XK0-005 - Random Musings

Welcome to your XK0-005

Question 1

A Linux administrator logs in to a system and identifies that an important backup has been started. The backup process is consuming a considerable amount of CPU lime but needs to continue. Which of the following should the administrator use to reduce the impact this process has on other services?

renice -n 15 -p

nice -n 15 -p

renice -n -15 -p

nice -n -15 -p

Question 2

The application team has reported latency issues that are causing the application to crash on the Linux server. The Linux administrator starts troubleshooting and receives the following output:

netstat —s
15762 packets pruned from receive queue because of socket buffer over
690 times the listen queue of a socket overflowed
690 SYNs to LISTEN sockets ignored
2150128 packets collapsed in receive queue due to low socket buffer
TCPBack10gDrop: 844165
# ethtool -s eth0
rx fw discards: 4487

Which of the following commands will improve the latency issue?

A.


bash> echo 'net.core.net_backlog = 5000000' >> /etc/sysctl.conf

bash> sysctl -p

bash> systemctl daemon-reload

B.


bash> ifdown eth0

bash> ip link set dev eth0 mtu 800 

bash> ifup eth0

C.


bash> ystemctl stop network

bash> ethtool -g eth0 512

bash> systemctl start network

D.


bash> echo 'net.core.rmem_max = 12500000' >> /etc/sysctl.conf

bash> echo 'net.core.wmem_max = 12500000' >> /etc/sysctl.conf

bash> sysctl -p

Question 3

An administrator would like to measure possible packet loss between a workstation and a remote web application that is running on port 443. Which of the following would be the best command for the administrator to use to display this information?

ping -c 50

tcpdump -p 443

mtr -T -P 443

traceroute -p 443

Question 4

A systems administrator is trying to track down a rogue process that has a TCP listener on a network interface for remote command-and-control instructions. Which of the following commands should the systems administrator use to generate a list of rogue process names? (Choose two.)

netstat -antp | grep LISTEN

lsof -iTCP | grep LISTEN

lsof -i:22 | grep TCP

netstat -a | grep TCP

nmap -p1-65535 | grep -i tcp

nmap -sS 0.0.0.0/0

Question 5

The administrator comptia is not able to perform privileged functions on a newly deployed system. Given the following command outputs:

[root@newserver ~]# id comptia uid=1000(comptia) gid=1000(comptia) groups=1000(comptia) [root@newserver ~]# cat /etc/sudoers.d/admin %admin ALL=(root) NOPASSWD: EXEC: /usr/bin/ps, /usr/bin/chmod, /usr/bin/yum, /usr/bin/cat, /usr/sbin/lvm, /usr/sbin/pvs [root@newserver ~]# grep comptia /etc/passwd comptia:x:1000:1000:comptia:/home/comptia:/bin/bash [root@newserver ~]# chage -l comptia Last password change : never Password expires : never Password inactive : never Account expires : never Minimum number of days between password change : 0 Maximum number of days between password change : 99999 Number of days of warning before password expires : 7

Which of the following is the reason that the administrator is unable to perform the assigned duties?

The administrator needs a password reset.

The administrator is not a part of the correct group.

The administrator did not update the sudo database.

The administrator’s credentials need to be more complex.