CompTIA XK0-006 Online Practice Questions and Exam Preparation

CompTIA XK0-006 Online Questions & Answers

• Question 71:

  An administrator attempts to install updates on a Linux system but receives error messages regarding a specific repository.

  Which of the following commands should the administrator use to verify that the repository is installed and enabled?

  A. yum repo-pkgs
  B. yum list installed repos
  C. yum reposync available
  D. yum repolist all
  D. yum repolist all

  ---

  Explanation

  Package management troubleshooting is an important skill in Linux+ V8, especially on RPM-based distributions that use yum or dnf. When update errors reference a repository, the administrator must verify whether the repository exists and whether it is enabled.

  The command yum repolist all displays all configured repositories, including those that are enabled, disabled, or temporarily unavailable. This makes it the most effective command for diagnosing repository-related issues. It allows administrators to quickly confirm the repository's status and take corrective action, such as enabling it or fixing configuration errors. The other options are incorrect. yum repo-pkgs manages packages within a repository but does not list repository status. yum list installed repos is not a valid yum command. yum reposync is used to mirror repositories locally and is not intended for verification.

  Linux+ V8 documentation highlights yum repolist all as the standard command for repository inspection and troubleshooting.

• Question 72:

  SIMULATION

  A senior administrator has placed a private key for user admin in your home directory.

  The server you need to remotely access is server1 and SSH is listening on port 2222.

  INSTRUCTIONS

  Part 1

  Review the command output and build the correct command to place the private key into your SSH folder.

  Part 2

  Review the command output and build the correct command to set the file permissions.

  Part 3

  Review the command output and build the correct command to set the correct ownership.

  In each part, click on objects to build a complete command. Command objects may be used more than once, but not all will be used. Use _ as the spacebar. Click the

  arrow to remove any unwanted objects from your command.

  Part 4

  Select the proper file to edit for remote server access. Then, build the correct configuration output based on the server name, ports, and files.

  

  

  

  

  

  

  

  

  

  

  

  

  

  A. See the Explanation part for detailed answer of each part.
  B. PlaceHolder
  C. PlaceHolder
  D. PlaceHolder
  A. See the Explanation part for detailed answer of each part.

  ---

  Explanation

  Part 1

  Here is the step-by-step command construction process:

  1. Move the private key (likely named server1 based on the provided details) to the .ssh directory:

  mv ~/server1 ~/.ssh/id_rsa

  This command moves the private key (assuming it's named server1) from the home directory (~) to the .ssh directory and renames it to id_rsa (which is the default SSH private key file name).

  2. Set the correct permissions for the private key file:

  chmod 600 ~/.ssh/id_rsa

  The private key file should be readable and writable only by the owner to maintain security.

  3. Connect to the server using the private key and the correct port (2222):

  ssh -i ~/.ssh/id_rsa -p 2222 admin@server1

  This command tells ssh to use the specified private key (-i ~/.ssh/id_rsa), connect on port 2222 (-p 2222), and log in as the admin user on server1.

  Part 2: Setting File Permissions

  The correct command to set the file permissions based on the screenshots would likely involve using chmod. Here is the command to set permissions correctly:

  chmod 600 ~/.ssh/id_rsa

  This restricts the private key's permissions so that only the user can read and write it.

  Part 3: Setting Ownership

  If ownership needs to be set, the command would look like this:

  chown comptia:comptia ~/.ssh/id_rsa

  This command ensures that the file is owned by the correct user (comptia) and the correct group (comptia).

  In part 4, it asks you to select the proper file for editing to enable remote server access. Based on standard SSH configuration requirements, the proper file to edit for remote server access would be ~/.ssh/config.

  Here's why:

  ~/.ssh/config: This file allows you to set up configuration options for different hosts, including specifying ports, user names, and the identity file (private key). You would add the necessary configuration for server1 to this file for easier access.

  Other options:

  For configuring access to server1 on port 2222, you would add a block like this to the ~/.ssh/config file:

  Host server1

  HostName server1

  Port 2222

  User admin

  IdentityFile ~/.ssh/id_rsa

• Question 73:

  A Linux user would like the shell changed to /bin/bash.

