45 Free Linux+ XK0-006 Practice Questions and Answers
45 questions for the Linux+ XK0-006 exam, each answer explained. Watch it here, try the questions yourself, or read the transcript.
Questions in this video
Tap an answer to see why it is right or wrong. Tap it again to reset.
Question 1 Play from 00:00
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Process management is about watching and controlling running programs on a host, which is not what Ansible was built for.
Not this one. Try another answer.
Why B is wrong
Databases are run with their own engines and admin utilities, and Ansible is not a database administration tool.
Right, C is the answer.
Why C is right
Ansible is an agentless automation tool. Administrators describe the desired state of many servers in playbooks, and Ansible applies it the same way every time, which is the essence of configuration management.
Not this one. Try another answer.
Why D is wrong
Asset management means keeping a record of hardware and software inventory, while Ansible pushes desired state onto machines.
Question 2 Play from 01:34
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Logging only records events as they happen. Examining those records for security purposes is the job of auditing.
Not this one. Try another answer.
Why B is wrong
Journaling refers to a filesystem feature or the systemd journal, not to reviewing process and file activity.
Not this one. Try another answer.
Why C is wrong
Tuning adjusts settings to improve performance and has nothing to do with reviewing activity.
Right, D is the answer.
Why D is right
The focus here is on examining recorded activity, not just collecting it. Auditing gives a trail showing what happened, who did it and when, which supports compliance work and forensic investigations.
Question 3 Play from 02:58
Which tool is the right one?
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
tar bundles files and directories, so it cannot capture the raw sectors that hold partition data.
Right, B is the answer.
Why B is right
Partition tables live in the first sectors of a disk, outside any filesystem. A tool that reads a device byte for byte can copy those sectors to a file and write them back later, and dd is built for exactly that kind of raw copy.
Not this one. Try another answer.
Why C is wrong
gzip only compresses data and does not read a disk region by itself.
Not this one. Try another answer.
Why D is wrong
cpio archives named files and directories, not raw disk structures.
Question 4 Play from 04:26
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
OpenSSL is a crypto library for TLS and certificates, not a disk encryption layer.
Not this one. Try another answer.
Why B is wrong
Certificates support identity and key exchange, they do not encrypt a whole drive.
Not this one. Try another answer.
Why C is wrong
GPG protects individual files and messages instead of encrypting an entire block device.
Right, D is the answer.
Why D is right
Protecting data at rest on a whole drive requires encryption at the block device level. The Linux Unified Key Setup standard does this for partitions and disks, so everything stays scrambled until the volume is unlocked.
Question 5 Play from 06:02
Which command achieves this?
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
This grants group write access but new files could still carry a different group, so other members may not be able to work with them.
Not this one. Try another answer.
Why B is wrong
This only allows group members to enter the directory and does not affect the group ownership of new files.
Not this one. Try another answer.
Why C is wrong
This only lets the group read the directory listing and does not make new files inherit the group.
Right, D is the answer.
Why D is right
With the setgid bit on a directory, every new file inside takes the directory's group instead of the creator's primary group. That way all members of the shared group keep access to what colleagues create. Read, write and execute bits alone do not control group inheritance.
Question 6 Play from 07:45
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
A virtual environment does the opposite, because it keeps its packages separate from the system installation.
Right, B is the answer.
Why B is right
Isolation is the point. Each environment carries its own set of installed libraries, so one project can use an older release while another uses a newer one. Storage use actually grows slightly, packages are not shared systemwide, and sameness across projects is handled by requirements files.
Not this one. Try another answer.
Why C is wrong
Matching setups across projects come from requirements files and version control, not from the environment itself.
Not this one. Try another answer.
Why D is wrong
Each environment holds its own copy of packages, so storage use grows a little.
Question 7 Play from 09:35
Which command should be run?
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
lshw lists hardware details and does not report boot problems.
Right, B is the answer.
Why B is right
Boot-time problems are written by the kernel into its ring buffer. Printing that buffer reveals driver failures, hardware detection results and other early messages that occurred while the system started.
Not this one. Try another answer.
