CompTIA XK0-005 Online Practice Questions and Exam Preparation

CompTIA XK0-005 Online Questions & Answers

• Question 411:

  Using AD Query, the security gateway connections to the Active Directory Domain Controllers using what protocol?

  A. Windows Management Instrumentation (WMI)
  B. Hypertext Transfer Protocol Secure (HTTPS)
  C. Lightweight Directory Access Protocol (LDAP)
  D. Remote Desktop Protocol (RDP)
  C. Lightweight Directory Access Protocol (LDAP)

  ---

  Explanation

  Using AD Query, the security gateway connects to the Active Directory Domain Controllers using Lightweight Directory Access Protocol (LDAP). LDAP is a protocol that provides access to directory services over a network. AD Query uses LDAP queries to retrieve information about users and groups from Active Directory Domain Controllers without installing any software on them. AD Query does not use Windows Management Instrumentation (WMI), Hypertext Transfer Protocol Secure (HTTPS), or Remote Desktop Protocol (RDP) to connect to Active Directory Domain Controllers.

  References: Check Point Certified Security Administrator (CCSA) R80.x Study Guide, Chapter 5: User Management and Authentication, page 69.

• Question 412:

  A systems administrator created a new directory with specific permissions. Given the following output:

  # file: comptia

  # owner: root

  # group: root

  user: : rwx

  group :: r-x

  other: :--

  default:user :: rwx

  default:group :: r-x

  default:group:wheel: rwx

  default:mask :: rwx

  default:other ::

  Which of the following permissions are enforced on /comptia?

  A. Members of the wheel group can read files in /comptia.
  B. Newly created files in /comptia will have the sticky bit set.
  C. Other users can create files in /comptia.
  D. Only root can create files in /comptia.
  A. Members of the wheel group can read files in /comptia.

  ---

  Explanation

  The output shows the file access control list (FACL) of the /comptia directory, which is an extension of the standard Linux permissions that allows more fine-grained control over file and directory access1. The FACL consists of two parts: the access ACL and the default ACL. The access ACL applies to the current object, while the default ACL applies to the objects created within the directory2. The access ACL has three entries: user, group, and other. These are similar to the standard Linux permissions, but they can be specified for individual users or groups as well. The user entry shows that the owner of the directory (root) has read, write, and execute permissions (rwx). The group entry shows that the group owner of the directory (root) has read and execute permissions (r-x). The other entry shows that all other users have no permissions (--). The default ACL has five entries: user, group, group:wheel, mask, and other. These are applied to any files or directories created within /comptia. The user entry shows that the owner of the new object will have read, write, and execute permissions (rwx). The group entry shows that the group owner of the new object will have read and execute permissions (r-x). The group:wheel entry shows that the members of the wheel group will have read, write, and execute permissions (rwx) on the new object. The mask entry shows that the maximum permissions allowed for any user or group are read, write, and execute (rwx). The other entry shows that all other users will have no permissions (--) on the new object. Therefore, based on the FACL output, members of the wheel group can read files in /comptia, as they have read permission on both the directory and any files within it. Option B is incorrect because the sticky bit is not set on /comptia or any files within it. The sticky bit is a special permission that prevents users from deleting or renaming files that they do not own in a shared directory3. It is symbolized by a t character in the execute position of others. Option C is incorrect because other users cannot create files in /comptia, as they have no permissions on the directory or any files within it. Option D is incorrect because root is not the only user who can create files in /comptia. Any user who has write permission on the directory can create files within it, such as members of the wheel group.

• Question 413:

  A Linux administrator needs to rebuild a container with the httpd service in order to change some default parameters. Which of the following should be the first command line in the Dockerfile?

  A. FROM httpd
  B. BASE httpd
  C. USE httpd
  D. INHERIT httpd
  A. FROM httpd

  ---

  Explanation

  In Docker, a Dockerfile is a script that contains instructions to build a container image. The first line in a Dockerfile is typically the FROM directive, which specifies the base image from which the container will be built. The correct syntax for

  specifying a base image is:rubyCopyEditFROM :If no tag is provided, Docker will pull the latest version of the specified image by default.

  httpd is the official Apache HTTP Server image available in Docker Hub.

  The incorrect options:

  Thus, the correct answer is A. FROM httpd.

• Question 414:

  After installing some RPM packages, a systems administrator discovers the last package that was installed was not needed. Which of the following commands can be used to remove the package?

  A. dnf remove packagename
  B. apt-get remove packagename
  C. rpm -i packagename
  D. apt remove packagename
  A. dnf remove packagename

  ---

  Explanation

  The command that can be used to remove an RPM package that was installed by mistake is dnf remove packagename. This command will use the DNF package manager to uninstall an RPM package and its dependencies from a Linux system that uses RPM-based distributions, such as Red Hat Enterprise Linux or CentOS. The DNF package manager handles dependency resolution and metadata searching for RPM packages. The other options are not correct commands for removing an RPM package from a Linux system. The apt-get remove packagename and apt remove packagename commands are used to remove Debian packages from a Linux system that uses Debian-based distributions, such as Ubuntu or Debian. They are not compatible with RPM packages. The rpm -i packagename command is used to install an RPM package, not to remove it.

