XK0-005 practice questions 221–230

1. Question 221 · 300 in bank

   A Linux administrator is trying to remove the ACL from the file /home/user/data. txt but receives the following error message:

   

   Given the following analysis:

   

   Which of the following is causing the error message?

   • AThe administrator is not using a highly privileged account.
   • BThe filesystem is mounted with the wrong options.
   • CSELinux file context is denying the ACL changes.
   • DFile attributes are preventing file modification.

   Show answer

   Answer: D

   Explanation

   D. "File attributes are preventing file modification." It is not C: "SELinux file context is denying the ACL changes." SELinux does not discriminate: if an attribute can be set, then it can be unset. It's true that SELinux could be configured to totally disallow or selectively allow access to 'chattr', but that is not its default configuration and the question has no hint in regard to a change in SELinux policy. This can be easily demonstrated on any system using SELinux. touch file sudo chattr +a file lsattr file rm file sudo chattr -a file lsattr file

   Source: Adapted from community discussion — e418137

   Next question

2. Question 222 · 300 in bank

   A Linux administrator needs to create a new cloud.cpio archive containing all the files from the current directory. Which of the following commands can help to accomplish this task?

   • Als | cpio -iv > cloud.epio
   • Bls | cpio -iv < cloud.epio
   • Cls | cpio -ov > cloud.cpio
   • Dls cpio -ov < cloud.cpio

   Show answer

   Answer: C

   Explanation

   C. ls | cpio -ov > cloud.cpio The cpio command is used to create and extract archive files in the cpio format. The -o option is used to create an archive file, and the -v option provides verbose output during the creation process. This will pipe the output of the ls command (which lists the files in the current directory) into the cpio command, which will create a new archive file cloud.cpio containing all the listed files. The > symbol is used to redirect the output of the cpio command to the cloud.cpio file, overwriting any existing file with the same name.

   Source: Adapted from community discussion — linux_admin

   Next question

3. Question 223 · 300 in bank

   A systems administrator made some changes in the ~/.bashrc file and added an alias command. When the administrator tried to use the alias command, it did not work. Which of the following should be executed FIRST?

   • Asource ~/.bashrc
   • Bread ~/.bashrc
   • Ctouch ~/.bashrc
   • Decho ~/.bashrc

   Show answer

   Answer: A

   Explanation

   A. source ~/.bashrc The source command is used to re-read a shell configuration file and make its changes effective immediately in the current shell session. In this case, the administrator made changes to the ~/.bashrc file and added an alias command, but the alias is not working. To make the changes in the ~/.bashrc file effective, the administrator should run the following command: source ~/.bashrc his will cause the shell to re-read the ~/.bashrc file and apply the changes, including the new alias. After running this command, the administrator should be able to use the alias as expected. Option B is incorrect because the read command is used to read input from the user, not to re-read a configuration file. Option C is incorrect because the touch command is used to update the modification time of a file, not to re-read a configuration file. Option D is incorrect because the echo command is used to display text on the screen, not to re-read a configuration file.

   Source: Adapted from community discussion — linux_admin

   Next question

4. Question 224 · 300 in bank

   A junior systems administrator has just generated public and private authentication keys for passwordless login. Which of the following files will be moved to the remote servers?

   • Aid_dsa.pem
   • Bid_rsa
   • Cid_ecdsa
   • Did_rsa.pub

   Show answer

   Answer: D

   Explanation

   D. id_rsa.pub The public authentication key, id_rsa.pub, is typically used to set up passwordless login, also known as SSH key-based authentication. In this scenario, the junior administrator has generated public and private authentication keys, and they need to be moved to the remote servers to set up passwordless login. The public key, id_rsa.pub, is usually copied to the remote server and added to the ~/.ssh/authorized_keys file on the remote server. This allows the local system to authenticate with the remote server using the private key, id_rsa, without requiring a password.

   Source: Adapted from community discussion — linux_admin

   Next question

5. Question 225 · 300 in bank

   A Linux administrator cloned an existing Linux server and built a new server from that clone. The administrator encountered the following error after booting the cloned server:

   

   The administrator performed the commands listed below to further troubleshoot and mount the missing filesystem:

   

   Which of the following should administrator use to resolve the device mismatch issue and mount the disk?

   • Amount disk by device-id
   • Bfsck -A
   • Cmount disk by-label
   • Dmount disk by-blkid

   Show answer

   Answer: C

   Explanation

   C. By lable. Why? (A) There is no "device-id." (B) The 'fsck' command repairs file systems. (D) The 'blkid' command shows block device attributes. (The sane choice is UUID because the UUID is embedded in the file system of the block device, but that's not an option to choose.)

   Source: Adapted from community discussion — e418137

   Next question

6. Question 226 · 300 in bank

   A systems administrator installed a new software program on a Linux server. When the systems administrator tries to run the program, the following message appears on the screen.

   

   Which of the following commands will allow the systems administrator to check whether the system supports virtualization?

   • Admidecode -s system-version
   • Blscpu
   • Csysctl -a
   • Dcat /sys/device/system/cpu/possible

   Show answer

   Answer: B

   Explanation

   B. lscpu The lscpu command is used to display information about the CPU architecture and the system topology on Linux systems. It provides information about the number of CPUs, cores, and threads, the architecture, clock speed, and cache size. If the system supports virtualization, it should be reflected in the output of the lscpu command. The other options are not relevant for checking virtualization support: dmidecode -s system-version is used to retrieve the version number of the system's BIOS or UEFI firmware. sysctl -a is used to display all system control parameters, including both kernel parameters and sysctl settings. cat /sys/device/system/cpu/possible does not exist, it should be /sys/devices/system/cpu/possible. This file provides information about the maximum number of CPUs that can be configured for the system, but does not indicate whether the system supports virtualization.