  Which of the following commands will accomplish this task?

  A. usermod -g /bin/bash user
  B. usermod -s /bin/bash user
  C. usermod -p /bin/bash user
  D. usermod -d /bin/bash user
  B. usermod -s /bin/bash user

• Question 74:

  A Linux administrator wants to make the enable_auth variable set to 1 and available to the environment of subsequently executed commands.

  Which of the following should the administrator use for this task?

  A. let ENABLE_AUTH=1
  B. ENABLE_AUTH=1
  C. ENABLE_AUTH=$(echo $ENABLE_AUTH)
  D. export ENABLE_AUTH=1
  D. export ENABLE_AUTH=1

  ---

  Explanation

  Environment variables in Linux can exist either locally within a shell or be exported to child processes. CompTIA Linux+ V8 emphasizes the distinction between shell variables and environment variables , as this affects how applications inherit configuration values.

  Option D , export ENABLE_AUTH=1, is the correct choice because it both assigns the variable and marks it for export to the environment. Once exported, the variable becomes available to all subsequently executed commands and child processes spawned from the current shell. This behavior is required when applications or scripts rely on environment variables for configuration.

  Option B , ENABLE_AUTH=1, only sets a shell-local variable. While it is accessible within the current shell session, it is not inherited by child processes unless explicitly exported.

  Option A , let ENABLE_AUTH=1, performs arithmetic evaluation and does not export the variable.

  Option C incorrectly assigns the output of a command substitution and does not set the desired value.

  Linux+ V8 documentation highlights export as the correct mechanism for making variables available system- wide within a user session.

• Question 75:

  A Linux administrator updates the DNS record for the company using:

  cat /etc/bind/db.abc.com

  The revised partial zone file is as follows:

  ns1 IN A 192.168.40.251

  ns2 IN A 192.168.40.252

  www IN A 192.168.30.30

  When the administrator attempts to resolve www.abc.com to its IP address, the domain name still points to its old IP mapping:

  nslookup www.abc.com

  Server: 192.168.40.251

  Address: 192.168.40.251#53

  Non-authoritative answer:

  Name: www.abc.com

  Address: 199.168.20.81

  Which of the following should the administrator execute to retrieve the updated IP mapping?

  A. systemd-resolve query www.abc.com
  B. systemd-resolve status
  C. service nslcd reload
  D. resolvectl flush-caches
  D. resolvectl flush-caches

  ---

  Explanation

  This scenario represents a classic DNS troubleshooting situation covered in the Troubleshooting domain of the CompTIA Linux+ V8 objectives. Although the DNS zone file has been updated correctly on the BIND server, the system continues to resolve the domain name to an outdated IP address. This behavior strongly indicates DNS caching rather than a configuration error in the zone file itself.

  Modern Linux systems that use systemd-resolved cache DNS responses locally to improve performance and reduce external queries. Even after a DNS record is updated on the authoritative server, cached results may persist until the cache expires or is manually cleared. The nslookup output showing a non-authoritative answer further confirms that the response is being served from a cache rather than directly from the updated zone data.

  The correct solution is to flush the local DNS cache so the system can retrieve the updated record from the DNS server. The command resolvectl flush-caches clears all cached DNS entries maintained by systemd- resolved, forcing fresh queries to authoritative name servers. This aligns directly with Linux+ V8 documentation for resolving name resolution inconsistencies caused by stale cache entries.

  The other options are incorrect for the following reasons. systemd-resolve query www.abc.com performs a DNS lookup but does not clear cached entries. systemd-resolve status only displays resolver configuration and statistics. service nslcd reload reloads the Name Service LDAP daemon and is unrelated to DNS resolution or caching.

  Linux+ V8 emphasizes identifying whether issues originate from services, configuration, or cached data. In this case, flushing the DNS cache is the correct and least disruptive corrective action.

• Question 76:

  Which of the following is a way to enable a production web server's communications with strong encryption and identity verification?

