How many Troubleshooting Scenario Questions questions are on this page?

This page has 15 Troubleshooting Scenario Questions scenario questions for the XK0-005 exam, each with detailed explanations and wrong-answer analysis.

How should I approach XK0-005 scenario questions?

Read the full scenario before looking at the answer options. Identify the constraint or requirement in the scenario, then eliminate options that are generally true but wrong for this specific case. Scenario questions reward careful reading over pattern matching.

← Back to CompTIA Linux+ XK0-005 questions

Scenario-based practice

Troubleshooting Scenario Questions

Practise CompTIA Linux+ XK0-005 practice questions — original exam-style scenarios covering every exam domain, with detailed explanations, wrong-answer analysis, and common exam traps.

Start full practice test Read exam guide

scenario questions

XK0-005

exam code

CompTIA

vendor

Scenario guide

How to approach troubleshooting scenario questions

These questions describe a network symptom and ask you to identify the root cause or the correct fix. They appear across all certification exams and reward systematic thinking over memorisation. The best candidates follow a consistent troubleshooting framework even under time pressure.

Quick answer

Troubleshooting Scenario Questions questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Practice scenarios

Question 1mediumdrag order

Full question →

Drag and drop the steps to troubleshoot a network connectivity issue using common commands in the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 2hardmultiple choice

Read the full NAT/PAT explanation →

A Linux administrator is troubleshooting network connectivity. The server can ping its own IP address but cannot ping the default gateway. The output of 'ip route show' is: 'default via 10.0.0.1 dev eth0 proto static metric 100'. The output of 'ping -c 1 10.0.0.1' fails with 'Destination Host Unreachable'. Which of the following is the MOST likely cause?

A
The eth0 interface is down.
Why wrong: If eth0 were down, the own IP ping would also fail.
B
The gateway is down or not responding.
Why wrong: A down gateway would typically cause timeouts, not 'unreachable' from the local host.
C
The default gateway is not set.
Why wrong: The route table shows a default gateway is set.
D
The subnet mask on eth0 is incorrect, causing the gateway to be considered on a different network.
A wrong subnet mask can make the gateway appear on a different subnet, leading to 'unreachable'.

Full breakdown with real-world context →

Question 3easymultiple choice

Full question →

A user reports that a Linux workstation fails to boot and displays 'Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)'. Which of the following is the most likely cause?

A
A filesystem listed in /etc/fstab has errors.
Why wrong: /etc/fstab is read after root is mounted, so it cannot cause this boot-time error.
B
A memory module is faulty.
Why wrong: Faulty memory typically causes random crashes or bit errors, not a specific VFS error.
C
The boot loader is missing or corrupted.
Why wrong: A missing boot loader would not proceed to kernel panic; it would show a different error.
D
The root filesystem device is incorrectly specified in the kernel command line.
The error 'unable to mount root fs' often means the root= parameter points to a nonexistent or wrong device.

Full breakdown with real-world context →

Question 4hardmultiple choice

Full question →

A senior administrator is troubleshooting a shell script that fails to execute properly. The script starts with #!/bin/bash and has execute permissions. Which of the following could cause the script to fail to run when invoked as ./script.sh?

A
The shebang line is not on the first line.
Why wrong: Shebang must be first line, but that would cause an error.
B
The script contains carriage return characters (\r).
Can cause 'No such file or directory'.
C
The script uses #!/bin/sh instead of bash.
Why wrong: That is a valid shebang.
D
The script starts with a byte order mark (BOM).
Why wrong: BOM is valid in UTF-8 scripts.

Full breakdown with real-world context →

Question 5mediummultiple choice

Full question →

A Linux administrator is troubleshooting a server that intermittently becomes unresponsive. The administrator suspects a memory leak. Which command should be used to monitor memory usage over time and identify the consuming process?