Why C is wrong
modinfo describes a kernel module, it does not show boot errors.
Not this one. Try another answer.
Why D is wrong
dracut builds initramfs images and is not a diagnostic reader.
Question 8 Play from 10:53
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
This tool prints the kernel ring buffer, so what shows up are events seen by the kernel and its drivers, for example a USB device being detected. Login failures, session messages and desktop warnings come from user space services and are stored in other logs.
Not this one. Try another answer.
Why B is wrong
Window manager warnings go to desktop session logs, not the kernel ring buffer.
Not this one. Try another answer.
Why C is wrong
Session closing messages are written by login and PAM services into system logs.
Not this one. Try another answer.
Why D is wrong
Failed logins are written to authentication logs such as /var/log/auth.log.
Question 9 Play from 12:23
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Password history stops reuse of old passwords. If a person could change the password many times within a day, they could push the older ones out of the history and then set the original again. A daily limit blocks that trick.
Not this one. Try another answer.
Why B is wrong
This rule says nothing about multifactor authentication or cryptographic algorithms.
Not this one. Try another answer.
Why C is wrong
The number of daily changes has no bearing on how long a brute force attack takes.
Not this one. Try another answer.
Why D is wrong
Limiting changes per day does not make any password more complex, it is about reuse.
Question 10 Play from 14:08
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
The package installer is pip, while PEP 8 is a document about style.
Right, B is the answer.
Why B is right
PEP stands for Python Enhancement Proposal, and number 8 is the one that covers conventions such as naming, indentation and line length. It is guidance for how to write code, not a program, a variable or an isolation feature.
Not this one. Try another answer.
Why C is wrong
Octal literals use a 0o prefix, which has nothing to do with PEP 8.
Not this one. Try another answer.
Why D is wrong
Virtual environments are a separate tooling feature for isolating dependencies.
Show all 45 questionsShow fewer questions
Question 11 Play from 15:46
Which kernel parameter must be changed so packets can be passed from one interface to another?
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
This parameter reserves specific port numbers so they are not handed out automatically, which has nothing to do with forwarding.
Right, B is the answer.
Why B is right
A host drops packets that are not addressed to it unless forwarding is switched on. The ip_forward setting, when changed to 1, lets the kernel pass traffic between interfaces, which is what a router does.
Not this one. Try another answer.
Why C is wrong
There is no standard kernel parameter with this name for forwarding.
Not this one. Try another answer.
Why D is wrong
Multicast behavior is separate from forwarding packets between interfaces.
Question 12 Play from 17:21
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
AIDE watches for changes in file integrity and does not automate compliance scanning.
Right, B is the answer.
Why B is right
Automated policy checks need a tool built on the Security Content Automation Protocol. It compares a system against published baselines and reports findings, which covers both compliance and vulnerability work.
Not this one. Try another answer.
Why C is wrong
Nmap discovers hosts and scans ports, it does not evaluate compliance baselines.
Not this one. Try another answer.
Why D is wrong
SELinux enforces mandatory access control but is not a compliance scanning tool.
Question 13 Play from 18:45
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Health checks are active probes, while thresholds are limits applied to collected values.
Not this one. Try another answer.
Why B is wrong
Automatic restarts are a possible response to an alert, but they are not the main reason thresholds exist.
Right, C is the answer.
Why C is right
A threshold is a boundary on a metric such as CPU or disk use. Crossing it triggers an alert so staff can react early, and that is the central purpose. Restarts, health probes and availability math are different functions.
Not this one. Try another answer.
Why D is wrong
Availability comes from uptime tracking, not from thresholds.
Question 14 Play from 20:30
Which process state code should be searched for?
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
T marks a process that is stopped, for example by SIGSTOP, and it can still be resumed, so it has not finished.
Not this one. Try another answer.
Why B is wrong
D means uninterruptible sleep, usually waiting on I/O, so the process is still active.
Right, C is the answer.
Why C is right
When a child ends but its parent has not collected the exit status, the kernel keeps a small entry so the status can be read later. Tools such as ps display those defunct entries with a state letter that stands for zombie.
