CompTIA XK0-006 Online Practice Questions and Exam Preparation

CompTIA XK0-006 Online Questions & Answers

• Question 21:

  Which of the following can reduce the attack surface area in relation to Linux hardening?

  A. Customizing the log-in banner
  B. Reducing the number of directories created
  C. Extending the SSH startup timeout period
  D. Enforcing password strength and complexity
  D. Enforcing password strength and complexity

• Question 22:

  A systems administrator is preparing a Linux system for application setup. The administrator needs to create an environment variable with a persistent value in one of the user accounts.

  Which of the following commands should the administrator use for this task?

  A. export "VAR=SomeValue" >> ~/.ssh/profile
  B. export VAR=value
  C. VAR=value
  D. echo "export VAR=value" >> ~/.bashrc
  D. echo "export VAR=value" >> ~/.bashrc

  ---

  Explanation

  Environment variables are widely used in Linux systems to configure application behavior, and Linux+ V8 emphasizes the distinction between temporary and persistent variables. A variable is persistent only if it is defined in a shell initialization file.

  The correct approach is echo "export VAR=value" >> ~/.bashrc. This command appends the variable definition to the user's .bashrc file, ensuring the variable is set automatically every time the user starts a new shell session. This makes the variable persistent for that specific user.

  Options B and C only define variables in the current shell session and are lost when the session ends. Option A incorrectly targets the SSH configuration directory and is not appropriate for defining shell environment variables.

  Linux+ V8 documentation highlights .bashrc, .bash_profile, and /etc/profile as correct locations for persistent environment variables.

• Question 23:

  An administrator is unable to sync servers to the new NTP server IP address given by the service provider despite several attempts. Looking at the below output

  

  Which of the following commands will help resolve the issue?

  A. firewall-cmd --check-config systemctl restart ntpd
  B. firewall-cmd --state systemctl restart ntpd
  C. firewall-cmd -complete-reload systemctl restart ntpd
  D. firewall-cmd -- reload systemctl restart ntpd
  D. firewall-cmd -- reload systemctl restart ntpd

• Question 24:

  A systems administrator wants to leverage their password-protected SSH key to connect to multiple servers without entering their password every time.

  Which of the following commands should the administrator use?

  A. ssh-copy-id
  B. ssh-agent
  C. ssh-add
  D. ssh-keygen
  C. ssh-add

• Question 25:

  A systems administrator is working on an SFTP server configuration.

  Which of the following commands will best enable the connectivity to that service from the 10.10.0.0/24 network?

  A. sudo ufw allow from 10.10.0.0/24 to any port 22
  B. sudo ufw allow in on eth0 to any port 22
  C. sudo ufw allow from 10.10.0.0/24
  D. sudo ufw allow 0:22/tcp from 10.10.0.0
  A. sudo ufw allow from 10.10.0.0/24 to any port 22

• Question 26:

  Which of the following is a reason multiple password changes on the same day are not allowed?

  A. To avoid brute-forced password attacks by making them too long to perform
  B. To increase password complexity and the system's security
  C. To stop users from circulating through the password history to return to the originally used password
  D. To enforce using multifactor authentication with stronger encryption algorithms instead of passwords
  C. To stop users from circulating through the password history to return to the originally used password

  ---

  Explanation

  Password policy enforcement is a critical component of system security covered in the CompTIA Linux+ V8 objectives. One common control implemented in Linux systems is restricting how frequently users can change their passwords, often referred to as minimum password age enforcement.

  The primary reason multiple password changes within a short time frame are not allowed is to prevent password cycling attacks . Without this restriction, a user could repeatedly change their password in quick succession to bypass password history controls and eventually reuse a previously compromised or weak password. Option C accurately describes this scenario and aligns directly with Linux+ V8 security guidance.

  Linux systems enforce this behavior through tools such as chage and PAM (Pluggable Authentication Modules). Administrators can configure minimum password age values to ensure users must wait a defined period before changing passwords again. This ensures that password history requirements are effective and meaningful.

