Practice XK0-005 Troubleshooting questions with full explanations on every answer.
Start practicing
Troubleshooting — choose a session length
Free · No account required
Click any question to see the full explanation and answer options, or start a focused practice session above.
A Linux administrator needs to check which services are listening on TCP ports on a server. Which command should be used to replace the deprecated netstat command?
2A user reports that they cannot reach a website. The administrator wants to check the path that packets take to the destination server. Which command should be used?
3A Linux engineer is investigating high disk I/O on a server. Which command provides disk I/O statistics including %util, await, r/s, and w/s?
4During boot, a Linux system displays a kernel panic with 'VFS: Unable to mount root fs on unknown-block(0,0)'. Which of the following is the most likely cause?
5An administrator needs to trace system calls made by a process that is misbehaving. Which command should be used to attach to the running process and display its system calls?
6A user wants to look up the mail exchange (MX) records for a domain. Which command should be used?
7An administrator wants to capture network traffic on interface eth0, writing the output to a file for later analysis, without resolving hostnames. Which command accomplishes this?
8A system administrator needs to check the kernel ring buffer for hardware error messages. Which command should be used?
9After modifying the network configuration on a RHEL 8 system, the administrator wants to bring up the interface without rebooting. Which command sequence should be used?
10A technician needs to check the current memory usage on a Linux system, including buffers and cache. Which command provides the most user-friendly output?
11A server is experiencing intermittent network connectivity issues. The administrator wants to run a continuous test that combines ping and traceroute to monitor the path and packet loss to a target host. Which command should be used?
12An administrator needs to check the current routing table on a Linux system. Which command should be used?
13A Linux administrator is troubleshooting a DNS resolution issue. The system uses /etc/resolv.conf. Which two of the following directives are commonly found in this file? (Choose two.)
14A system fails to boot with a kernel panic. The administrator suspects a corrupt initramfs or missing kernel module. Which three methods could be used to recover the system? (Choose three.)
15An administrator needs to identify which processes are consuming the most CPU and memory resources. Which two commands can provide this information? (Choose two.)
16A Linux administrator needs to view all current IPv4 addresses assigned to network interfaces on a system. Which command should be used?
17A user reports that they cannot access a web server at 192.168.1.100. The administrator wants to check if the server is reachable and measure round-trip time. Which command is most appropriate?
18An administrator is troubleshooting a DNS issue and needs to query the authoritative name servers for example.com. Which dig command should be used?
19A system administrator notices that a web server is running but users cannot connect to port 443. Which ss command will show if the server is listening on that port?
20An administrator needs to capture network traffic on interface eth0 to a file for later analysis. Which tcpdump command is correct?
21A system is experiencing high disk I/O wait. Which command can provide disk I/O statistics such as requests per second and average wait time?
22After a kernel panic, the system fails to boot. The administrator suspects a missing kernel module. Which command line should be added to the GRUB boot parameters to access a rescue shell and investigate?
23An administrator needs to check the kernel ring buffer for hardware error messages after a system crash. Which command should be used?
24A technician suspects a process is leaking file descriptors. Which command can be used to list open files associated with a specific PID?
25An administrator wants to test SMTP connectivity to a mail server without actually delivering an email. Which curl command is most appropriate?
26A server running RHEL 8 has intermittent network connectivity. The administrator wants to view the current DNS resolver configuration. Which file should be examined?
27A technician needs to trace the system calls made by a running process to debug a performance issue. Which tool should be used?
28A Linux administrator is troubleshooting a service that fails to start. Which TWO commands can be used to view the last 20 lines of the systemd journal for the sshd unit?
29A system administrator is investigating a slow website. The web server is responding but pages load slowly. Which THREE commands can help identify network latency or packet loss?
30An administrator needs to check the status of NetworkManager connections and devices. Which TWO commands provide this information?
31A Linux administrator needs to check which services are listening on TCP port 22. Which command should be used?
32A system administrator is troubleshooting a network issue where a server cannot reach the internet. The server's IP address is 192.168.1.10/24, and the default gateway is 192.168.1.1. Which command should be used to verify the default gateway configuration?
33During boot, a Linux system displays a kernel panic indicating 'not syncing: VFS: Unable to mount root fs on unknown-block(0,0)'. Which of the following is the most likely cause?
34A user reports that a web server is unreachable. The administrator runs 'curl -I https://example.com' and gets no response. Which command should be used next to check if the server is reachable at the network level?
35An administrator wants to view the kernel ring buffer messages to check for hardware errors. Which command should be used?
36A system is experiencing high load average. The administrator runs 'vmstat 1 5' and sees a high 'wa' value. What does this indicate?
