Courseiva
← XK0-006
Full test
mediumMultiple ChoiceObjective-mapped

XK0-006 Practice Question: Refer to the exhibit

Exhibit

$ cat /etc/rsyslog.conf | grep -E '^\.|^\*'\n*.info;mail.none;authpriv.none;cron.none                /var/log/messages\nauthpriv.*                                              /var/log/secure\nmail.*                                                  -/var/log/maillog\ncron.*                                                  /var/log/cron\n*.emerg                                                 :omusrmsg:*\nuucp,news.crit                                          /var/log/spooler\nlocal7.*                                                /var/log/boot.log

Refer to the exhibit. A Linux administrator needs to capture all messages with priority 'alert' from the kernel facility. Which directive should be added to /etc/rsyslog.conf?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

kern.alert /var/log/kernel_alert

The kernel facility is 'kern'. 'alert' priority is one of the syslog priorities. The correct syntax is 'kern.alert' to capture only alert messages from kernel.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✓

    kern.alert /var/log/kernel_alert

    Why this is correct

    Correct syntax for kernel facility, alert priority.

  • ✗

    kern.=alert /var/log/kernel_alert

    Why it's wrong here

    The '=' is not used for priority; '.' is correct.

  • ✗

    kern.* /var/log/kernel_alert

    Why it's wrong here

    This would capture all kernel messages, not just alert.

  • ✗

    *.alert /var/log/kernel_alert

    Why it's wrong here

    This would capture alert from all facilities, not just kernel.

About these practice questions

Courseiva writes every XK0-006 question from scratch — 979 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This XK0-006 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the XK0-006 exam.