CompTIA XK0-005 Online Practice Questions and Exam Preparation

CompTIA XK0-005 Online Questions & Answers

• Question 101:

  A Linux engineer set up two local DNS servers (10.10.10.10 and 10.10.10.20) and was testing email connectivity to the local mail server using the mail command on a local machine when the following error appeared:

  

  The local machine DNS settings are:

  

  Which of the following commands could the engineer use to query the DNS server to get mail server information?

  A. dig @example.com 10.10.10.20 a
  B. dig @10.10.10.20 example.com mx
  C. dig @example.com 10.10.10.20 ptr
  D. dig @10.10.10.20 example.com ns
  B. dig @10.10.10.20 example.com mx

  ---

  Explanation

  The command dig @10.10.10.20 example.com mx will query the DNS server to get mail server information. The dig command is a tool for querying DNS servers and displaying the results. The @ option specifies the DNS server to query, in this case 10.10.10.20. The mx option specifies the type of record to query, in this case mail exchange (MX) records, which identify the mail servers for a domain. The domain name to query is example.com. This command will show the MX records for example.com from the DNS server 10.10.10.20. This is the correct command to use to accomplish the task. The other options are incorrect because they either use the wrong syntax (@example.com 10.10.10.20 instead of @10.10.10.20 example.com), the wrong type of record (a or ptr instead of mx), or the wrong domain name (example.com ns instead of example.com mx).

  References: CompTIA Linux+ (XK0-005) Certification Study Guide, Chapter 13: Managing Network Services, page 415.

• Question 102:

  An administrator is investigating why a Linux workstation is not resolving a website. The output of dig and nslookup shows that IPv4 resolution is working, but IPv6 resolution fails.

  The administrator executes: nslookup -querytype=AAAA www.comptia.org Can't find www.comptia.org: No answer The workstation has a static entry in /etc/hosts: CopyEdit

  104.18.99.101 www.comptia.org

  Which of the following is the most likely cause?

  A. The static entry needs to be removed from /etc/hosts.
  B. The remote website does not support IPv6, and the workstation requires it.
  C. The firewall needs to be modified to allow outbound HTTP and HTTPS.
  D. The nameserver in /etc/resolv.conf needs to be updated to 8.8.8.8.
  A. The static entry needs to be removed from /etc/hosts.

  ---

  Explanation

  The presence of a static entry in /etc/hosts for www.comptia.org forces the system to use this IP address instead of querying DNS.

  This prevents proper IPv6 (AAAA) resolution, as /etc/hosts only contains an IPv4 (A) record.

  Removing this static entry allows the system to query DNS for both IPv4 and IPv6 records.

• Question 103:

  Which of the following tools is commonly used for creating CI/CD pipelines?

  A. Chef
  B. Puppet
  C. Jenkins
  D. Ansible
  C. Jenkins

  ---

  Explanation

  The tool that is commonly used for creating CI/CD pipelines is Jenkins. Jenkins is an open-source automation server that enables continuous integration and continuous delivery (CI/CD) of software projects. Jenkins allows developers to build, test, and deploy code changes automatically and frequently using various plugins and integrations. Jenkins also supports distributed builds, parallel execution, pipelines as code, and real-time feedback.

  References: CompTIA Linux+ (XK0005) Certification Study Guide, Chapter 19: Managing Source Code; Jenkins

• Question 104:

  An administrator runs ping comptia.org. The result of the command is:

  ping: comptia.org: Name or service not known

  Which of the following files should the administrator verify?

  A. /etc/ethers
  B. /etc/services
  C. /etc/resolv.conf
  D. /etc/sysctl.conf
  C. /etc/resolv.conf

  ---

  Explanation

  The best file to verify when the ping command returns the error "Name or service not known" is

  C. /etc/resolv.conf. This file contains the configuration for the DNS resolver, which is responsible for translating domain names into IP addresses.

  If this file is missing, corrupted, or has incorrect entries, the ping command will not be able to resolve the domain name and will fail with the error. To fix this issue, the administrator should check that the file exists, has proper permissions, and has valid nameserver entries. For example, a typical /etc/resolv.conf file may look like this:

  nameserver 8.8.8.8 nameserver 8.8.4.4

  These are the IP addresses of Google's public DNS servers, which can be used as a fallback option if the default DNS servers are not working.

