Account Security XK0-006 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which command can be used by an administrator to set the default shell for a new user during account creation?

   • Achsh -s /bin/bash username
   • Buseradd -s /bin/bash username
   • Cusermod -s /bin/bash username
   • Dpasswd -s /bin/bash username
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In the pwquality configuration, which option specifies the minimum acceptable password length?

   • Aminlen
   • Bdifok
   • Cmaxrepeat
   • Ddcredit
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which command is used to view or change password expiration and history settings for a specific user?

   • Auseradd
   • Bpasswd
   • Cchage
   • Dusermod
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which PAM module is commonly used to integrate multi-factor authentication (MFA) on Linux systems?

   • Apam_google_authenticator.so
   • Bpam_pwquality.so
   • Cpam_limits.so
   • Dpam_unix.so
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A Linux administrator needs to implement multi-factor authentication for local user logins on a standalone system. The system does not have internet access, and the administrator wants to use time-based one-time passwords (TOTP). Which tool and configuration is appropriate?

   • AInstall the google-authenticator PAM module, run google-authenticator for each user to generate a secret, and add pam_google_authenticator.so to the PAM stack for login services
   • BUse pam_radius_auth to authenticate against a remote RADIUS server that provides TOTP
   • CConfigure SSH to use public key authentication and require a passphrase on the key
   • DInstall the libpam-oath package and configure pam_oath.so with a static key file
   Reveal Solution Discussion Select an answer first