CompTIA Linux + XK0-006 (V8) Exam Practice Test 1

Zones group interfaces or sources together under a named rule set, allowing different trust levels and rules to apply based on where traffic arrives. Rich rules provide fine-grained custom rule syntax within a zone, runtime versus permanent configuration concerns whether changes persist across reloads, ports versus services concerns how a specific rule is expressed, and the Netfilter module is the underlying kernel packet filtering framework rather than the interface-grouping concept itself.

High I/O wait time occurs when the CPU is idle but waiting on slow storage or network I/O to complete, exactly matching low CPU usage combined with sluggish performance. A CPU bottleneck would show high CPU usage rather than idle CPUs, a memory leak shows gradually increasing memory consumption, high context switching shows excessive CPU time spent switching between processes, and swapping specifically indicates the system is using disk-based virtual memory due to low RAM.

SELinux context labels files with security attributes, and files moved with mv often retain their original context rather than inheriting the context appropriate to their new location, causing access denials despite correct standard permissions. SELinux policy defines the overall rule set rather than a per-file label, an SELinux boolean toggles specific policy behaviors on or off, file attributes like immutable are a separate ext-filesystem feature, and an ACL provides extended permission entries rather than security labeling.

An MTU mismatch between interfaces causes larger packets to be fragmented or dropped while smaller packets like pings succeed, exactly matching this symptom pattern. A DNS issue would prevent name resolution rather than affecting packet size handling, an IP conflict causes address collision symptoms, a link negotiation issue concerns speed/duplex mismatch, and a routing issue would affect reachability more broadly rather than specifically large transfers.

A kernel panic is a complete system halt triggered when the kernel encounters a fatal error it cannot safely recover from, displaying diagnostic messages and requiring a reboot. A segmentation fault crashes a single user-space process rather than halting the whole kernel, a killed process is intentionally terminated, a zombie process has exited but not been reaped by its parent, and inode exhaustion prevents new file creation without necessarily halting the entire system.

SNMP traps are unsolicited messages a managed device sends to a monitoring system when a significant event occurs, rather than being polled for. A MIB defines the structure of manageable information a device exposes, agentless monitoring describes not requiring installed software on the monitored device, log aggregation centralizes log data specifically, and webhooks are an HTTP-based push notification mechanism used by other systems rather than the specific SNMP alerting mechanism.

The formal contractual commitment with consequences like service credits is a service-level agreement, while the internal, often stricter working target is a service-level objective. A service-level indicator is the actual measured metric itself, a webhook is a push notification mechanism, and a health check is a specific monitoring probe rather than either of these two goal-setting concepts.

A virtual environment creates an isolated Python environment with its own installed packages, preventing conflicts with the system-wide installation or other projects. Built-in modules are part of the standard library regardless of environment, PEP 8 concerns code style rather than isolation, global pip installation affects the whole system, and restricting to the standard library avoids the issue but overly limits available functionality rather than solving isolation specifically.

The case statement matches a variable against several specific possible values cleanly, well suited to a fixed set of options like start, stop, or restart. An if statement handles general conditional branching but becomes unwieldy with many specific value comparisons.

git branch creates a new, separate line of development based on the current commit, without affecting the main codebase. git checkout switches between existing branches or commits rather than creating a new one on its own, git merge combines changes from one branch into another, git stash temporarily shelves uncommitted changes, and git fetch downloads updates from a remote repository without creating a branch.

The inventory is the file listing managed hosts and how they are grouped, allowing playbooks to target the correct servers. A playbook defines the actual automation tasks to run, a module is a reusable unit of work a playbook calls, a collection packages related modules and roles together, and facts are system information Ansible gathers from managed hosts rather than the host-grouping file itself.

Preventing reuse of a set number of previous passwords is password history enforcement. Password complexity concerns character requirements like length and mixed character types, password expiration forces periodic changes regardless of reuse, restricted shells limit what commands an account can execute, and MFA adds a second authentication factor rather than governing password reuse specifically.

The NOPASSWD tag in a sudoers entry allows the specified command to run without prompting for a password. NOEXEC instead prevents a command from spawning further subprocesses, wheel group membership alone still typically requires a password unless combined with NOPASSWD, visudo is the safe editor for sudoers files rather than a permission tag, and sudo -i starts an interactive root shell rather than describing the passwordless behavior itself.

The bootloader, such as GRUB, loads before the kernel and determines which kernel image and boot options to use. The kernel is what the bootloader loads, initrd provides a temporary root filesystem during early boot, PXE enables network-based booting, and a display manager handles graphical login after the OS has fully booted.

Polkit manages authorization for privileged actions, PAM provides a pluggable authentication framework, SSSD caches and proxies identity lookups from centralized sources, Kerberos provides ticket-based network authentication, and LDAP is the protocol for accessing distributed directory services, each playing a distinct role in Linux AAA.

A service unit manages a long-running background process, a timer unit triggers another unit on a schedule, a mount unit manages a filesystem mount point, and a target unit groups other units to represent a system state, together forming systemd's core unit type taxonomy.

Repositories are typically signed with a GPG key so package managers can verify package authenticity and integrity before installation, and a missing or untrusted key causes this exact failure. Package dependency resolution concerns compatible versions of required libraries, update alternatives manages symlinks for multiple installed versions of the same tool, sandboxed application isolation concerns runtime confinement, and source compilation is an alternative installation method rather than signature verification.

renice changes the scheduling priority of an already-running process without restarting it. nice instead sets the initial priority when a process is first started, kill sends a signal to terminate or control a process, nohup prevents a process from being terminated when its terminal session ends, and pstree displays a hierarchical view of processes rather than adjusting priority.

usermod modifies attributes of an existing user account, including their default login shell. useradd creates a new account, adduser is a higher-level wrapper around useradd for creating new accounts on some distributions, chage manages password aging, and passwd manages a user's password rather than their shell.

find searches the live filesystem in real time and supports criteria like modification time, making it suitable for finding recently changed files. locate searches a pre-built database that may not reflect very recent changes, which identifies the location of an executable in the PATH, file identifies a file's type, and stat displays detailed metadata about a single already-known file.

tar bundles a directory tree into a single archive file while preserving permissions and ownership, while gzip is the most common utility for compressing a single file, often applied to a tar archive. cpio is an older, less commonly used archiving format, rsync synchronizes files rather than archiving, and dd performs low-level block copying.

>> appends output to the end of an existing file without overwriting its current contents. A single > instead truncates and overwrites the file, < redirects input from a file, | pipes output from one command into another, and << begins a here document rather than appending to a file.

/etc/resolv.conf lists the DNS servers a system queries for name resolution. /etc/hosts provides static local hostname-to-IP mappings, /etc/nsswitch.conf controls which name resolution sources and their order are consulted, /etc/netplan configures network interfaces on some distributions, and /etc/fstab defines filesystem mounts.

lvextend increases the size of an existing logical volume using free space already available in its volume group. vgextend instead adds a new physical volume to grow the volume group itself, and resize2fs resizes the filesystem rather than the logical volume.

lspci lists all PCI devices recognized by the kernel, including graphics cards and network adapters. lsusb lists USB devices instead, lsblk lists block storage devices, lscpu displays CPU architecture information, and lsmem displays memory range information.