hardMultiple ChoiceObjective-mapped
XK0-006 Practice Question: An application running under an AppArmor profile…
An application running under an AppArmor profile is being denied access to log files. The administrator wants to troubleshoot by allowing all actions and logging denials. Which command will switch the profile to complain mode?
⚠ Common exam trap
Many candidates confuse `aa-complain` with `aa-enforce`, as candidates often assume that logging denials requires enforcement mode, but complain mode is specifically designed for logging without blocking.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
aa-complain /path/to/profile
The `aa-complain` command places an AppArmor profile into complain mode, which allows all actions but logs denials to the system log. This is the correct tool for troubleshooting because it lets the administrator see what the application is trying to do without actually blocking it.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
aa-complain /path/to/profile
Why this is correct
This sets the profile to complain mode, allowing actions but logging denials.
- ✗
aa-enforce /path/to/profile
Why it's wrong here
This sets enforce mode, which blocks denied actions.
- ✗
aa-disable /path/to/profile
Why it's wrong here
This disables the profile entirely, not recommended for troubleshooting.
- ✗
aa-status
Why it's wrong here
This shows the current status of profiles but does not change mode.
Go deeper
Related to this question
About these practice questions
Courseiva writes every XK0-006 question from scratch — 979 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This XK0-006 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the XK0-006 exam.