XK0-006 System Management Practice Test 4 — 15 Questions

Question 1

Which command would display the disk usage of each file and directory in /home in a human-readable format, but only showing one level deep?

Accepted Answer

du -h --max-depth=1 /home. du -h --max-depth=1 /home shows human-readable sizes for each item one level deep.

Answer

du -hs /home

Answer

du -h /home

Answer

df -h /home

Question 2

A Linux administrator needs to locate all files in the /etc directory that have been modified in the last 24 hours and are not owned by root. Which two commands can be combined to achieve this? (Select TWO.)

Accepted Answer

find /etc -mtime 0 -not -user root. find with -mtime 0 finds files modified in the last 24 hours; -not -user root excludes root-owned files. The -exec option executes ls -l to list details.

Answer

find /etc -ctime 0 -not -group root

Answer

find /etc -mtime 0 -uid 0

Answer

find /etc -atime 0 -not -user root

Question 3

An administrator suspects that a malicious process is running and wants to list all processes, including those without a controlling terminal, and see their full command line. Which two commands can provide this information? (Select TWO.)

Accepted Answer

ps aux. ps aux shows all users, all processes, including those without tty, and includes the full command line. ps -ef also shows full listing with command line.

Answer

lsof

Answer

ps -eo pid,cmd

Answer

top -b -n 1

Question 4

Which three directories are required by the FHS to be present on a Linux system? (Select THREE.)

Accepted Answer

/bin. /bin, /etc, and /dev are essential FHS directories. /opt is optional, /proc is a virtual filesystem, /mnt is for temporary mounts but not always present.

Answer

/proc

Answer

/opt

Question 5

A Linux administrator needs to locate all files in the /var/log directory that have been modified within the last 2 days and contain the word 'error' (case-insensitive). Which command accomplishes this?

Accepted Answer

find /var/log -mtime -2 -exec grep -li 'error' {} \;. The correct command uses -mtime -2 to find files modified less than 2 days ago, and -exec grep -li 'error' to perform a case-insensitive search for 'error' in file contents, listing filenames. Option A uses -mtime +2 (files older than 2 days). Option B uses -name to match filenames, not content. Option C uses grep -l without -i, so it would miss case variations.

Answer

find /var/log -mtime +2 -exec grep -li 'error' {} \;

Answer

find /var/log -name '*error*' -mtime -2

Answer

find /var/log -mtime -2 -exec grep -l 'error' {} \;

Question 6

A system administrator is troubleshooting a service that fails to start at boot. The system uses systemd. Which of the following commands would the administrator use to check the service's status and view its recent log entries?

Accepted Answer

systemctl status service && journalctl -n 50. 'systemctl status service' displays detailed status of the service, including recent logs. 'journalctl -n 50' shows the last 50 journal entries. Together, they provide both status and recent logs. Option A uses 'systemctl is-active', which only returns active/inactive, not detailed status. Option C lists failed units and error-level logs, not specific to the service. Option D also uses 'systemctl is-active' (boolean) and 'journalctl -n 50' without focusing on the service. Therefore, B is the best choice.

Answer

journalctl -u service -n 50 && systemctl is-active service

Answer

systemctl list-units --state=failed && journalctl -p err

Answer

systemctl is-active service && journalctl -n 50

Question 7

A user wants to change the permissions of a file to give the owner full control, the group read and execute, and others no access. Which of the following chmod commands will achieve this?

Accepted Answer

chmod 750 file. 750 in octal gives rwx (7) to owner, r-x (5) to group, --- (0) to others. Option A is correct. Option B is 700 (rwx------) giving group no access. Option C is 770 (rwxrwx---) giving group write. Option D is 755 (rwxr-xr-x) giving others read/execute.

Answer

chmod 700 file

Answer

chmod 770 file

Answer

chmod 755 file

Question 8

An administrator needs to add an ACL entry to a file that grants the user 'john' read and write permissions. The file currently has no ACLs. Which command should the administrator use?

Accepted Answer

setfacl -m u:john:rw file. The correct command is setfacl -m u:john:rw file. setfacl is used to modify ACLs. getfacl is used to display ACLs and does not support a -m option for modifying ACLs on standard Linux systems.

