Courseiva
easyMultiple ChoiceObjective-mapped

XK0-006 Practice Question: A junior administrator is tasked with setting up…

A junior administrator is tasked with setting up a file server using NFS on a Linux server. The /etc/exports file currently contains: /srv/nfs *(rw,sync,no_subtree_check). The administrator wants to restrict access to only the 192.168.10.0/24 network and require clients to use a privileged port (less than 1024) for added security. Additionally, the administrator wants to prevent root users on the client from having root access to the NFS share. Which exports configuration meets these requirements?

⚠ Common exam trap

A common mix-up: candidates confuse 'secure' with 'insecure' — the 'secure' option requires privileged ports, while 'insecure' allows any port, and many mistakenly think 'insecure' is needed for security or that 'no_root_squash' is the default safe behavior.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

/srv/nfs 192.168.10.0/24(rw,sync,no_subtree_check,secure,root_squash)

It restricts access to the 192.168.10.0/24 network, uses the 'secure' option to require client connections from a privileged port (less than 1024), and applies 'root_squash' to map root users on the client to the anonymous 'nobody' user, preventing root-level access to the NFS share.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • /srv/nfs 192.168.10.0/24(rw,sync,no_subtree_check,no_all_squash)

    Why it's wrong here

    no_all_squash does not restrict root; also missing secure option.

  • /srv/nfs 192.168.10.0/24(rw,sync,no_subtree_check,insecure,root_squash)

    Why it's wrong here

    insecure allows non-privileged ports, not enforcing privileged ports.

  • /srv/nfs 192.168.10.0/24(rw,sync,no_subtree_check,secure,root_squash)

    Why this is correct

    secure restricts to privileged ports, root_squash maps root to nobody.

  • /srv/nfs 192.168.10.0/24(rw,sync,no_subtree_check,secure,no_root_squash)

    Why it's wrong here

    no_root_squash allows root access, which is not desired.

About these practice questions

Courseiva writes every XK0-006 question from scratch — 979 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This XK0-006 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the XK0-006 exam.