The application team has reported latency issues that are causing the application to crash on the Linux server. The Linux administrator starts troubleshooting and receives the following output: Which of the following commands will improve the latency issue?

# echo 'net.core.rmem max = 12500000' >> /etc/sysctl.conf # echo 'net.core.wmem_max = 12500000' >> /etc/sysctl.conf # sysctl -p

# echo 'net.core.net_backlog = 5000000' >> /etc/sysctl.conf # sysctl -p # systemctl daemon-reload

# ifdown eth0 # ip link set dev eth0 mtu 800 # ifup eth0

# systemctl stop network # ethtool -g eth0 512 # systemctl start network

# echo 'net.core.rmem max = 12500000' >> /etc/sysctl.conf # echo 'net.core.wmem_max = 12500000' >> /etc/sysctl.conf # sysctl -p

A new application container was built with an incorrect version number. Which of the following commands should be used to rename the image to match the correct version 2.1.2?

docker tag comptia/app:2.1.1 comptia/app:2.1.2

docker push comptia/app:2.1.1 comptia/app:2.1.2

docker rmi comptia/app:2.1.1 comptia/app:2.1.2

docker update comptia/app:2.1.1 comptia/app:2.1.2

Which of the following will prevent non-root SSH access to a Linux server?

Creating the /etc/nologin.allow file containing only a single line root

Creating the /etc/nologin/login.deny file containing a single line +all

Ensuring that /etc/pam.d/sshd includes account sufficient pam_nologin.so

The journald entries have filled a Linux machine's /var volume. Which of the following is the best command for a systems administrator to use to free up the disk space occupied by these entries?

systemctl stop systemd-journald systemctl start systemd-journald

journalctl ---rotate journalctl --vacuum-time=ls

systemctl stop systemd-journald systemctl start systemd-journald

rm -rf /var/log/journal systemctl restart systemd-journald

pkill -HUP systemd-journald systemctl restart systemd-journald

A server administrator has scheduled a cron job to run YUM updates on all servers without manual intervention, but kernel packages must be excluded from the updates at all times. Which of the following configuration files needs to be modified to make these changes persistent?

/etc/yum/pluginconf.d/packages.conf

A Linux administrator is configuring network traffic forwarding. Despite having proper iptables rules, the traffic forwarding is not working. Which of the following commands will allow Linux to pass network traffic between different interfaces?

echo 'net.ipv4.ip_forward=1' >> /etc/sysctl.conf; sysctl -p

ip route forward allow --all-interfaces; systemctl restart network

Joe, a user, is unable to log in to the system. The Linux administrator checks the /etc/passwd file and reviews the following output:Joe:x:1002:1002::/home/Joe:/sbin/nologinWhich of the following should the administrator do to fix this issue?

Change the /sbin/nologin entry to /bin/sh for Joe

Remove the x entry in the /etc/passwd file for Joe

Change the /sbin/nologin entry to /bin/sh for Joe

Issue the usermod -l Joe command

Ensure that a corresponding entry is in the /etc/shadow file for Joe

A systems administrator is configuring a Linux system so that network traffic from the internal network 172.17.0.0/16 going out through the eth0 interface would appear as if it was sent directly from this interface. Which of the following commands will accomplish this task?

iptables -A POSTROUTING -s 172.17.0.0/16 -o eth0 -j MASQUERADE

firewalld -A OUTPUT -s 172.17.0.0/16 -o eth0 -j DIRECT

nmcli snasq-traffic eth0 -s 172.17.0.0/16 -j MASQUERADE

ifconfig --nat eth0 -s 172.17.0.0/16 -j DIRECT

A Linux administrator needs to expose port 9000 for a container to listen during runtime. The Linux administrator creates a Dockerfile with the following entries:sqlFROM node:9-alpineWORKDIR /usr/src/appCOPY package.json ./RUN npm installCOPY . .EXPOSE 9000CMD ['npm', 'start']Which of the following commands should the administrator use to accomplish this task? (Select two).

docker run -p 80:9000 Test-Container

docker run -p 5000:80 Test-Container

docker run -p 80:9000 Test-Container

A Linux administrator has defined a systemd script docker-repository.mount to mount a volume for use by the Docker service. The administrator wants to ensure that the Docker service does not start until the volume is mounted. Which of the following configurations needs to be added to the Docker service definition to best accomplish this task?

Requires=docker-repository.mount

RequiresMountsFor=docker-repository.mount

A systems administrator created a new directory with specific permissions. Given the following output:arduino$ ls -ld /comptiadrwxr-x--- 2 root root 4096 Oct 20 20:13 /comptia$ getfacl /comptia# file: /comptia# owner: root# group: rootuser::rwxgroup::r-xother::---default:user::rwxdefault:group::r-xdefault:group:wheel:rwxdefault:mask::rwxdefault:other::---Which of the following permissions are enforced on /comptia?

Members of the wheel group can read files in /comptia.

Newly created files in /comptia will have the sticky bit set.

Other users can create files in /comptia.

Only root can create files in /comptia.

