XK0-005 practice questions 11–20

1. Question 11 · 300 in bank

   Which of the following technologies provides load balancing, encryption, and observability in containerized environments?

   • AVirtual private network
   • BSidecar pod
   • COverlay network
   • DService mesh

   Show answer

   Answer: D

   Explanation

   A service mesh is a dedicated infrastructure layer that provides communication management between microservices in a containerized environment. Service meshes provide a range of features including load balancing, service discovery, traffic routing, encryption, and observability. The most popular service mesh frameworks are Istio, Linkerd, and Consul. The other options provided are: A. Virtual private network (VPN) - A VPN is a secure connection between two networks over the internet, which is primarily used to ensure secure remote access to a private network. B. Sidecar pod - A sidecar pod is a design pattern in Kubernetes that allows for two containers to run within the same pod. C. Overlay network - An overlay network is a virtual network that is built on top of an existing physical network, providing additional network management features, but does not inherently provide the features mentioned in the question.

   Source: Adapted from community discussion — linux_admin

   Next question

2. Question 12 · 300 in bank

   A development team asks an engineer to guarantee the persistency of journal log files across system reboots. Which of the following commands would accomplish this task?

   • Agrep -i auto /etc/systemd/journald.conf && systemctl restart systemd-journald.service
   • Bcat /etc/systemd/journald.conf | awk '(print $1,$3)'
   • Csed -i 's/auto/persistent/g' /etc/systemd/journald.conf && sed -i 'persistent/s/ˆ#//q' /etc/systemd/journald.conf
   • Djournalctl --list-boots && systemctl restart systemd-journald.service

   Show answer

   Answer: C

   Explanation

   The command sed -i 's/auto/persistent/g' /etc/systemd/journald.conf && sed -i 'persistent/s/^#//q' /etc/systemd/journald.conf attempts to modify the /etc/systemd/journald.conf file to enable persistent journal storage. Here is a breakdown of the command: sed: a command-line utility for processing text -i: a command-line option that instructs sed to edit the file in place, rather than outputting the edited text to the console 's/auto/persistent/g': the sed command to be executed. This command consists of three parts: s: a command to substitute (replace) text auto: the search pattern to look for in the file persistent: the replacement pattern to replace the search pattern g: a global option that means to replace all occurrences of the search pattern in the file, not just the first occurrence.

   Source: Adapted from community discussion — linux_admin

   Next question

3. Question 13 · 300 in bank

   A Linux administrator was asked to run a container with the httpd server inside. This container should be exposed at port 443 of a Linux host machine while it internally listens on port 8443. Which of the following commands will accomplish this task?

   • Apodman run -d -p 443:8443 httpd
   • Bpodman run -d -p 8443:443 httpd
   • Cpodman run –d -e 443:8443 httpd
   • Dpodman exec -p 8443:443 httpd

   Show answer

   Answer: A

   Explanation

   https://www.howtoforge.com/getting-started-with-podman-manage-images-container-and-volumes/ which is mentioned by Rob74613 also indicates host:container so A is correct Manage Containers At this stage, we learned about container image management. And the next step, we will learn how to create and manage containers with Podman. To create a new container, we can use 'podman run' command as below. podman run -d -p 8000:80 --name hakase-nginx docker.io/library/nginx The command will create a new container named 'hakase-nginx' based on the nginx image and will expose the port 8000 on the host machine. Details command options: -d - keep the container running in the background and just print the container ID as a result. -p 8000:80 - port mapping for container and the host system. Port 8000 on the host machine, and port 80 on the container. --name hakase-nginx - specify the container name with 'hakase-nginx'. Now display all running containers on the system.

   Source: Adapted from community discussion — BryanSME

   Next question

4. Question 14 · 300 in bank

   A systems administrator is receiving tickets from users who cannot reach the application app that should be listening on port 9443/tcp on a Linux server. To troubleshoot the issue, the systems administrator runs netstat and receives the following output:

   

   Based on the information above, which of the following is causing the issue?

   • AThe IP address 0.0.0.0 is not valid.
   • BThe application is listening on the loopback interface.
   • CThe application is listening on port 1234.
   • DThe application is not running.

   Show answer

   Answer: B

   Explanation

   Based on the output of netstat, the issue is that the application is listening on the loopback interface (127.0.0.1) rather than on a publicly accessible IP address. The netstat output shows that the application is bound to the IP address 127.0.0.1 on port 9443, which means that it is only accessible from the same system (localhost). The 0.0.0.0:* field in the output indicates that the application is listening on all available network interfaces, but the IP address 0.0.0.0 does not actually represent a valid IP address. To resolve the issue, the application needs to be reconfigured to listen on a publicly accessible IP address, such as the IP address of the system's network interface that is reachable from the users' network.

   Source: Adapted from community discussion — linux_admin

   Next question

5. Question 15 · 300 in bank

   A systems administrator is troubleshooting a connectivity issue pertaining to access to a system named db.example.com. The system IP address should be 192.168.20.88. The administrator issues the dig command and receives the following output:

   

   The administrator runs grep db.example.com /etc/hosts and receives the following output:

   

   Given this scenario, which of the following should the administrator do to address this issue?