A
free -h
Why wrong: Shows total memory usage, not per-process.
B
top
Displays real-time process list with memory usage.
C
ss -tuln
Why wrong: Shows listening ports, not memory usage.
D
df -h
Why wrong: Shows disk usage, not memory.

Full breakdown with real-world context →

Question 6hardmulti select

Full question →

A Linux engineer is troubleshooting a server that fails to boot. The server displays a message indicating 'Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)'. Which TWO actions should the engineer take to resolve this issue? (Choose TWO.)

A
Reinstall GRUB to the Master Boot Record
Why wrong: Reinstalling GRUB addresses bootloader issues, not kernel panic due to missing root filesystem.
B
Boot from a rescue disk and rebuild the initramfs with the necessary filesystem modules
Rebuilding initramfs includes required modules for root filesystem access.
C
Run fsck on the root partition to check for filesystem corruption
Why wrong: fsck repairs filesystem errors but does not fix missing drivers or wrong root= parameter.
D
Check the kernel command line in the bootloader configuration for the correct root= parameter
Incorrect root= parameter prevents the kernel from finding the root filesystem.
E
Disable SELinux by adding selinux=0 to the kernel command line
Why wrong: SELinux does not affect the kernel's ability to mount the root filesystem.

Full breakdown with real-world context →

Question 7mediummultiple choice

Full question →

Based on the exhibit, the myapp service fails to start. Which troubleshooting step should be taken first?

Exhibit

Refer to the exhibit.

# cat /etc/systemd/system/myapp.service
[Unit]
Description=My Application
After=network.target

[Service]
Type=simple
ExecStart=/usr/local/bin/myapp
Restart=on-failure
RestartSec=10

[Install]
WantedBy=multi-user.target

# systemctl daemon-reload
# systemctl start myapp
# systemctl status myapp
● myapp.service - My Application
   Loaded: loaded (/etc/systemd/system/myapp.service; enabled; vendor preset: enabled)
   Active: failed (Result: exit-code) since ...
  Process: 5678 ExecStart=/usr/local/bin/myapp (code=exited, status=1/FAILURE)

Oct 23 15:00:00 server myapp[5678]: Error: Configuration file not found

A
Increase the RestartSec value to allow more time for startup
Why wrong: Does not address missing config file.
B
Verify that /usr/local/bin/myapp has execute permission
Why wrong: The error is about a missing config file, not execute permission.
C
Inspect the system journal for more detailed error messages
Why wrong: Additional logs may help, but the error is already clear.
D
Check that the application's configuration file exists and is readable
The error indicates a missing config file.

Full breakdown with real-world context →

Question 8hardmulti select

Full question →

Which THREE of the following are valid methods to troubleshoot a service that fails to start?

A
Run the service executable manually from the command line to see error output.
Manual execution often gives direct error messages.
B
Review the service logs using journalctl.
Logs provide specific error messages.
C
Check if the service's required dependencies are installed and running.
Missing dependencies can prevent a service from starting.
D
Run df -h to check disk space.
Why wrong: While low disk space can cause issues, it's not a specific step for service startup failure.
E
Reload the systemd daemon with systemctl daemon-reload.
Why wrong: Daemon-reload is used after modifying unit files, not for troubleshooting failures.

Full breakdown with real-world context →

Question 9mediummultiple choice

Full question →

A system administrator notices that a service named 'myapp' fails to start on a Linux server. The command 'systemctl status myapp' shows 'Active: failed (Result: exit-code)'. Which of the following is the BEST first step to diagnose the issue?

A
Run 'journalctl -u myapp.service' to inspect the service logs.
journalctl with the unit flag shows logs for that specific service, revealing startup errors.
B
Run 'dmesg' to view kernel messages.
Why wrong: dmesg shows kernel messages, not service-specific errors.
C
Run 'ps aux | grep myapp' to check if the process is running.
Why wrong: This only checks if the process is present, not why it failed to start.
D
Edit the service file with 'systemctl edit myapp' and increase timeout values.
Why wrong: Modifying configuration without knowing the cause can introduce new issues.

