XK0-004 sample questions

Question 1

Which of the following statements BEST represents what the term “agentless means regarding orchestration?

Accepted Answer

Installation of a tool is not required on the remote system to perform orchestration tasks

Answer

It facilitates version control when using infrastructure as code during orchestration

Answer

It automatically removes malware from the remote system during orchestration

Answer

A tool can only be accessed remotely to perform orchestration tasks

Question 2

A Linux administrator is testing a new web application on a local laptop and consistently shows the following 403 errors in the laptop’s logs:

The web server starts properly, but an error is generated in the audit log.

Which of the following settings should be enabled to prevent this audit message?

Accepted Answer

httpd_can_network_connect=1

Answer

httpd_enable_scripting = 1

Answer

httpd_enable_homedirs = 1

Answer

httpd_enable_cgi = 1

Question 3

A Linux administrator must identify a user with high disk usage. The administrator runs the # du -s /home/* command and gets the following output:

Based on the output, User3 has the largest amount of disk space used. To clean up the file space, the administrator needs to find out more information about the specific files that are using the most disk space.

Which of the following commands will accomplish this task?

Accepted Answer

du -sh /home/User/

Answer

df-k /home/User3/files.txt

Answer

du -a /home/User3/'

Answer

find . -name /home/User3 -print

Question 4

A systems administrator has scheduled a system update for a server. The update includes a resynchronization of the package database and updates to the current packages and the system distribution packages.

Which of the following commands contains the proper order ofthis update?

Accepted Answer

apt-get update, apt-get upgrade, apt-get dist-upgrade

Answer

apt-get upgrade, apt-get dist-upgrade, apt-get update

Answer

apt-get dist-upgrade, apt-get upgrade, apt-get update

Answer

apt-get update, apt-get dist-upgrade, apt-get upgrade

Question 5

A Linux administrator is restoring the SELinux contexts on an entire system. Which of the following commands is the BEST option to complete this task?

Accepted Answer

restorecon / + reboot

Answer

setenforce 0 reboot

Answer

setfacl -bR / + reboot

Answer

touch /.autorelabel + reboot

Question 6

A Linux administrator needs the “tech account to have the option to run elevated commands as root. Which of the following commands would BEST meet this goal?

Accepted Answer

# usermod -aG wheel tech

Answer

$ su - tech -c “/bin/bash’

Answer

# sudo -i tech

Answer

# groupadd -u tech -g root

Question 7

Which of the following BEST describes containers running on a Linux system?

Accepted Answer

Containers use the cgroups and namespaces functionalities to isolate processes and assign hardware resources to each ofthose isolated processes.

Answer

Containers only need the namespaces functionality to run on a Linux system available since kernel 2.6.

Answer

Containers need a hypervisor to run on a Linux system. Cgroups namespaces are functionalities used for the kernel but not for running containers.

Answer

Containers only need the cgroups functionality for running on a Linux system. Namespaces is not a Linux kernel functionality needed for creating and managing containers.

Question 8

A Linux administrator has installed a web application firewall in front of a web server running on HTTP port 8080 and successfully started the HTTP server. However, after opening the application URL in an Internet browser, the administrator discovered that the application does not work. The administrator performed the following diagnostic steps:

Which of the following is the NEXT step the administrator should perform to permanently fix the issue at the kernel level?

Accepted Answer

Add iptables rule iptables -A FORWARD-m state -state NEW -p tcp -dport 8080 -j ACCEPT then restart httpd daemon

Answer

sysctl -w net.ipv4.ip_forward=1 then run sysctl -w /etc/sysctl.confto enable the change

Answer

Edit /etc/sysctl.conffile and add net.ipv4.ip_forward = 1 then run sysctl -p /etc/sysctl.confto enable the change

Answer

Add iptables rule iptables -A INPUT -m state -state NEW -p tcp -dport 8080 -j then restart httpd daemon

Question 9

An administrator is analyzing a Linux server which was recently hacked. Which of the following will the administrator use to find all unsuccessful login attempts?

Accepted Answer

pam_tally2

Answer

nsswitch

Answer

faillock

Answer

passwd

XK0-004 Sample Questions & Answers

usermod -aG wheel tech

sudo -i tech

groupadd -u tech -g root

Ready for the real thing?

XK0-004 Sample Questions & Answers

usermod -aG wheel tech

sudo -i tech

groupadd -u tech -g root

Related practice tests

Ready for the real thing?