XK0-005 practice questions 111–120

1. Question 111 · 300 in bank

   Select 3

   A systems administrator is enabling LUKS on a USB storage device with an ext4 filesystem format. The administrator runs dmesg and notices the following output:

   

   Given this scenario, which of the following should the administrator perform to meet these requirements? (Choose three.)

   • Agpg /dev/sdc1
   • Bpvcreate /dev/sdc
   • Cmkfs.ext4 /dev/mapper/LUKS0001 - L ENCRYPTED
   • Dumount /dev/sdc
   • Efdisk /dev/sdc
   • Fmkfs.vfat /dev/mapper/LUKS0001 - L ENCRYPTED
   • Gwipefs -a/dev/sdb1
   • Hcryptsetup luksFormat /dev/sdc1

   Show answer

   Answer: BCH

   Explanation

   H. cryptsetup luksFormat /dev/sdc1 This command initializes the LUKS partition on /dev/sdc1, preparing it for encryption. B. pvcreate /dev/sdc This command initializes a physical volume for use by LVM, which might be used after the LUKS setup. C. mkfs.ext4 /dev/mapper/LUKS0001 - L ENCRYPTED After setting up LUKS and mapping it, this command formats the LUKS-encrypted device with the ext4 filesystem.

   Source: Adapted from community discussion — Kashim

   Next question

2. Question 112 · 300 in bank

   A developer wants to ensure that all files and folders created inside a shared folder named /Group00DEV inherit the group name of the parent folder. Which of the following commands will help achieve this goal?

   • Achmod g+x /Group00DEV/
   • Bchmod g+w /Group00DEV/
   • Cchmod g+r /Group00DEV/
   • Dchmod g+s /Group00DEV/

   Show answer

   Answer: D

   Explanation

   Set the setgid Bit: To ensure that new files and directories inherit the group of the parent folder, set the setgid bit on the directory using the chmod command: sudo chmod g+s /Group00DEV The g+s option sets the setgid bit. When this bit is set on a directory, any files or subdirectories created within it will inherit the group of the directory rather than the group of the user who created the file.

   Source: Adapted from community discussion — Qubert2

   Next question

3. Question 113 · 300 in bank

   Ann, a security administrator, is performing home directory audits on a Linux server. Ann issues the su Joe command and then issues the ls command. The output displays files that reside in Ann's home directory instead of Joe's. Which of the following represents the command Ann should have issued in order to list Joe's files?

   • Asu - Joe
   • Bsudo Joe
   • Cvisudo Joe
   • Dpkexec Joe

   Show answer

   Answer: A

   Explanation

   To switch to Joe's account and properly load Joe's environment, including changing the working directory to Joe's home directory, Ann should use the following command: A. su - Joe Explanation: A. su - Joe: The - (or --login) option with su initiates a full login shell for Joe, which includes switching to Joe's home directory and loading Joe's environment variables. This is the correct command to use if Ann wants to start a session as Joe with Joe's environment.

   Source: Adapted from community discussion — Kashim

   Next question

4. Question 114 · 300 in bank

   A developer needs to launch an Nginx image container, name it Web00l, and expose port 8080 externally while mapping to port 80 inside the container. Which of the following commands will accomplish this task?

   • Adocker exec -it -p 8080:80 --name Web001 nginx
   • Bdocker load -it -p 8080:80 --name Web001 nginx
   • Cdocker run -it -p 8080:80 --name Web001 nginx
   • Ddocker pull -it -p 8080:80 --name Web001 nginx

   Show answer

   Answer: C

   Next question

5. Question 115 · 300 in bank

   The security team has identified a web service that is running with elevated privileges. A Linux administrator is working to change the systemd service file to meet security compliance standards. Given the following output: [Unit] Description=CompTIA server daemon Documentation=man:webserver(8) man:webserver_config(5) After=network.target - [Service] Type=notify - EnvironmentFile=/etc/webserver/config ExecStart=/usr/sbin/webserver -D $OPTIONS ExecReload=/bin/kill -HUP SMAINPID KillMode=process - Restart=on-failure - RestartSec=42s - [Install] WantedBy=multi-user.target - Which of the following remediation steps will prevent the web service from running as a privileged user?