Full breakdown with real-world context →

Question 10hardmultiple choice

Full question →

A Linux administrator is troubleshooting a server that is running slowly. The 'sar -q' command shows a run queue length of 12 and a load average of 8.5. The CPU utilization is 90% idle. Which of the following is the most likely cause of the performance issue?

A
The CPU is overloaded and needs to be upgraded.
Why wrong: CPU is 90% idle, so it is not overloaded.
B
The network interface is saturated.
Why wrong: Network saturation would not cause high run queue with idle CPU.
C
The system is low on memory and swapping heavily.
Why wrong: Memory pressure would show high swap usage and possibly high I/O wait, but the primary indicator is high run queue with idle CPU.
D
The disk I/O subsystem is a bottleneck, causing processes to wait for I/O.
High run queue with idle CPU typically means I/O wait; processes are in 'D' state waiting for disk.

Full breakdown with real-world context →

Question 11easymultiple choice

Full question →

A technician needs to troubleshoot a network connectivity issue on a Linux server. The server can ping its own IP address but cannot ping the default gateway. Which of the following is the most likely cause?

A
The default gateway is misconfigured in the routing table.
Why wrong: A misconfigured gateway would cause 'Network is unreachable', not a timeout.
B
The DNS resolver is not configured correctly.
Why wrong: DNS is not needed for pinging an IP address.
C
The iptables firewall is blocking outgoing ICMP traffic.
Why wrong: A firewall would also block local pings if configured to block ICMP.
D
The Ethernet cable is disconnected or the switch port is down.
Local ping works (loopback or local IP) but external fails, indicating a layer 1/2 issue.

Full breakdown with real-world context →

Question 12mediummulti select

Full question →

A Linux administrator is troubleshooting a server that has become unresponsive. The administrator connects via IPMI and runs 'top' but the process list does not show any obvious CPU or memory hog. Which TWO commands could be used to identify I/O wait issues or disk bottlenecks? (Choose TWO.)

A
iostat -x 1
iostat -x shows extended I/O statistics per device.
B
iotop -o
iotop -o shows only processes with I/O activity.
C
vmstat 1
Why wrong: vmstat shows system summary, not per-process I/O.
D
sar -b 1
Why wrong: sar -b shows I/O statistics but requires sysstat package and data collection.
E
dstat --disk-util
Why wrong: dstat can show disk utilization, but not as detailed as iostat.

Full breakdown with real-world context →

Question 13mediummultiple choice

Full question →

A user reports that a recently installed application fails to start. The application was installed via a shell script that added a repository and installed the package. The user runs 'ldd /usr/bin/app' and sees several 'not found' libraries. Which of the following is the MOST likely cause?

A
The installation script did not install all required dependencies.
The 'not found' libraries indicate missing dependencies, which can occur if the script failed to install all required packages.
B
The kernel version is outdated.
Why wrong: Kernel version would affect system calls, not library visibility.
C
SELinux is blocking the application.
Why wrong: SELinux denials appear in audit logs, not as missing libraries from ldd.
D
The file system is corrupted.
Why wrong: File system corruption would typically cause I/O errors, not missing library messages.

Full breakdown with real-world context →

Question 14hardmulti select

Full question →

A Linux server is experiencing intermittent connectivity issues. The administrator reviews the system logs and finds the following messages: 'NETDEV WATCHDOG: eth0: transmit queue 0 timed out'. Which THREE actions are likely to resolve this issue? (Choose three.)

A
Disable NIC offloading features using 'ethtool -K eth0 tx off sg off'.
Offloading can cause driver bugs; disabling it may stabilize the interface.
B
Update the network interface card (NIC) driver to the latest version.
Driver updates often include fixes for bugs that cause transmit timeouts.
C
Increase the transmit queue length using 'ifconfig eth0 txqueuelen 10000'.
Why wrong: Increasing queue length may delay the timeout but does not address the root cause.
D
Change the MTU on the interface to 9000.
Why wrong: MTU settings affect packet size, not transmit queue timeouts.
E
Replace the NIC with a known good one.
Hardware faults can cause timeouts; replacing the NIC resolves hardware issues.

