XK0-006 Practice Test 34 — 15 Questions

Question 1

A developer writes a Python script that uses the `requests` library to fetch data from an API. The script works on the developer's workstation but fails on the server with an import error. What is the most likely cause?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The `requests` module is not installed on the server. The `requests` library is a third-party Python package that must be installed separately via `pip` or a package manager. The script works on the developer's workstation because `requests` is present there, but fails on the server with an import error, indicating the module is missing from the server's Python environment. This is the most likely cause because an import error specifically points to a missing module, not to network or syntax issues.

Answer

The script uses an incorrect API endpoint

Answer

The server lacks internet connectivity

Answer

The script has a syntax error in the import statement

Question 2

Which command will show the environment variables for a specific process?

Accepted Answer

cat /proc/$PID/environ. The `/proc/[PID]/environ` file contains the environment variables that were set when the process was started. Reading this file with `cat` displays the exact environment of a specific process, which is not possible with shell built-ins or user-level commands that only show the current shell's environment.

Answer

set

Answer

printenv

Answer

env

Question 3

An administrator needs to view all current nftables rules. Which command should be used?

Accepted Answer

nft list ruleset. nft list ruleset displays the entire ruleset. nft list table only shows a specific table.

Answer

nft --list

Answer

nft show ruleset

Answer

iptables -L

Question 4

Match each Linux kernel parameter category to its description.

Accepted Answer

kernel: General kernel behavior and system-wide limits. Linux sysctl parameters are organized under categories such as kernel, vm, net, and fs. The kernel category handles general system limits, vm manages virtual memory, net controls networking, and fs deals with filesystem settings. Ensure each description matches its correct category.

Answer

vm: Networking parameters

Answer

kernel: Filesystem parameters

Question 5

A Linux administrator needs to prevent the root user from logging in via SSH. Which directive should be set in /etc/ssh/sshd_config to accomplish this?

Accepted Answer

PermitRootLogin no. The directive `PermitRootLogin no` in `/etc/ssh/sshd_config` explicitly disallows the root user from authenticating via SSH, regardless of the authentication method used. This is the standard way to block root SSH logins while still allowing other users to connect.

Answer

PasswordAuthentication no

Answer

MaxAuthTries 1

Answer

AllowUsers root

Question 6

A user cannot access a directory '/data/projects' even though they are in the 'projects' group. The directory permissions are 'drwxr-x---' and the group owner is 'projects'. Which command should the administrator run to grant the group write permission?

Accepted Answer

chmod g+w /data/projects. The directory '/data/projects' has permissions 'drwxr-x---', meaning the group owner 'projects' currently has read and execute (r-x) but not write (w) access. Since the user is a member of the 'projects' group, the administrator needs to add write permission for the group using 'chmod g+w /data/projects'. This directly modifies the group permission bits to grant write access without affecting other permissions.

Answer

chmod o+w /data/projects

Answer

chmod u+w /data/projects

Answer

chown :projects /data/projects

Question 7

A system administrator is writing an Ansible playbook to manage a web server. Which three of the following are valid Ansible modules for system administration? (Choose THREE.)

Accepted Answer

service. apt, service, and copy are standard Ansible modules for package management, service control, and file copying.

Answer

useradd

Answer

chmod

Question 8

Drag and drop the steps to mount a new filesystem in the correct order.

Accepted Answer

Create mount point directory, then mount device, then update /etc/fstab, then verify mount. Mounting a filesystem requires creating a mount point and using the mount command with the device and mount point.

Answer

Mount device, then create mount point, then update /etc/fstab, then verify mount

Answer

Update /etc/fstab, then create mount point, then mount device, then verify mount

Answer

Verify mount, then create mount point, then mount device, then update /etc/fstab

Question 9

Drag and drop the steps to recover a forgotten root password in single-user mode in the correct order.

Accepted Answer

Reboot and edit GRUB to append 'init=/bin/bash' to the kernel line, then boot to a shell, then remount root as read-write, then change root password and reboot.. Root password recovery involves booting into single-user mode and remounting root as rw.

Answer

Change root password, then remount root as read-write, then reboot and edit GRUB, then boot to a shell.

Answer

Reboot and edit GRUB to append 'init=/bin/bash', then remount root as read-write, then boot to a shell, then change root password and reboot.

Answer

Boot to a shell, then reboot and edit GRUB, then remount root as read-write, then change root password.