Not this one. Try another answer.
Why D is wrong
S is an interruptible sleep, where the process is alive and waiting for an event.
Question 15 Play from 21:55
Which command is meant for this?
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
netstat shows local sockets and statistics, it does not probe remote hosts.
Not this one. Try another answer.
Why B is wrong
ip configures addresses and routes, and it has no port checking function.
Not this one. Try another answer.
Why C is wrong
ping tests reachability with ICMP and says nothing about specific ports.
Right, D is the answer.
Why D is right
Testing a port means attempting a connection to it. The netcat utility opens TCP or UDP connections to a chosen host and port, so success or failure shows whether anything is listening.
Question 16 Play from 23:22
Which command does this?
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
qemu-io is for low level disk I/O testing and debugging, not conversion.
Right, B is the answer.
Why B is right
Disk image handling in the QEMU family is done by one dedicated utility. Its convert subcommand rewrites an image between formats such as raw, qcow2 and vmdk.
Not this one. Try another answer.
Why C is wrong
qemu-kvm runs the virtual machine itself and does not manage image files.
Not this one. Try another answer.
Why D is wrong
This is not a real QEMU utility.
Question 17 Play from 24:44
Which of these is a recommended practice?
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Combining pipelines is unrelated to safely using AI generated code.
Not this one. Try another answer.
Why B is wrong
Using output unreviewed can bring in errors and security holes.
Not this one. Try another answer.
Why C is wrong
Large single blocks are harder to maintain, so modular pieces are preferred.
Right, D is the answer.
Why D is right
AI output can contain mistakes, so it needs automated checking before it goes anywhere near production. A linter catches syntax problems, style issues and likely bugs early, which raises quality and safety.
Question 18 Play from 26:16
What should the administrator do to ease the problem?
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
bg only resumes a job in the background and does not affect scheduling priority.
Not this one. Try another answer.
Why B is wrong
pidstat only reports statistics, it cannot give out CPU time.
Not this one. Try another answer.
Why C is wrong
nohup keeps a process alive after logout and does not change its priority.
Right, D is the answer.
Why D is right
The scheduler shares CPU according to priority. Making the heavy job nicer with renice means it yields time to other processes while it keeps running, so the work still gets done and the other programs recover.
Question 19 Play from 27:51
What should the developer do first?
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Building a private LLM is an implementation project that should only begin after leadership has approved AI use.
Not this one. Try another answer.
Why B is wrong
Choosing a model type is a later design decision and presumes that AI use has already been authorized.
Not this one. Try another answer.
Why C is wrong
Comparing chatbots is premature research when nobody has yet confirmed that AI use is allowed at all.
Right, D is the answer.
Why D is right
Governance has to come before tooling. Code that goes into a paid product is valuable intellectual property, so the developer must learn what the organization permits before sending it to any AI service. Skipping that step risks leaks, compliance trouble, and legal exposure. Picking, comparing, or deploying a tool only makes sense once the rules are known.
Question 20 Play from 30:04
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
This tree is the standard home for installed programs, their libraries, man pages, and other documentation that can be shared across machines. The remaining locations serve narrower roles such as device nodes, essential libraries, or data that changes while the system runs.
Not this one. Try another answer.
Why B is wrong
The /dev directory holds device nodes that represent hardware, not documentation.
Not this one. Try another answer.
Why C is wrong
The /lib directory carries libraries needed by core programs and is not where documentation lives.
Not this one. Try another answer.
Why D is wrong
The /var directory holds changing data such as logs and spool files, so it is not a documentation location.
Question 21 Play from 31:38
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Collections package reusable content such as modules, roles, and plugins, not lists of machines.
Not this one. Try another answer.
Why B is wrong
A playbook defines the plays and tasks to run, and relies on an inventory to know where to run them.
Right, C is the answer.
Why C is right
Ansible needs to know which machines to manage, and the inventory supplies that map of hosts and groups, either as a static file or generated dynamically. Other pieces of Ansible describe work to run, bundled content, or data collected from targets.
Not this one. Try another answer.
