XK0-006 System Management Practice Test 7 — 15 Questions

Question 1

An administrator wants to view the contents of a compressed log file /var/log/syslog.2.gz without decompressing it to disk. Which two commands can be used to display the file contents? (Select TWO).

Accepted Answer

zcat /var/log/syslog.2.gz. zcat and gzcat (if available) decompress to stdout; some systems use zcat or gzip -dc.

Answer

gzcat /var/log/syslog.2.gz

Answer

less /var/log/syslog.2.gz

Answer

cat /var/log/syslog.2.gz

Question 2

A security analyst wants to identify all lines in a log file that contain either 'ERROR' or 'WARNING' and also contain 'timeout'. Which three commands can be used to achieve this? (Select THREE).

Accepted Answer

grep -E 'ERROR|WARNING' logfile | grep timeout. The correct commands are C, D, and E. Option C uses grep -E with alternation to first match lines containing 'ERROR' or 'WARNING', then pipes to another grep for 'timeout', ensuring both patterns appear in any order. Option D uses sed with alternation to print lines containing 'ERROR' or 'WARNING', then pipes to grep for 'timeout'. Option E uses awk with a condition requiring both patterns. Option B is incorrect because 'ERROR.*timeout|WARNING.*timeout' forces a specific order (e.g., 'timeout' must follow 'ERROR' or 'WARNING'), so it will miss lines where 'timeout' appears before the error/warning. Option A is wrong because -v inverts the match and the pattern lacks -E for alternation. Thus, only three options (C, D, E) correctly achieve the goal.

Answer

grep -v 'ERROR|WARNING' logfile | grep timeout

Answer

grep -E 'ERROR.*timeout|WARNING.*timeout' logfile

Question 3

A Linux administrator needs to change the permissions of a file to allow the owner to read and write, the group to read only, and others to have no access. Which chmod command should be used?

Accepted Answer

chmod 640 file. The symbolic representation rw-r----- corresponds to octal 640. rw- = 4+2+0=6, r-- = 4+0+0=4, --- = 0+0+0=0.

Answer

chmod 600 file

Answer

chmod 755 file

Answer

chmod 644 file

Question 4

Which command is used to display the contents of a compressed log file without decompressing it?

Accepted Answer

zcat. zcat is used to view compressed files; it is equivalent to gunzip -c.

Answer

head

Answer

cat

Answer

less

Question 5

A technician wants to find all files owned by user 'jane' in the /home directory. Which command accomplishes this?

Accepted Answer

find /home -type f -user jane. The find command with -user option searches for files owned by a specific user.

Answer

grep -r jane /home

Answer

ls -lR /home | grep jane

Answer

locate jane /home

Question 6

An administrator needs to find all files in /var/log that have been modified within the last 2 days. Which find command should be used?

Accepted Answer

find /var/log -mtime -2. -mtime -2 means modified less than 2 days ago (i.e., within the last 48 hours).

Answer

find /var/log -mtime +2

Answer

find /var/log -atime -2

Answer

find /var/log -ctime 2

Question 7

A system administrator wants to ensure that a service starts automatically at boot time using systemd. Which command should be used?

Accepted Answer

systemctl enable service. systemctl enable creates symlinks to make the service start at boot.

Answer

systemctl start service

Answer

systemctl daemon-reload

Answer

systemctl reenable service

Question 8

A user reports that a specific process is consuming too much CPU. The administrator needs to change the priority of the process to a lower value (nicer). Which command sequence is appropriate?

Accepted Answer

renice +10 -p <PID>. renice changes the priority of an already running process by PID.

Answer

nice -n -10 <PID>

Answer

kill -15 <PID>

Answer

chrt --idle <PID>

Question 9

An administrator wants to list all USB storage devices attached to the system. Which command provides this information?

Accepted Answer

lsblk. lsblk lists block devices; USB storage typically appears as sda, sdb, etc.

Answer

fdisk -l

Answer

lspci

Answer

lsusb

Question 10

An administrator wants to view the last 20 lines of a log file and continue to watch for new entries. Which command should be used?

Accepted Answer

tail -f. The command tail -f follows a file and continues to display new entries as they are appended. Although tail -f by default shows only the last 10 lines, it is the only listed option that meets the 'continue to watch' requirement. To view exactly the last 20 lines while following, the full command would be tail -n 20 -f (or tail -20f), but among the provided options, tail -f is the correct choice.

Answer

tail -20

Answer

head -20

Answer

less -N

Question 11

A user wants to create a symbolic link to a file named 'original' in their home directory. Which command creates a symbolic link named 'link'?

Accepted Answer

ln -s original link. ln -s creates a symbolic link; order is target (existing file) then link name.

Answer

ln original link

Answer

ln -s link original

Answer

symlink original link

Question 12

An administrator needs to find all files in /etc that have the SUID bit set. Which find command is correct?

Accepted Answer

find /etc -perm /4000. The SUID bit is represented by the permission 4000. -perm /4000 checks if any of the bits in 4000 are set (SUID).

Answer

find /etc -exec ls -l {} \; | grep '^...s'

Answer

find /etc -perm -4000

Answer

find /etc -type f -perm 4000

Question 13

An administrator is troubleshooting a boot issue. The system boots to a console with limited functionality. Which systemd target should be used to bring up the system with network and multi-user support?

Accepted Answer

multi-user.target. multi-user.target provides a non-graphical multi-user system with network.

Answer

emergency.target

Answer

graphical.target

Answer

rescue.target

Question 14

A Linux administrator wants to limit the disk space used by the /var/log directory. Which tool can be used to set disk usage quotas for a filesystem?

Accepted Answer

edquota. quota is the traditional tool; however, xfs_quota is for XFS. The question is general, so quota is correct.

Answer

repquota

Answer

quotaon

Answer

quotacheck

Question 15

An administrator wants to monitor real-time system resource usage to identify performance bottlenecks. Which two commands are suitable? (Choose two.)

Accepted Answer

top. top and htop provide real-time process and resource monitoring.

Answer

vmstat

Answer

iostat

Answer

sar