A security analyst downloads a Linux distribution ISO and wants to ensure the file has not been corrupted or tampered with during download. The distribution's website provides a SHA-256 checksum. Which command should the analyst run to verify the integrity of the downloaded ISO?

openssl enc -d -aes-256-cbc -in distro.iso -out distro.iso.dec

A web server administrator is configuring TLS for a website. The administrator has the certificate file and the private key file. What is the primary purpose of the private key in the TLS handshake?

To verify the client's identity.

To decrypt the client's requests.

To prove possession of the private key corresponding to the public key in the certificate.

To encrypt all data transmitted between the client and server.

What is the primary role of an SSL/TLS certificate on a web server?

To encrypt communications between the client and server

To block malicious content from being uploaded

To authenticate users logging into the server

When using gpg to encrypt a file with symmetric encryption, what does the user typically provide?

A public key from the recipient

A web server administrator notices that clients are receiving certificate errors when connecting to the company's website. The certificate was issued by an internal CA, and the administrator has confirmed that the certificate is not expired. What is the most likely cause of the errors?

The server's private key is encrypted with a password.

The internal CA's root certificate is not installed in the clients' trust stores.

The certificate is not encrypted.

The server is using HTTP instead of HTTPS.

CompTIALinux+

Domain 3Objective 5

Cryptography XK0-006 Practice Questions (Page 3)

Part of the Security domain, which accounts for 18% of the XK0-006 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–11 in this domain), expect 1–2 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

9concepts

18%of the exam

Questions 11–15

11application · medium
A security analyst downloads a Linux distribution ISO and wants to ensure the file has not been corrupted or tampered with during download. The distribution's website provides a SHA-256 checksum. Which command should the analyst run to verify the integrity of the downloaded ISO?
Select an answer first
12application · medium
A web server administrator is configuring TLS for a website. The administrator has the certificate file and the private key file. What is the primary purpose of the private key in the TLS handshake?
Select an answer first
13foundation · easy
What is the primary role of an SSL/TLS certificate on a web server?
Select an answer first
14foundation · easy
When using gpg to encrypt a file with symmetric encryption, what does the user typically provide?
Select an answer first
15application · medium
A web server administrator notices that clients are receiving certificate errors when connecting to the company's website. The certificate was issued by an internal CA, and the administrator has confirmed that the certificate is not expired. What is the most likely cause of the errors?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to XK0-006

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “XK0-006” is a trademark of its owner, used for identification only.