   • AModify the /etc/hosts file and change the db.example.com entry to 192.168.20.89.
   • BModify the /etc/network file and change the db.example.com entry to 192.168.20.88.
   • CModify the /etc/network file and change the db.example.com entry to 192.168.20.89.
   • DModify the /etc/hosts file and change the db.example.com entry to 192.168.20.88.

   Show answer

   Answer: D

   Next question

6. Question 16 · 300 in bank

   Users have been unable to reach www.comptia.org from a Linux server. A systems administrator is troubleshooting the issue and does the following:

   

   Based on the information above, which of the following is causing the issue?

   • AThe name www.comptia.org does not point to a valid IP address.
   • BThe server 192.168.168.53 is unreachable.
   • CNo default route is set on the server.
   • DThe network interface eth0 is disconnected.

   Show answer

   Answer: C

   Explanation

   The answer should be C. I can't see any default routes on this configuration. But the name server on the same subnet is reachable, and does appear to have a valid IP address.It looks like there is another typo on this question though. The broadcast address 192.168.169.255 is outside the subnet of 192.168.168.10/24. So any broadcasts at that IP would be useless when attempting to talk to 192.168.168.0/24 devices.

   Source: Adapted from community discussion — Ckl22

   Next question

7. Question 17 · 300 in bank

   A systems technician is working on deploying several microservices to various RPM-based systems, some of which could run up to two hours. Which of the following commands will allow the technician to execute those services and continue deploying other microservices within the same terminal section?

   • Agedit & disown
   • Bkill 9 %1
   • Cfg %1
   • Dbg %1 job name

   Show answer

   Answer: D

   Explanation

   D. bg %1 job name: This command puts the job associated with job ID %1 in the background and allows the technician to continue deploying other microservices in the same terminal session. The job name argument is optional and allows the technician to specify a custom name for the job. This option is suitable for the scenario described in the question. A. gedit & disown: This command opens the gedit text editor in the background and disowns it so that it is no longer associated with the terminal. This option is not relevant to deploying microservices and would not allow the technician to continue deploying other microservices in the same terminal session.

   Source: Adapted from community discussion — linux_admin

   Next question

8. Question 18 · 300 in bank

   A Linux administrator was notified that a virtual server has an I/O bottleneck. The Linux administrator analyzes the following output:

   

   Given there is a single CPU in the sever, which of the following is causing the slowness?

   • AThe system is running out of swap space.
   • BThe CPU is overloaded.
   • CThe memory is exhausted.
   • DThe processes are paging.

   Show answer

   Answer: B

   Explanation

   Based on the output provided, the issue causing the slowness is B. The CPU is overloaded. The load average of 9.90 indicates that there are, on average, 9.90 processes in the running or runnable state. Given that there is only a single CPU, this means that there are far more processes needing CPU time than the CPU can handle, leading to an overloaded CPU. This is likely the cause of the slowness. The other options (A, C, and D) do not seem to be supported by the provided output. The output does not indicate that the system is running out of swap space (almost all free), that the memory is exhausted (still have a lot of free mem), or that the processes are paging (only 5 for pages used). Therefore, these are not likely to be the cause of the slowness.

   Source: Adapted from community discussion — DRVision

   Next question

9. Question 19 · 300 in bank

   Employees in the finance department are having trouble accessing the file /opt/work/file. All IT employees can read and write the file. Systems administrator reviews the following output:

   

   Which of the following commands would permanently fix the access issue while limiting access to IT and finance department employees?

   • Achattr +i file
   • Bchown it:finance file
   • Cchmod 666 file
   • Dsetfacl -m g:finance:rw file

   Show answer

   Answer: D

   Explanation

   D. setfacl -m g:finance:rw file: This command sets a new ACL (access control list) on the file that grants read and write access to the finance group. This option would allow the finance department to access the file while also maintaining the existing permissions for IT employees. The + in the rw option means to add read and write permissions to the existing permissions. The g: specifies that the permission is being set for a group, and the finance is the name of the group.

   Source: Adapted from community discussion — linux_admin

   Next question

10. Question 20 · 300 in bank

    A Linux engineer needs to create a custom script, cleanup.sh, to run at boot as part of the system services. Which of the following processes would accomplish this task?

    • ACreate a unit file in the /etc/default/ directory. systemctl enable cleanup systemctl is-enabled cleanup
    • BCreate a unit file in the /etc/ske1/ directory. systemctl enable cleanup systemctl is-enabled cleanup
    • CCreate a unit file in the /etc/systemd/system/ directory. systemctl enable cleanup systemctl is-enabled cleanup
    • DCreate a unit file in the /etc/sysctl.d/ directory. systemctl enable cleanup systemctl is-enabled cleanup

    Show answer

    Answer: C

    Explanation

    To create a custom script, cleanup.sh, to run at boot as part of the system services, the process that would accomplish this task is option C, "Create a unit file in the /etc/systemd/system/ directory". Here's how this can be done: Create the cleanup.sh script and place it in a suitable location. For example, in the /usr/local/bin directory. Create a new systemd unit file with the .service extension in the /etc/systemd/system directory. For example, create a file called cleanup.service. In the cleanup.service file, define the service by setting the service name, description, and the command to execute the script. For example: [Unit] Description=Cleanup script [Service] ExecStart=/usr/local/bin/cleanup.sh [Install] WantedBy=multi-user.target

    Source: Adapted from community discussion — linux_admin

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

XK0-005 practice, question 11. 300 questions available.