πŸ”

XK0-005 β€” questions

Page 11 of 14 Β· 263 total questions.

Topic 1 Β· Question 204

A Linux administrator provisioned a new web server with custom administrative permissions for certain users. The administrator receives a report that user1 is unable to restart the Apache web service on this server. The administrator reviews the following output: Which of the following would most likely resolve the issue while maintaining a least privilege security model?

Exhibit 1 for question 204
  • AUser1 should be added to the wheel group to manage the service.
  • BUser1 should have "NOPASSWD:" after the "ALL=" in the custom.conf. (correct answer)
  • CThe wheel line in the custom.conf file should be uncommented.
  • DWebadmin should be listed as a group in the custom.conf file.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: User1 should have "NOPASSWD:" after the "ALL=" in the custom.conf. This option keeps traffic private / properly secured as required.

Topic 1 Β· Question 205

Which of the following would significantly help to reduce data loss if more than one drive fails at the same time?

  • AServer clustering
  • BLoad balancing
  • CRAID (correct answer)
  • DVDI
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: RAID

Topic 1 Β· Question 206

A systems administrator receives reports that several virtual machines in a host are responding slower than expected. Upon further investigation, the administrator obtains the following output from one of the affected systems: Which of the following best explains the reported issue?

Exhibit 1 for question 206
  • AThe physical host is running out of CPU resources, leading to insufficient CPU time being allocated to virtual machines. (correct answer)
  • BThe physical host has enough CPU cores, leading to users running more processes to compensate for the slower response times.
  • CThe virtual machine has enough CPU cycles, leading to the system use percentage being higher than expected.
  • DThe virtual machine is running out of CPU resources, leading to users experiencing longer response times.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: The physical host is running out of CPU resources, leading to insufficient CPU time being allocated to virtual machines.

Explanation

A virtual machine emulates a complete computer with its own guest operating system and strong workload isolation.

Topic 1 Β· Question 207

A user is unable to remotely log on to a server using the server name server1 and port 22. The Linux engineer troubleshoots the issue and gathers the following information: Which of the following is most likely causing the issue?

Exhibit 1 for question 207
  • Aserver1 is not in the DNS.
  • Bsshd is running on a non-standard port. (correct answer)
  • Csshd is not an active service.
  • Dserver1 is using an incorrect IP address.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: sshd is running on a non-standard port.

Topic 1 Β· Question 208

A systems administrator needs to extend the logical volume /dev/mapper/linux-root to use all available space in its volume group. The filesystem should be extended as well. Which of the following commands will allow the administrator to achieve this goal?

  • Alvm pvresize -r -l100% /dev/mapper/linux-root
  • Blvchange -L100% /dev/mapper/linux-root
  • Clvextend -l+100% /dev/mapper/linux-root
  • Dlvresize -l100%FREE -r /dev/mapper/linux-root (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: lvresize -l100%FREE -r /dev/mapper/linux-root

Topic 1 Β· Question 209

A systems administrator is investigating a service that is not starting up. Given the following information: Which of the following systemd commands should the administrator use in order to obtain more details about the failing service?

Exhibit 1 for question 209
  • Asystemctl analyze network
  • Bsystemctl info network
  • Csysctl -a network
  • Djournalctl -xu network (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: journalctl -xu network

Topic 1 Β· Question 210

A DevOps engineer wants to allow the same Kubernetes container configurations to be deployed in development, testing, and production environments. A key requirement is that the containers should be configured so that developers do not have to statically configure custom, environment-specific locations. Which of the following should the engineer use to meet this requirement?

  • ACustom scheduler
  • BNode affinity
  • COverlay network
  • DAmbassador container (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Ambassador container

Explanation

A container packages an application and dependencies while sharing the host kernel for lightweight isolation.

Topic 1 Β· Question 211

After starting an Apache web server, the administrator receives the following error: Which of the following commands should the administrator use to further troubleshoot this issue?

Exhibit 1 for question 211
  • Ass (correct answer)
  • Bip
  • Cdig
  • Dnc
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: ss

Topic 1 Β· Question 212

Which of the following commands should a technician use to create an administrative account for the username Joe?

  • Asudo useradd -G wheel joe (correct answer)
  • Bsudo useradd joe; sudo passwd -l joe
  • Csudo useradd joe; sudo cat key.pem > ~/.ssh/authorized_keys
  • Dsudo useradd joe; groupadd admin joe
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: sudo useradd -G wheel joe

Topic 1 Β· Question 213

Due to performance issues on a server, a Linux administrator needs to terminate an unresponsive process. Which of the following commands should the administrator use to terminate the process immediately without waiting for a graceful shutdown?

  • Akill -SIGKILL 5545 (correct answer)
  • Bkill -SIGTERM 5545
  • Ckill -SIGHUP 5545
  • Dkill -SIGINT 5545
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: kill -SIGKILL 5545

Topic 1 Β· Question 214 Β· Select all that apply

A Linux administrator generated a list of users who have root-level command-line access to the Linux server to meet an audit requirement. The administrator analyzes the following /etc/passwd and /etc/sudoers files: Which of the following users, in addition to the root user, should be listed in the audit report as having root-level command-line access? (Choose two.)

Exhibit 1 for question 214
  • ACarl (correct answer)
  • BLee (correct answer)
  • CMallory
  • DEve
  • EBob
  • FAlice
Reveal answer & explanation
Correct answer: A, B

The correct answer is A, B. Option A: Carl Option B: Lee

Topic 1 Β· Question 215

The group named support is unable to make changes to the config file. An administrator is reviewing the permissions and sees the following: $ ls -l config -rw-rw----. 1 root app 4682 02-15 11:25 config Which of the following should the administrator execute in order to give the support group access to modify the file while preserving the current ownership?

