XK0-006 Practice Questions

The git init command is used to create a new, empty Git repository in the current directory. It can also be used to convert an existing, unversioned project into a Git repository. This command creates a .git subdirectory in the project root, which contains all of the necessary metadata and object database for the new repository. This is the fundamental first step for creating a local version control system for a project from scratch.

B. git clone is used to obtain a copy of an existing remote repository, not to create a new local one from scratch.

C. git config sets user-specific or global configuration options for Git, but it does not create a repository.

D. git add stages changes for the next commit and operates within an already existing Git repository.

1. Official Git Documentation. git-init(1) Manual Page. Retrieved from git-scm.com. It states

"This command creates an empty Git repository - basically a .git directory with subdirectories for objects

refs/heads

refs/tags

and template files."

2. Chacon

S.

& Straub

B. (2014). Pro Git (2nd ed.). Apress. Chapter 2.1

"Getting a Git Repository

" states: "You can get a Git repository in one of two ways... The first is to take a local directory that is currently not under version control

and turn it into a Git repository... by running the command git init."

3. Loeliger

J.

& McCullough

M. (2012). Version Control with Git (2nd ed.). O'Reilly Media. Chapter 3

"Getting Started with Git

" details the use of git init as the primary method for creating a new repository.

The primary security reason for implementing password expiry policies is to mitigate the risk associated with compromised credentials. If a password is stolen or exposed in a data breach, an expiry policy limits the time window during which an attacker can use it to gain unauthorized access. By forcing a password change after a set period, the policy renders the stolen credential useless, thus reducing the overall window of vulnerability for the account.

A. Preventing password reuse is the function of a password history policy, not an expiry policy.

C. Password expiry is a control used within password-based authentication; it does not promote or force passwordless methods.

D. Password strength and complexity are enforced by separate complexity policies that dictate character requirements.

1. National Institute of Standards and Technology (NIST). (June 2017). Special Publication 800-63B

Digital Identity Guidelines: Authentication and Lifecycle Management. Section 5.1.1.2

"Memorized Secret Verifiers". While NIST now advises against periodic password changes without evidence of compromise

it acknowledges the traditional rationale: "The idea behind this practice is to limit the exposure time if the password is stolen."

2. Stallings

W.

& Brown

L. (2018). Computer Security: Principles and Practice (4th ed.). Pearson. Chapter 4

"Authentication

" discusses password policies

explaining that password aging/expiration is a control to counter the threat of password cracking or theft over time.

3. University of California

Berkeley

Information Security Office. Minimum Security Standards for Passwords. The policy rationale often states that regular changes limit the damage from an undetected compromise.

The shred command is specifically designed to securely erase data from a file or device, making it extremely difficult to recover. It works by overwriting the specified target (in this case, the partition /dev/sda1) multiple times with complex patterns and, by default, a final pass of zeros. This process effectively destroys the magnetic remnants of the original data on traditional hard disk drives. For securely erasing a disk or partition, shred is the most appropriate and effective tool among the choices provided.

A. rm -rf only removes the filesystem's pointers to the data. The actual data remains on the disk and is easily recoverable until it is overwritten by new data.

C. parted rm removes a partition entry from the disk's partition table. It does not overwrite or erase the data that was stored within that partition.

D. dd if=/dev/null attempts to copy from /dev/null, which is an empty file, resulting in zero bytes being written. dd if=/dev/zero would perform a single-pass overwrite, which is less secure than shred.

1. GNU Project. (2020). GNU Coreutils Manual. Section 14.3 "shred: Remove files more securely". https://www.gnu.org/software/coreutils/manual/htmlnode/shred-invocation.html

2. The Linux man-pages project. (2021). shred(1) — overwrite a file to hide its contents

and optionally delete it. https://man7.org/linux/man-pages/man1/shred.1.html

3. Gutmann

P. (1996). Secure Deletion of Data from Magnetic and Solid-State Memory. Proceedings of the Sixth USENIX Security Symposium. (This paper provides the theoretical basis for the algorithms used by tools like shred). https://www.usenix.org/legacy/publications/library/proceedings/sec96/fullpapers/gutmann/

The initrd (initial RAM disk) is a temporary root file system loaded into memory during the Linux boot process. Its primary role is to contain a minimal set of drivers and kernel modules (e.g., for SATA, NVMe, or RAID controllers) that are necessary for the kernel to access the actual root filesystem on a physical device. Once the real root filesystem is mounted, the system pivots to it, and the initrd is unmounted and its memory is freed. This mechanism allows for a smaller, more generic kernel that can still boot on a wide variety of hardware configurations.

