CompTIA XK0-005 Exam Dumps

An administrator is provisioning an Apache web server. When the administrator visits the server website, the browser displays a message indicating the website cannot be reached. Which of the following commands should the administrator use to verify whether the service Is running? 

A. systemctl status httpd  
B. systemctl mask httpd  
C. systemctl reload httpd  
D. systemctl restart httpd  

Answer: A

The journald entries have filled a Linux machine's /var volume. Which of the following is the best command for a systems administrator to use to free up the disk space occupied by these entries? 

A. journalctl ”rotate journalctl --vacuum-time=ls 
B. systemctl stop systemd-journald systemctl start systemd-journald
C. rm -rf /var/log/journal systemctl restart systemd-journald 
D. pkill -HUP systemd-journald systemctl restart systemd-journald 

Answer: B

A Linux administrator needs to determine if prerequisites are met. One of the application requirements is to install Perl on a system. Which of the following commands would accomplish this task? 

A. rpm -Uf perl  
B. rpm -iv perl  
C. rpm -qa perl  
D. rpm -eh perl  

Answer: C

A Linux administrator is tasked with moving files in a database server. The administrator must not overwrite any existing files. Which of the following commands would indicate that the file already exists? 

A. mv -i filename /tmp/backup  
B. mv -b filename /tmp/backup  
C. mv -n filename /tmp/backup  
D. mv -f filename /tmp/backup  

Answer: A

A Linux administrator is troubleshooting an SSHD issue on a server. Users are receiving error messages stating the connection is refused. Which of the following commands should be used to verify whether the service is listening?

A. nslookup  
B. route  
C. netstat  
D. ifconfig  

Answer: C

Due to performance issues on a server, a Linux administrator needs to terminate an unresponsive process. Which of the following commands should the administrator use to terminate the process immediately without waiting for a graceful shutdown? 

A. kill -SIGKILL 5545  
B. kill -SIGTERM 5545  
C. kill -SIGHUP 5545  
D. kill -SIGINT 5545  

Answer: A

A technician just fixed a few issues in some code and is ready to deploy the code into production. Which of the following steps should the technician take next?  

A. Create a new branch using git checkout.  
B. Perform a git clone to pull main down.  
C. Create a git pull request to merge into main.  
D. Perform a git pull to update the local copy of the code.  

Answer: C

An administrator is running a web server in a container named web, but none of the error output is not showing. Which of the following should the administrator use to generate the errors on the container? 

A. docker-compose inspect WEB  
B. docker logs WEB  
C. docker run ”name WEB ”volume/dev/stdout:/var/log/nginx/error.log  
D. docker ps WEB -f  

Answer: B

A network administrator issues the dig ww. compti a. org command and receives an NXDOMAIN response. Which of the following files should the administrator check first? 

A. /etc/resolv.conf  
B. /etc/hosts  
C. /etc/sysconfig/network-scripts  
D. /etc/nsswitch.conf  

Answer: A

While troubleshooting server issues, a Linux systems administrator obtains the following output: [rootGhost ~]# total free -m used free shared buf f/cache available Mem: 3736 3598 88 2 48 29 Swap: 2047 1824 223 Which of the following best describes the state of the system? 

A. The system has consumed the system memory and swap space.  
B. The system has enough free memory space.  
C. The system has swap disabled.  
D. The system has allocated enough buffer space.  

Answer: B

A Linux system is having issues. Given the following outputs: # dig @192.168.2.2 mycomptiahost ; << >> DiG 9.9.4-RedHat-9.9.4-74.el7_6.1 << >> @192.168.2.2 mycomptiahost ; (1 server found) ;; global options: +cmd ;; connection timed out; no servers could be reached # nc -v 192.168.2.2 53 Ncat: Version 7.70 ( https://nmap.org/ncat ) Ncat: Connection timed out. # ping 192.168.2.2 PING 192.168.2.2 (192.168.2.2) 56(84) bytes of data. 64 bytes from 192.168.2.2: icmp_seq=1 ttl=117 time=4.94 ms 64 bytes from 192.168.2.2: icmp_seq=2 ttl=117 time=10.5 ms Which of the following best describes this issue? 

A. The DNS host is down.  
B. The name mycomptiahost does not exist in the DNS.  
C. The Linux engineer is using the wrong DNS port.  
D. The DNS service is currently not available or the corresponding port is blocked.  

