XK0-006 Security Practice Question
A security policy requires that user passwords must be changed every 60 days, and users should be warned 7 days before expiration. Which two chage commands set these requirements for user 'jsmith'? (Choose TWO.)
⚠ Common exam trap
XK0-006 often tests the confusion between -m (minimum) and -M (maximum) — candidates frequently swap them, and the case sensitivity is the exact trap.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
chage -M 60 jsmith
Option A, `chage -M 60 jsmith`, is correct because the `-M` flag sets the maximum number of days a password remains valid before it must be changed, which directly enforces the 60-day password expiration requirement. Option C, `chage -W 7 jsmith`, is correct because the `-W` flag sets the number of days of advance warning before the password expires, satisfying the requirement to warn users 7 days ahead. Option B (`-E 60`) sets an account expiration date, not a password change interval, so it does not meet the policy. Option D (`-m 60`) sets the minimum days between password changes, which would prevent users from changing passwords for 60 days rather than requiring a change every 60 days. Option E (`-I 7`) sets the number of inactive days after password expiration before the account is locked, which is unrelated to the warning requirement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
chage -M 60 jsmith
Why this is correct
`chage -M 60 jsmith` sets the maximum password age to 60 days, satisfying the policy's mandatory 60-day rotation. The `-M` flag defines the exact interval between required changes, after which the account forces a new password. It does not configure the 7-day warning, so a second command using `-W 7` is still needed.
- ✗
chage -E 60 jsmith
Why it's wrong here
chage -E sets the account expiration date, after which the login is disabled entirely, rather than the password's maximum age. It is tempting because 60 appears to match the rotation period, and -E would be correct when an account must lapse on a fixed calendar date.
- ✓
chage -W 7 jsmith
Why this is correct
The -W flag sets the number of days of advance warning before expiry, so -W 7 notifies jsmith seven days ahead. This satisfies the stem's second requirement, complementing -M 60 which sets the rotation interval.
- ✗
chage -m 60 jsmith
Why it's wrong here
chage -m sets the minimum number of days between password changes, not the maximum age, so it cannot enforce a 60-day rotation. It is tempting because 60 matches the required interval, and -m would be correct when preventing users from cycling passwords faster than a set floor.
- ✗
chage -I 7 jsmith
Why it's wrong here
chage -I sets the inactivity period after a password expires before the account is locked, not the warning window before expiry. It is tempting because both values are day counts near password expiry, and -I would be correct when locking dormant accounts a set number of days after credentials lapse.
Go deeper
Related to this question
Learn chapter
Firewall and Security Basics
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
Key term
User
A user is any person, system, or device that interacts with an IT service, resource, or identity system, typically authenticated through credentials and authorized to perform specific actions.
About these practice questions
This XK0-006 question is part of Courseiva's 781-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official CompTIA exam blueprint
This XK0-006 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the XK0-006 exam.