Why D is wrong
Facts are details gathered from managed hosts at run time, not a list of the hosts themselves.
Question 22 Play from 33:03
What is the primary purpose of such a policy?
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Expiration still relies on passwords; it does not move anyone to passwordless sign-in.
Not this one. Try another answer.
Why B is wrong
Rotation does not make a password stronger; complexity rules are a separate setting.
Right, C is the answer.
Why C is right
Forced rotation is a damage-control measure. If a credential has been stolen or leaked without anyone noticing, a scheduled change cuts short the period in which an attacker can use it. Expiration by itself says nothing about how strong a new password is, and it does not change the login method.
Not this one. Try another answer.
Why D is wrong
Blocking reuse is the job of a password history setting, not the main aim of expiration.
Question 23 Play from 34:55
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
SNMP is a separate management protocol, and webhooks do not rely on it.
Not this one. Try another answer.
Why B is wrong
Webhooks can carry sensitive content, but that is not what defines them; the event callback is.
Right, C is the answer.
Why C is right
One system registers a URL, and when something happens the other system sends an HTTP request to that address with details of the event. This push model lets services react immediately instead of polling, which is why it is used for event-driven automation.
Not this one. Try another answer.
Why D is wrong
Webhooks are notifications, not an authentication scheme, though they may be paired with one.
Question 24 Play from 36:36
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
The lscpu command describes only the processor, not the whole machine.
Not this one. Try another answer.
Why B is wrong
The dmesg command prints kernel and boot messages, which are not a structured inventory.
Not this one. Try another answer.
Why C is wrong
The lsmod command lists loaded kernel modules, which are software, not hardware.
Right, D is the answer.
Why D is right
Firmware tables hold details about the BIOS, motherboard, processor, memory modules, and more, and dmidecode reads and prints them in readable form. That makes it the broadest source of hardware information among these tools, which each cover only a narrow slice.
Question 25 Play from 37:59
Which of these is a responsible use?
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Configuration files reveal details about internal infrastructure and security posture, which should not be shared with a public service.
Right, B is the answer.
Why B is right
A public service can be used safely only when nothing sensitive is submitted. Anonymized samples carry no private details, and the result is just a text pattern, so there is no privacy or confidentiality exposure. Each other task would send protected or confidential material to an outside provider.
Not this one. Try another answer.
Why C is wrong
Proprietary source code is confidential intellectual property and should not be submitted to public AI tools.
Not this one. Try another answer.
Why D is wrong
Medical records are protected health information under privacy rules, so sending them to a public service would be irresponsible.
Question 26 Play from 39:59
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Ansible automates configuration changes and is not a tool for monitoring cloud resources.
Not this one. Try another answer.
Why B is wrong
Ansible is not a pipeline platform, although it can be one step inside a CI/CD workflow.
Right, C is the answer.
Why C is right
Ansible describes desired work in readable YAML playbooks, so no custom programming language is needed. It focuses on configuration and automation, not on observing systems or running build pipelines, even though it can be called from pipeline jobs.
Not this one. Try another answer.
Why D is wrong
The Ruby-based language description fits other tools; Ansible uses YAML instead.
Question 27 Play from 41:42
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Audit records are written by auditd, although journald may also receive some of them.
Not this one. Try another answer.
Why B is wrong
Crash dumps after a kernel failure come from kdump, not journald.
Right, C is the answer.
Why C is right
Journald is the logging component of systemd. It receives messages from the kernel, services, and applications and stores them in a structured, searchable form. Its name is easy to confuse with other journaling and recording features, which are handled by different software.
Not this one. Try another answer.
Why D is wrong
Filesystem journaling, as in ext4 or XFS, is part of the filesystem driver and is unrelated to journald.
Question 28 Play from 43:25
Which practice does this describe?
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Threshold monitoring raises alerts when a metric crosses a limit and does not centralize events.
Right, B is the answer.
Why B is right
Collecting records from many sources into one searchable location is what aggregation means for logs. It makes correlation and analysis easier than visiting each machine. The other terms cover alerting on limits, notifications, and status probes.
Not this one. Try another answer.