Full breakdown with real-world context →

Question 15hardmultiple choice

Full question →

An administrator is troubleshooting a web server that is not accessible from the internet. The server is running on port 80. Based on the iptables output, which of the following is the MOST likely reason?

Network Topology

A
The HTTP rule only allows traffic from the internal network.
The rule for port 80 sources from 192.168.1.0/24, so internet traffic is blocked.
B
The SSH rule is blocking HTTP traffic.
Why wrong: SSH rule only matches port 22, not port 80.
C
The loopback interface is not accepting traffic.
Why wrong: The loopback rule accepts all traffic on lo.
D
The default INPUT policy is DROP.
Why wrong: Default policy is ACCEPT, but the DROP rule at the end drops unmatched packets.

Full breakdown with real-world context →

These XK0-005 practice questions are part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style XK0-005 questions with detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics.

Troubleshooting Scenario Questions

How to approach troubleshooting scenario questions

Quick answer

Related XK0-005 topic practice pages

Security practice questions

Troubleshooting practice questions

Scripting, Containers and Automation practice questions

System Management practice questions

XK0-005 fundamentals practice questions

XK0-005 scenario practice questions

XK0-005 troubleshooting practice questions

Practice scenarios

Drag and drop the steps to troubleshoot a network connectivity issue using common commands in the correct order.

A user reports that a Linux workstation fails to boot and displays 'Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)'. Which of the following is the most likely cause?

A senior administrator is troubleshooting a shell script that fails to execute properly. The script starts with #!/bin/bash and has execute permissions. Which of the following could cause the script to fail to run when invoked as ./script.sh?

A Linux administrator is troubleshooting a server that intermittently becomes unresponsive. The administrator suspects a memory leak. Which command should be used to monitor memory usage over time and identify the consuming process?

A Linux engineer is troubleshooting a server that fails to boot. The server displays a message indicating 'Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(0,0)'. Which TWO actions should the engineer take to resolve this issue? (Choose TWO.)

Based on the exhibit, the myapp service fails to start. Which troubleshooting step should be taken first?

Exhibit

Which THREE of the following are valid methods to troubleshoot a service that fails to start?

A system administrator notices that a service named 'myapp' fails to start on a Linux server. The command 'systemctl status myapp' shows 'Active: failed (Result: exit-code)'. Which of the following is the BEST first step to diagnose the issue?

A Linux administrator is troubleshooting a server that is running slowly. The 'sar -q' command shows a run queue length of 12 and a load average of 8.5. The CPU utilization is 90% idle. Which of the following is the most likely cause of the performance issue?

A technician needs to troubleshoot a network connectivity issue on a Linux server. The server can ping its own IP address but cannot ping the default gateway. Which of the following is the most likely cause?

A Linux administrator is troubleshooting a server that has become unresponsive. The administrator connects via IPMI and runs 'top' but the process list does not show any obvious CPU or memory hog. Which TWO commands could be used to identify I/O wait issues or disk bottlenecks? (Choose TWO.)

A user reports that a recently installed application fails to start. The application was installed via a shell script that added a repository and installed the package. The user runs 'ldd /usr/bin/app' and sees several 'not found' libraries. Which of the following is the MOST likely cause?

A Linux server is experiencing intermittent connectivity issues. The administrator reviews the system logs and finds the following messages: 'NETDEV WATCHDOG: eth0: transmit queue 0 timed out'. Which THREE actions are likely to resolve this issue? (Choose three.)

An administrator is troubleshooting a web server that is not accessible from the internet. The server is running on port 80. Based on the iptables output, which of the following is the MOST likely reason?