XK0-005 Exam Dumps - CompTIA Linux+ Exam

Go to page:

<< First
Prev
3
4
5
6
7
8
9
10
11
12
Next
Last >>

Question # 57

A Linux engineer needs to block an incoming connection from the IP address 2.2.2.2 to a secure shell server and ensure the originating IP address receives a response that a firewall is blocking the connection. Which of the following commands can be used to accomplish this task?

iptables -A INPUT -p tcp -- dport ssh -s 2.2.2.2 -j DROP

iptables -A INPUT -p tcp -- dport ssh -s 2.2.2.2 -j RETURN

iptables -A INPUT -p tcp -- dport ssh -s 2.2.2.2 -j REJECT

iptables -A INPUT -p tcp -- dport ssh -s 2.2.2.2 -j QUEUE

Full Access

Question # 58

Users are reporting that a Linux server is responding slowly. A systems administrator troubleshooting the server issue sees the following:

# iostat -m 2

Linux 3.10.0-1160.66.1.el7.x86_64 (myhost) 10/19/2022 x86_64 (4 CPU)

avg-cpu: %user %nice %system %iowait %steal %idle

24.30 0.01 0.29 50.38 4.00 19.01

Device: tps MB_read/s MB_wrtn/s MB_read MB_wrtn

sdd 15.65 0.48 0.83 4936250 8513501

# df -h

Filesystem Size Used Avail Use% Mounted on

devtmpfs 16G 0 16G 0% /dev

tmpfs 16G 64K 16G 1% /dev/shm

/dev/mapper/root 35G 8.8G 26G 26% /

/dev/sda2 497M 144M 354M 29% /boot

/dev/mapper/tmp 10G 38M 10G 1% /tmp

/dev/mapper/var 15G 13G 2.2G 86% /var

/dev/mapper/varlib 650G 397G 254G 62% /var/lib

/dev/mapper/varlog 15G 9.5G 5.5G 64% /var/log

/dev/mapper/varaudit 15G 72M 15G 1% /var/log/audit

Which of the following is most likely the issue?

The CPU is mostly waiting for I/O operations.

/ filesystem does not have enough storage allocated.

/var filesystem is almost full.

The CPU capacity is inadequate.

Full Access

Question # 59

A Linux administrator needs to rebuild a container with the httpd service in order to change some default parameters. Which of the following should be the first command line in the Dockerfile?

FROM httpd

BASE httpd

USE httpd

INHERIT httpd

Full Access

Question # 60

An administrator added the port 2222 for the SSH server on myhost and restarted the SSH server. The administrator noticed issues during the startup of the service. Given the following outputs:

Which of the following commands will fix the issue?

semanage port -a -t ssh_port_t -p tcp 2222

chcon system_u:object_r:ssh_home_t /etc/ssh/*

iptables -A INPUT -p tcp -- dport 2222 -j ACCEPT

firewall-cmd -- zone=public -- add-port=2222/tcp

Full Access

Answer:

Explanation:

The correct answer is A. semanage port -a -t ssh_port_t -p tcp 2222

This command will allow the SSH server to bind to port 2222 by adding it to the SELinux policy. The semanage command is a utility for managing SELinux policies. The port subcommand is used to manage network port definitions. The -a option is used to add a new record, the -t option is used to specify the SELinux type, the -p option is used to specify the protocol, and the tcp 2222 argument is used to specify the port number. The ssh_port_t type is the default type for SSH ports in SELinux.

The other options are incorrect because:

B. chcon system_u:object_r:ssh_home_t /etc/ssh/*

This command will change the SELinux context of all files under /etc/ssh/ to system_u:object_r:ssh_home_t, which is not correct. The ssh_home_t type is used for user home directories that are accessed by SSH, not for SSH configuration files. The correct type for SSH configuration files is sshd_config_t.

C. iptables -A INPUT -p tcp --dport 2222 -j ACCEPT

This command will add a rule to the iptables firewall to accept incoming TCP connections on port 2222. However, this is not enough to fix the issue, as SELinux will still block the SSH server from binding to that port. Moreover, iptables may not be the default firewall service on some Linux distributions, such as Fedora or CentOS, which use firewalld instead.

D. firewall-cmd --zone=public --add-port=2222/tcp

This command will add a rule to the firewalld firewall to allow incoming TCP connections on port 2222 in the public zone. However, this is not enough to fix the issue, as SELinux will still block the SSH server from binding to that port. Moreover, firewalld may not be installed or enabled on some Linux distributions, such as Ubuntu or Debian, which use iptables instead.

References:

How to configure SSH to use a non-standard port with SELinux set to enforcing

Change SSH Port on CentOS/RHEL/Fedora With SELinux Enforcing

How to change SSH port when SELinux policy is enabled

Question # 61

A Linux engineer needs to get information from the foo.com domain mail servers. Which of the following network tools should the engineer use?

arp mx foo.com

nc mx foo.com

dig mx foo.com

route mx foo.com

Full Access

Question # 62

A Linux administrator is implementing a CI/CD process for the companyâ€™s internal accounting web application. Which of the following best defines the purpose of this process?

To automate the process of building, testing, and deploying application components

To perform security penetration tests on deployed applications to identify vulnerabilities

To formalize the approval process of application releases and configuration changes

To leverage code to document the infrastructure, configurations, and dependencies

Full Access

Question # 63

The applications team is reporting issues when trying to access the web service hosted in a Linux system. The Linux systems administrator is reviewing the following outputs:

Output 1:

* httpd.service = The Apache HTTPD Server

Loaded: loaded (/usr/lib/systemd/system/httpd.service; disabled; vendor preset: disabled)

Active: inactive (dead)

Docs: man:httpd(8) man:apachectl(8)

Output 2:

16:51:16 up 28 min, 1 user, load average: 0.00, 0.00, 0.07

Which of the following statements best describe the root cause? (Select two).

The httpd service is currently started.

The httpd service is enabled to auto start at boot time, but it failed to start.

The httpd service was manually stopped.

The httpd service is not enabled to auto start at boot time.