A. SSH is a network service for remote access, which is started much later in the boot process, long after the initrd has served its purpose.

C. System certificates and secret keys are sensitive data stored securely on the permanent root filesystem, typically in /etc/ssl/ or similar directories, not in the temporary initrd.

D. The kernel's cryptographic subsystem initializes the random number generator devices (/dev/random, /dev/urandom), not the initrd.

1. The Linux Kernel Archives. (2020). ramfs

rootfs and initramfs. kernel.org. Section: "What is initramfs?". https://www.kernel.org/doc/Documentation/filesystems/ramfs-rootfs-initramfs.txt

2. Red Hat Enterprise Linux 8 Documentation. (2023). Chapter 25. An introduction to the boot process. Section 25.3. "The initial RAM disk". https://access.redhat.com/documentation/en-us/redhatenterpriselinux/8/html/managingmonitoringandupdatingthekernel/an-introduction-to-the-boot-processmanaging-monitoring-and-updating-the-kernel#the-initial-ram-diskan-introduction-to-the-boot-process

3. Bovet

D. P.

& Cesati

M. (2005). Understanding the Linux Kernel

3rd Edition. O'Reilly Media. Chapter 19

Section "The Role of the initrd RAM Disk".

A key characteristic of Python is its extensibility. The language is designed around a small core with a large standard library and the ability to easily incorporate third-party modules and packages. This modular design allows developers to import existing functionality for a wide range of tasks, from web development to data science, without having to write everything from scratch. This extensibility is a primary reason for Python's popularity and versatility.

A. Python is open source, managed by the Python Software Foundation under a GPL-compatible license, not closed source.

C. Python 3 is famously not backwards compatible with Python 2, which necessitated significant code migration for many projects.

D. Python and Java use different virtual machines and bytecode formats; they are not binary compatible.

1. Python Software Foundation

"About Python™

" python.org. The official site states

"Python is a programming language that lets you work quickly and integrate systems more effectively." This integration is achieved through its modular architecture.

2. Lutz

M. (2013). Learning Python

5th Edition. O'Reilly Media. Chapter 3

"How Python Runs Programs

" explains the modular nature of Python and how import statements load other files as modules. (Note: While a commercial book

it is authored by a core figure and used as university courseware).

3. Stanford University

"CS106A: Programming Methodologies

" Course Reader. The introduction to Python highlights its "extensive standard library" and the vast ecosystem of third-party packages as key advantages.

The nohup command ensures a process continues running even if the user logs out, and the & operator places the process into the background. The jobs command lists background processes. To bring a background process to the foreground and attach it to the current terminal session, the fg (foreground) command is used. This allows the user to interact with the process or view its standard output directly in the terminal.

A. renice is used to change the scheduling priority of a running process, not to attach it to a terminal.

B. jobs lists the background processes but does not attach any of them to the foreground.

C. exec replaces the current shell process with a new command, which is not the desired action.

1. GNU Bash Manual

Section 3.2.2 "Job Control Basics". The manual states

"To move a job to the foreground

use the fg command."

2. Arpaci-Dusseau

R. H.

& Arpaci-Dusseau

A. C. (2018). Operating Systems: Three Easy Pieces. Arpaci-Dusseau Books. Chapter 5

"Processes API"

discusses process control

including backgrounding and foregrounding processes.

3. MIT OpenCourseWare

6.005 Software Construction

"Command Line" reading. This material covers shell basics

including job control with &

jobs

bg

and fg.

The net.ipv4.ipforward kernel parameter is a boolean flag that controls IP packet forwarding for IPv4 on a Linux system. When its value is set to 1, the kernel is permitted to forward packets between different network interfaces, effectively allowing the machine to function as a router. A value of 0 (the default on most desktop systems) disables this functionality. This parameter can be changed dynamically using sysctl or made persistent in /etc/sysctl.conf.

A. net.ipv4.ipmulticast is related to multicast routing, which is a specific type of routing, not general IP packet forwarding.

B. net.ipv4.iproute is not a valid sysctl kernel parameter. Routing tables are managed with tools like the ip route command.

C. net.ipv4.iplocalportrange defines the ephemeral port range for outgoing connections and is unrelated to packet forwarding.

