNF package manager, including package installs, upgrades, and removals. The "dnf history undo last" command undoes the last transaction, effectively removing the package that was installed. By using these two commands, the systems administrator can reveal the system to a compliant state by removing the unapproved packages. Option A "dnf list and dnf remove last" lists the packages installed on the system, but it does not undo the last transaction. The "dnf remove last" command is not a valid command.

    3. T

       TheRealManish

       2024-05-17

       2 upvotes

       I tested it on my VM and D worked for me.. as for a when do - dnf remove last, it says "no mach for argument last"

    4. C

       Ckl22

       2024-06-26

       Selected D1 upvote

       Yeah D is the correct answer. If there were multiple unwanted changes, the admin could also run the “rollback” option instead of “last”

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

XK0-005 practice, question 1 of 25