  • Achown :support config
  • Bsetfacl -m g:support:rw- config (correct answer)
  • Cchmod 664 config
  • Dchmod g+s config
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: setfacl -m g:support:rw- config

Topic 1 Β· Question 216 Β· Select all that apply

Which of the following actions are considered good security practices when hardening a Linux server? (Choose two.)

  • ARenaming the root account to something else
  • BRemoving unnecessary packages (correct answer)
  • CChanging the default shell to /bin/csh
  • DDisabling public key authentication
  • EDisabling the SSH root login possibility (correct answer)
  • FChanging the permissions on the root filesystem to 600
Reveal answer & explanation
Correct answer: B, E

The correct answer is B, E. Option B: Removing unnecessary packages Option E: Disabling the SSH root login possibility This option keeps traffic private / properly secured as required.

Topic 1 Β· Question 217

A Linux user is trying to execute commands with sudo but is receiving the following error: $ sudo visudo >>> /etc/sudoers: syntax error near line 28 <<< sudo: parse error in /etc/sudoers near line 28 sudo: no valid sudoers sources found, quitting The following output is provided: # grep root /etc/shadow root:*LOCK*:14600:::::: Which of the following actions will resolve this issue?

  • ALog in directly using the root account and comment out line 28 from /etc/sudoers.
  • BBoot the system in single user mode and comment out line 28 from /etc/sudoers. (correct answer)
  • CComment out line 28 from /etc/sudoers and try to use sudo again.
  • DLog in to the system using the other regular user, switch to root, and comment out line 28 from /etc/sudoers.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Boot the system in single user mode and comment out line 28 from /etc/sudoers.

Topic 1 Β· Question 218

Users are experiencing high latency when accessing a web application served by a Linux machine. A systems administrator checks the network interface counters and sees the following: Which of the following is the most probable cause of the observed latency?

Exhibit 1 for question 218
  • AThe network interface is disconnected.
  • BA connection problem exists on the network interface. (correct answer)
  • CNo IP address is assigned to the interface.
  • DThe gateway is unreachable.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: A connection problem exists on the network interface.

Topic 1 Β· Question 219

A Linux administrator needs to create a symlink for /usr/local/bin/app-a, which was installed in /usr/local/share/app-a. Which of the following commands should the administrator use?

  • Aln -s /usr/local/bin/app-a /usr/local/share/app-a (correct answer)
  • Bmv -f /usr/local/share/app-a /usr/local/bin/app-a
  • Ccp -f /usr/local/share/app-a /usr/local/bin/app-a
  • Drsync -a/usr/local/share/app-a /usr/local/bin/app-a
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: ln -s /usr/local/bin/app-a /usr/local/share/app-a

Topic 1 Β· Question 220 Β· Select all that apply

The applications team is reporting issues when trying to access the web service hosted in a Linux system. The Linux systems administrator is reviewing the following outputs: Output 1: Output 2: Which of the following statements best describe the root cause? (Choose two.)

Exhibit 1 for question 220Exhibit 2 for question 220
  • AThe httpd service is currently started.
  • BThe httpd service is enabled to auto start at boot time, but it failed to start.
  • CThe httpd service was manually stopped.
  • DThe httpd service is not enabled to auto start at boot time. (correct answer)
  • EThe httpd service runs without problems.
  • FThe httpd service did not start during the last server reboot. (correct answer)
Reveal answer & explanation
Correct answer: D, F

The correct answer is D, F. Option D: The httpd service is not enabled to auto start at boot time. Option F: The httpd service did not start during the last server reboot.

Topic 1 Β· Question 221

Which of the following specifications is used to perform disk encryption in a Linux system?

  • ALUKS (correct answer)
  • BTLS
  • CSSL
  • DNFS
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: LUKS This option keeps traffic private / properly secured as required.

Topic 1 Β· Question 222

A junior developer is unable to access an application server and receives the following output: [root@server1 ~]# ssh dev2@172.16.25.126 dev2@172.16.25.126's password: Permission denied, please try again. dev2@172.16.25.126's password: Permission denied, please try again. dev2@172.16.25.126's password: Account locked due to 4 failed logins Account locked due to 5 failed logins Last login: Mon Apr 22 21:21:06 2021 from 172.16.16.52 The systems administrator investigates the issue and receives the following output: [root@server1 ~]# pam_tally2 --user=dev2 Login Failures Latest failure From dev2 5 04/22/21 21:22:37 172.16.16.52 Which of the following commands will help unlock the account?

  • Apam_tally2 --user=dev2 --quiet
  • Bpam_tally2 --user=dev2
  • Cpam_tally2 --user+dev2 --quiet
  • Dpam_tally2 --user=dev2 --reset (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: pam_tally2 --user=dev2 --reset

Topic 1 Β· Question 223

A systems technician is configuring an application server to accept packets from a trusted source with the IP address 192.168.10.22. Which of the following commands will allow communication between the two servers?

  • Aiptables -L -s 192.168.10.22 -j ACCEPT
  • Biptables -D INPUT -s 192.168.10.22 -j ACCEPT
  • Ciptables -A INPUT -s 192.168.10.22 -j ACCEPT (correct answer)
  • Diptables -A OUTPUT -s 192.168.10.22 -j ACCEPT
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: iptables -A INPUT -s 192.168.10.22 -j ACCEPT

Showing questions 201–220 of 263 Β· Page 11 of 14