An administrator suspects that a critical system binary has been replaced by a rootkit. The system is currently running, and the administrator needs to verify the integrity of the binary. The system's package manager database may also be compromised. Which method provides the most reliable evidence of tampering?

Use 'rpm -V' to verify the package

Run 'strings' on the binary to look for suspicious content

Compare the binary's hash against a known-good hash from the vendor's website

Check the file's modification time with 'stat'

A company's security policy requires a monthly scan of all servers for known vulnerabilities. The scan must be non-intrusive and should not disrupt production services. Which tool is best suited for this task?

Nmap with the '--script vuln' option

A custom script that attempts to log in with default passwords

Metasploit with a full exploit scan

Lynis with the '--pentest' option

An auditor requires a daily report of any changes to critical system files on a server. The administrator needs to set up a simple, scriptable solution that can be run via cron and logs changes to a file. Which approach is most appropriate?

Enable SELinux to protect the files

Run 'tripwire' interactively each day

Use 'auditd' to watch for file changes

Create a script that uses 'sha256sum' to hash files and compares them to a stored baseline

A company processes credit card transactions and must comply with PCI DSS. An auditor requires evidence that all systems in the cardholder data environment are configured to a secure baseline. Which practice best demonstrates compliance?

Running a vulnerability scan and fixing all critical findings

Manually configuring each server and documenting the steps in a wiki

Using a configuration management tool like Ansible to enforce a hardened baseline

Applying all available security patches immediately

A company must patch a critical vulnerability in a web server application. The patch is known to cause a brief service interruption. The company's compliance policy requires patching within 72 hours, but the application is business-critical and cannot tolerate downtime during business hours. What is the best course of action?

Implement a workaround to mitigate the vulnerability and defer the patch

Apply the patch immediately, accepting the downtime

Apply the patch during the next scheduled maintenance window and document the risk

Schedule the patch for the next maintenance window, even if it exceeds 72 hours

CompTIALinux+

Domain 3Objective 6

Compliance XK0-006 Practice Questions (Page 2)

Part of the Security domain, which accounts for 18% of the XK0-006 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–11 in this domain), expect 1–2 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

7concepts

18%of the exam

Questions 6–10

6expert · hard
An administrator suspects that a critical system binary has been replaced by a rootkit. The system is currently running, and the administrator needs to verify the integrity of the binary. The system's package manager database may also be compromised. Which method provides the most reliable evidence of tampering?
Select an answer first
7application · medium
A company's security policy requires a monthly scan of all servers for known vulnerabilities. The scan must be non-intrusive and should not disrupt production services. Which tool is best suited for this task?
Select an answer first
8application · medium
An auditor requires a daily report of any changes to critical system files on a server. The administrator needs to set up a simple, scriptable solution that can be run via cron and logs changes to a file. Which approach is most appropriate?
Select an answer first
9application · medium
A company processes credit card transactions and must comply with PCI DSS. An auditor requires evidence that all systems in the cardholder data environment are configured to a secure baseline. Which practice best demonstrates compliance?
Select an answer first
10expert · hard
A company must patch a critical vulnerability in a web server application. The patch is known to cause a brief service interruption. The company's compliance policy requires patching within 72 hours, but the application is business-critical and cannot tolerate downtime during business hours. What is the best course of action?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to XK0-006

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “XK0-006” is a trademark of its owner, used for identification only.

Compliance XK0-006 Practice Questions (Page 2)

Questions 6–10

A company's security policy requires a monthly scan of all servers for known vulnerabilities. The scan must be non-intrusive and should not disrupt production services. Which tool is best suited for this task?

An auditor requires a daily report of any changes to critical system files on a server. The administrator needs to set up a simple, scriptable solution that can be run via cron and logs changes to a file. Which approach is most appropriate?

A company processes credit card transactions and must comply with PCI DSS. An auditor requires evidence that all systems in the cardholder data environment are configured to a secure baseline. Which practice best demonstrates compliance?

Keep studying — Security