XK0-006 Security Practice Question
After configuring AppArmor, an administrator wants to verify the status of all profiles and switch a profile from complain to enforce mode. Which TWO commands are appropriate? (Choose two.)
⚠ Common exam trap
Candidates often confuse `aa-complain` with `aa-enforce` or think that reloading a profile with `apparmor_parser` changes its mode, when in fact the mode is set separately via the `aa-*` utilities.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
aa-status
B is correct because `aa-status` displays the current status of all AppArmor profiles, allowing the administrator to verify which are in enforce or complain mode. E is correct because `aa-enforce` switches a profile to enforce mode, which is the required action. A is incorrect; restarting the AppArmor service does not verify status or switch a profile's mode. C is incorrect; `apparmor_parser -r` reloads profile definitions from disk, but does not change the mode of a profile; mode is changed via `aa-enforce` or `aa-complain`. D is incorrect because `aa-complain` sets the profile to complain mode, which is the opposite of the desired enforce mode.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
systemctl restart apparmor
Why it's wrong here
Restarts service, but does not change profile mode directly.
- ✓
aa-status
Why this is correct
Shows status of all AppArmor profiles.
- ✗
apparmor_parser -r /etc/apparmor.d/profile
Why it's wrong here
Reloads profile but does not change mode.
- ✗
aa-complain /path/to/profile
Why it's wrong here
This command sets the profile to complain mode, which allows violations to be logged but not blocked. The administrator wants to switch to enforce mode, so this is not appropriate.
- ✓
aa-enforce /path/to/profile
Why this is correct
This command switches the profile to enforce mode, which actively blocks violations. It is the correct tool for the task.
Go deeper
Related to this question
Learn chapter
Advanced Shell Scripting and Automation
Key term
Service
A service is a software component or system that performs a specific function and is available to be used by other programs or users over a network.
Key term
AppArmor
AppArmor is a Linux kernel security module that restricts programs to a predefined set of resources using mandatory access control (MAC) policies.
About these practice questions
This XK0-006 question is part of Courseiva's 979-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This XK0-006 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the XK0-006 exam.