XK0-006 Security Practice Question
A security audit reveals that users can change their password without meeting complexity requirements. Which PAM module should be configured to enforce password complexity?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
pam_pwquality
pam_pwquality is the module that enforces password quality rules like length, character classes, etc.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
pam_faillock
Why it's wrong here
pam_faillock is for account lockout after failed attempts.
- ✗
pam_unix
Why it's wrong here
pam_unix handles basic authentication and password hashing, not complexity.
- ✗
pam_tally2
Why it's wrong here
pam_tally2 is also for account lockout.
- ✓
pam_pwquality
Why this is correct
pam_pwquality enforces password strength rules.
Go deeper
Related to this question
About these practice questions
This XK0-006 question is part of Courseiva's 979-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This XK0-006 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the XK0-006 exam.