An administrator is troubleshooting an SELinux denial for a web application. They have set SELinux to permissive mode and confirmed the application works. They want to generate a policy module to allow the access in enforcing mode. They run audit2allow -a -M myapp, but the generated module does not include all the denials that were logged. What is the most likely reason?

The audit log was not cleared before switching to permissive mode.

The SELinux policy was not reloaded after switching to permissive mode.

audit2allow only generates rules for the first 100 denials.

The application was not exercised enough in permissive mode to trigger all denials.

A Linux administrator is responsible for patching a server that runs a critical application. The application vendor recommends a specific kernel version. The administrator wants to apply the patch with minimal downtime and be able to roll back if issues arise. Which approach should they take?

Use a kernel live patching solution to apply the patch without a reboot.

Use a package manager to update the kernel and then reboot.

Apply the patch immediately and reboot the server.

Schedule the patch during a maintenance window and reboot.

A server has SELinux enforcing. A new application is failing to start due to SELinux denials. The administrator needs to allow the application to run, but they are concerned about security and want to allow only the specific accesses the application needs. They have identified the denials in the audit log. Which approach is the most secure and appropriate?

Disable SELinux entirely by editing /etc/selinux/config.

Set SELinux to permissive mode temporarily to allow the application to run.

Change the SELinux context of the application to unconfined_t.

Use audit2allow to generate a custom policy module that allows the specific denials.

CompTIALinux+

Domain 5Objective 4

Security XK0-006 Practice Questions (Page 1)

Part of the Troubleshooting domain, which accounts for 22% of the XK0-006 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–13 in this domain), expect 2–3 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

8concepts

22%of the exam

Questions 1–5

1foundation · easy
Which command displays the Access Control List (ACL) entries for a file?
Select an answer first
2expert · hard
An administrator is troubleshooting an SELinux denial for a web application. They have set SELinux to permissive mode and confirmed the application works. They want to generate a policy module to allow the access in enforcing mode. They run audit2allow -a -M myapp, but the generated module does not include all the denials that were logged. What is the most likely reason?
Select an answer first
3application · medium
A Linux administrator is responsible for patching a server that runs a critical application. The application vendor recommends a specific kernel version. The administrator wants to apply the patch with minimal downtime and be able to roll back if issues arise. Which approach should they take?
Select an answer first
4expert · hard
A server has SELinux enforcing. A new application is failing to start due to SELinux denials. The administrator needs to allow the application to run, but they are concerned about security and want to allow only the specific accesses the application needs. They have identified the denials in the audit log. Which approach is the most secure and appropriate?
Select an answer first
5foundation · easy
Which command changes the group ownership of a directory and all of its contents to the group 'devteam'?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to XK0-006

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “XK0-006” is a trademark of its owner, used for identification only.

Security XK0-006 Practice Questions (Page 1)

Questions 1–5

Which command displays the Access Control List (ACL) entries for a file?

A Linux administrator is responsible for patching a server that runs a critical application. The application vendor recommends a specific kernel version. The administrator wants to apply the patch with minimal downtime and be able to roll back if issues arise. Which approach should they take?

Which command changes the group ownership of a directory and all of its contents to the group 'devteam'?

Keep studying — Troubleshooting