  References: CompTIA Linux+ (XK0-005) Certification Study Guide, Chapter 9: Managing Software Packages; How to install/remove/query/update RPM packages in Linux (Cheat Sheet ...

• Question 415:

  Which of the following commands is used to configure the default permissions for new files?

  A. setenforce
  B. sudo
  C. umask
  D. chmod
  C. umask

  ---

  Explanation

  The command that is used to configure the default permissions for new files is umask. The umask command is a tool for setting the default permissions for new files and directories on Linux systems. The umask value is a four-digit octal number that represents the permissions that are subtracted from the default permissions. The default permissions for files are 666, which means read and write for owner, group, and others. The default permissions for directories are 777, which means read, write, and execute for owner, group, and others. The umask value consists of four digits: the first digit is for special permissions, such as setuid, setgid, and sticky bit; the second digit is for the owner permissions; the third digit is for the group permissions; and the fourth digit is for the others permissions. The umask value can be calculated by subtracting the desired permissions from the default permissions. For example, if the desired permissions for files are 664, which means read and write for owner and group, and read for others, then the umask value is 002, which is 666 - 664. The command umask 002 will set the umask value to 002, which will ensure that only file owners and group members can modify new files by default. The command that is used to configure the default permissions for new files is umask. This is the correct answer to the question. The other options are incorrect because they either do not set the default permissions for new files (setenforce, sudo, or chmod) or do not exist (kill -HUP or kill -TERM).

  References: CompTIA Linux+ (XK0-005) Certification Study Guide, Chapter 11: Managing File Permissions and Ownership, page 349.

• Question 416:

  A Linux administrator needs to run a web application on a server that requires the use of a desktop web browser to enter the final configuration information. The administrator determines the server is running in multi-user mode. The

  administrator verifies that a web browser is installed on the server and that it has a display manager installed.

  Which of the following commands will best allow the administrator to temporarily use the web browser on the server?

  A. sudo systemctl isolate graphical.target
  B. sudo systemctl set-default runlevel5.target
  C. sudo systemctl restart gdm
  D. sudo systemctl --no-wall rescue
  A. sudo systemctl isolate graphical.target

  ---

  Explanation

  The systemctl isolate graphical.target command switches the system to graphical mode (runlevel 5). This will start the display manager and allow the administrator to use a graphical environment, including a web browser. The switch is temporary, and the system will revert to multi-user mode after reboot unless explicitly changed.

• Question 417:

  An administrator created an initial Git repository and uploaded the first files. The administrator sees the following when listing the repository:

  

  The administrator notices the file . DS STORE should not be included and deletes it from the online repository. Which of the following should the administrator run from the root of the local repository before the next commit to ensure the file is not uploaded again in future commits?

  A. rm -f .DS STORE andand git push
  B. git fetch andand git checkout .DS STORE
  C. rm -f .DS STORE andand git rebase origin main
  D. echo .DS STORE >> .gitignore
  D. echo .DS STORE >> .gitignore

  ---

  Explanation

  The correct answer is

  D. The administrator should run "echo .DS STORE >> .gitignore" from the root of the local repository before the next commit to ensure the file is not uploaded again in future commits. This command will append the file

  name .DS STORE to the end of the .gitignore file, which is a special file that tells Git to ignore certain files or directories that should not be tracked or uploaded to the repository. By adding .DS STORE to the .gitignore file, the administrator will prevent Git from staging, committing, or pushing this file in the future.

  The other options are incorrect because:

  A. rm -f .DS STORE andand git push

  This command will delete the file .DS STORE from the local repository and then push the changes to the remote repository. However, this does not prevent the file from being uploaded again in future commits, if it is recreated or copied to the local repository.

  B. git fetch andand git checkout .DS STORE

  This command will fetch the latest changes from the remote repository and then restore the file .DS STORE from the remote repository to the local repository. This is not what the administrator wants to do, as this will undo the deletion of the file from the online repository.

  C. rm -f .DS STORE andand git rebase origin main

  This command will delete the file .DS STORE from the local repository and then rebase the local branch onto the main branch of the remote repository. This will rewrite the commit history of the local branch and may cause conflicts or errors.

  This is not what the administrator wants to do, as this is a risky and unnecessary operation.

