XK0-006 Practice Test 8 — 10 Questions

Question 1

Refer to the exhibit. A system administrator notices that the SSH service has failed. What is the most likely cause?

Accepted Answer

Another process is already using port 22.. The error message indicates that the address is already in use, meaning another process is already listening on port 22.

Answer

The SSH configuration file has a syntax error.

Answer

The firewall is blocking port 22.

Answer

The SSH service is not enabled to start on boot.

Question 2

A Linux system fails to boot, and the administrator wants to access a minimal environment to repair the system. Which systemd target should be specified in the kernel command line to achieve this?

Accepted Answer

rescue.target. The rescue.target provides a minimal environment for system recovery.

Answer

emergency.target

Answer

multi-user.target

Answer

graphical.target

Question 3

Refer to the exhibit. A Linux administrator needs to capture all messages with priority 'alert' from the kernel facility. Which directive should be added to /etc/rsyslog.conf?

Accepted Answer

kern.alert /var/log/kernel_alert. The kernel facility is 'kern'. 'alert' priority is one of the syslog priorities. The correct syntax is 'kern.alert' to capture only alert messages from kernel.

Answer

kern.=alert /var/log/kernel_alert

Answer

kern.* /var/log/kernel_alert

Answer

*.alert /var/log/kernel_alert

Question 4

Refer to the exhibit. An administrator has configured audit rules but notices that 'auditctl -l' returns 'No rules'. What is the most likely issue?

Accepted Answer

The audit rules have not been loaded into the kernel.. The audit rules file is present but not loaded. The rules need to be loaded using 'auditctl -R /etc/audit/audit.rules' or by restarting auditd. The 'auditctl -l' shows no rules because they haven't been loaded.

Answer

The audit system is disabled.

Answer

The audit rules file has incorrect syntax.

Answer

The audit daemon is not running.

Question 5

Which of the following commands will display the last 10 lines of a log file and also output new lines as they are appended?

Accepted Answer

tail -f logfile. The `tail -f logfile` command displays the last 10 lines of the file by default and then continues to monitor the file for new lines, outputting them as they are appended. The `-f` (follow) option keeps the file open and polls for changes, making it the standard tool for real-time log monitoring.

Answer

head -f logfile

Answer

less +F logfile

Answer

cat logfile

Question 6

An administrator needs to create a hard link to an existing file. Which two statements are true about hard links? (Choose two.)

Accepted Answer

Hard links are indistinguishable from the original file. Hard links share the same inode and cannot span filesystems. They cannot link to directories.

Answer

Hard links can be created for directories

Answer

Hard links can be created across different filesystems

Answer

Deleting the original file removes the hard link

Question 7

A Linux administrator discovers that a user's home directory contains a file with setuid bit set, owned by root. The file is not part of any authorized software. What is the most appropriate immediate action?

Accepted Answer

Remove the setuid bit with 'chmod u-s <file>'. The immediate priority is to neutralize the unauthorized setuid root binary, which poses a privilege escalation risk. Removing the setuid bit with 'chmod u-s' disables the ability for any user to execute the file with root privileges, containing the threat without destroying evidence that may be needed for forensic analysis. This aligns with security best practices of preserving artifacts while mitigating active risks.

Answer

Move the file to /tmp for further analysis

Answer

Delete the file immediately to remove the threat

Answer

Change the file owner to the user with 'chown user:user <file>'

Question 8

In a Bash script, what is the difference between single quotes and double quotes?

Accepted Answer

Single quotes prevent variable expansion; double quotes allow it.. Single quotes preserve the literal value of each character, while double quotes allow variable expansion and command substitution.

Answer

Both behave the same.

Answer

Single quotes allow variable expansion; double quotes do not.

Answer

Double quotes prevent all substitutions; single quotes allow command substitution.

Question 9

Which command displays the current SELinux mode?

Accepted Answer

getenforce. The `getenforce` command displays the current SELinux mode as either Enforcing, Permissive, or Disabled. It directly queries the SELinux status from the kernel and returns the current enforcement state without requiring elevated privileges. This makes it the correct command for simply viewing the current mode.

Answer

selinuxenabled

Answer

sestatus

Answer

setenforce

Question 10

A Linux system fails to boot after a disk replacement. The administrator examines /etc/fstab and sees the above. What is the most likely result of this configuration?

Accepted Answer

The system will boot into an emergency shell. The /etc/fstab entry contains an incorrect UUID for the root filesystem. During boot, systemd reads fstab and attempts to mount the root partition using the specified UUID. When the UUID does not match any available block device, the mount fails, and because the root filesystem is critical, the system drops into an emergency shell to allow manual intervention.

Answer

The system will boot normally using the device name

Answer

The system will ignore the incorrect UUID and try next entry

Answer

The system will prompt for manual fsck