XK0-005 practice questions 151–160

1. Question 151 · 300 in bank

   The administrator comptia is not able to perform privileged functions on a newly deployed system. Given the following command outputs:

   

   Which of the following is the reason that the administrator is unable to perform the assigned duties?

   • AThe administrator needs a password reset.
   • BThe administrator is not a part of the correct group.
   • CThe administrator did not update the sudo database.
   • DThe administrator's credentials need to be more complex.

   Show answer

   Answer: B

   Explanation

   Yes it is B. But, I am suspicious of this line here: %admin ALL=(root) ... This suggests to me "In the admin group, on ALL systems, only the user in the group named 'root' is allowed to perform the listed commands" What you actually want is `%admin ALL=(ALL) ...` so that any user in the admin group can run the commands.

   Source: Adapted from community discussion — makuziker

   Next question

2. Question 152 · 300 in bank

   A Linux administrator deployed a large-scale application service as a containerized pod. The Linux administrator needs to continually send the application's log file to the company's central log store. Which of the following should the Linux administrator do to efficiently perform this task?

   • AConfigure a sidecar to perform log shipping.
   • BRun docker exec to access the logs within the container.
   • CExecute docker inspect and run a log rsync replication.
   • DSet up a custom task scheduler via kubectl.

   Show answer

   Answer: A

   Explanation

   The purpose of a sidecar container is to perform tasks on behalf of other containers. In this instance, they would need a sidecar container to perform logging on the application service container

   Source: Adapted from community discussion — BlackSkullz

   Next question

3. Question 153 · 300 in bank

   Select 2

   A systems administrator is trying to track down a rogue process that has a TCP listener on a network interface for remote command-and-control instructions. Which of the following commands should the systems administrator use to generate a list of rogue process names? (Choose two.)

   • Anetstat -antp | grep LISTEN
   • Blsof -iTCP | grep LISTEN
   • Clsof -i:22 | grep TCP
   • Dnetstat -a | grep TCP
   • Enmap -p1-65535 | grep -i tcp
   • Fnmap -sS 0.0.0.0/0

   Show answer

   Answer: AB

   Explanation

   netstat -antp | grep LISTEN would list all active TCP connections that are listening. It would also provides names and process ids of the processes lsof -i TCP | grep LISTEN lists all the open files associated with TCP connections that are currently listening and provides information about them

   Source: Adapted from community discussion — BlackSkullz

   Next question

4. Question 154 · 300 in bank

   A Linux engineer finds multiple failed login entries in the security log file for application users. The Linux engineer performs a security audit and discovers a security issue. Given the following: # grep -iE '*www*|db' /etc/passwd www-data:x:502:502:www-data:/var/www:/bin/bash db:x:505:505:db:/opt/db:/bin/bash Which of the following commands would resolve the security issue?

   • Ausermod -d /srv/www-data www-data && usermod -d /var/lib/db db
   • Bpasswd -u www-data && passwd -u db
   • Crenice -n 1002 -u 502 && renice -n 1005 -u 505
   • Dchsh -s /bin/false www-data && chsh -s /bin/false db

   Show answer

   Answer: D

   Next question

5. Question 155 · 300 in bank

   A Linux administrator needs to transfer a local file named accounts.pdf to a remote /tmp directory of a server with the IP address 10.10.10.80. Which of the following commands needs to be executed to transfer this file?

   • Arsync user@l0.10.10.80:/tmp accounts.pdf
   • Bscp accounts.pdf user@l0.10.10.80:/tmp
   • Ccp user@l0.10.10.80:/tmp accounts.pdf
   • Dssh accounts.pdf user@l0.10.10.80:/tmp

   Show answer

   Answer: B

   Explanation

   The reason it's B is because the SCP command is correctly syntax'd Both A and B are viable options but the Rsync choice should be rsync accounts.pdf user@10.10.10.80:/tmp But, since it isn't, SCP takes the lead here with correct syntax and also does the job of securely copying accounts.pdf over to the 10.10.10.80:/tmp directory.

   Source: Adapted from community discussion — Mistermiyagi

   Next question

6. Question 156 · 300 in bank

   An administrator has source code and needs to rebuild a kernel module. Which of the following command sequences is most commonly used to rebuild this type of module?

