XK0-006 Security Practice Question
A security audit reveals that the system's PAM configuration does not enforce password complexity. Which PAM module and configuration line should be added to /etc/pam.d/common-password to require at least one uppercase letter, one digit, and a minimum length of 12 characters?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
password requisite pam_pwquality.so minlen=12 ucredit=-1 dcredit=-1
pam_pwquality is the module for password complexity. The options ucredit=-1, dcredit=-1, minlen=12 enforce the requirements. pam_unix handles password hashing, pam_faillock handles lockout, and pam_cracklib is an older module (deprecated in favor of pam_pwquality).
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
password requisite pam_pwquality.so minlen=12 ucredit=-1 dcredit=-1
Why this is correct
Correct. pam_pwquality with requisite enforces the rules.
- ✗
password sufficient pam_faillock.so minlen=12 ucredit=-1 dcredit=-1
Why it's wrong here
pam_faillock is for account lockout, not password complexity.
- ✗
password required pam_cracklib.so minlen=12 ucredit=-1 dcredit=-1
Why it's wrong here
pam_cracklib is deprecated; pam_pwquality is the modern equivalent.
- ✗
password required pam_unix.so minlen=12 ucredit=-1 dcredit=-1
Why it's wrong here
pam_unix does not support those options; they belong to pam_pwquality.
Go deeper
Related to this question
About these practice questions
Courseiva writes every XK0-006 question from scratch — 979 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This XK0-006 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the XK0-006 exam.