hardMultiple ChoiceObjective-mapped
XK0-006 Practice Question: A company policy requires all systems to have a…
A company policy requires all systems to have a specific set of security patches applied. The administrator needs to generate a report listing all installed packages that contain security updates available. Which command sequence should be used on Red Hat-based systems?
⚠ Common exam trap
It's easy for candidates to confuse `yum updateinfo list security` (which shows advisory metadata) with `yum list-security` (which lists installed packages with security updates), leading them to choose option B instead of D.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
yum list-security
`yum list-security` is the specific command on Red Hat-based systems that lists all installed packages for which security updates are available. This directly satisfies the requirement to generate a report of installed packages with available security patches, as mandated by company policy.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
yum check-update
Why it's wrong here
Lists all available updates, not just security.
- ✗
yum updateinfo list security
Why it's wrong here
Incorrect syntax; should be 'yum updateinfo list --sec'.
- ✗
yum info-sec
Why it's wrong here
Not a valid command.
- ✓
yum list-security
Why this is correct
Lists security-related updates.
- ✗
yum list updates
Why it's wrong here
Lists all updateable packages.
Go deeper
Related to this question
Learn chapter
Firewall and Security Basics
Key term
yum
Yum (Yellowdog Updater Modified) is a command-line package management tool used in Red Hat-based Linux distributions to install, update, remove, and manage software packages from repositories.
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
About these practice questions
One of 979 original XK0-006 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This XK0-006 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the XK0-006 exam.