Pass the CompTIA Linux+ XK0-005 Questions and answers with ExamsMirror

The docker command is used to manage Docker containers, images, networks, volumes, and other resources on a Linux system. Docker is a platform that allows users to run applications in isolated environments called containers. Docker also provides networking features that allow users to create and manage networks for containers.

To delete all unused networks that are not referenced by any container, the cloud engineer can use the docker network prune command. This command will remove all networks that have no containers connected to them. The statement C is correct.

The statements A, B, and D are incorrect because they do not delete all unused networks. The docker network erase and docker network clear commands do not exist. The docker network rm command deletes a specific network by name or ID, but not all unused networks. References: [How to Manage Docker Networks]

A is correct: When Storage=volatile is set in /etc/systemd/journald.conf, logs are kept in RAM and lost on reboot.

Incorrect Options:

B: Would cause rotation or truncation, not full loss after reboot.

C: Would stop logging entirely, not just reset after boot.

D: Journals are not stored in /tmp.

Comprehensive and Detailed Explanation From Exact Extract:

To add a new physical disk to LVM, the disk must first be initialized as a physical volume using the pvcreate command. This prepares the new disk for use by the LVM subsystem. After initializing with pvcreate, you would use vgextend to add the new physical volume to an existing volume group.

Other options:

A. vgextend adds a physical volume to a volume group, but you must use pvcreate first.

B. lvextend is used to increase the size of a logical volume, not to add a new disk.

D. pvresize is used to resize an existing physical volume, not to create one.

In Docker, a Dockerfile is a script that contains instructions to build a container image. The first line in a Dockerfile is typically the FROM directive, which specifies the base image from which the container will be built.

The correct syntax for specifying a base image is:rubyFROM :If no tag is provided, Docker will pull the latest version of the specified image by default.

The correct syntax for specifying a base image is:rubyFROM :If no tag is provided, Docker will pull the latest version of the specified image by default.

The correct syntax for specifying a base image is:rubyFROM :If no tag is provided, Docker will pull the latest version of the specified image by default.

The correct syntax for specifying a base image is:rubyFROM :If no tag is provided, Docker will pull the latest version of the specified image by default.

The correct syntax for specifying a base image is:rubyFROM :If no tag is provided, Docker will pull the latest version of the specified image by default.

httpd is the official Apache HTTP Server image available in Docker Hub.

The incorrect options:

BASE httpd → Incorrect, as there is no such directive in Dockerfile syntax.

USE httpd → Incorrect, this is not a valid Docker command.

INHERIT httpd → Incorrect, as Docker does not use INHERIT to specify base images.

Thus, the correct answer is A. FROM httpd.

The wget command is used to download files from remote servers via HTTP, HTTPS, and FTP.

Option D (Correct): wget retrieves files from a specified URL.

Option A (netstat): Used to display network connections, not for downloading files.

Option B (nc – Netcat): Used for networking and port scanning, not file downloads.

Option C (telnet): Used for remote terminal connections, not for downloading files.

The users who have root-level command-line access are those who have either the same user ID (UID) as root, which is 0, or the ability to run commands as root using sudo. Based on the /etc/passwd and /etc/sudoers files, the users who meet these criteria are:

Carl: Carl has the same UID as root, which is 0, as shown in the /etc/passwd file. This means that Carl can log in as root and execute any command with root privileges1

Mallory: Mallory has the ability to run commands as root using sudo, as shown in the /etc/sudoers file. The line ALL = (ALL) ALL means that any user can run any command as any other user, including root, by using sudo. Mallory can also use the root shell /bin/bash as her login shell, as shown in the /etc/passwd file2

Therefore, the correct answer is A and C. Lee, Eve, Bob, and Alice do not have root-level command-line access because they have different UIDs from root and they cannot use sudo to run commands as root. Lee can only use sudo to run the commands listed in the Cmnd_Alias SHELLS, which are /bin/tcsh, /bin/sh, and /bin/bash. Eve cannot log in at all because her login shell is /bin/nologin. Bob and Alice can only use sudo to run the command /usr/sbin/tcpdump without a password, as specified by the Cmnd_Alias SYSADMIN and the line ALL = NOPASSWD: SYSADMIN2

The best commands to use to generate a list of rogue process names that have a TCP listener on a network interface are A. netstat -antp | grep LISTEN and B. lsof -iTCP | grep LISTEN. These commands will show the process ID (PID) and name of the processes that are listening on TCP ports, which can be used to identify any suspicious or unauthorized processes. The other commands are either not specific enough, not valid, or not relevant for this task. For example:

C. lsof -i:22 | grep TCP will only show the processes that are listening on port 22, which is typically used for SSH, and not any other ports.

D. netstat -a | grep TCP will show all the TCP connections, both active and listening, but not the process names or IDs.

E. nmap -p1-65535 | grep -i tcp will scan all the TCP ports on the local host, but not show the process names or IDs.

F. nmap -sS 0.0.0.0/0 will perform a stealth scan on the entire internet, which is not only impractical, but also illegal in some countries.

The ssh -X option enables X11 forwarding, which allows the user to run graphical applications on the remote server and display them on the local workstation. The user needs to specify the username, the server address, and the application name after the ssh -X command. The remote server also needs to have X11Forwarding enabled and xauth installed for this to work.

To build stateful firewall rules in iptables, the -m conntrack and --state options are used. The -m conntrack module allows for connection tracking, and --state tracks connection states like ESTABLISHED, RELATED, or NEW, ensuring that the firewall maintains awareness of connection states when filtering traffic. These options are critical for implementing a stateful firewall that tracks and manages active connections.

docker ps shows only running containers.

docker ps -a includes both running and stopped containers.

Incorrect Options:

B: Lists container images, not containers.

C: Shows resource usage of running containers.

D: Invalid syntax.