Why C is wrong
Webhooks are event callbacks, not a way to pool log data.
Not this one. Try another answer.
Why D is wrong
Health checks test whether a service is up and do not gather events in one place.
Question 29 Play from 44:55
Which two properties must be the same on both hosts? (Choose two).
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
The destination merely needs enough free memory for the guest, and the amounts do not have to match.
Right, B is one of the answers.
Why B is right
A guest in motion keeps executing the same instructions on the new host, so both processors must share a compatible architecture. The destination also has to open the same disk images, which means the storage must be reachable at the same path on both sides. Other resources only need to be adequate, not identical.
Not this one. Try another answer.
Why C is wrong
USB ports are peripheral hardware and have no bearing on migration.
Not this one. Try another answer.
Why D is wrong
Link speed affects how fast the migration finishes, but it does not need to be the same.
Right, E is one of the answers.
Why E is right
A guest in motion keeps executing the same instructions on the new host, so both processors must share a compatible architecture. The destination also has to open the same disk images, which means the storage must be reachable at the same path on both sides. Other resources only need to be adequate, not identical.
Not this one. Try another answer.
Why F is wrong
Swap is a local host resource, so its size does not have to match between hosts.
Question 30 Play from 46:44
Which instruction does this?
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
EXPOSE only documents which ports the container listens on and starts nothing.
Not this one. Try another answer.
Why B is wrong
ONBUILD sets triggers that fire when the image is used as a base for another build, not at container start.
Not this one. Try another answer.
Why C is wrong
FROM selects the base image and does not launch any process.
Right, D is the answer.
Why D is right
The instruction that defines the main process launched at container start is the entrypoint, so the program named there runs automatically each time. The remaining instructions choose a base image, declare ports, or register triggers for later builds.
Question 31 Play from 48:13
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
This only lists background jobs and does not attach any of them to the terminal.
Right, B is the answer.
Why B is right
A job that was sent to the background with an ampersand is returned to interactive control by moving it to the foreground. The other utilities only list jobs, change scheduling priority, or swap out the shell image.
Not this one. Try another answer.
Why C is wrong
This changes the scheduling priority of a process and has no effect on terminal attachment.
Not this one. Try another answer.
Why D is wrong
This replaces the running shell with another program instead of resuming a background job.
Question 32 Play from 49:34
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
This directory sits on disk and keeps logs, spools, and caches across reboots.
Right, B is the answer.
Why B is right
Kernel and process information is generated on the fly and is never written to disk, so this pseudo filesystem is rebuilt every time the machine starts. Directories backed by real storage keep their data across reboots.
Not this one. Try another answer.
Why C is wrong
This directory is on disk and holds installed programs and libraries that persist.
Not this one. Try another answer.
Why D is wrong
This directory is on disk and stores the kernel and bootloader files that persist.
Question 33 Play from 51:01
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Linting is a code quality check and is not a data protection practice for AI; the word always also makes it an unreasonable rule.
Not this one. Try another answer.
Why B is wrong
Sampling only similar users produces a biased, unrepresentative model instead of a sound one.
Right, C is the answer.
Why C is right
Protecting privacy comes first when data feeds a model. Scrubbing or masking personal and confidential fields beforehand keeps that information from leaking through model output and helps avoid compliance problems.
Not this one. Try another answer.
Why D is wrong
Pasting unchecked content into a terminal is risky and could run harmful or unintended commands.
Question 34 Play from 52:46
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
PAM is a local framework that calls authentication modules but is not the domain protocol itself.
Not this one. Try another answer.
Why B is wrong
The SSH daemon provides remote login and is not designed to authenticate against a Windows domain on its own.
Not this one. Try another answer.
Why C is wrong
Samba provides file and print sharing and domain integration, but the underlying authentication protocol is something else.
Right, D is the answer.
Why D is right
Windows domains rely on a ticket-based network authentication protocol, and Linux hosts use that same protocol to verify domain users. The other choices either provide a framework, a remote access service, or file sharing rather than the domain authentication method itself.
Question 35 Play from 54:22
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
This sets the default permission mask for newly created files and does not change an existing file.