• Question 105:

  A Linux system is failing to boot. The following error is displayed in the serial console:

  [[1;33mDEPEND[Om] Dependency failed for /data.

  [[1;33mDEPEND[Om] Dependency failed for Local File Systems

  ...

  Welcome to emergency mode! After logging in, type "journalctl -xb" to viewsystem logs, "systemct1 reboot" to reboot, "systemct1 default" to try again to boot into default mode.

  Give root password for maintenance

  (or type Control-D to continue}

  Which of the following files will need to be modified for this server to be able to boot again?

  A. /etc/mtab
  B. /dev/sda
  C. /etc/fstab
  D. /ete/grub.conf
  C. /etc/fstab

  ---

  Explanation

  The file that will need to be modified for the server to be able to boot again is /etc/fstab. The /etc/fstab file is a file that contains the information about the file systems that are mounted at boot time on Linux systems. The file specifies the device name, mount point, file system type, mount options, dump frequency, and pass number for each file system. The error message indicates that the dependency failed for /data, which is a mount point for a file system. This means that the system could not mount the /data file system at boot time, which caused the system to enter the emergency mode. The emergency mode is a mode that allows the administrator to log in as the root user and perform basic tasks such as repairing the system. The administrator should modify the /etc/fstab file and check the entry for the /data file system. The administrator should look for any errors or inconsistencies in the device name, file system type, or mount options, and correct them. The administrator should also verify that the device and the file system are intact and functional by using commands such as blkid, fdisk, fsck, or mount. The administrator should then reboot the system and see if the issue is resolved. The file that will need to be modified for the server to be able to boot again is /etc/fstab. This is the correct answer to the question. The other options are incorrect because they are not related to the file systems that are mounted at boot time (/etc/mtab, /dev/sda, or /etc/grub.conf).

  References: CompTIA Linux+ (XK0-005) Certification Study Guide, Chapter 10: Managing Storage, page 321.

• Question 106:

  A systems administrator configured firewall rules using firewalld. However, after the system is rebooted, the firewall rules are not present:

  

  The systems administrator makes additional checks:

  

  Which of the following is the reason the firewall rules are not active?

  A. iptables is conflicting with firewalld.
  B. The wrong system target is activated.
  C. FIREWALL_ARGS has no value assigned.
  D. The firewalld service is not enabled.
  D. The firewalld service is not enabled.

  ---

  Explanation

  The reason the firewall rules are not active is that the firewalld service is not enabled. This means that the service will not start automatically at boot time or after a system reload. To enable the firewalld service, the systems administrator needs to use the command sudo systemct1 enable firewalld. This will create a symbolic link from the firewalld service file to the appropriate systemd target, such as multi-user.target. Enabling the service does not start it immediately, so the systems administrator also needs to use the command sudo systemct1 start firewalld or sudo systemct1 reload firewalld to activate the firewall rules. The other options are not correct reasons for the firewall rules not being active. iptables is not conflicting with firewalld, because firewalld uses iptables as its backend by default. The wrong system target is not activated, because firewalld is independent of the system target and can be enabled for any target. FIREWALL_ARGS has no value assigned, but this is not a problem, because FIREWALL_ARGS is an optional environment variable that can be used to pass additional arguments to the firewalld daemon, such as --debug or --nofork. If FIREWALL_ARGS is empty or not defined, firewalld will use its default arguments.

  References: firewalld.service(8) - Linux manual page; firewall-cmd(1) - Linux manual page; systemct1(1) - Linux manual page

• Question 107:

  A systems administrator is creating new user accounts on several Linux machines and wants to automate the process from a Linux system used for operations. In this operations system, the list of servers is located in the /home/user/

  serverslist file and the list of user accounts is located in the /home/user/userslist file.

  Which of the following scripts will help accomplish this task?