37A server running RHEL 8 fails to boot with a 'Dependency failed for /data' error. The /data filesystem is an ext4 partition on /dev/sdb1. Which sequence of steps should be taken to repair the filesystem?
38A Linux administrator needs to find which process is using a specific file. Which command provides this information?
39An administrator wants to check the amount of free memory and swap usage on a system in a human-readable format. Which command should be used?
40A technician suspects that a DNS resolution issue is causing connectivity problems. Which command can be used to query the DNS server for an A record for 'example.com'?
41A system administrator needs to capture network traffic on interface eth0, filtering for packets to or from host 10.0.0.1, and save the output to a file for later analysis. Which command accomplishes this?
42A user reports that they cannot access a website by domain name but can access it by IP address. Which of the following is the most likely cause?
43A Linux administrator is troubleshooting a slow web server. They suspect high disk I/O. Which TWO commands can be used to monitor disk I/O statistics?
44A system fails to boot with a kernel panic. The administrator wants to recover by accessing a root shell. Which THREE methods can be used to achieve this?
45An administrator is investigating a security incident and needs to list all open network connections on a server, including listening and established connections, with process information. Which TWO commands can provide this information?
46A Linux administrator needs to check the listening TCP ports on a server. Which command should be used to view only listening TCP ports and the associated processes?
47A system administrator is investigating high disk I/O on a server. Which command can provide disk utilization statistics, including average wait time (await) and percentage of CPU time during which I/O requests were issued (%util)?
48During boot, a Linux system displays a kernel panic with the message 'VFS: Unable to mount root fs on unknown-block(0,0)'. Which of the following is the most likely cause?
49A technician needs to perform a DNS query to retrieve the mail exchange (MX) record for example.com using a specific DNS server at 8.8.8.8. Which command accomplishes this?
50A user reports that they cannot reach a remote server by hostname but can reach it by IP address. Which file should be checked first for possible misconfiguration?
51A Linux system is running slowly. The administrator runs `vmstat 1 5` and sees a high 'wa' value (waiting for I/O). Which of the following commands would help identify which processes are causing the I/O?
52An administrator needs to capture network traffic on interface eth0, filter for packets to/from host 10.0.0.1, and save the output to a file for later analysis. Which command should be used?
53A technician is troubleshooting a network connectivity issue. They need to trace the path packets take to a remote server and see the round-trip time for each hop. Which command should they use?
54A system administrator wants to review kernel-related log messages from the current boot session. Which journalctl command should be used to filter the kernel messages?
55A Linux server fails to boot and drops into a GRUB prompt. The administrator needs to boot into single-user mode to repair the system. Which GRUB command should be added to the kernel line temporarily?
56An administrator is troubleshooting a service that fails to start with a 'Permission denied' error. The administrator runs `strace -f -o /tmp/strace.log systemctl start myservice`. Which of the following best describes what this command achieves?
57A technician wants to check the current IP address and subnet mask of the eth0 interface. Which command should they use?
58An administrator is investigating a network issue where a server cannot connect to an external website. They run `ping 8.8.8.8` successfully, but `ping google.com` fails. Which TWO of the following are the most likely causes? (Choose TWO.)
59A system administrator needs to collect performance data over time to analyze CPU and memory usage trends. Which THREE of the following commands can be used to gather historical performance data? (Choose THREE.)
60A Linux system experiences intermittent network connectivity. The administrator suspects a faulty network cable or switch port. Which TWO of the following commands can provide information about link status, errors, and packet drops on the interface? (Choose TWO.)
61A Linux administrator wants to view all listening TCP ports and the associated processes on a system. Which command should be used?
62A technician needs to check the DNS A record for example.com using a specific DNS server at 8.8.8.8. Which command accomplishes this?
63A system administrator notices that the server is performing poorly. Running 'vmstat 1 5' shows high 'wa' values. Which subsystem is most likely experiencing a bottleneck?
64After modifying the network configuration on a RHEL 8 system using NetworkManager, what command should be used to apply the changes without restarting the network service?
65A Linux system fails to boot, displaying a 'kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)' error. Which of the following is the most likely cause?
66An administrator is troubleshooting a service that fails to start. They want to trace the system calls made by the service binary. Which command should they use?
67A web server is not responding on port 443. Using tcpdump to capture traffic on the server, which filter would capture only HTTPS packets?
68Which command displays the current routing table on a Linux system?
69A user reports that they cannot reach a website by name, but they can reach it by IP address. Which file should be checked first for possible misconfiguration?
70During boot, the system drops into an emergency target. Which command can be used to repair the root filesystem from this environment?