   Source: Adapted from community discussion — linux_admin

   Next question

7. Question 227 · 300 in bank

   A Linux administrator created the directory /project/access2all. By creating this directory, the administrator is trying to avoid the deletion or modification of files from non-owners. Which of the following will accomplish this goal?

   • Achmod +t /project/access2all
   • Bchmod +rws /project/access2all
   • Cchmod 2770 /project/access2all
   • Dchmod ugo+rwx /project/access2all

   Show answer

   Answer: A

   Explanation

   Option A, chmod +t /project/access2all, is better than option C, chmod 2770 /project/access2all, for preventing the deletion or modification of files from non-owners because of the following reasons: Sticky Bit: Option A sets the sticky bit on the directory. The sticky bit restricts deletion or renaming of files within the directory to the file owners, the directory owner, or the root user. This means even if a user has write permission to the directory, they cannot delete or rename files owned by others. Setgid and Permissions: Option C sets the setgid bit and gives the group read, write, and execute permissions. The setgid bit causes new files and directories created in the directory to inherit the group ownership of the directory, but it does not prevent file deletion or modification by non-owners. The permissions 770 give the owner and the group full permissions (read, write, execute), but they do not prevent file deletion or modification by non-owners who are in the group. Therefore, to specifically prevent deletion or modification of files from non-owners, option A is the better choice.

   Source: Adapted from community discussion — DRVision

   Next question

8. Question 228 · 300 in bank

   Select 2

   A Linux systems administrator needs to persistently enable IPv4 forwarding in one of the Linux systems. Which of the following commands can be used together to accomplish this task? (Choose two.)

   • Asysctl net.ipv4.ip_forward
   • Bsysctl -w net.ipv4.ip_forward=1
   • Cecho "net.ipv4.ip_forward=1" >> /etc/sysctl.conf
   • Decho 1 > /proc/sys/net/ipv4/ip_forward
   • Esysctl –p
   • Fecho "net.ipv6.conf.all.forwarding=l" >> /etc/sysctl.conf

   Show answer

   Answer: BC

   Explanation

   To persistently enable IPv4 forwarding in a Linux system, you typically need to modify the system configuration files. The two commands you can actually use together to accomplish this task are: C. echo "net.ipv4.ip_forward=1" >> /etc/sysctl.conf: This appends the configuration net.ipv4.ip_forward=1 to the /etc/sysctl.conf file, which will enable IPv4 forwarding persistently across reboots. E. sysctl –p: This command reloads the sysctl settings from the configuration files, including /etc/sysctl.conf, so that the changes take effect immediately without needing a system reboot. So the correct combination of commands is C and E. They ensure that IPv4 forwarding is enabled persistently and immediately without requiring a reboot.

   Source: Adapted from community discussion — Bimbo_12

   Next question

9. Question 229 · 300 in bank

   Due to low disk space, a Linux administrator finding and removing all log files that were modified more than 180 days ago. Which of the following commands will accomplish this task?

   • Afind /var/log -type d -mtime +180 -print -exec rm {} \;
   • Bfind /var/log -type f -modified +180 -rm
   • Cfind /var/log -type f -mtime +180 -exec rm {} \
   • Dfind /var/log -type c -atime +180 –remove

   Show answer

   Answer: C

   Explanation

   The correct answer is C, "find /var/log -type f -mtime +180 -exec rm {} ;". This command will accomplish the task of finding and removing all log files that were modified more than 180 days ago. Here's a breakdown of the command: The find command is used to search for files and directories in a specific location, in this case, "/var/log". The -type f option is used to search only for regular files, excluding directories and other file types. The -mtime +180 option is used to select only files that have a modification time more than 180 days ago. The -exec rm {} \; option is used to execute the rm command on each file that matches the criteria specified in the previous options. The curly braces {} are replaced with the name of each file found and the backslash \; is used to end the command.

   Source: Adapted from community discussion — linux_admin

   Next question

10. Question 230 · 300 in bank

    DRAG DROP - As a Systems Administrator, to reduce disk space, you were tasked to create a shell script that does the following: Add relevant content to /tmp/script.sh, so that it finds and compresses related files in /var/log without recursion. INSTRUCTIONS: Drag and drop snippets to fill the blanks to build a script that performs the actual compression of rotated log files. If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    Which is all fabulous, except you missed several critical points in your analysis. First, the question does not ask for files with "log" in the name (it doesn't even ask for log files - it says "related files"). Second, some of the files in /var/log do not have log or .log anywhere in the filename (e.g. messages, secure, spooler, etc.) and would be missed using your syntax. Third, ".log[1-6]$", with a leading dot (.), is not even an option to select. Your choices are "log.[1-6]$" or "$log.[1-6]$", without a leading dot. Your version will (likely) create an empty tempfile and compress nothing. And, yes, I've tested your solution (and mine). The correct answer is: #!/bin/bash #name: script.sh find /var/log -type f -maxdepth 1 | grep "$1" > /tmp/tempfile for filename in $(cat /tmp/tempfile) do gzip $filename done

    Source: Adapted from community discussion — Mr_Marcus

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

XK0-005 practice, question 221. 300 questions available.