Courseiva
mediumMultiple ChoiceObjective-mapped

XK0-006 Practice Question: A company policy requires that only the root user…

A company policy requires that only the root user can schedule cron jobs. Which configuration ensures this?

⚠ Common exam trap

Candidates often think modifying file permissions on the crontab binary (Option C) is the correct way to restrict cron access, when the actual Linux standard is to use the /etc/cron.allow and /etc/cron.deny files for user-level access control.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Create /etc/cron.allow with only 'root'

The /etc/cron.allow file explicitly lists users who are permitted to schedule cron jobs. When this file exists, only users listed in it can use crontab, and all others are denied — even if /etc/cron.deny exists. By placing only 'root' in /etc/cron.allow, the policy that only root can schedule cron jobs is enforced.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Create /etc/cron.allow with only 'root'

    Why this is correct

    If /etc/cron.allow exists, only users listed can use crontab. Listing only root restricts it to root.

  • Add 'root' to /etc/crontab

    Why it's wrong here

    /etc/crontab is for system cron jobs, not user access control.

  • Set /usr/bin/crontab permissions to 700

    Why it's wrong here

    Changing permissions on the binary could break functionality for root as well.

  • Add all non-root users to /etc/cron.deny

    Why it's wrong here

    Adding all non-root users to `/etc/cron.deny` fails because the policy requires that *only* root can schedule cron jobs, but `/etc/cron.deny` merely blocks specific users from using `crontab`; it does not prevent root from scheduling jobs, nor does it enforce exclusive root access. This option is tempting because `/etc/cron.deny` is the standard mechanism to restrict cron access for listed users, and in a scenario where the goal is to deny cron to a subset of users while allowing others, it would be the correct choice.

Visual reference

Source Router + ACL permit 10.0.0.0/8 deny any Server 10.0.0.5 ✓ 192.168.1.1 ✗ dropped ACLs evaluate top-down; first match wins — implicit deny all at end

About these practice questions

Courseiva writes every XK0-006 question from scratch — 979 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This XK0-006 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the XK0-006 exam.