71An administrator wants to monitor disk I/O performance in real-time, focusing on metrics like wait time and I/O queue size. Which tool is best suited for this?
72A technician needs to check the kernel ring buffer for hardware errors detected during system boot. Which command should be used?
73A system administrator is troubleshooting a network issue and wants to use a tool that combines ping and traceroute functionality to identify packet loss and latency along the path. Which TWO tools can provide this combined functionality? (Choose two.)
74A Linux server is experiencing high CPU usage. Which TWO commands can be used to identify which processes are consuming the most CPU? (Choose two.)
75A technician wants to capture network traffic to analyze a web server issue. Using tcpdump, which THREE options are useful for writing the capture to a file and avoiding name resolution? (Choose three.)
76A Linux administrator needs to view all listening TCP ports and the associated processes on a server. Which command should be used?
77A system is experiencing high memory usage. The administrator wants to see a brief summary of memory usage in human-readable format, including buffers and cache. Which command is most appropriate?
78A Linux administrator is troubleshooting a DNS resolution issue. They need to query the MX record for example.com using a specific DNS server at 8.8.8.8. Which command should they use?
79During boot, a Linux system displays a kernel panic. The administrator suspects a corrupt initramfs. Which GRUB boot parameter can be added to boot into an emergency shell before the initramfs is loaded, allowing repair?
80An administrator needs to check the kernel ring buffer for hardware error messages from the current boot. Which command displays this information?
81Which command is used to trace the network path to a destination host, showing each hop along the way, and is similar to traceroute but does not require root privileges by default?
82An administrator needs to capture network traffic on interface eth0, filtering only packets from host 192.168.1.1, and write the output to a file for later analysis. Which command accomplishes this?
83A technician wants to check the disk I/O statistics, focusing on the average I/O wait time and utilization percentage. Which command provides this information?
84Which command shows the IP address, link status, and other configuration details for all network interfaces on a Linux system?
85A system administrator is troubleshooting a service that fails to start. They want to see the recent logs for that specific service unit. Which journalctl command should be used?
86A Linux administrator wants to check the history of CPU usage for the past two days using the system activity reporter. Which sar option retrieves data from the daily history file for a specific date?
87A user cannot access a website, but other websites work. The administrator wants to see the HTTP response headers from the web server. Which command is most appropriate?
88A Linux administrator is troubleshooting a slow system. They decide to use vmstat to get an overall picture. Which two of the following fields in vmstat output are most directly related to CPU performance issues? (Choose two.)
89A system is experiencing boot failures. The administrator wants to view kernel messages from the current boot to diagnose the issue. Which two commands can be used to see these messages? (Choose two.)
90An administrator needs to capture network traffic on interface eth0 for packets destined to port 443 from host 10.0.0.1, while also writing the capture to a file for later analysis. Which three tcpdump options should be used together? (Choose three.)
91A Linux administrator needs to verify which network interfaces are up and their IP addresses on a server. Which command provides this information?
92A server fails to boot with a kernel panic after a system update. The administrator suspects a corrupt initramfs. Which GRUB boot parameter should be added temporarily to boot into an emergency shell where the filesystem can be repaired?
93A system administrator wants to collect network performance statistics over time, including packet loss and latency, to diagnose intermittent connectivity issues. Which tool combines the functionality of ping and traceroute into a single continuous monitoring command?
94A Linux technician is troubleshooting a system that is experiencing high disk I/O wait times. Which TWO commands can be used to identify disk I/O performance issues? (Choose two.)
95An administrator needs to verify DNS resolution for a web server. Which TWO commands can be used to query DNS A records for a given hostname? (Choose two.)
96A system is running slowly and the administrator suspects a memory leak. Which THREE commands or tools can be used to analyze memory usage and identify processes consuming excessive memory? (Choose three.)
The Troubleshooting domain covers the key concepts tested in this area of the XK0-005 exam blueprint published by CompTIA. Courseiva provides free domain-focused practice, mock exams, missed-question review, and readiness tracking across all XK0-005 domains — no account required.
The Courseiva XK0-005 question bank contains 96 questions in the Troubleshooting domain. Click any question to see the full explanation and answer breakdown.
Start with a 10-question focused session to identify your baseline accuracy in this domain. Read every explanation — even for questions you answer correctly — to understand the reasoning. Once you score consistently above 80%, move to a 20–30 question session to confirm depth before moving to the next domain.
Yes — the session launcher on this page draws questions exclusively from the Troubleshooting domain. Choose 10, 20, 30, or 50 questions for a focused session, or click individual questions to review them one by one.
Save your results, see per-domain analytics, and get readiness scores — free, for every certification.
Sign Up FreeFree forever · Every certification included