Answer: D

A Linux user is trying to execute commands with sudo but is receiving the following error: $ sudo visudo >>> /etc/sudoers: syntax error near line 28 <<< sudo: parse error in /etc/sudoers near line 28 sudo: no valid sudoers sources found, quitting The following output is provided: # grep root /etc/shadow root :* LOCK *: 14600 :::::: Which of the following actions will resolve this issue? 

A. Log in directly using the root account and comment out line 28 from /etc/sudoers.  
B. Boot the system in single user mode and comment out line 28 from /etc/sudoers.  
C. Comment out line 28 from /etc/sudoers and try to use sudo again.  
D. Log in to the system using the other regular user, switch to root, and comment out line 28 from /etc/sudoers.

Answer: B

A systems administrator needs to remove a disk from a Linux server. The disk size is 500G, and it is the only one that size on that machine. Which of the following commands can the administrator use to find the corresponding device name?  

A. fdisk -V  
B. partprobe -a  
C. lsusb -t  
D. lsscsi -s  

Answer: D

Following the migration from a disaster recovery site, a systems administrator wants a server to require a user to change credentials at initial login. Which of the following commands should be used to ensure the aging attribute?

A. chage -d 2 user  
B. chage -d 0 user  
C. chage -E 0 user  
D. chage -d 1 user  

Answer: B

A Linux administrator is troubleshooting a systemd mount unit file that is not working correctly. The file contains: [root@system] # cat mydocs.mount [Unit] Description=Mount point for My Documents drive [Mount] What=/dev/drv/disk/by-uuidafc9b2-ac34-ccff-88ae-297ab3c7ff34 Where=/home/user1/My Documents Options=defaults Type=xfs [Install] WantedBy=multi-user.target The administrator verifies the drive UUID correct, and user1 confirms the drive should be mounted as My Documents in the home directory. Which of the following can the administrator do to fix the issues with mounting the drive? (Select two). 

A. Rename the mount file to home-user1-My\x20Documents.mount.  
B. Rename the mount file to home-user1-my-documents.mount.  
C. Change the What entry to /dev/drv/disk/by-uuidafc9b2\-ac34\-ccff\-88ae\-297ab3c7ff34.  
D. Change the Where entry to Where=/home/user1/my\ documents.  
E. Change the Where entry to Where=/home/user1/My\x20Documents. 
F. Add quotes to the What and Where entries, such as What="/dev/drv/disk/by-uuidafc9b2-ac34- ccff-88ae-297ab3c7ff34" and Where="/home/user1/My Documents".

Answer: A,E

A file called testfile has both uppercase and lowercase letters:  $ cat testfile ABCDEfgH IJKLmnoPQ abcdefgH ijklLMNopq A Linux administrator is tasked with converting testfile into all uppercase and writing it to a new file with the name uppercase. Which of the following commands will achieve this task?

A. tr '(A-Z}' '{a-z}' < testfile > uppercase  
B. echo testfile | tr "[Z-A]" "[z-a]" < testfile > uppercase  
C. cat testfile | tr '{z-a)' '{Z-A}' < testfile > uppercase  
D. tr '[a-z]' '[A-Z]' < testfile > uppercase  

Answer: D

The development team created a new branch with code changes that a Linux administrator needs to pull from the remote repository. When the administrator looks for the branch in Git, the branch in question is not visible. Which of the following commands should the Linux administrator run to refresh the branch information?

A. git fetch  
B. git checkout  
C. git clone  
D. git branch  

Answer: A

Users are reporting that writes on a system configured with SSD drives have been taking longer than expected, but reads do not seem to be affected. A Linux systems administrator is investigating this issue and working on a solution. Which of the following should the administrator do to help solve the issue? 

A. Run the corresponding command to trim the SSD drives.  
B. Use fsck on the filesystem hosted on the SSD drives.  
C. Migrate to high-density SSD drives for increased performance.  
D. Reduce the amount of files on the SSD drives.  

Answer: A

Which of the following will prevent non-root SSH access to a Linux server?  

