CompTIA Linux + XK0-006 (V8) Exam Practice Test 4

Rich rules provide a more expressive syntax for highly specific custom conditions, such as combining a source address restriction with a particular service and logging, beyond what the simple port/service model supports. Zones alone group interfaces under trust levels, runtime configuration alone concerns persistence, ports versus services alone offers only the simpler model this scenario has already outgrown, and the Netfilter module alone is the underlying kernel framework rather than the rule-authoring feature itself.

Noticeable lag between keystrokes and characters appearing in a terminal session is specifically sluggish terminal behavior. Slow startup concerns boot or application launch time, high disk latency concerns storage response time, blocked processes concern processes waiting on a resource, and random disconnects concern unexpected connection drops rather than input responsiveness lag within an active session.

A terminated employee's account still being able to authenticate when it should have been disabled is specifically an account access issue. A certificate issue concerns TLS validation, a misconfigured package repository concerns software installation sources, a remote access issue generically covers broader SSH or similar connectivity problems, and an SELinux issue concerns security context and policy rather than an account that was never actually disabled.

A certificate issued by an authority not in the client's trusted root store is an untrusted certificate authority issue, while a certificate the administrator generated without any CA involvement at all is specifically a self-signed certificate, both producing browser trust warnings for related but distinct reasons. Certificate revocation concerns a certificate being explicitly invalidated after issuance, an expired certificate concerns its validity window having passed, and weak cipher negotiation concerns the encryption algorithm chosen rather than the certificate's trust chain.

A missing allow rule for the application's port on the host firewall, blocking otherwise legitimate traffic, is a misconfigured firewall issue. A DHCP issue concerns address assignment, a DNS issue concerns name resolution, a routing issue concerns path selection to a destination, and link down describes a complete loss of physical or link-layer connectivity rather than a rule specifically blocking one application's traffic.

A service repeatedly failing to start with systemctl reporting a failed state is specifically a systemd unit failure. A kernel panic halts the entire system, a segmentation fault crashes a specific user-space process's memory access, a GRUB misconfiguration would prevent the system from booting at all, and a PATH misconfiguration issue concerns command lookup failures rather than a systemd unit's own dependency error.

A health check actively and periodically probes a service, such as requesting a status endpoint, to confirm it responds correctly, rather than passively waiting for a report. SNMP traps and webhooks are both push-based mechanisms where the monitored system initiates contact, log aggregation centralizes log data, and agent-based monitoring only describes installed collection software rather than this specific active probing technique.

A .gitignore file specifies patterns for files that Git should never track or stage, preventing accidental future commits of matching files. git stash temporarily shelves uncommitted changes, git rebase rewrites commit history, git tag marks specific commits with a label, and git reset moves the current branch pointer rather than preventing future files from being tracked.

A dictionary stores key-value pairs with unique keys and fast lookup by key, exactly matching a hostname-to-IP mapping need. A list stores an ordered sequence of items without key-based lookup, a string stores text, a boolean stores true/false values, and a floating point stores decimal numbers rather than key-value pairs.

The -n test operator returns true if a string is non-empty, exactly what is needed to verify a variable actually contains a value. -d tests whether a path is a directory, -f tests whether a path is a regular file, -z returns true if a string is empty (the opposite check), and ! negates a test condition rather than checking string length specifically.

Kickstart is Red Hat's tool for fully unattended, scripted OS installation, defining partitioning, packages, and post-install configuration in advance. Cloud-init instead configures a system after boot using metadata typically in cloud environments, Ansible playbooks alone automate configuration on already-installed systems, Docker Compose orchestrates containers, and Puppet classes alone define configuration state rather than driving unattended OS installation itself.

OpenSCAP runs automated scans against a machine-readable security baseline, such as a specific benchmark profile, generating standardized compliance reports. rkhunter checks for rootkits specifically, AIDE monitors file integrity through checksums, CVSS alone scores vulnerability severity, and the CVE database alone catalogs known vulnerabilities rather than providing an automated configuration-compliance scanning framework.

