A Linux administrator must ensure that a web server meets the company's internal security policy, which requires a quarterly scan for known vulnerabilities. The scan results must be saved in a format that can be easily reviewed by the security team. Which approach best fulfills this requirement?

Use the 'find' command to locate world-writable files

Check the system log for failed login attempts

Run OpenVAS and save the report as an HTML file

Run a manual review of the Apache configuration

What is the primary purpose of patch management?

To create backups of system data

To apply security updates and fixes to keep systems secure and compliant

To remove unnecessary files from the system

A company's compliance policy requires that any change to a critical system file be logged and reviewed. The administrator has implemented a file integrity monitoring (FIM) tool. However, the tool generates a large number of alerts during routine patching, making it difficult to identify real threats. What is the best way to reduce false positives while maintaining compliance?

Increase the frequency of FIM scans

Configure the FIM tool to exclude files that are updated during patching

Disable the FIM tool during patching windows

Manually review all alerts and ignore those related to patching

CompTIALinux+

Domain 3Objective 6

Compliance XK0-006 Practice Questions (Page 4)

Part of the Security domain, which accounts for 18% of the XK0-006 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–11 in this domain), expect 1–2 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

7concepts

18%of the exam

Questions 16–20

16application · medium
A security auditor requires proof that the /etc/passwd file on a production server has not been altered since the last approved change. The company's compliance policy mandates that integrity evidence must be independently verifiable by the auditor, not just by the system administrator. Which command should the administrator use to produce the required evidence?
Select an answer first
17application · medium
A Linux administrator must ensure that a web server meets the company's internal security policy, which requires a quarterly scan for known vulnerabilities. The scan results must be saved in a format that can be easily reviewed by the security team. Which approach best fulfills this requirement?
Select an answer first
18foundation · easy
What is the primary purpose of patch management?
Select an answer first
19expert · hard
A company's compliance policy requires that any change to a critical system file be logged and reviewed. The administrator has implemented a file integrity monitoring (FIM) tool. However, the tool generates a large number of alerts during routine patching, making it difficult to identify real threats. What is the best way to reduce false positives while maintaining compliance?
Select an answer first
20application · medium
A security auditor needs a report that lists all open ports and the services running on them for a Linux server. The report must be generated quickly and without installing additional software. Which command should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to XK0-006

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “XK0-006” is a trademark of its owner, used for identification only.

Compliance XK0-006 Practice Questions (Page 4)

Questions 16–20

A Linux administrator must ensure that a web server meets the company's internal security policy, which requires a quarterly scan for known vulnerabilities. The scan results must be saved in a format that can be easily reviewed by the security team. Which approach best fulfills this requirement?

What is the primary purpose of patch management?

A security auditor needs a report that lists all open ports and the services running on them for a Linux server. The report must be generated quickly and without installing additional software. Which command should be used?

Keep studying — Security