easyMultiple SelectObjective-mapped
XK0-006 Practice Question: Which TWO of the following are best practices for…
Which TWO of the following are best practices for securing the GRUB boot loader?
⚠ Common exam trap
CompTIA often tests the distinction between GRUB‑specific controls (password, encryption) and platform‑level settings (Secure Boot, USB boot order), leading candidates to mistakenly select Secure Boot or disable USB boot as GRUB best practices.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Encrypt the boot partition.
Setting a GRUB password (option C) prevents unauthorized users from editing boot parameters or booting into single-user mode, which could otherwise bypass system authentication. Encrypting the boot partition (option B) protects the integrity and confidentiality of the kernel and initramfs, ensuring that tampered or malicious code cannot be loaded during boot. Both measures are recommended in security baselines to enforce boot‑level access control.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable Secure Boot.
Why it's wrong here
UEFI firmware feature, not directly GRUB.
- ✓
Encrypt the boot partition.
Why this is correct
Protects boot files from tampering.
- ✓
Set a GRUB password.
Why this is correct
Prevents unauthorized boot parameter changes.
- ✗
Set the boot timeout to 0.
Why it's wrong here
Reduces boot time, not a security control.
- ✗
Disable USB boot.
Why it's wrong here
BIOS-level, not GRUB-specific.
Go deeper
Related to this question
Learn chapter
User and Group Administration
Key term
Kernel
The kernel is the core program of an operating system that manages hardware resources and provides essential services for all other software to run.
Key term
User
A user is any person, system, or device that interacts with an IT service, resource, or identity system, typically authenticated through credentials and authorized to perform specific actions.
About these practice questions
This XK0-006 question is part of Courseiva's 979-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This XK0-006 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the XK0-006 exam.