   • ARemoving the ExecStart=/usr/sbin/webserver -D $OPTIONS from the service file
   • BUpdating the EnvironmentFile line in the [Service] section to /home/webservice/config
   • CAdding the User=webservice to the [Service] section of the service file
   • DChanging the multi-user.target in the [Install] section to basic.target

   Show answer

   Answer: C

   Next question

6. Question 116 · 300 in bank

   A Linux administrator provisioned a new web server with custom administrative permissions for certain users. The administrator receives a report that user1 is unable to restart the Apache web service on this server. The administrator reviews the following output:

   

   Which of the following would most likely resolve the issue while maintaining a least privilege security model?

   • AUser1 should be added to the wheel group to manage the service.
   • BUser1 should have "NOPASSWD:" after the "ALL=" in the custom.conf.
   • CThe wheel line in the custom.conf file should be uncommented.
   • DWebadmin should be listed as a group in the custom.conf file.

   Show answer

   Answer: B

   Explanation

   The answer is B because user1 needs permission to restart the httpd service using `systemctl`, which is not currently allowed. By adding `NOPASSWD:` and including the restart command in the sudoers file, user1 can manage the service without requiring a password, ensuring the correct and necessary permissions are applied. The answer is not D because user1 is already a member of the webadmin group, and the permissions for restarting the `httpd` service using `systemctl` are not included in the webadmin group configuration. The correct answer is B because user1 needs `NOPASSWD` permission specifically for `systemctl restart httpd`, which is currently missing. Adding this to the sudoers file ensures user1 can restart the service without requiring unnecessary broader permissions.

   Source: Adapted from community discussion — IFBBPROSALCEDO

   Next question

7. Question 117 · 300 in bank

   Which of the following would significantly help to reduce data loss if more than one drive fails at the same time?

   • AServer clustering
   • BLoad balancing
   • CRAID
   • DVDI

   Show answer

   Answer: C

   Explanation

   Because RAID has more than just mirroring. Two drives that mirror each other is RAID 1 configuration but in a RAID 5 has 4 disks that have both striping and parity so two disks have to malfunction before data is lost. There are also other types of RAID that could survive multiple drive deaths such as RAID 6 and RAID 10. These add even more survivability by adding more striping and parity drives.

   Source: Adapted from community discussion — Operator_Zebra

   Next question

8. Question 118 · 300 in bank

   A systems administrator receives reports that several virtual machines in a host are responding slower than expected. Upon further investigation, the administrator obtains the following output from one of the affected systems:

   

   Which of the following best explains the reported issue?

   • AThe physical host is running out of CPU resources, leading to insufficient CPU time being allocated to virtual machines.
   • BThe physical host has enough CPU cores, leading to users running more processes to compensate for the slower response times.
   • CThe virtual machine has enough CPU cycles, leading to the system use percentage being higher than expected.
   • DThe virtual machine is running out of CPU resources, leading to users experiencing longer response times.

   Show answer

   Answer: A

   Next question

9. Question 119 · 300 in bank

   An administrator needs to make some changes in the IaC declaration templates. Which of the following commands would maintain version control?

   • Agit clone https://github.com/comptia/linux+-.git git push origin
   • Bgit clone https://qithub.com/comptia/linux+-.git git fetch New-Branch
   • Cgit clone https://github.com/comptia/linux+-.git git status
   • Dgit clone https://github.com/comptia/linuxt+-.git git checkout -b <new-branch>

   Show answer

   Answer: D

   Explanation

   D. git clone https://github.com/comptia/linux+.git git checkout -b The git clone command is used to clone a remote Git repository, which in this case is the repository located at https://github.com/comptia/linux+.git. This command will download the entire repository to the local machine. After cloning the repository, the administrator should create a new branch using the git checkout -b command. This will create a new branch in the Git repository and make it the current branch. The administrator can then make changes to the IaC declaration templates in this branch without affecting the main branch.

   Source: Adapted from community discussion — linux_admin

   Next question

10. Question 120 · 300 in bank

    A user is unable to remotely log on to a server using the server name server1 and port 22. The Linux engineer troubleshoots the issue and gathers the following information:

    

    Which of the following is most likely causing the issue?

    • Aserver1 is not in the DNS.
    • Bsshd is running on a non-standard port.
    • Csshd is not an active service.
    • Dserver1 is using an incorrect IP address.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

XK0-005 practice, question 111. 300 questions available.