Which of the following is a benefit of a service mesh?

Encrypted communication between two services in a Kubernetes environment

Direct access to the Kubernetes API services through the use of tokens

Elevated privileges in a Kubernetes pod to allow root access in a hardened cluster

Creating PVCs in a Kubernetes cluster to store and manage persistent data

While troubleshooting server issues, a Linux systems administrator obtains the following output:yamltotal used free shared buff/cache availableMem: 3736 3538 33 2 48 25Swap: 2047 1824 223Which of the following best describes the state of the system?

The system has consumed the system memory and swap space

The system has enough free memory space

The system has allocated enough buffer space

A user (userA) has reported issues while logging in to the system. The following output has been provided:bashCould not chdir to home directory /home/userA: Permission denied-bash: /home/userA/.bash_profile: Permission denied# cat /etc/passwd | grep userAuserA:x:1234:3400:userA account:/home/userA/:/bin/bash# passwd -S userAuserA PS 2022-10-17 1 99999 0 (Password set. SHA512 crypt.)# groups userAadmin dev usergrp# ls -lth /home/drwx------ 7 root admin 9 Jan 17 2019 userAdrwxr-xr-x 4 userC app 9 Jan 23 2020 userCWhich of the following describes the issue userA is having?

The assigned home directory is not owned by userA

The password for userA is not set

The group for userA is not assigned correctly

The account password for userA has expired

The assigned home directory is not owned by userA

A security team discovers that a web server has been running with elevated privileges and identifies it as a security violation. Which of the following items needs to be added to the webserver.service file to remediate the issue?

In the [Service] section of the webserver.service file, add User=comptia.

In the [Unit] section of the webserver.service file, add AllowIsolate=true.

In the [Install] section of the webserver.service file, add WantedBy=single.target.

Add After=network.target to the [Install] section of the webserver.service file.

The users of a Linux system are unable to use one of the application filesystems. The following outputs have been provided:bash$ cd /app$ touch filetouch: cannot touch 'file': Readonly file systemOutput 2/dev/sdcl on /app type ext4 (ro,relatime,seclabel,data=ordered)Output 3/dev/sdcl /app ext4 defaults 0 0Output 4[302.048075] Buffer I/O error on dev sdcl, logical block 0, async page read[302.048490] EXT4-fs (sdcl): Attempt to read block from filesystem resulted in short read while trying to re-open /dev/sdclWhich of the following actions will resolve this issue?

fsck -y /dev/sdcl mount -o rw,remount /app

umount /app fsck -y /dev/sdcl mount /app

xfs_repair /dev/sdcl mount -o rw,remount /app

umount /app xfs_repair /dev/sdcl mount /app

fsck -y /dev/sdcl mount -o rw,remount /app

A systems administrator receives the following errors via email from the system log:goXFS (loop0): Metadata CRC error detected at xfs_agi_read_verify+0xcb/0xfeXFS (loop0): First 128 bytes of corrupted metadata bufferXFS (loop0): metadata I/O error in 'xfs_trans_read_buf_map' at daddr 0x2 len 1 error 74A few minutes later, the administrator starts receiving reports that some of the images in the company's website are not loading properly. The systems administrator runs some commands and receives the following outputs:cssOutput 1NAME FSTYPE UUID MOUNTPOINTsda ext4 02ae47-fe457-45bc /sdb xfs 347c7056 /var/www/htmlOutput 2DocumentRoot '/var/www/html'Output 3httpd.service - The Apache HTTP ServerLoaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vendor preset: disabled)Active: active (running) since Sun 1991-05-24 16:12:43 UTC; 30y agoMain PID: 252 (httpd)Which of the following would be the appropriate steps to take to solve this issue?

systemctl stop httpd umount /dev/sdb1 xfs_repair /dev/sdb1 mount /dev/sdb1 /var/www/html systemctl start httpd

umount /dev/sdb1 xfs_repair /dev/sdb1 xfs_metadump /dev/sdb1 mount /dev/sdb1 /var/www/html systemctl restart httpd

umount /dev/sdb1 systemctl stop httpd xfs_metadump /dev/sdb1 mount /dev/sdb1 /var/www/html systemctl start httpd

systemctl stop httpd xfs_check -L /dev/sdb umount /var/www/html systemctl start httpd

A user is cleaning up a directory because it has more than 100,000 files that were generated from an experiment. When the user tries to remove the unneeded experiment files, the user receives an error:arduinocannot execute [Argument list too long]Which of the following should the user execute to remove these files?

find . -name 'experiment*.txt' -exec rm '{}' ;

for i in experiment*.txt; do find . -name $i -exec rmdir '{}' ; done

CompTIA XK0-005 Practice Test 8 - Free Online Exam Questions 281-320

A systems administrator creates a public key for authentication. Which of the following tools is most suitable to use when uploading the key to the remote servers?

Become a Premium Member for full access

Unlock Premium Member

CompTIA XK0-005 Practice Test 8

Question

Drag and Drop

Hot Area

CompTIA XK0-005 Practice Tests

Practice Tests