XK0-005 Practice Questions

The REJECT target sends back an error packet to the source IP address, indicating that the connection

is refused by the firewall. This is different from the DROP target, which silently discards the packet

without any response. The RETURN target returns to the previous chain, which may or may not

accept the connection. The QUEUE target passes the packet to a userspace application for further

processing, which is not the desired outcome in this case.

CompTIA Linux+ (XK0-005) Certification Study Guide, page 316

iptables - ssh - access from specific ip only - Server Fault, answer by Eugene Ionichev

A zombie process is a process that has completed execution but still has an entry in the process table

because its parent process has not read its exit status. The best signal to send to the parent process is

SIGTERM, which politely asks it to terminate and release the resources held by the zombie child

processes.

Step-by-Step Comprehensive Detailed Command systemctl restart networkd restarts the network service to apply changes. The networkd service is responsible for managing network configurations in systems using systemd-networkd. Why Other Options are Incorrect: B: Enables the service to start on boot but does not apply immediate changes. C: Displays the status but does not apply changes. D: isolate changes the target (runlevel) and does not directly affect network configurations. : CompTIA Linux+ Study Guide, Chapter on Networking Services man systemctl

:

getfacl is the command used to view the Access Control List (ACL) of a file or directory, which shows

extended permissions beyond the basic owner, group, and others. This is essential for checking

permissions that are set using ACLs on the directory test.

The .gitignore file is used in Git to specify which files or directories should be ignored in a repository.

By listing configuration files in the .gitignore file, the administrator ensures they are not included in

any future commits or pushes to the remote repository. This is essential when dealing with sensitive

or environment-specific files that should not be shared or deployed.

Reference: Git Documentation on .gitignore

The command docker run -d --restart always -p 5432:5432 -v /home/db:/var/lib/postgresql

postgresql:12 ensures that the PostgreSQL container is started in detached mode (-d), it restarts

automatically on system startup (--restart always), mounts the host directory /home/db to

/var/lib/postgresql, and exposes port 5432. This is a typical setup for running a database in a Docker

container.

This command will use the tr tool to translate all lowercase letters in the testfile to uppercase letters and write the output to the uppercase file. The first argument ‘[a-z]’ specifies the set of characters to be replaced, and the second argument ‘[A-Z]’ specifies the set of characters to replace with. The ‘<’ symbol redirects the input from the testfile, and the ‘>’ symbol redirects the output to the uppercase file12. : 1: Linux Tr Command - javatpoint 2: Linux tr Command with Examples - phoenixNAP

The error indicates that the cron user does not have permission to run the cronjob. Creating a

cron.allow file and adding the user cron to it will allow that user to run cronjobs. The cron.allow file is

a security feature that controls which users are allowed to use cron.

The presence of a static entry in /etc/hosts for www.comptia.org forces the system to use this IP address instead of querying DNS. This prevents proper IPv6 (AAAA) resolution, as /etc/hosts only contains an IPv4 (A) record. Removing this static entry allows the system to query DNS for both IPv4 and IPv6 records. : Linux /etc/hosts File – Linux Documentation