Not this one. Try another answer.
Why B is wrong
This changes the group that owns a file, not its permission bits.
Not this one. Try another answer.
Why C is wrong
This changes the owning user of a file, not its permission bits.
Right, D is the answer.
Why D is right
The read, write, and execute settings for the owner, group, and others make up a file's mode, and the mode is edited with this one utility. The remaining commands deal with ownership or with defaults for newly created files.
Question 36 Play from 55:42
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
CVE is an identifier system for known vulnerabilities, not a configuration guide.
Right, B is the answer.
Why B is right
Peer-reviewed configuration guides published by the Center for Internet Security give concrete hardening steps for operating systems and software. The other items are a vulnerability numbering scheme, a privacy law, and a management standard, so none of them gives configuration settings.
Not this one. Try another answer.
Why C is wrong
GDPR is a data protection regulation and does not give system hardening settings.
Not this one. Try another answer.
Why D is wrong
ISO 27001 is an information security management standard and not a detailed configuration baseline.
Question 37 Play from 57:24
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
SMTP transfers email and does not report on device health.
Not this one. Try another answer.
Why B is wrong
DHCP hands out IP addresses and does not monitor devices.
Right, C is the answer.
Why C is right
Polling devices for their status, counters, and health data is the job of the management protocol designed for exactly that. The other protocols handle mail delivery, address assignment, and name resolution.
Not this one. Try another answer.
Why D is wrong
DNS resolves names to addresses and does not monitor devices.
Question 38 Play from 58:46
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Python 3 deliberately broke compatibility with Python 2, so older code often needs changes.
Not this one. Try another answer.
Why B is wrong
Python and Java use separate runtimes, and Python output is not binary compatible with Java.
Right, C is the answer.
Why C is right
The language is built to grow through importable modules and third-party packages. The other claims are wrong: it is open source, it broke compatibility with the previous major version, and it is a separate runtime from Java.
Not this one. Try another answer.
Why D is wrong
Python is open source, not closed or proprietary.
Question 39 Play from 1:00:20
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
def defines a function and does not load a module.
Not this one. Try another answer.
Why B is wrong
__name__ is a special variable describing the execution context of a script, not a loader.
Right, C is the answer.
Why C is right
Loading a module into a script is done with the statement made for that purpose, which gives access to outside libraries and code packages. The remaining names define functions or hold special values, so they do not load modules.
Not this one. Try another answer.
Why D is wrong
__init__ is a special method for initializing class instances and does not load modules.
Question 40 Play from 1:01:44
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Kerberos authenticates principals with tickets and is not a directory query protocol.
Right, B is the answer.
Why B is right
Querying a hierarchical directory of identities and organizational units is the purpose of the lightweight directory access protocol, which is common for centralized identity management. The other protocols handle ticket authentication, file sharing, and encryption.
Not this one. Try another answer.
Why C is wrong
SMB shares files and printers, not directory entries.
Not this one. Try another answer.
Why D is wrong
TLS secures connections with encryption and does not serve directory data.
Question 41 Play from 1:03:10
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
/etc holds configuration files, not executables.
Right, B is the answer.
Why B is right
Essential command binaries that every user and the system rely on live in this standard directory of the filesystem hierarchy. The other directories hold configuration, kernel interfaces, or variable data.
Not this one. Try another answer.
Why C is wrong
/sys is a virtual interface to kernel and device information, not a place for utilities.
Not this one. Try another answer.
Why D is wrong
/var holds variable data such as logs and spools, not core executables.
Question 42 Play from 1:04:41
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Certificates and keys are not stored in the initial RAM disk.
Not this one. Try another answer.
Why B is wrong
SSH access is not related to the initial RAM disk, since SSH starts after boot.
Right, C is the answer.
Why C is right
This temporary root image is loaded early by the bootloader and supplies the drivers required to reach the real root filesystem. Without it the kernel might be unable to mount its storage and finish booting.
Not this one. Try another answer.
Why D is wrong
Random device setup is not the role of the initial RAM disk.
