CompTIA Linux + XK0-006 (V8) Exam Practice Test 5

Destination Network Address Translation redirects incoming traffic destined for one address and port to a different internal address and port, commonly used to expose an internal service externally. SNAT instead translates the source address of outbound traffic, PAT alone is a related but distinct port-based translation concept, stateless filtering evaluates each packet independently without connection tracking, and IP forwarding alone enables routing between interfaces rather than performing address redirection.

Frequent, repeated process start/stop cycles causing a sawtooth CPU pattern is most consistent with high context switching, as the CPU repeatedly switches between scheduling and executing many short-lived process bursts. Slow startup concerns boot or launch time specifically, low throughput concerns reduced data transfer rate, hardware errors concern physical component faults, and exceeding baselines only is a generic description rather than identifying this specific repeated-switching pattern.

Consistently high read/write latency above baseline, without hardware errors, is high disk latency, while packets being silently discarded during transmission is packet drops. A CPU bottleneck concerns processing capacity being the limiting factor, swapping concerns disk-based virtual memory usage due to low RAM, and jitter concerns variation in packet arrival timing rather than outright drops, none of which match either symptom described here.

A sudden spike in failed login attempts targeting different usernames in rapid succession, consistent with automated credential guessing, is specifically high failed log-in attempts. A certificate issue concerns TLS validation, a misconfigured package repository concerns software installation sources, an SELinux issue concerns security context and policy, and a cipher negotiation issue concerns encryption algorithm mismatch rather than a volume-based login attack pattern.

Working IPv4 connectivity alongside consistently failing IPv6 connectivity on the same dual-stack interface is specifically a dual stack issue. MTU mismatch concerns packet size handling across either protocol, an IP conflict concerns duplicate address assignment, a link negotiation issue concerns speed/duplex mismatch at a lower layer affecting both protocols equally, and a bonding issue concerns interfaces configured together for redundancy rather than a protocol-specific connectivity failure.

A bootloader failing to locate the configured kernel image after a manual configuration edit is a GRUB misconfiguration. A kernel panic happens after the kernel has already started loading, a segmentation fault crashes a specific user-space process, a systemd unit failure occurs after the OS has booted, and inode exhaustion prevents new file creation rather than preventing the bootloader from finding a kernel image.

SSSD provides a centralized caching and proxy layer for identity lookups from sources like LDAP and Active Directory, reducing repeated authentication traffic and enriching local system awareness. Kerberos alone handles ticket-based authentication specifically, Samba alone provides Windows-compatible file and print services, Polkit manages authorization for privileged actions, and PAM alone provides the pluggable authentication framework rather than the caching identity layer itself.

Running an AI model entirely within corporate infrastructure rather than a third-party cloud service is specifically the local models consideration, particularly the private versus public distinction, keeping proprietary code from leaving the network. Prompt engineering concerns crafting effective inputs, code optimization and linting are use cases for the AI tool itself rather than deployment location, and documentation generation is another use case rather than a deployment/data-governance consideration.

Squashing combines multiple commits into a single commit during a merge, producing a cleaner project history. Rebase alone replays commits onto a new base without necessarily combining them, cherry-pick applies a specific individual commit to another branch, stash temporarily shelves uncommitted changes, and tag marks a specific commit with a label rather than combining multiple commits together.

PEP 8 is the community-standard style guide covering naming conventions, indentation, and line length for readable, consistent Python code. Virtual environments concern dependency isolation, built-in modules are part of the standard library, data types and structures concern how values are represented, and current versions concerns which Python release is in use rather than code style conventions.

-gt performs a numeric greater-than comparison between two values. -eq checks numeric equality, -lt checks less-than, -ne checks inequality, and -le checks less-than-or-equal, none of which test whether one value is strictly greater than another.

CVEs provide the standardized catalog of publicly known vulnerabilities, while CVSS provides the standardized severity scoring system used to prioritize them, working together in vulnerability scanning and remediation prioritization. OpenSCAP and CIS Benchmarks concern configuration compliance rather than vulnerability cataloging specifically, AIDE and rkhunter concern file integrity and rootkit detection, IOC and anti-malware concern detection and response, and backporting patches and service misconfigurations are remediation and root-cause concepts rather than the cataloging and scoring standards themselves.