• Question 418:

  Users report that they are unable to reach the company website https://www.comptia.org. A systems administrator confirms the issue with the following command:

  # curl https://www.comptia.org

  curl: (7) Failed to connect to www.comptia.org port 443: No route to host

  The administrator logs in to the company's web server to check its configuration and sees the following output:

  [email protected]:-># firewall-cmd --list-all

  public (active)

  target: default

  icmp-block-inversion: no

  interfaces: dummy0 eth0

  sources: services: cockpit dhcpv6-client http ssh ports: 3001/tcp protocols: forward: no masquerade: no forward-ports: source-ports: icmp-blocks: rich rules: rule family="ipv4" source address="61.177.173.6" port port="ssh" protocol="tcp" reject type="icmp-port-unreachable" rule family="ipv4" source address="185.143.45.164" port port="ssh" protocol="tcp" reject type="icmp-port-unreachable" rule family="ipv4" source address="143.198.60.41" port port="ssh" protocol="tcp" reject type="icmp-port-unreachable" [email protected]:-># ip route default via 172.31.1.1 dev eth0 proto dhcp src 65.21.187.65 metric 100 10.0.6.0/24 dev dummy0 proto kernel scope link src 10.0.6.65 metric 550 172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1 172.18.0.0/16 dev br-28ac2eaeeca1 proto kernel scope link src 172.18.0.1 172.19.0.0/16 dev br-fb3897555ca3 proto kernel scope link src 172.19.0.1 linkdown 172.31.1.1 dev eth0 proto dhcp scope link src 65.21.187.65 metric 100 192.168.224.0/20 dev br-e949ab177d79 proto kernel scope link src 192.168.224.1 linkdown 192.168.240.0/20 dev br-6adf72ac0ae3 proto kernel scope link src 192.168.240.1 linkdown Which of the following is causing the issue?

  A. The web server's interface has no link.
  B. The default route on the web server is incorrect.
  C. HTTPS traffic is not allowed through the web server firewall.
  D. User IP addresses are rejected by the firewall.
  C. HTTPS traffic is not allowed through the web server firewall.

  ---

  Explanation

  The curl error "No route to host" suggests that the server is unreachable on port 443 (HTTPS).

  The firewall-cmd --list-all output shows the active firewall rules:

  The routing table (ip route output) appears correct, as the default route is properly set to 172.31.1.1 via eth0. This rules out option

  B. Option A is incorrect because eth0 is active and configured (default via 172.31.1.1 dev eth0), meaning the

  network interface is not down. Option D is misleading because the firewall rules are only rejecting SSH traffic from specific IP addresses, not HTTPS traffic.

  Fixing the Issue:

  To allow HTTPS traffic, the administrator should enable HTTPS in the firewall:

  # firewall-cmd --add-service=https --permanent

  # firewall-cmd --reload

  This will allow HTTPS (port 443) through the firewall.

  References:

  CompTIA Linux+ Official Documentation

  firewalld Documentation - Red Hat

  Linux Firewall Configuration - CompTIA Security+ Guide

• Question 419:

  An administrator would like to securely connect to a server and forward port 8080 on a local machine to port 80 on the server. Which of the following commands should the administrator use to satisfy both requirements?

  A. ssh --L 8080: localhost:80 admin@server
  B. ssh --R 8080: localhost:80 admin@server
  C. ssh --L 80 : localhost:8080 admin@server
  D. ssh --R 80 : localhost:8080 admin@server
  A. ssh --L 8080: localhost:80 admin@server

  ---

  Explanation

  This command will create a local port forwarding, which means that connections from the SSH client are forwarded via the SSH server, then to a destination server. In this case, the destination server is the same as the SSH server (localhost),

  and the destination port is 80. The SSH client will listen on port 8080 on the local machine, and any connection to that port will be forwarded to port 80 on the server. This way, the administrator can securely access the web service running on port 80 on the server by using http://localhost:8080 on the local machine.

  The other options are incorrect because:

  B. ssh -R 8080:localhost:80 admin@server This command will create a remote port forwarding, which means that connections from the SSH server are forwarded via the SSH client, then to a destination server. In this case, the destination server is the same as the SSH client (localhost), and the destination port is 80. The SSH server will listen on port 8080 on the remote machine, and any connection to that port will be forwarded to port 80 on the client. This is not what the administrator wants to do.

  C. ssh -L 80:localhost:8080 admin@server This command will also create a local port forwarding, but it will use port 80 on the local machine and port 8080 on the server. This is not what the administrator wants to do, and it may also fail if port 80 is already in use by another service on the local machine.

  D. ssh -R admin@server

  This command is incomplete and invalid. It does not specify any port numbers or destination addresses for the remote port forwarding. It will also fail if the SSH server does not allow remote port forwarding.

  References:

  CompTIA Linux+ Certification Exam Objectives

  How to Set up SSH Tunneling (Port Forwarding)

• Question 420:

  A Linux administrator needs to harden a system and guarantee that the Postfix service will not run, even after a restart or system upgrade. Which of the following commands allows the administrator to fulfill the requirement?

  A. systemctl mask postfix.service
  B. systemctl disable postfix.service
  C. systemctl stop postfix.service
  D. systemctl -n restart postfix.service
  A. systemctl mask postfix.service

  ---

  Explanation

  The systemctl mask postfix.service command prevents the Postfix service from being started manually or automatically by symlinking its service file to /dev/null. This ensures that even if a system restart or upgrade occurs, the service will remain disabled and will not start.