A security team is investigating a potential data exfiltration. They need to capture all network traffic to and from a specific server for a short period. Which command should they use to capture the traffic to a file for later analysis?

tcpdump -i eth0 -w capture.pcap

Which command lists all systemd services and their current status (loaded, active, etc.)?

systemctl list-units --type=service

CompTIALinux+

Domain 5Objective 1

System Monitoring XK0-006 Practice Questions (Page 5)

Part of the Troubleshooting domain, which accounts for 22% of the XK0-006 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–13 in this domain), expect 2–3 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

7concepts

22%of the exam

Questions 21–25

21expert · medium
A security team is investigating a potential data exfiltration. They need to capture all network traffic to and from a specific server for a short period. Which command should they use to capture the traffic to a file for later analysis?
Select an answer first
22foundation · easy
Which tool is designed for continuous system monitoring and can collect, store, and graph metrics such as CPU, memory, and disk usage over time?
Select an answer first
23foundation · easy
Which tool is commonly used to configure and manage event alerts that send email notifications when specific system events occur?
Select an answer first
24foundation · easy
Which command lists all systemd services and their current status (loaded, active, etc.)?
Select an answer first
25application · medium
A security administrator suspects a compromised host is sending large amounts of data to an external IP address. Which command can be used to see a list of current network connections and the processes that own them?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to XK0-006

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “XK0-006” is a trademark of its owner, used for identification only.

System Monitoring XK0-006 Practice Questions (Page 5)

Questions 21–25

A security team is investigating a potential data exfiltration. They need to capture all network traffic to and from a specific server for a short period. Which command should they use to capture the traffic to a file for later analysis?

Which tool is designed for continuous system monitoring and can collect, store, and graph metrics such as CPU, memory, and disk usage over time?

Which tool is commonly used to configure and manage event alerts that send email notifications when specific system events occur?

Which command lists all systemd services and their current status (loaded, active, etc.)?

A security administrator suspects a compromised host is sending large amounts of data to an external IP address. Which command can be used to see a list of current network connections and the processes that own them?

Keep studying — Troubleshooting