CompTIA XK0-004 Online Practice Questions and Exam Preparation

CompTIA XK0-004 Online Questions & Answers

• Question 301:

  An administrator is reviewing web application logs and discovers several external addresses are trying to perform port scans, SQL injections, or URL oVectory traversal attacks The administrator is able to create an automated security log for malicious traffic IP addresses and requests The secunty administrator then uses the following information to protect the server:

  

  Which of the following actions should the security administrator recommend to protect the server?

  A. ipaat create badip /opt'webapp/sec.log andand ipaat add badip huh lip
  B. ipaat create hash badip:ip I firewall-cmd reload
  C. firewall-cmd --permanent --zone"public ipset create badip hash:ip
  D. firewall-csid --permanent --ipset=badip --add-entries-from-files=opt/webapp/sec.log
  D. firewall-csid --permanent --ipset=badip --add-entries-from-files=opt/webapp/sec.log

• Question 302:

  A systems administrator is required to allow only SSH access to the Linux servers from the 192.168.1.0/24 network. Which of the following iptables rules would accomplish this requirement?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

• Question 303:

  A Linux administrator wants to configure log messages of critical or higher severity levels from the cron utility to be logged to the console. Which of the following will accomplish this objective?

  A. Edit the /etc/logrotate.d/cron file to include the line cron.emerg.* /dev/console
  B. Edit the /etc/rsyslog.conf file to include the line cron.emerg.* /dev/console
  C. Edit the /etc/logrotate.conf file to include the line cron.emerg.* /dev/console
  D. Edit the /etc/rsyslog.d/conf file to include the line cron.emerg.* /dev/console
  B. Edit the /etc/rsyslog.conf file to include the line cron.emerg.* /dev/console

• Question 304:

  A junior Linux administrator is trying to verify connectivity to the remote host host1 and display round-trip statistics for ten ICMP requests. Which of the following commands should the administrator execute?

  A. ping -c 10 host1
  B. traceroute -c 10 host1
  C. netstat host1
  D. pathping -c 10 host1
  A. ping -c 10 host1

  ---

  Reference: https://shapeshed.com/unix-ping/

• Question 305:

  A Linux administrator is investigating an issue with an internal Linux server that is unable to resolve the following internal addresses:

  

  The administrator runs the following commands as part of troubleshooting:

  

  Which of the following is MOST likely resolve the issue?

  A. Allow outbound DNS traffic to the internal DNS server.
  B. Add a public DNS for fileshare, example, internal.
  C. Install a caching DNS server on the local workstation.
  D. Update resolve, conf to use the internal DNS server.
  A. Allow outbound DNS traffic to the internal DNS server.

• Question 306:

  A user creates and installs a Linux VM on a local workstation. The VM can only connect to the local workstation. Which of the following BEST represents the default virtual network configuration in this instance?

  A. Host-only
  B. Bridged
  C. NAT
  D. Dual-homed
  A. Host-only

• Question 307:

  An administrator is provisioning and attaching a secondary disk to a Linux server as a data drive. Which Of the following commands the administrator use to find the UUID Of the disk so the drive can be mounted upon boot?

  A. blkid
  B. isblk
  C. 2label
  D. fstab
  D. fstab

• Question 308:

  The Apache web server was recently installed on a Debian/Ubuntu server. The web server fails and a review of log messages on another partition reveals the installation was not completed properly due to lack of disk space. After clearing the files, the systems administrator has requested the installation to be performed again.

  Which of the following command lines will perform this task? (Choose two.)

  A. apt-get install apache2
  B. apt-get --purge remove acache2
  C. apt-get --reinstall install apache2
  D. apt-get --reinstall apache2
  A. apt-get install apache2
  B. apt-get --purge remove acache2

  ---

  Reference: https://askubuntu.com/questions/111770/how-reinstall-apache2

• Question 309:

  An administrator needs to create a file named hello in the home directory that contains the following text:

  it's me!

  Which of the following commands would accomplish this goal?

  A. mkdir ~/hello touch ~/"it's me!"
  B. touch ~/hello echo "it's me!" > ~/hello
  C. mv ~/hello cp "it's me!" > ~/hello
  D. type ~/hello print "it's me!"
  A. mkdir ~/hello touch ~/"it's me!"

• Question 310:

  A system ran out of storage space on a particular mount and will not allow anything to be written to disk. The df command shows there are 6GB free on the mount, and there is no inode exhaustion. This issue has happened before due to a known large log file that was not being rotated. The administrator remembers the file name but cannot remember the location of the log file or which process is writing to it. Which of the following would be the BEST solution to correct this issue while maintaining availability?

  A. Use the lsof command to find where the large log file is located and truncate it
  B. Use the locate command to find where the large log file is located and delete it
  C. Use the du command to find where the large log file is located and delete it
  D. Use the ps command to find which process is writing to the log file, and then kill and restart the process
  D. Use the ps command to find which process is writing to the log file, and then kill and restart the process