A. Creating the /etc/nologin file  
B. Creating the /etc/nologin.allow file containing only a single line root  
C. Creating the /etc/nologin/login.deny file containing a single line +all  
D. Ensuring that /etc/pam.d/sshd includes account sufficient pam_nologin.so  

Answer: A

A systems administrator is gathering information about a file type and the contents of a file. Which of the following commands should the administrator use to accomplish this task? 

A. file filename  
B. touch filename  
C. grep filename  
D. lsof filename  

Answer: A

Which of the following will prevent non-root SSH access to a Linux server?  

A. Creating the /etc/nologin file  
B. Creating the /etc/nologin.allow file containing only a single line root  
C. Creating the /etc/nologin/login.deny file containing a single line +all  
D. Ensuring that /etc/pam.d/sshd includes account sufficient pam_nologin.so  

Answer: A

A Linux administrator has defined a systemd script docker-repository.mount to mount a volume for use by the Docker service. The administrator wants to ensure that Docker service does not start until the volume is mounted. Which of the following configurations needs to be added to the Docker service definition to best accomplish this task? 

A. After=docker-respository.mount  
B. ExecStart=/usr/bin/mount -a  
C. Requires=docker-repository.mount  
D. RequiresMountsFor=docker-repository.mount  

Answer: C

A Linux engineer finds multiple failed login entries in the security log file for application users. The Linux engineer performs a security audit and discovers a security issue. Given the following: # grep -iE '*www*|db' /etc/passwd www-data:x:502:502:www-data:/var/www:/bin/bash db:x: 505:505:db: /opt/db:/bin/bash Which of the following commands would resolve the security issue? 

A. usermod -d /srv/www-data www-data && usermod -d /var/lib/db db  
B. passwd -u www-data && passwd -u db  
C. renice -n 1002 -u 502 && renice -n 1005 -u 505  
D. chsh -s /bin/false www-data && chsh -s /bin/false db  

Answer: D

A user is unable to log on to a Linux workstation. The systems administrator executes the following command: cat /etc/shadow | grep user1 The command results in the following output: user1 :! $6$QERgAsdvojadv4asdvaarCdj34GdafGVaregmkdsfa:18875:0:99999:7 ::: Which of the following should the systems administrator execute to fix the issue? 

A. chown -R userl:user1 /home/user1  
B. sed -i '/ ::: / :: /g' /etc/shadow  
C. chgrp user1:user1 /home/user1  
D. passwd -u user1 

Answer: D

A systems administrator is configuring a Linux system so the network traffic from the internal network 172.17.0.0 going out through the eth0 interface would appear as if it was sent directly from this interface. Which of the following commands will accomplish this task? 

A. iptables -A POSTROUTING -s 172.17.0.0 -o eth0 -j MASQUERADE  
B. firewalld -A OUTPUT -s 172.17.0.0 -o eth0 -j DIRECT  
C. nmcli masq-traffic eth0 -s 172.17.0.0 -j MASQUERADE  
D. ifconfig -- nat eth0 -s 172.17.0.0 -j DIRECT  

Answer: A

A Linux administrator generated a list of users who have root-level command-line access to the Linux server to meet an audit requirement. The administrator analyzes the following /etc/passwd and /etc/sudoers files: $ cat /etc/passwd root:x: 0:0: :/home/root: /bin/bash lee: x: 500: 500: :/home/lee:/bin/tcsh mallory:x: 501:501: :/root:/bin/bash eve:x: 502: 502: /home/eve:/bin/nologin carl:x:0:503: :/home/carl:/bin/sh bob:x: 504: 504: : /home/bob:/bin/ksh alice:x: 505:505: :/home/alice:/bin/rsh $ cat /etc/sudoers Cmnd_Alias SHELLS = /bin/tcsh, /bin/sh, /bin/bash Cmnd_Alias SYSADMIN = /usr/sbin/tcpdump ALL = (ALL) ALL ALL = NOPASSWD: SYSADMIN Which of the following users, in addition to the root user, should be listed in the audit report as having root-level command-line access? (Select two). 

A. Carl  
B. Lee  
C. Mallory  
D. Eve  
E. Bob  
F. Alice  

Answer: A,C

Which of the following is the best tool for dynamic tuning of kernel parameters?  

A. tuned  
B. tune2fs  
C. tuned-adm  
D. turbostat  

Answer: A

A Linux administrator found many containers in an exited state. Which of the following commands will allow the administrator to clean up the containers in an exited state? 