PermitRootLogin controls whether the root account can authenticate directly over SSH, and disabling it is a standard hardening recommendation, while the preference for key-based over password authentication is the key versus password authentication consideration. Disabling X forwarding blocks a specific SSH feature unrelated to root login or auth method, AllowUsers restricts which accounts may connect via SSH at all, and fail2ban blocks repeated failed login attempts rather than describing either of these two specific configuration concepts.

Debian and its derivatives, including Ubuntu, use the dpkg-based package format with .deb files. RPM-based distributions like Rocky Linux or RHEL instead use .rpm packages, the two formats are not interchangeable without conversion tools, there is no single universal format across all distributions, and this distinction applies broadly, not just to embedded systems.

journalctl -f follows the systemd journal in real time, streaming new log entries as they are written. rsyslog configuration alone defines logging behavior rather than providing a live view, logrotate manages log file rotation and archival, /var/log alone is a directory rather than a live-streaming command, and audit.rules configures what the audit subsystem records rather than tailing logs in real time.

Mapping container volumes connects a host directory (or a named volume) to a path inside the container, so data persists on the host and survives container deletion. Pruning removes unused resources, tags label image versions, layers are the filesystem diffs making up an image, and building an image creates a new image from a Dockerfile rather than persisting runtime data.

mask creates a symlink to /dev/null for the unit, preventing it from being started at all, even manually or as a dependency of another unit, providing the strongest level of prevention. disable only prevents automatic startup at boot but still allows manual starting, stop halts a currently running service without preventing future starts, reload applies configuration changes to a running service, and unmask alone would remove this restriction rather than apply it.

pip is the Python-specific package installer used to install Python packages not available through the system's standard distribution repository. npm is the equivalent tool for Node.js packages, cargo is the equivalent for Rust packages, and apt and yum are system-level distribution package managers rather than language-specific installers for Python.

/etc/skel contains template files that are automatically copied into a new user's home directory when the account is created, providing default starter configuration. /etc/profile sets system-wide shell environment settings applied at login, and /etc/passwd, /etc/shadow, and /etc/group are account and credential data files rather than home directory templates.

rm -r recursively removes a directory and all of its contents, including subdirectories and files, in one command. rmdir alone only removes empty directories, mv relocates rather than deletes, find -delete can delete matched files but requires a separate search expression rather than being the standard direct removal option, and ln creates links rather than removing anything.

Host-only/isolated networking restricts VM communication to only the host and other VMs on the same virtual network, with no path to the internet or broader LAN. Bridged networking places the VM directly on the physical network, NAT allows outbound internet access through the host's address, routed networking forwards traffic through defined routes, and open networking would not provide this isolation.

gzip is the most universally available compression tool across virtually all Linux systems, offering a good balance of speed and compression ratio for everyday use. xz achieves higher compression at the cost of speed, bzip2 offers different tradeoffs and is less universally used, 7-Zip is more common in cross-platform contexts, and zcat alone decompresses and displays gzip content rather than performing compression.

grep searches for matching patterns, sed performs stream-based text editing, awk processes and reports on structured text by field, cut extracts specific columns, and sort arranges lines in order, together forming a core set of Linux text-processing utilities.

mdadm creates and manages Linux software RAID arrays, including fault-tolerant configurations that combine striping and redundancy. parted and fdisk manage disk partitioning rather than RAID array assembly, blkid identifies filesystem and partition attributes, and growpart resizes an existing partition rather than assembling a new RAID array.

dmidecode reads a system's DMI/SMBIOS tables to report detailed hardware and BIOS information, including motherboard manufacturer and BIOS version. lscpu reports CPU architecture details, lsusb lists USB devices, lspci lists PCI devices, and lm_sensors reports temperature and voltage sensor readings rather than DMI table contents.