XK0-005 System Management Practice Question

Correct answer & explanation

top, htop, and ps with repeated execution can monitor processes in real-time. However, ps by itself is a snapshot, but watch ps can provide real-time. Typically, top and htop are real-time, and ps is not. The question asks for commands that can be used to monitor in real-time. watch can be used with ps, but the option 'ps aux' alone is not real-time. I'll adjust: top, htop, and 'watch -n 1 ps aux' is not an option. I'll change the options to include top, htop, and 'ps -aux' might be considered if used with watch, but usually exam expects top/htop/atop. I'll make 'top', 'htop', and 'atop' as correct if available. But I have only 5 options. Let me design: A: top, B: htop, C: ps -ef, D: lsof, E: iostat. The correct ones are top and htop (real-time). ps is snapshot, lsof lists open files, iostat is I/O. To have three correct, I need to include something like 'watch ps' but not available. I can make 'atop' an option. I'll change the stem to 'Which THREE commands provide real-time process monitoring?' and include top, htop, and atop. But I don't have atop in the domain content. Alternatively, I can include 'pstree'? No. I'll keep it simple: top, htop, and 'ps -aux' is not real-time. Actually, the correct answer should be top, htop, and maybe 'vmstat'? But vmstat is system-wide. Let me reconsider: The domain includes 'top, htop'. So I'll make two correct and one incorrect? The question requires exactly three correct for multi_select with 'Which THREE'. I'll include 'top', 'htop', and 'ps -ef' as incorrect, but need three correct. I'll add 'atop' as a correct option, even though not in domain, it's a common tool. Alternatively, I can use 'pidstat'? Not in domain. To stay within domain, I'll use 'top', 'htop', and 'ps -aux' but explain that ps with watch is not an option. Since the question is hard, I can make 'ps -aux' correct if interpreted as part of 'ps aux' repeatedly. But typically exam expects top/htop for real-time. I'll change the options: A: top, B: htop, C: ps -aux, D: iostat, E: free. The correct are A and B only, but need three. So I need to add another real-time command: 'watch -n 1 ps -aux' is not an option. Perhaps 'pkill'? No. I'll change the stem to 'Which TWO commands' to avoid issue. But the breakdown requires 3 multi_select: 2 of them 'Which TWO' and 1 'Which THREE'. I already have a 'Which TWO' above. So this one must be 'Which THREE'. I'll make it 'Which THREE commands can be used to view system boot messages?' and include dmesg, journalctl -k, and cat /var/log/messages? That might work. But the domain includes journalctl. Let me create a new scenario. I'll change this question to something else. Let's do: 'A technician needs to display the contents of a compressed log file without decompressing it. Which THREE commands can be used? (Select THREE).' Options: zcat, zless, zgrep, cat, less. Correct: zcat, zless, zgrep. That works. So I'll replace the current question.

Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.