Question 43 Play from 1:06:25
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
JSON is a data format that Ansible can read in places, but playbooks are normally not written in it.
Not this one. Try another answer.
Why B is wrong
XML is not used to write playbooks.
Not this one. Try another answer.
Why C is wrong
CSV is a flat table format and cannot describe plays and tasks.
Right, D is the answer.
Why D is right
Playbooks use a human-readable, indentation-based data format that expresses plays, tasks, and roles cleanly. The other formats are not the normal way to author them.
Question 44 Play from 1:07:39
Tap an answer. The reason for that answer shows here.
Right, A is the answer.
Why A is right
Bridging places the virtual machine directly on the physical LAN as a separate device that gets its own address from the network. The other modes route through the host or confine traffic to virtual links.
Not this one. Try another answer.
Why B is wrong
NAT shares the host's address and connection rather than acting independently.
Not this one. Try another answer.
Why C is wrong
An internal network connects only virtual machines with one another and not the physical network.
Not this one. Try another answer.
Why D is wrong
Host-only networking limits traffic to the host and its virtual machines.
Question 45 Play from 1:09:01
Tap an answer. The reason for that answer shows here.
Not this one. Try another answer.
Why A is wrong
Container security details are not the purpose of a playbook.
Right, B is the answer.
Why B is right
Automation playbooks describe a set of tasks and configuration that bring systems to a desired state, such as deploying software. The other choices describe unrelated areas like version control, container security, and pod storage.
Not this one. Try another answer.
Why C is wrong
Version control setup is not the job of a playbook.
Not this one. Try another answer.
Why D is wrong
Pod storage volume details are defined in Kubernetes manifests, not playbooks.
Transcript
Play from 00:00 Question 1. A new hire on a cloud operations team asks what role Ansible plays when managing servers. What is it used for? Here are the options. Option A. Process management. Option B. Database management. Option C. Configuration management. Option D. Asset management. Pause the video now if you want time to think about the answer.
The correct answer is C. Configuration management. Ansible is an agentless automation tool. Administrators describe the desired state of many servers in playbooks, and Ansible applies it the same way every time, which is the essence of configuration management. Now, why are the other options incorrect? Option A is incorrect. Process management is about watching and controlling running programs on a host, which is not what Ansible was built for. Option B is incorrect. Databases are run with their own engines and admin utilities, and Ansible is not a database administration tool. Option D is incorrect. Asset management means keeping a record of hardware and software inventory, while Ansible pushes desired state onto machines. Therefore, C, Configuration management, is the correct answer.
Play from 01:34 Question 2. An auditor at a retail company asks which term covers the careful examination of who ran which processes and touched which files on a Linux host. Here are the options. Option A. Logging. Option B. Journaling. Option C. Tuning. Option D. Auditing. Pause the video now if you want time to think about the answer.
The correct answer is D. Auditing. The focus here is on examining recorded activity, not just collecting it. Auditing gives a trail showing what happened, who did it and when, which supports compliance work and forensic investigations. Now, why are the other options incorrect? Option A is incorrect. Logging only records events as they happen. Examining those records for security purposes is the job of auditing. Option B is incorrect. Journaling refers to a filesystem feature or the systemd journal, not to reviewing process and file activity. Option C is incorrect. Tuning adjusts settings to improve performance and has nothing to do with reviewing activity. Therefore, D, Auditing, is the correct answer.
Play from 02:58 Question 3. A storage technician at a hosting company worries that a damaged partition table could make a server unbootable. The technician wants a raw copy of that table saved ahead of time. Which tool is the right one? Here are the options. Option A. tar. Option B. dd. Option C. gzip. Option D. cpio. Pause the video now if you want time to think about the answer.
The correct answer is B. dd. Partition tables live in the first sectors of a disk, outside any filesystem. A tool that reads a device byte for byte can copy those sectors to a file and write them back later, and dd is built for exactly that kind of raw copy. Now, why are the other options incorrect? Option A is incorrect. tar bundles files and directories, so it cannot capture the raw sectors that hold partition data. Option C is incorrect. gzip only compresses data and does not read a disk region by itself. Option D is incorrect. cpio archives named files and directories, not raw disk structures. Therefore, B, dd, is the correct answer.