   • A./configure make make install
   • Bwget gcc cp
   • Ctar xvzf build cp
   • Dbuild install configure

   Show answer

   Answer: A

   Explanation

   ./configure This script checks your system's environment and prepares the source code for compilation based on your system's specifications and available libraries. make Run the make command to compile the module. make install After the module is successfully built, install it with make install (this step usually requires superuser privileges).

   Source: Adapted from community discussion — Qubert2

   Next question

7. Question 157 · 300 in bank

   An administrator would like to measure possible packet loss between a workstation and a remote web application that is running on port 443. Which of the following would be the best command for the administrator to use to display this information?

   • Aping -c 50
   • Btcpdump -p 443
   • Cmtr -T -P 443
   • Dtraceroute -p 443

   Show answer

   Answer: C

   Explanation

   mtr (My Traceroute) combines the functionality of ping and traceroute and provides continuous, real-time information about network performance and packet loss. the -T uses TCP instead of ICMP. -P is port

   Source: Adapted from community discussion — NastyNutsu

   Next question

8. Question 158 · 300 in bank

   A Linux administrator recently downloaded a software package that is currently in a compressed file. Which of the following commands will extract the files?

   • Aunzip -v
   • Bbzip2 -z
   • Cgzip
   • Dfunzip

   Show answer

   Answer: D

   Explanation

   unzip -v only displays the contents with verbosity of a compressed file but not extract bzip2 -z will compress a file not extract gzip will only compress a file not extract funzip is the ONLY option here that if used just like it is will extract a file. The funzip command is used to decompress files that have been compressed with the ZIP compression algorithm. It is part of the Info-ZIP suite of tools and is typically available on Linux and Unix systems.

   Source: Adapted from community discussion — Rob74613

   Next question

9. Question 159 · 300 in bank

   A Linux administrator is troubleshooting an issue in which users are not able to access https://portal.comptia.org from a specific workstation. The administrator runs a few commands and receives the following output: # cat /etc/hosts 10.10.10.55 portal.comptia.org # host portal.comptia.org portal.comptia.org has address 192.168.1.55 #cat /etc/resolv.conf nameserver 10.10.10.5 Which of the following tasks should the administrator perform to resolve this issue?

   • AUpdate the name server in resolv.conf to use an external DNS server.
   • BRemove the entry for portal.comptia.org from the local hosts file.
   • CAdd a network route from the 10.10.10.0/24 to the 192.168.0.0/16.
   • DClear the local DNS cache on the workstation and rerun the host command.

   Show answer

   Answer: B

   Explanation

   The issue is likely caused by a conflicting entry for portal.comptia.org in the local /etc/hosts file, which is mapping the domain to an incorrect IP address (10.10.10.55). The correct IP address for portal.comptia.org according to DNS resolution is 192.168.1.55. Option A: Updating the name server in resolv.conf to use an external DNS server wouldn't resolve the issue since the issue is related to the local hosts file. Option C: Adding a network route wouldn't address the DNS resolution issue. Option D: Clearing the local DNS cache and rerunning the host command might help if there were changes made to DNS configurations, but the root cause here is the conflicting entry in the hosts file. Removing the entry for portal.comptia.org from the local hosts file (/etc/hosts) will allow the system to resolve the domain through DNS properly.

   Source: Adapted from community discussion — Monty97

   Next question

10. Question 160 · 300 in bank

    Select 2

    A Linux administrator is trying to start the database service on a Linux server but is not able to run it. The administrator executes a few commands and receives the following output:

    

    Which of the following should the administrator run to resolve this issue? (Choose two.)

    • Asystemctl unmask mariadb
    • Bjournalctl -g mariadb
    • Cdnf reinstall mariadb
    • Dsystemctl start mariadb
    • Echkconfig mariadb on
    • Fservice mariadb reload

    Show answer

    Answer: AD

    Explanation

    When a service is masked, it cannot start on boot or be started manually. A. would unmask the service and D. would start the service

    Source: Adapted from community discussion — BlackSkullz

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

XK0-005 practice, question 151. 300 questions available.