Answer

chmod u+rw file

Answer

setfacl -x u:john file

Answer

getfacl -m u:john:rw file

Question 9

Which of the following directories in the Filesystem Hierarchy Standard (FHS) contains variable data files such as logs, spool files, and temporary files that persist across reboots?

Accepted Answer

/var. /var is for variable data like logs, spool, and temporary files that persist. /tmp is for temporary files that may be cleared on reboot. /etc is for configuration files. /opt is for optional add-on software.

Answer

/opt

Answer

/etc

Answer

/tmp

Question 10

A system administrator wants to view the last 10 lines of a log file and also save those lines to another file for analysis. Which command should the administrator use?

Accepted Answer

tail -n 10 file | tee output.txt. tail -n 10 file | tee output.txt displays the last 10 lines of 'file' and writes them to 'output.txt'. Option A uses head, which shows the first lines, not the last. Option B uses cat, which outputs the entire file, not just the last 10 lines. Option D uses tee without a pipe, which is syntactically incorrect; tee reads from stdin, so it requires a pipe from tail.

Answer

head -n 10 file | tee output.txt

Answer

cat file | tee output.txt

Answer

tee output.txt < tail -n 10 file

Question 11

During the boot process, after the kernel is loaded and the initramfs is executed, which component is responsible for starting the user-space services and managing the system state?

Accepted Answer

systemd. Systemd is the init system that starts services and manages targets. GRUB2 is the bootloader that loads the kernel. The kernel itself initializes hardware. Initramfs is an initial root filesystem used to load drivers.

Answer

initramfs

Answer

GRUB2

Answer

Kernel

Question 12

A Linux administrator needs to remove a package installed via RPM and all its configuration files. Which command should the administrator use?

Accepted Answer

rpm -e package. The `rpm -e` command removes the specified package and its configuration files by default. Option A (`rpm -e package`) is the standard way to uninstall an RPM package including config files. Option B (`rpm -V`) verifies the package but does not remove it. Option C (`rpm -e --allmatches`) removes all versions of the package, which is unnecessary for a single installation. Option D (`rpm -e --nodeps`) ignores dependencies but still removes config files; however, it is not the best answer because dependencies are not mentioned and the straightforward `rpm -e` is correct. Therefore, the correct command is `rpm -e package`.

Answer

rpm -V package

Answer

rpm -e --allmatches package

Answer

rpm -e --nodeps package

Question 13

Which command displays the amount of disk space used and available on mounted filesystems in a human-readable format (e.g., GB, MB)?

Accepted Answer

df -h. The `df -h` command displays disk space usage for all mounted filesystems, with the `-h` flag converting raw block counts into human-readable units like GB or MB. This is the standard Linux utility for reporting filesystem capacity, usage, and available space, making it the correct choice for the question.

Answer

lsblk

Answer

du -h

Answer

fdisk -l

Question 14

A process is running with a nice value of 5. The system administrator wants to increase its priority (lower the nice value) to -5 but is not the owner of the process. What must the administrator do first to achieve this?

Accepted Answer

Use renice with root privileges via sudo. Only root can increase priority (lower nice value) of another user's process. The administrator must use sudo or become root to run renice. Option A is incorrect because renice -n +10 would increase the nice value (reduce priority), not decrease it. Option B is incorrect because the nice command starts a new process with a specified nice value; it cannot change the priority of an existing process. Option D is incorrect because stopping and restarting the process would change its PID and is unnecessary; the correct approach is to use renice with sudo.

Answer

Use renice -n +10

Answer

Use the nice command with -n -5

Answer

Use kill -SIGSTOP to stop the process then restart

Question 15

An administrator wants to replace all occurrences of 'oldstring' with 'newstring' in a configuration file named config.cfg, and save the changes. Which sed command should be used?

Accepted Answer

sed -i 's/oldstring/newstring/g' config.cfg. It uses -i for in-place editing and g to replace all occurrences on each line. Option A has -i but lacks g, so it replaces only the first occurrence per line. Option C adds an unnecessary i flag for case-insensitive matching, which deviates from the requirement to replace 'oldstring' exactly as given. Option D lacks -i, so changes are only printed to stdout and not saved.

Answer

sed -i 's/oldstring/newstring/' config.cfg

Answer

sed -i 's/oldstring/newstring/gi' config.cfg

Answer

sed 's/oldstring/newstring/' config.cfg