Show full transcriptShow less
Play from 04:26 Question 4. A security engineer at a clinic must make sure the data on a laptop drive stays unreadable whenever the drive is powered down or removed. Which option provides this protection? Here are the options. Option A. OpenSSL. Option B. PKI certificates. Option C. GPG. Option D. LUKS. Pause the video now if you want time to think about the answer.
The correct answer is D. LUKS. Protecting data at rest on a whole drive requires encryption at the block device level. The Linux Unified Key Setup standard does this for partitions and disks, so everything stays scrambled until the volume is unlocked. Now, why are the other options incorrect? Option A is incorrect. OpenSSL is a crypto library for TLS and certificates, not a disk encryption layer. Option B is incorrect. Certificates support identity and key exchange, they do not encrypt a whole drive. Option C is incorrect. GPG protects individual files and messages instead of encrypting an entire block device. Therefore, D, LUKS, is the correct answer.
Play from 06:02 Question 5. A junior admin at a design studio is setting up a fresh directory called /projects for a team. Every member of the owning group must be able to work with files that others create there. Which command achieves this? Here are the options. Option A. chmod g+w /projects. Option B. chmod g+x /projects. Option C. chmod g+r /projects. Option D. chmod g+s /projects. Pause the video now if you want time to think about the answer.
The correct answer is D. chmod g+s /projects. With the setgid bit on a directory, every new file inside takes the directory's group instead of the creator's primary group. That way all members of the shared group keep access to what colleagues create. Read, write and execute bits alone do not control group inheritance. Now, why are the other options incorrect? Option A is incorrect. This grants group write access but new files could still carry a different group, so other members may not be able to work with them. Option B is incorrect. This only allows group members to enter the directory and does not affect the group ownership of new files. Option C is incorrect. This only lets the group read the directory listing and does not make new files inherit the group. Therefore, D, chmod g+s /projects, is the correct answer.
Play from 07:45 Question 6. A developer on an analytics team is deciding whether to use Python virtual environments. Which advantage do they offer? Here are the options. Option A. They keep package installs available to every user on the whole machine. Option B. They avoid clashes between projects that need different releases of one library. Option C. They guarantee identical setups for all of your projects at once. Option D. They shrink the amount of storage the packages consume. Pause the video now if you want time to think about the answer.
The correct answer is B. They avoid clashes between projects that need different releases of one library. Isolation is the point. Each environment carries its own set of installed libraries, so one project can use an older release while another uses a newer one. Storage use actually grows slightly, packages are not shared systemwide, and sameness across projects is handled by requirements files. Now, why are the other options incorrect? Option A is incorrect. A virtual environment does the opposite, because it keeps its packages separate from the system installation. Option C is incorrect. Matching setups across projects come from requirements files and version control, not from the environment itself. Option D is incorrect. Each environment holds its own copy of packages, so storage use grows a little. Therefore, B, They avoid clashes between projects that need different releases of one library, is the correct answer.
Play from 09:35 Question 7. After a server at a data center rebooted unexpectedly, a technician wants to look for problems reported while the machine was coming up. Which command should be run? Here are the options. Option A. lshw. Option B. dmesg. Option C. modinfo. Option D. dracut. Pause the video now if you want time to think about the answer.
The correct answer is B. dmesg. Boot-time problems are written by the kernel into its ring buffer. Printing that buffer reveals driver failures, hardware detection results and other early messages that occurred while the system started. Now, why are the other options incorrect? Option A is incorrect. lshw lists hardware details and does not report boot problems. Option C is incorrect. modinfo describes a kernel module, it does not show boot errors. Option D is incorrect. dracut builds initramfs images and is not a diagnostic reader. Therefore, B, dmesg, is the correct answer.
Play from 10:53 Question 8. A technician at a university lab wants to know what kind of information dmesg shows. Which of these appears in its output? Here are the options. Option A. USB device connections. Option B. Window manager warnings. Option C. "Session closed" messages. Option D. