[Feb 03, 2026] XK0-005 Test Engine files, XK0-005 Dumps PDF
Latest CompTIA XK0-005 PDF and Dumps (2026) Free Exam Questions Answers
Earning the CompTIA Linux+ certification demonstrates that an individual has the skills and knowledge required to work with Linux-based systems. It is a valuable certification for IT professionals as it validates their expertise and can help them advance their careers. CompTIA Linux+ Certification Exam certification is also recognized by major technology companies such as IBM, HP, and Dell, making it a highly sought-after credential in the IT industry.
NEW QUESTION # 199
A Linux administrator was notified that a virtual server has an I/O bottleneck. The Linux administrator analyzes the following output:
Given there is a single CPU in the sever, which of the following is causing the slowness?
- A. The processes are paging.
- B. The memory is exhausted.
- C. The CPU is overloaded.
- D. The system is running out of swap space.
Answer: C
Explanation:
The slowness is caused by the CPU being overloaded. The iostat command shows that the CPU utilization is
100%, which means that there are more processes competing for CPU time than the CPU can handle. The other options are incorrect because:
* The system is not running out of swap space, as shown by the iostat command, which shows that there is no swap activity (si and so columns are zero).
* The memory is not exhausted, as shown by the free -m command, which shows that there is still available memory (avail column) and free buffer/cache memory (buff/cache column).
* The processes are not paging, as shown by the vmstat command, which shows that there are no major page faults (majflt column) and no swap activity (si and so columns). References: CompTIA Linux+ Study Guide, Fourth Edition, page 417-419, 424-425.
NEW QUESTION # 200
A Linux system is having issues. Given the following outputs:
# dig @192.168.2.2 mycomptiahost
; << >> DiG 9.9.4-RedHat-9.9.4-74.el7_6.1 << >> @192.168.2.2 mycomptiahost
; (1 server found)
;; global options: +cmd
;; connection timed out; no servers could be reached
# nc -v 192.168.2.2 53
Ncat: Version 7.70 ( https://nmap.org/ncat )
Ncat: Connection timed out.
# ping 192.168.2.2
PING 192.168.2.2 (192.168.2.2) 56(84) bytes of data.
64 bytes from 192.168.2.2: icmp_seq=1 ttl=117 time=4.94 ms
64 bytes from 192.168.2.2: icmp_seq=2 ttl=117 time=10.5 ms
Which of the following best describes this issue?
- A. The DNS service is currently not available or the corresponding port is blocked.
- B. The name mycomptiahost does not exist in the DNS.
- C. The DNS host is down.
- D. The Linux engineer is using the wrong DNS port.
Answer: A
Explanation:
The ping command shows that the Linux system can reach the DNS server at 192.168.2.2, so the DNS host is not down. The dig and nc commands show that the Linux system cannot connect to the DNS server on port 53, which is the standard port for DNS queries. This means that either the DNS service is not running on the DNS server, or there is a firewall or network device blocking the port 53 traffic. Therefore, the DNS service is currently not available or the corresponding port is blocked.
Reference
1: How To Troubleshoot DNS Client Issues in Linux - RootUsers
2: 6 Best Tools to Troubleshoot DNS Issues in Linux - Tecmint
3: How To Troubleshoot DNS in Linux - OrcaCore
4: Fixing DNS Issues in Ubuntu 20.04 | DeviceTests
NEW QUESTION # 201
A systems administrator receives reports that several virtual machines in a host are responding slower than expected. Upon further investigation, the administrator obtains the following output from one of the affected systems:
Which of the following best explains the reported issue?
- A. The virtual machine has enough CPU cycles, leading to the system use percentage being higher than expected.
- B. The physical host is running out of CPU resources, leading to insufficient CPU time being allocated to virtual machines.
- C. The physical host has enough CPU cores, leading to users running more processes to compensate for the slower response times.
- D. The virtual machine is running out of CPU resources, leading to users experiencing longer response times.
Answer: D
Explanation:
Explanation
Based on the output from one of the affected systems, the best explanation for the reported issue is that the virtual machine is running out of CPU resources, leading to users experiencing longer response times (D). The output shows that the system use percentage is very high (57.85%), indicating that the virtual machine is using most of its CPU cycles for system processes. This leaves little CPU time for user processes, which results in slower performance. The other explanations are not supported by the output or are contradictory. References:
[CompTIA Linux+ Study Guide], Chapter 8: Optimizing Linux Performance, Section: Monitoring CPU Usage
[How to Interpret CPU Usage Statistics]
NEW QUESTION # 202
Based on an organization's new cybersecurity policies, an administrator has been instructed to ensure that, by default, all new users and groups that are created fall within the specified values below.
To which of the following configuration files will the required changes need to be made?
- A. /etc/login.defs
- B. /etc/profile
- C. /etc/security/limits.conf
- D. /etc/default/useradd
Answer: A
Explanation:
The required changes need to be made to the /etc/login.defs configuration file. The /etc/login.defs file defines the default values for user and group IDs, passwords, shells, and other parameters for user and group creation.
The file contains the directives UID_MIN, UID_MAX, GID_MIN, and GID_MAX, which set the minimum and maximum values for automatic user and group ID selection. The administrator can edit this file and change the values to match the organization's new cybersecurity policies. This is the correct file to modify to accomplish the task. The other options are incorrect because they either do not affect the user and group IDs (
/etc/security/limits.conf or /etc/profile) or do not set the default values (/etc/default
/useradd). References: CompTIA Linux+ (XK0-005) Certification Study Guide, Chapter 15: Managing Users and Groups, page 463.
NEW QUESTION # 203
A Linux administrator cloned an existing Linux server and built a new server from that clone. The administrator encountered the following error after booting the cloned server:
The administrator performed the commands listed below to further troubleshoot and mount the missing filesystem:
Which of the following should administrator use to resolve the device mismatch issue and mount the disk?
- A. mount disk by-label
- B. mount disk by device-id
- C. mount disk by-blkid
- D. fsck -A
Answer: B
Explanation:
The administrator should use the command mount disk by device-id to resolve the device mismatch issue and mount the disk. The issue is caused by the cloned server having a different device name for the disk than the original server. The output of blkid shows that the disk has the device name /dev/sdb1 on the cloned server, but the output of cat /etc/fstab shows that the disk is expected to have the device name /dev/sda1. The command mount disk by device-id will mount the disk by using its unique identifier (UUID) instead of its device name. The UUID can be obtained from the output of blkid or lsblk -f. The command will mount the disk to the specified mount point (/data) and resolve the issue.
NEW QUESTION # 204
A systems administrator is troubleshooting connectivity issues and trying to find out why a Linux server is not able to reach other servers on the same subnet it is connected to. When listing link parameters, the following is presented:
Based on the output above, which of following is the MOST probable cause of the issue?
- A. The Ethernet broadcast address should be ac:00:11:22:33:ff instead.
- B. The network interface eth0 is using an old kernel module.
- C. The address ac:00:11:22:33:cd is not a valid Ethernet address.
- D. The network interface cable is not connected to a switch.
Answer: D
Explanation:
Explanation
The most probable cause of the connectivity issue is that the network interface cable is not connected to a switch. This can be inferred from the output of the ip link list dev eth0 command, which shows that the network interface eth0 has the NO-CARRIER flag set. This flag indicates that there is no physical link detected on the interface, meaning that the cable is either unplugged or faulty. The other options are not valid causes of the issue. The address ac:00:11:22:33:cd is a valid Ethernet address, as it follows the format of six hexadecimal octets separated by colons. The Ethernet broadcast address should be ff:ff:ff:ff:ff:ff, which is the default value for all interfaces. The network interface eth0 is not using an old kernel module, as it shows the UP flag, which indicates that the interface is enabled and ready to transmit data. References: CompTIA Linux+ (XK0-005) Certification Study Guide, Chapter 14: Managing Networking
NEW QUESTION # 205
A systems administrator wants to leverage their password-protected SSH key to connect to multiple servers without entering their password every time. Which of the following commands should the administrator use?
- A. ssh-add
- B. ssh-copy-id
- C. ssh-keygen
- D. ssh-agent
Answer: A
Explanation:
* ssh-add adds the private key to theSSH authentication agent, allowing the user toenter the passphrase once per session.
Reference:CompTIA Linux+ XK0-005 Study Guide, Domain 3.0 - Secure Shell
"Use ssh-add to add the SSH private key to memory, enabling passwordless logins during the session."
NEW QUESTION # 206
A diagnostic tool reports a "host seems down" event for a server with an IP address of
192.168.47.44. Which of the following commands should the administrator use to confirm the host down event?
- A. netcat 192.168.47.44
- B. ping -c 1 192.168.47.44
- C. nmap 192.168.47.0/32
- D. nmap 192.168.47.44 -Pn
Answer: B
Explanation:
The ping -c 1 192.168.47.44 command sends one ICMP echo request to the specified host to check its availability. If the host is down, there will be no response. This is the quickest way to confirm if a host is reachable. nmap -Pn can also be used to check a host status, but ping is faster and lighter.
NEW QUESTION # 207
A cloud engineer needs to check the link status of a network interface named eth1 in a Linux server. Which of the following commands can help to achieve the goal?
- A. ss -ti eth1
- B. ifconfig hw eth1
- C. netstat -r eth1
- D. ip link show eth1
Answer: D
Explanation:
The ip link show eth1 command can be used to check the link status of a network interface named eth1 in a Linux server. It will display information such as the MAC address, MTU, state, and flags of the interface. The ifconfig hw eth1 command is invalid, as hw is not a valid option for ifconfig. The netstat -r eth1 command would display the routing table for eth1, not the link status. The ss -ti eth1 command would display TCP information for sockets associated with eth1, not the link status. Reference: CompTIA Linux+ (XK0-005) Certification Study Guide, Chapter 13: Networking Fundamentals, page 436.
NEW QUESTION # 208
A systems administrator is working on a security report from the Linux servers.
Which of the following commands can the administrator use to display all the firewall rules applied to the Linux servers? (Select two).
- A. ufw status
- B. systemct1 status firewalld
- C. firewall-cmd --1ist-a11
- D. ufw limit
- E. iptables -F
- F. iptables -A
Answer: A,C
Explanation:
These commands can display all the firewall rules applied to the Linux servers, depending on which firewall service is being used.
* The firewall-cmd command is a utility for managing firewalld, which is a dynamic firewall service that supports zones and services. The --list-all option will show all the settings and rules for the default zone, or for a specific zone if specified. For example, firewall-cmd --list-all --zone=public will show the rules for the public zone1.
* The ufw command is a frontend for iptables, which is a low-level tool for manipulating netfilter, the Linux kernel's packet filtering framework. The status option will show the status of ufw and the active rules, or the numbered rules if verbose is specified. For example, ufw status verbose will show the numbered rules and other information2.
The other options are incorrect because:
A: ufw limit
This command will limit the connection attempts to a service or port using iptables' recent module. It does not display any firewall rules2.
B: iptables -F
This command will flush (delete) all the rules in the selected chain, or all chains if none is given. It does not display any firewall rules3.
C: systemctl status firewalld
This command will show the status of the firewalld service, including whether it is active or not, but it does not show the firewall rules4.
F: iptables -A
This command will append one or more rules to the end of the selected chain. It does not display any firewall rules3.
NEW QUESTION # 209
A Linux systems administrator is working to obtain the installed kernel version of several hundred systems. Which of the following utilities should the administrator use for this task?
- A. Bash
- B. Docker
- C. Ansible
- D. Git
Answer: C
Explanation:
Ansible is an open-source automation tool that can manage multiple systems simultaneously.
Using an Ansible playbook, the administrator can run commands across several servers to obtain the installed kernel version efficiently. A simple ansible all -m command -a "uname -r" will retrieve the kernel version from all target systems.
NEW QUESTION # 210
User1 reports "access denied" errors while trying to execute app. Given the following outputs:
Which of the following options will remediate this issue?
- A. Providing execute permissions to user1 in the ACL
- B. Adding user1 to the wheel group
- C. Moving app to a different folder
- D. Modifying the permissions for others to grant read, write, and execute
Answer: A
Explanation:
According to the output of getfacl app, user1 has only "rw" (read and write) permissions, but lacks "x" (execute). Without execute permission, user1 cannot run the file. To allow user1 to execute app, you must update the ACL to add execute permission (e.g., setfacl -m u:user1:rwx app). Modifying "others" permissions (option B) is not secure or necessary, adding user1 to the wheel group (option C) is unrelated, and moving the file (option D) does not resolve permission issues.
Reference:
CompTIA Linux+ Study Guide: Exam XK0-005, Sybex, Chapter 7: "Securing Linux Systems", Section:
"Managing File and Directory Permissions and ACLs"
CompTIA Linux+ XK0-005 Objectives, Domain 3.0: Security
NEW QUESTION # 211
An administrator is trying to terminate a process that is not responding. Which of the following commands should the administrator use in order to force the termination of the process?
- A. kill PID
- B. kill -15 PID
- C. kill -9 PID
- D. kill -1 PID
Answer: C
Explanation:
Comprehensive and Detailed Explanation From Exact Extract:
The kill command is used to send signals to processes. The -9 option sends the SIGKILL signal, which immediately terminates the process and cannot be caught or ignored by the process. This is used as a last resort when a process is not responding to the default (SIGTERM, -15) or other signals. The SIGKILL signal guarantees termination.
Other options:
* A. Default kill sends SIGTERM (-15), which requests a graceful shutdown but can be ignored.
* B. -1 sends SIGHUP, used to reload configuration, not terminate.
* D. -15 sends SIGTERM, not guaranteed to kill an unresponsive process.
Reference:
CompTIA Linux+ Study Guide: Exam XK0-005, Sybex, Chapter 3: "Managing Processes", Section: "Sending Signals to Processes" CompTIA Linux+ XK0-005 Objectives, Domain 1.0: System Management
NEW QUESTION # 212
A junior systems administrator recently installed an HBA card in one of the servers that is deployed for a production environment. Which of the following commands can the administrator use to confirm on which server the card was installed?
- A. lspci | egrep 'hba| fibr'
- B. lspci | zgrep 'hba | fibr'
- C. lspci | pgrep 'hba| fibr'
- D. lspci | 'hba | fibr'
Answer: A
Explanation:
Explanation
The best command to use to confirm on which server the HBA card was installed is A. lspci | egrep 'hba| fibr'.
This command will list all the PCI devices on the server and filter the output for those that match the pattern
'hba' or 'fibr', which are likely to be related to the HBA card. The egrep command is a variant of grep that supports extended regular expressions, which allow the use of the '|' operator for alternation. The other commands are either invalid or will not produce the desired output. For example:
B: lspci | zgrep 'hba | fibr' will try to use zgrep, which is a command for searching compressed files, not standard output.
C: lspci | pgrep 'hba| fibr' will try to use pgrep, which is a command for finding processes by name or other attributes, not text patterns.
D: lspci | 'hba | fibr' will try to use 'hba | fibr' as a command, which is not valid and will cause an error.
NEW QUESTION # 213
A Linux administrator needs to run a few virtual machines and containers on the physical machines with a single network interface.
Which of the following networking would allow the administrator to connect with the outside world?
- A. Bridging
- B. VPN
- C. Bonding/teaming
- D. VLAN
Answer: A
NEW QUESTION # 214
An administrator is utilizing an automation engine than uses SSH to run commands on remote systems. Which of the following does this describe?
- A. Agentless architecture
- B. Version control
- C. Build automation
- D. Inventory
Answer: A
NEW QUESTION # 215
A systems administrator detected corruption in the /data filesystem. Given the following output:
Which of the following commands can the administrator use to best address this issue?
- A. umount /data
pvs /dev/sdcl
mount /data - B. umount /data
fsck /dev/ sdcl
mount / data - C. umount /data
mkfs . xfs /dev/sclcl
mount /data - D. umount /data
xfs repair /dev/ sdcl
mount /data
Answer: D
Explanation:
Explanation
The xfs repair command is used to check and repair an XFS filesystem, which is the type of filesystem used for the /data partition, as shown in the output. The administrator needs to unmount the /data partition before running the xfs repair command on it, and then mount it back after the repair is done. For example: umount
/data; xfs_repair /dev/sdcl; mount /data. The mkfs.xfs command is used to create a new XFS filesystem, which would erase all the data on the partition. The fsck command is used to check and repair other types of filesystems, such as ext4, but not XFS. The pvs command is used to display information about physical volumes in a logical volume manager (LVM) setup, which is not relevant for this issue.
NEW QUESTION # 216
A Linux systems administrator is setting up a new web server and getting 404 - NOT FOUND errors while trying to access the web server pages from the browser. While working on the diagnosis of this issue, the Linux systems administrator executes the following commands:
Which of the following commands will BEST resolve this issue?
- A. setenforce 0
- B. restorecon -R -v /var/www/html
- C. setsebool -P httpd_can_network_connect_db on
- D. sed -i 's/SELINUX=enforcing/SELINUX=disabled/' /etc/selinux/config
Answer: B
Explanation:
Explanation
The command restorecon -R -v /var/www/html will best resolve the issue. The issue is caused by the incorrect SELinux context of the web server files under the /var/www/html directory. The output of ls -Z
/var/www/html shows that the files have the type user_home_t, which is not allowed for web content. The command restorecon restores the default SELinux context of files based on the policy rules. The options -R and -v are used to apply the command recursively and verbosely. This command will change the type of the files to httpd_sys_content_t, which is the correct type for web content. This will allow the web server to access the files and serve the pages to the browser. The other options are incorrect because they either disable SELinux entirely (sed -i 's/SELINUX=enforcing/SELINUX=disabled/'
/etc/selinux/config or setenforce 0), which is not a good security practice, or enable an unnecessary boolean (setsebool -P httpd_can_network_connect_db on), which is not related to the issue. References: CompTIA Linux+ (XK0-005) Certification Study Guide, Chapter 18: Securing Linux Systems, page 535.
NEW QUESTION # 217
An administrator accidentally deleted the /boot/vmlinuz file and must resolve the issue before the server is rebooted.
Which of the following commands should the administrator use to identify the correct version of this file?
- A. cat /etc/centos-release; rpm -Uvh --nodeps
- B. rpm -qa | grep kernel; uname -a
- C. yum -y update; shutdown -r now
- D. telinit 1; restorecon -Rv /boot
Answer: B
Explanation:
The command rpm -qa | grep kernel lists all the installed kernel packages, and the command uname -a displays the current kernel version. These commands can help the administrator identify the correct version of the /boot/vmlinuz file, which is the kernel image file. The other options are not relevant or helpful for this task.
NEW QUESTION # 218
After installing a new version of a package, a systems administrator notices a new version of the corresponding, service file was Installed In order to use the new version of the, service file, which of the following commands must be Issued FIRST?
- A. systemct1 daemon-reload
- B. systemct1 status
- C. systemct1 reinstall
- D. systemct1 stop
Answer: A
Explanation:
After installing a new version of a package that includes a new version of the corresponding service file, the systemct1 daemon-reload command must be issued first in order to use the new version of the service file. This command will reload the systemd manager configuration and read all unit files that have changed on disk. This will ensure that systemd recognizes the new service file and applies its settings correctly. The systemct1 status command will display information about a service unit, but it will not reload the configuration. The systemct1 stop command will stop a service unit, but it will not reload the configuration. The systemct1 reinstall command does not exist. Reference: CompTIA Linux+ (XK0-005) Certification Study Guide, Chapter 17: System Maintenance and Operation, page 518.
NEW QUESTION # 219
A Linux administrator is configuring network traffic forwarding. Despite having proper iptables rules, the traffic forwarding is not working. Which of the following commands will allow Linux to pass network traffic between different interfaces?
- A. echo 'net.ipv4.ip_forward=1' >> /etc/sysctl.conf; sysctl -p
- B. ip route forward allow --all-interfaces; systemctl restart network
- C. modprobe ip_forward
- D. nmcli allow-forwarding eth0
Answer: A
Explanation:
To enable IP forwarding, the kernel parameter net.ipv4.ip_forward must be set to 1. This is done by appending net.ipv4.ip_forward=1 to /etc/sysctl.conf and applying the changes using sysctl -p.
This command ensures that the system can forward packets between different network interfaces.
NEW QUESTION # 220
A systems administrator requires that all files that are created by the user named web have read- only permissions by the owner. Which of the following commands will satisfy this requirement?
- A. chown web:web /home/web
- B. chmod -R 400 /home/web
- C. setfacl read /home/web
- D. echo "umask 377" >> /home/web/.bashrc
Answer: D
Explanation:
The command that will satisfy the requirement of having all files that are created by the user named web have read-only permissions by the owner is echo "umask 377" >>
/home/web/.bashrc. This command will append the umask 377 command to the end of the .bashrc file in the web user's home directory. The .bashrc file is a shell script that is executed whenever a new interactive shell session is started by the user. The umask command sets the file mode creation mask, which determines the default permissions for newly created files or directories by subtracting from the maximum permissions (666 for files and 777 for directories).
The umask 377 command means that the user does not want to give any permissions to the group or others (3 = 000 in binary), and only wants to give read permission to the owner (7 - 3 = 4
= 100 in binary). Therefore, any new file created by the web user will have read-only permission by the owner (400) and no permission for anyone else.
NEW QUESTION # 221
A Linux engineer is removing a previously created firewall rule. Which of the following commands will help the administrator accomplish this task?
- A. ufw delete deny 80/tcp
- B. ufw delete 80/tcp deny
- C. delete7!
- D. ufw delete 80/tcp
Answer: A
Explanation:
The ufw (Uncomplicated Firewall) delete command is used to remove rules.
If the original rule was ufw deny 80/tcp, it must be deleted with:
ufw delete deny 80/tcp
Why the other options are incorrect?
A . ufw delete 80/tcp → Incorrect, because delete requires specifying the action (allow or deny).
C . ufw delete 80/tcp deny → Incorrect syntax; deny must come before the port.
D . delete7! → Incorrect, this is not a valid ufw command.
Reference:
UFW Documentation - Ubuntu
NEW QUESTION # 222
......
Pass Your Linux+ XK0-005 Exam on Feb 03, 2026 with 895 Questions: https://www.preppdf.com/CompTIA/XK0-005-prepaway-exam-dumps.html
XK0-005 Free Exam Study Guide! (Updated 895 Questions): https://drive.google.com/open?id=1iVP_yD6OsA3HclRKdudz9rH7JbZL9YCX