1. The Linux Kernel Archives

Kernel Documentation

Documentation/networking/ip-sysctl.txt. Section ipforward. The document states: "Enable/disable IP forwarding. This is a global switch."

2. Red Hat Enterprise Linux 9 Documentation

Section 3.5. "Configuring the system to function as a router". The guide specifies: "To enable IP forwarding

enter the following command as root: # echo "net.ipv4.ipforward = 1" > /etc/sysctl.d/95-ip-forward.conf".

3. IBM Documentation

"IP forwarding". This official vendor document explains that to enable IP forwarding on Linux

the administrator must set the value of /proc/sys/net/ipv4/ipforward to 1.

The dmidecode command is a tool for dumping a computer's DMI (Desktop Management Interface) table contents in a human-readable format. This table contains a detailed description of the system's hardware components, including the BIOS, system manufacturer, processor, memory modules, chassis, and other devices. It provides a comprehensive hardware inventory, which is exactly what the administrator requires.

B. lsmod lists the status of modules currently loaded into the Linux kernel, which is related to software drivers, not a hardware inventory.

C. dmesg prints the kernel ring buffer, which contains boot-time messages, including hardware detection, but it is a log, not a structured inventory.

D. lscpu provides detailed information specifically about the CPU and its architecture, not a full system hardware inventory.

1. dmidecode(8) — Linux manual page. (n.d.). Retrieved from https://man7.org/linux/man-pages/man8/dmidecode.8.html. See the NAME section: "dmidecode - DMI table decoder" and the DESCRIPTION section: "dmidecode is a tool for dumping a computer's DMI... table contents in a human-readable format."

2. Red Hat Enterprise Linux 9 Documentation. (2023). Chapter 27. Getting information about hardware. In Managing monitoring and automation. Retrieved from https://access.redhat.com/documentation/en-us/redhatenterpriselinux/9/html/managingmonitoringandautomation/getting-information-about-hardwaremanaging-monitoring-and-automation. See Section 27.1

"Displaying information about hardware with dmidecode."

This scenario represents a classic DNS troubleshooting situation covered in the Troubleshooting

domain of the CompTIA Linux+ V8 objectives. Although the DNS zone file has been updated correctly

on the BIND server, the system continues to resolve the domain name to an outdated IP address. This

behavior strongly indicates DNS caching rather than a configuration error in the zone file itself.

Modern Linux systems that use systemd-resolved cache DNS responses locally to improve

performance and reduce external queries. Even after a DNS record is updated on the authoritative

server, cached results may persist until the cache expires or is manually cleared. The nslookup output

showing a non-authoritative answer further confirms that the response is being served from a cache

rather than directly from the updated zone data.

The correct solution is to flush the local DNS cache so the system can retrieve the updated record

from the DNS server. The command resolvectl flush-caches clears all cached DNS entries maintained

by systemd-resolved, forcing fresh queries to authoritative name servers. This aligns directly with

Linux+ V8 documentation for resolving name resolution inconsistencies caused by stale cache

entries.

The other options are incorrect for the following reasons. systemd-resolve query www.abc.com

performs a DNS lookup but does not clear cached entries. systemd-resolve status only displays

resolver configuration and statistics. service nslcd reload reloads the Name Service LDAP daemon

and is unrelated to DNS resolution or caching.

Linux+ V8 emphasizes identifying whether issues originate from services, configuration, or cached

data. In this case, flushing the DNS cache is the correct and least disruptive corrective action.

Therefore, the correct answer is D. resolvectl flush-caches.

The parted utility is used to configure the newly added drive, identified here as /dev/sdc (since absolute paths are required and the current working directory is /). The first command, parted -s /dev/sdc mklabel gpt, initializes the raw drive with a GUID Partition Table (GPT) label. The second command, parted -s /dev/sdc mkpart primary ext4 1 10G, creates the actual partition named "primary" with an ext4 filesystem signature, starting at 1MB and ending at 10GB. Finally, the mkfs utility formats the newly created partition block. Passing ext4 and /dev/sdc1 creates the command mkfs.ext4 /dev/sdc1, which formally builds the ext4 filesystem on the partition so it can be mounted.

Free Software Foundation (FSF). GNU Parted User Manual. Section 2.4.5 (mklabel) and Section 2.4.6 (mkpart). Official GNU Project Documentation.

Kerrisk, M. Linux System Administration - System Manager's Manual. mkfs.ext4(8) and parted(8). Linux man-pages project.