  The other options are incorrect. Option A confuses password expiration with brute-force mitigation, which is typically addressed through account lockout policies. Option B refers to password complexity, which is enforced through character requirements rather than change frequency. Option D is unrelated, as password expiration policies do not enforce multifactor authentication.

  Linux+ V8 documentation emphasizes layered access controls, and preventing password reuse through enforced timing restrictions is a core principle of secure authentication design.

• Question 27:

  A Linux administrator is troubleshooting connectivity issues and receives the following outputs:

  $ ping comptia.org

  ping: comptia.org: Temporary failure in name resolution

  $ ping 104.18.17.29

  64 bytes from 104.18.17.29: icmp_seq=1 ttl=63 time=31.4 ms

  ...

  Which of the following describes the issue?

  A. A DNS has not been configured in the /etc/resolv.conf file
  B. A name server IP address has not been added in the /etc/protocols file
  C. The network interface is disabled
  D. A gateway IP address has not been configured on the network interface's configuration file
  A. A DNS has not been configured in the /etc/resolv.conf file

• Question 28:

  A Linux administrator needs to deploy an Apache web server in a container. In addition, the container needs to run in the background, and the web server needs to be exposed on port 8080 of the host machine.

  Which of the following commands will satisfy these requirements?

  A. sudo docker run -b -t -p 8080:80 --name mywebserver httpd
  B. sudo docker run -d -t -p 8080:80 --name myweb httpd
  C. sudo docker run -d -t -p 80:8080 --name myweb httpd
  D. sudo docker run -b -t -p 80:8080 --name mywebserver httpd
  B. sudo docker run -d -t -p 8080:80 --name myweb httpd

• Question 29:

  A Linux administrator is making changes to local files that are part of a Git repository. The administrator needs to retrieve changes from the remote Git repository.

  Which of the following commands should the administrator use to save the local modifications for later review?

  A. git stash
  B. git pull
  C. git merge
  D. git fetch
  A. git stash

  ---

  Explanation

  In Git-based workflows, especially those used in DevOps environments, it is common for administrators to have uncommitted local changes while needing to retrieve updates from a remote repository. Linux+ V8 emphasizes understanding how to safely manage local modifications during synchronization operations.

  The command git stash is specifically designed for this scenario. It temporarily saves (or "stashes") local changes in a stack-like structure and reverts the working directory to a clean state that matches the current HEAD. This allows the administrator to perform operations such as git pull without conflicts. Later, the stashed changes can be reapplied using git stash apply or git stash pop.

  The other options are incorrect. git pull retrieves and merges remote changes but will fail or cause conflicts if local modifications exist. git merge combines branches and does not save uncommitted changes. git fetch downloads remote references but does not address local working directory changes.

  Linux+ V8 documentation highlights git stash as a safe and reversible way to protect local work during repository updates.

• Question 30:

  Which of the following most accurately describes a webhook?

  A. An authentication method for web-server communication
  B. An SNMP-based API for network device monitoring
  C. A means to transmit sensitive information between systems
  D. An HTTP-based callback function
  D. An HTTP-based callback function

  ---

  Explanation

  Webhooks are commonly used in automation and DevOps workflows, which are emphasized in the Linux+ V8 objectives. A webhook is best described as an HTTP-based callback mechanism that allows one system to notify another when a specific event occurs.

  Option D correctly defines a webhook. Instead of polling an API at regular intervals, a webhook allows an application to automatically send an HTTP request-typically a POST-to a predefined URL when an event happens. This makes webhooks efficient, event-driven, and well-suited for automation pipelines, CI/CD systems, and monitoring integrations.

  The other options are incorrect. Option A confuses webhooks with authentication mechanisms. Option B incorrectly associates webhooks with SNMP, which is a separate protocol. Option C is misleading because webhooks are not inherently designed for transmitting sensitive data and require additional security measures such as TLS and authentication.

  Linux+ V8 documentation highlights webhooks as a key integration method in automated environments, enabling systems to react in real time to changes or triggers.