  A. Creating a key pair using ssh-keygen and using the generated key pair to secure the HTTPS communication
  B. Creating a private key locally using openssl, creating a certificate request, sending the request to an external certification provider, and using the provided certificate for HTTPS communication
  C. Creating a 4096-bytes or longer self-signed certificate using openssl and using it to secure HTTPS communication
  D. Creating a secret file using /dev/random as a source and using the generated file for HTTPS communication
  B. Creating a private key locally using openssl, creating a certificate request, sending the request to an external certification provider, and using the provided certificate for HTTPS communication

• Question 77:

  An administrator needs to remove the directory /home/user1/data and all of its contents.

  Which of the following commands should the administrator use?

  A. rmdir -p /home/user1/data
  B. ln -d /home/user1/data
  C. rm -r /home/user1/data
  D. cut -d /home/user1/data
  C. rm -r /home/user1/data

  ---

  Explanation

  File and directory management is a core system administration skill addressed in Linux+ V8. When an administrator needs to delete a directory that contains files or subdirectories, a recursive deletion is required.

  The correct command is rm -r /home/user1/data. The rm command removes files, and the -r (recursive) option allows it to delete directories and all of their contents, including nested files and subdirectories. This is the standard and correct method for removing non-empty directories.

  The other options are incorrect. rmdir -p only removes empty directories and will fail if the directory contains files. ln -d is used to create directory hard links, not remove directories. cut -d is a text-processing command unrelated to filesystem operations.

  Linux+ V8 documentation stresses caution when using rm -r, as it permanently deletes data without recovery unless backups exist.

• Question 78:

  A systems administrator needs to set the IP address of a new DNS server.

  Which of the following files should the administrator modify to complete this task?

  A. /etc/whois.conf
  B. /etc/resolv.conf
  C. /etc/nsswitch.conf
  D. /etc/dnsmasq.conf
  B. /etc/resolv.conf

  ---

  Explanation

  DNS client configuration is a foundational Linux networking task covered in Linux+ V8 system management objectives. When an administrator needs to specify the IP address of a DNS server that the system should use for name resolution, the correct file to modify is /etc/resolv.conf .

  The /etc/resolv.conf file defines DNS resolver settings, including one or more nameserver entries that specify the IP addresses of DNS servers. Applications and system services rely on this file to resolve hostnames to IP addresses.

  The other options are incorrect. /etc/whois.conf configures WHOIS queries. /etc/nsswitch.conf controls the order of name resolution sources but does not define DNS server IP addresses. /etc/dnsmasq.conf configures a local DNS caching service, not the system-wide resolver directly.

  Linux+ V8 documentation highlights /etc/resolv.conf as the authoritative DNS client configuration file, though it may be dynamically managed by tools such as NetworkManager or systemd-resolved.

• Question 79:

  A Linux user needs to download the latest Debian image from a Docker repository.

  Which of the following commands makes this task possible?

  A. docker image init debian
  B. docker image pull debian
  C. docker image import debian
  D. docker image save debian
  B. docker image pull debian

  ---

  Explanation

  Container management and image handling are part of modern Linux automation practices covered in CompTIA Linux+ V8. Docker images are stored in container registries such as Docker Hub, and administrators commonly need to download images to deploy containers.

  The correct command for downloading an image from a Docker repository is docker image pull. This command retrieves the specified image from a configured container registry and stores it locally. When no tag is specified, Docker automatically pulls the latest available version of the image. Therefore, docker image pull debian downloads the most recent Debian image from Docker Hub.

  The other options are incorrect. docker image init is not a valid Docker command and does not exist in Docker's CLI. docker image import is used to create a Docker image from a tarball file, not to download an image from a repository. docker image save exports an existing local image into a tar archive and does not retrieve images from a remote registry.

  Linux+ V8 documentation emphasizes understanding container image lifecycles, including pulling, tagging, and running images. Pulling images is a foundational step before container execution and automation workflows.

• Question 80:

  A systems administrator needs to integrate a new storage array into the company's existing storage pool. The administrator wants to ensure that the server is able to detect the new storage array.

  Which of the following commands should the administrator use to ensure that the new storage array is presented to the systems?

  A. lsscsi
  B. lsusb
  C. lsipc
  D. lshw
  A. lsscsi