A. docker rm -- all  
B. docker rm $ (docker ps -aq)  
C. docker images prune *  
D. docker rm -- state exited  

Answer: B

A systems administrator notices the process list on a mission-critical server has a large number of processes that are in state "Z" and marked as "defunct." Which of the following should the administrator do in an attempt to safely remove these entries from the process list? 

A. Kill the process with PID 1.  
B. Kill the PID of the processes.  
C. Kill the parent PID of the processes.  
D. Reboot the server.  

Answer: C

An administrator attempts to connect to a remote server by running the following command: $ nmap 192.168.10.36 Starting Nmap 7.60 ( https://nmap.org ) at 2022-03-29 20:20 UTC Nmap scan report for www1 (192.168.10.36) Host is up (0.000091s latency). Not shown: 979 closed ports PORT STATE SERVICE 21/tcp open ftp 22/tcp filtered ssh 631/tcp open ipp Nmap done: 1 IP address (1 host up) scanned in 0.06 seconds Which of the following can be said about the remote server? 

A. A firewall is blocking access to the SSH server.  
B. The SSH server is not running on the remote server. 
C. The remote SSH server is using SSH protocol version 1.  
D. The SSH host key on the remote server has expired.  

Answer: A

A Linux administrator provisioned a new web server with custom administrative permissions for certain users. The administrator receives a report that user1 is unable to restart the Apache web service on this server. The administrator reviews the following output: [ root@server ] # id user1 UID=1011 (user1) gid=1011 (USER1) groups=1011 (user1), 101 (www-data), 1120 (webadmin) [ root@server ] # cat /etc/sudoers.d/custom.conf user1 ALL=/usr/sbin/systemctl start httpd, /usr/sbin/systemctl stop httpd webadmin ALL=NOPASSWD: /etc/init.d.httpd restart, /sbin/service httpd restart, /usr/sbin/apache2ctl restart #%wheel ALL=(ALL) NOPASSWD: ALL Which of the following would most likely resolve the issue while maintaining a least privilege security model? 

A. User1 should be added to the wheel group to manage the service.  
B. User1 should have "NOPASSWD:" after the "ALL=" in the custom. conf.  
C. The wheel line in the custom. conf file should be uncommented.  
D. Webadmin should be listed as a group in the custom. conf file.  

Answer: D

A Linux engineer needs to block an incoming connection from the IP address 2.2.2.2 to a secure shell server and ensure the originating IP address receives a response that a firewall is blocking the connection. Which of the following commands can be used to accomplish this task?

A. iptables -A INPUT -p tcp -- dport ssh -s 2.2.2.2 -j DROP  
B. iptables -A INPUT -p tcp -- dport ssh -s 2.2.2.2 -j RETURN  
C. iptables -A INPUT -p tcp -- dport ssh -s 2.2.2.2 -j REJECT  
D. iptables -A INPUT -p tcp -- dport ssh -s 2.2.2.2 -j QUEUE  

Answer: C

After connecting to a remote host via SSH, an administrator attempts to run an application but receives the following error: [user@workstation ~]$ ssh admin@srv1 Last login: Tue Mar 29 18:03:34 2022 [admin@srvl ~] $ /usr/local/bin/config_manager Error: cannot open display: [admin@srv1 ~] $ Which of the following should the administrator do to resolve this error?

A. Disconnect from the SSH session and reconnect using the ssh -x command.  
B. Add Options X11 to the /home/admin/.ssh/authorized_keys file.  
C. Open port 6000 on the workstation and restart the firewalld service.  
D. Enable X11 forwarding in /etc/ssh/ssh_config and restart the server.  

Answer: A

A Linux administrator is configuring a new internal web server fleet. The web servers are up and running but can only be reached by users directly via IP address. The administrator is attempting to fix this inconvenience by requesting appropriate records from the DNS team. The details are: Hostname: devel.comptia.org IP address: 5.5.5.1, 5.5.5.2, 5.5.5.3, 5.5.5.4 Name server: 5.5.5.254 Additional names: dev.comptia.org, development.comptia.org Which of the following types of DNS records should the Linux administrator request from the DNS team? (Select three). 

A. MX
B. NS 
C. PTR
D. A 
E. CNAME
F. RRSIG 
G. SOA 
H. TXT

Answer: B,D,E