An administrator wants to detect unauthorized changes to critical system files. Which approach is most appropriate?

Set all critical files to read-only using chmod

Implement a file integrity monitoring tool that maintains a baseline of file hashes

Use the grep command to search for suspicious content in files

A security policy requires that all servers be patched within 30 days of a vendor release. An administrator needs to ensure that a fleet of Ubuntu servers is compliant. Which process should be implemented?

Configure unattended-upgrades to install security updates automatically

Manually run 'apt update && apt upgrade' on each server monthly

Only apply patches that are marked as critical

Disable all updates to ensure system stability

A company must comply with the GDPR, which requires protecting personal data. An administrator needs to ensure that a database server containing personal data is configured securely. Which action is most directly related to GDPR compliance?

Encrypting the database files at rest

Applying the latest kernel patches

Running a vulnerability scan monthly

Monitoring system logs for failed logins

A company has a mix of 20 legacy CentOS 7 servers and 30 modern Ubuntu 22.04 servers. A compliance audit requires that all servers be configured with a specific security baseline. The administrator must choose a solution that can manage both types of systems, enforce the baseline, and provide a report of compliance status. Which approach is most effective?

Manually configure each server and document the changes

Use Ansible with separate playbooks for CentOS and Ubuntu

Use a containerized solution to standardize the environment

Use a single shell script that works on both systems

CompTIALinux+

Domain 3Objective 6

Compliance XK0-006 Practice Questions (Page 3)

Part of the Security domain, which accounts for 18% of the XK0-006 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–11 in this domain), expect 1–2 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

7concepts

18%of the exam

Questions 11–15

11foundation · easy
Which compliance standard is specifically designed for the payment card industry and applies to systems that handle credit card data?
Select an answer first
12foundation · easy
An administrator wants to detect unauthorized changes to critical system files. Which approach is most appropriate?
Select an answer first
13application · medium
A security policy requires that all servers be patched within 30 days of a vendor release. An administrator needs to ensure that a fleet of Ubuntu servers is compliant. Which process should be implemented?
Select an answer first
14application · medium
A company must comply with the GDPR, which requires protecting personal data. An administrator needs to ensure that a database server containing personal data is configured securely. Which action is most directly related to GDPR compliance?
Select an answer first
15expert · hard
A company has a mix of 20 legacy CentOS 7 servers and 30 modern Ubuntu 22.04 servers. A compliance audit requires that all servers be configured with a specific security baseline. The administrator must choose a solution that can manage both types of systems, enforce the baseline, and provide a report of compliance status. Which approach is most effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to XK0-006

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “XK0-006” is a trademark of its owner, used for identification only.

Compliance XK0-006 Practice Questions (Page 3)

Questions 11–15

Which compliance standard is specifically designed for the payment card industry and applies to systems that handle credit card data?

An administrator wants to detect unauthorized changes to critical system files. Which approach is most appropriate?

A security policy requires that all servers be patched within 30 days of a vendor release. An administrator needs to ensure that a fleet of Ubuntu servers is compliant. Which process should be implemented?

A company must comply with the GDPR, which requires protecting personal data. An administrator needs to ensure that a database server containing personal data is configured securely. Which action is most directly related to GDPR compliance?

Keep studying — Security