  A. bash for server in $(cat /home/user/serverslist) do for user in $(cat /home/user/userslist) do sudo useradd $user done done
  B. bash for server in $(cat /home/user/serverslist) do ssh -i user@$server "for user in $(cat /home/user/userslist) do sudo useradd $user done; exit" done
  C. bash for server in $(cat /home/user/serverslist) do scp /home/user/userslist user@$server:/tmp ssh -i user@$server "for user in $(cat /tmp/userslist) do sudo useradd $user done; exit" done
  D. bash ssh user@$(cat /home/user/serverslist) "sudo useradd $(cat /home/user/userslist); exit"
  B. bash for server in $(cat /home/user/serverslist) do ssh -i user@$server "for user in $(cat /home/user/userslist) do sudo useradd $user done; exit" done

  ---

  Explanation

  The script in option B performs the task by SSH-ing into each server listed in serverslist and then adding each user listed in userslist. This is an effective way to remotely create user accounts without manually logging into each server. The ssh command allows the execution of the useradd commands on the remote machines.

• Question 108:

  A Linux administrator needs to redirect all HTTP traffic temporarily to the new proxy server 192.0.2.25 on port 3128. Which of the following commands will accomplish this task?

  A. iptables -t nat -D PREROUTING -p tcp --sport 80 -j DNAT - -to-destination 192.0.2.25:3128
  B. iptables -t nat -A PREROUTING -p top --dport 81 -j DNAT -to-destination 192.0.2.25:3129
  C. iptables -t nat -I PREROUTING -p top --sport 80 -j DNAT -to-destination 192.0.2.25:3129
  D. iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT -to-destination 192.0.2.25:3128
  D. iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT -to-destination 192.0.2.25:3128

  ---

  Explanation

  The command iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT -- to-destination 192.0.2.25:3128 adds a rule to the nat table that redirects all incoming TCP packets with destination port 80 (HTTP) to the proxy server 192.0.2.25 on port 3128. This is the correct way to achieve the task. The other options are incorrect because they either delete a rule (-D), use the wrong protocol (top instead of tcp), or use the wrong port (81 instead of 80).

  References: CompTIA Linux+ (XK0-005) Certification Study Guide, Chapter 12: Managing Network Connections, page 381.

• Question 109:

  A systems administrator has been tasked with disabling the nginx service from the environment to prevent it from being automatically and manually started. Which of the following commands will accomplish this task?

  A. systemct1 cancel nginx
  B. systemct1 disable nginx
  C. systemct1 mask nginx
  D. systemct1 stop nginx
  C. systemct1 mask nginx

  ---

  Explanation

  The command systemct1 mask nginx disables the nginx service from the environment and prevents it from being automatically and manually started. This command creates a symbolic link from the service unit file to /dev/null, which makes the service impossible to start. This is the correct way to accomplish the task. The other options are incorrect because they either do not exist (systemct1 cancel nginx), do not prevent manual start (systemct1 disable nginx), or do not prevent automatic start (systemct1 stop nginx).

  References: CompTIA Linux+ (XK0-005) Certification Study Guide, Chapter 14:

  Managing Processes and Scheduling Tasks, page 429.

• Question 110:

  A systems administrator is working on a security report from the Linux servers. Which of the following commands can the administrator use to display all the firewall rules applied to the Linux servers? (Select two).

  A. ufw limit
  B. iptables --F
  C. systemct1 status firewalld
  D. firewall--cmd ----1ist--a11
  E. ufw status
  F. iptables --A
  D. firewall--cmd ----1ist--a11
  E. ufw status

  ---

  Explanation

  These commands can display all the firewall rules applied to the Linux servers, depending on which firewall service is being used. The firewall-cmd command is a utility for managing firewalld, which is a dynamic firewall service that supports zones and services. The --list-all option will show all the settings and rules for the default zone, or for a specific zone if specified.

  For example, firewall-cmd --list-all --zone=public will show the rules for the public zone1. The ufw command is a frontend for iptables, which is a low-level tool for manipulating netfilter, the Linux kernel's packet filtering framework. The status option will show the status of ufw and the active rules, or the numbered rules if verbose is

  specified. For example, ufw status verbose will show the numbered rules and other information2. The other options are incorrect because:

  A. ufw limit

  This command will limit the connection attempts to a service or port using iptables' recent module. It does not display any firewall rules2.

  B. iptables -F

  This command will flush (delete) all the rules in the selected chain, or all chains if none is given. It does not display any firewall rules3.

  C. systemctl status firewalld

  This command will show the status of the firewalld service, including whether it is active or not, but it does not show the firewall rules4.

  F. iptables -A

  This command will append one or more rules to the end of the selected chain. It does not display any firewall rules3.