CompTIA XK0-005 Online Practice Questions and Exam Preparation

CompTIA XK0-005 Online Questions & Answers

• Question 51:

  Which of the following directories is the mount point in a UEFI system?

  A. /sys/efi
  B. /boot/efi
  C. /efi
  D. /etc/efi
  B. /boot/efi

  ---

  Explanation

  The /boot/efi directory is the mount point in a UEFI system. This directory contains the EFI System Partition (ESP), which stores boot loaders and other files required by UEFI firmware. The /sys/efi directory does not exist by default in Linux systems. The /efi directory does not exist by default in Linux systems. The /etc/efi directory does not exist by default in Linux systems.

  References: CompTIA Linux+ (XK0-005) Certification Study Guide, Chapter 11: Managing the Linux Boot Process, page 398.

• Question 52:

  A Linux administrator needs to check the content of a log file that is appending data as the file grows. Which of the following commands should the administrator use to accomplish this task?

  A. tail -f log.txt
  B. tail -v log.txt
  C. tail -c log.txt
  D. tail log.txt
  A. tail -f log.txt

  ---

  Explanation

• Question 53:

  A DevOps engineer wants to work on a snapshot of the infrastructure as code configuration. Which of the following commands should the engineer use to accomplish this task?

  A. git pull
  B. git push
  C. git branch
  D. git tag
  D. git tag

  ---

  Explanation

  Creating a snapshot of the current state of the code in Git is best achieved with the git tag command, which is often used to mark release points or stable versions in a project. Tags are helpful for referencing points in history without

  affecting the branch structure. Unlike branches, which are for active development, tags are commonly used to mark versions for future reference or deployment.

  CompTIA Linux+ Study Guide.

• Question 54:

  A Linux user reported the following error after trying to connect to the system remotely:

  ssh: connect to host 10.0.1.10 port 22: Resource temporarily unavailable

  The Linux systems administrator executed the following commands in the Linux system while trying to diagnose this issue:

  

  Which of the following commands will resolve this issue?

  A. firewall-cmd --zone=public --permanent --add-service=22
  B. systemct1 enable firewalld; systemct1 restart firewalld
  C. firewall-cmd --zone=public --permanent --add-service=ssh
  D. firewall-cmd --zone=public --permanent --add-port=22/udp
  C. firewall-cmd --zone=public --permanent --add-service=ssh

  ---

  Explanation

  The firewall-cmd --zone=public --permanent --add-service=ssh command will resolve the issue by allowing SSH connections on port 22 in the public zone of the firewalld service. This command will add the ssh service to the permanent configuration of the public zone, which means it will persist after a reboot or a reload of the firewalld service. The firewall-cmd --zone=public --permanent --add-service=22 command is invalid, as 22 is not a valid service name. The systemct1 enable firewalld; systemct1 restart firewalld command will enable and restart the firewalld service, but it will not change the firewall rules. The firewall-cmd --zone=public --permanent --add-port=22/udp command will allow UDP traffic on port 22 in the public zone, but SSH uses TCP, not UDP.

  References: CompTIA Linux+ (XK0-005) Certification Study Guide, Chapter 18: Securing Linux Systems, page 543.

• Question 55:

  A cloud engineer needs to change the secure remote login port from 22 to 49000. Which of the following files should the engineer modify to change the port number to the desired value?

  A. /etc/host.conf
  B. /etc/hostname
  C. /etc/services
  D. /etc/ssh/sshd_config
  D. /etc/ssh/sshd_config

  ---

  Explanation

  The file /etc/ssh/sshd_config contains the configuration settings for the SSH daemon, which handles the secure remote login. To change the port number, the engineer should edit this file and modify the line that says Port 22 to Port 49000. The other files are not related to the SSH service.

  References: CompTIA Linux+ (XK0-005) Certification Study Guide, Chapter 13: Managing Network Services, page 411.

• Question 56:

  A systems administrator notices the process list on a mission-critical server has a large number of processes that are in state "Z" and marked as "defunct." Which of the following should the administrator do in an attempt to safely remove these entries from the process list?

  A. Kill the process with PID 1.
  B. Kill the PID of the processes.
  C. Kill the parent PID of the processes.
  D. Reboot the server.
  C. Kill the parent PID of the processes.

  ---

  Explanation

  As the web search results show, processes in state Z are defunct or zombie processes, which means they have terminated but their parent process has not reaped them properly. They do not consume any resources, but they occupy a slot in the process table. To remove them from the process list, the administrator needs to kill the parent process of the zombies, which will cause them to be reaped by the init process (PID 1). Killing the zombies themselves or the init process will not have any effect, as they are already dead. Rebooting the server may work, but it is not a safe or efficient option, as it may cause unnecessary downtime or data loss for a mission-critical server. References Processes in a Zombie (Z) or Defunct State | Support | SUSE, paragraph 3 linux - Zombie vs Defunct processes? - Stack Overflow, answer by admirableadmin How To Kill Zombie Processes on Linux | Linux Journal, paragraph 4

• Question 57:

  Which of the following is the main purpose of SSO?

  A. To allow a user to authenticate once and have access to multiple applications or systems without having to log in again
  B. To add an extra layer of protection, reducing the risk of unauthorized access, requiring more than just a password to access
  C. To be an essential component for managing authentication, authorization, and identity information
  D. To serve as an information protection mechanism that protects identities with administrative access
  A. To allow a user to authenticate once and have access to multiple applications or systems without having to log in again

  ---

  Explanation

• Question 58:

  An administrator accidentally installed the httpd RPM package along with several dependencies. Which of the following options is the best way for the administrator to revert the package installation?

  A. dnf clean all
  B. rpm -e httpd
  C. apt-get clean
  D. yum history undo last
  D. yum history undo last

  ---

  Explanation

  The yum history undo last command allows the administrator to undo the most recent transaction, effectively removing the httpd package and any installed dependencies. This is the safest and easiest way to revert package installations in RPM-based systems using yum.

• Question 59:

  At what point is the Internal Certificate Authority (ICA) created?

  A. During the primary Security Management Server installation process.
  B. Upon creation of a certificate.
  C. When an administrator decides to create one.
  D. When an administrator initially logs into SmartConsole.
  A. During the primary Security Management Server installation process.

  ---

  Explanation

  The Internal Certificate Authority (ICA) is created during the primary Security Management Server installation process. The ICA is a component of Check Point's Public Key Infrastructure (PKI) that issues and manages certificates for Security Gateways and administrators. The ICA is automatically installed and initialized when the primary Security Management Server is installed. The ICA is not created upon creation of a certificate, when an administrator decides to create one, or when an administrator initially logs into SmartConsole.

  References: Check Point Certified Security Administrator (CCSA) R80.x Study Guide, Chapter 3: Check Point Security Management Architecture, page 32.

• Question 60:

  A Linux administrator encounters the following error in the Apache log files:

  css

  SQLSTATE[HY000] [2002] Permission denied

  Which of the following commands should the administrator run to safely fix this issue?

  A. chcon -c httpd_sys_content_t /home/apache
  B. setsebool -F httpd_can_network_connect_db on
  C. setenforce 0
  D. touch /.autorelabel
  B. setsebool -F httpd_can_network_connect_db on

  ---

  Explanation

  The error indicates that SELinux is preventing Apache from connecting to the database. The command setsebool -F httpd_can_network_connect_db on allows the Apache web server to make network connections to the database, resolving the permission denied error without disabling SELinux entirely.