Telnet transmits credentials and data in plaintext, and avoiding unsecure access services like Telnet, FTP, and TFTP in favor of encrypted alternatives is a core OS hardening principle. Secure boot concerns firmware-level boot integrity, disabling unused filesystems reduces unnecessary kernel attack surface, removal of unnecessary SUID permissions reduces privilege escalation risk, and file attributes concern protecting specific files from modification rather than disabling an insecure network service.

Free software specifically emphasizes freedom, meaning users can view, modify, and redistribute the code, which is distinct from software that is merely free of monetary cost while still restricting those freedoms. Proprietary software restricts both cost and freedom typically, copyleft alone is a specific licensing mechanism requiring derivative works to remain similarly licensed, open source alone emphasizes source availability without necessarily using the specific free-software framing, and GNU alone refers to a specific project rather than the general licensing distinction.

Samba implements the SMB protocol Windows systems use natively for file sharing, while also integrating with Linux authentication so Windows clients can authenticate against Linux accounts. Kerberos provides ticket-based network authentication that Samba can integrate with rather than providing file sharing itself, LDAP is a directory access protocol, SSSD caches identity lookups from centralized sources, and Polkit manages authorization for privileged actions rather than Windows-compatible file sharing.

Bridge is the default isolated per-host network, host networking shares the host's namespace directly, macvlan gives containers their own MAC address on the physical network, none disables networking entirely, and overlay connects containers across multiple hosts as a unified network, together covering the primary container networking modes.

systemctl edit creates a safe override file layering additional configuration on top of the original vendor-supplied unit, preserving the original from being directly modified or lost during a future package update. daemon-reload alone reloads systemd's awareness of unit file changes after they're made, enable configures automatic startup, reload applies configuration changes to a running service, and status reports a unit's current state rather than providing this safe override editing mechanism.

Sandboxed applications run in an isolated environment with limited system access, distinct from traditional package manager installation, commonly implemented through formats like Flatpak or Snap. Repository management concerns enabling or disabling package sources, package dependency resolution concerns compatible library versions, update alternatives manages symlinks for multiple installed tool versions, and third-party repository enabling concerns adding non-default sources rather than application-level isolation.

Running lsof against a specific file path directly reveals which processes currently have that file open, along with the owning user. ps aux alone lists all processes without file-handle detail, top alone shows a live overview of resource usage, free reports memory usage, and uptime reports system load averages and time since boot rather than identifying which process holds a specific file open.

diff compares two files and reports the line-by-line differences between them. cp copies files without comparing content, stat displays metadata for a single file, locate searches an indexed database of filenames, and touch creates an empty file or updates timestamps rather than comparing file content.

NAT networking allows VMs to reach the internet through the host's own connection and address, without being directly exposed on the physical LAN or needing individual public addresses. Bridged networking places the VM directly on the physical network with its own visible address, host-only/isolated restricts communication to the host and other VMs only, routed networking forwards traffic through defined routes, and open networking would not provide this NAT-based address translation and isolation.

7-Zip offers broad cross-platform compatibility recognized by users on both Linux and Windows, even though gzip or xz are more commonly the default choice within the Linux ecosystem itself.

.bashrc is loaded for interactive, non-login shell sessions and is the conventional place for prompt customization and personal aliases. .bash_profile and .profile are loaded specifically for login shells, /etc/profile applies system-wide settings for all users at login, and /etc/skel provides template files copied into new home directories rather than being sourced at shell startup.

nmcli is the command-line tool for managing NetworkManager-based connections. netplan apply instead applies Netplan's YAML-based configuration, ip route manages routing table entries, ethtool queries and configures network interface driver settings, and arp displays or manipulates the ARP cache rather than managing NetworkManager connections directly.

lshw provides a comprehensive, consolidated hardware overview covering CPU, memory, storage, and peripherals in one report. lscpu focuses specifically on CPU architecture details, lsblk focuses on block storage devices, lsmem focuses on memory ranges, and dmesg displays kernel ring buffer messages rather than a structured hardware inventory.