Question 10

A security audit reveals a misconfiguration. Which file has insecure permissions that could allow unauthorized users to read password hashes?

Accepted Answer

/etc/shadow. The /etc/shadow file stores password hashes and should be readable only by the root user (typically permissions 640 or 600). If its permissions are too permissive (e.g., world-readable), any local user could read the hashes and attempt offline cracking. This is the misconfiguration the audit would flag.

Answer

Both files are misconfigured

Answer

Neither file has a misconfiguration

Answer

/etc/passwd

Question 11

A Linux administrator needs to run a Docker container in detached mode with port mapping from host port 8080 to container port 80, and mount a host directory /data to /app/data inside the container. Which command achieves this?

Accepted Answer

docker run -d -p 8080:80 -v /data:/app/data --name webapp nginx. It uses `docker run -d` to start the container in detached mode (background), `-p 8080:80` to map host port 8080 to container port 80, and `-v /data:/app/data` to bind-mount the host directory `/data` to the container path `/app/data`. The `--name webapp` assigns a friendly name, and `nginx` specifies the image. This combination exactly matches all requirements.

Answer

docker run -it -p 8080:80 -v /data:/app/data --name webapp nginx

Answer

docker run -d -P -v /data:/app/data --name webapp nginx

Answer

docker start -d -p 8080:80 -v /data:/app/data webapp

Question 12

A Linux administrator needs to change the permissions of a file to be readable and writable by the owner, readable by the group, and no access for others. Which command accomplishes this?

Accepted Answer

chmod 640 file. chmod 640 sets owner read+write (6), group read (4), and others no access (0), which matches the requirement exactly. The octal notation maps 4=read, 2=write, 1=execute, so 6=rw, 4=r, 0=none. This is the standard permission set for files that should be private to the owner but readable by a trusted group.

Answer

chmod 600 file

Answer

chmod 664 file

Answer

chmod 644 file

Question 13

Which of the following commands can be used to display the contents of a file one page at a time? (Choose two.)

Accepted Answer

less. Option A, less, is correct because it is a pager that displays a file's contents one screen (page) at a time, allowing forward and backward navigation with keys like Space, b, and q. Option E, more, is also correct because it is a pager that shows file contents one page at a time, advancing with Space and exiting with q, though it traditionally only scrolls forward. Option B, head, is incorrect because it prints only the first 10 lines (by default) and exits, not paging through the file. Option C, cat, is incorrect because it concatenates and dumps the entire file to standard output at once without pagination. Option D, tail, is incorrect because it prints only the last 10 lines (by default) and exits, not displaying the file page by page.

Answer

head

Answer

cat

Answer

tail

Question 14

An administrator is configuring a custom kernel module to be loaded automatically at boot for a specialized hardware device. The module is named 'custom_hw'. Which file should be created to ensure the module is loaded at boot?

Accepted Answer

/etc/modules-load.d/custom_hw.conf with the line 'custom_hw'. On modern Linux distributions using systemd, the /etc/modules-load.d/ directory contains .conf files listing kernel modules to load automatically at boot. Each file should contain one module name per line. Option B refers to /etc/sysconfig/modules/, which is used by older distributions but is not the standard for systemd-based systems. Option C is for setting module parameters, not for loading modules. Option D is for blacklisting modules, preventing them from loading.

Answer

/etc/sysconfig/modules/custom_hw.modules with modprobe commands

Answer

/etc/modprobe.d/custom_hw.conf with 'options custom_hw param=value'

Answer

/etc/modprobe.d/blacklist.conf with 'blacklist custom_hw'

Question 15

An administrator needs to run a backup script every day at 2:00 AM. The script is located at /usr/local/bin/backup.sh and is executable. The administrator considers several methods to schedule this task. Which method should the administrator use to ensure the script runs at exactly 2:00 AM every day without additional configuration overhead?

Accepted Answer

Add the following line to the crontab for root: `0 2 * * * /usr/local/bin/backup.sh`. The correct method is to add a cron job via crontab because cron is the standard Unix/Linux utility for scheduling tasks at specific times. The syntax `0 2 * * *` precisely defines execution at 2:00 AM daily (minute 0, hour 2, every day, every month, every day of week), and the script path is fully qualified. This approach requires no additional configuration overhead beyond a single crontab entry.

Answer

Append the script path to /etc/rc.local file.

Answer

Place the script in /etc/cron.daily/ directory.

Answer

Create a systemd timer unit that triggers the script daily at 2:00 AM.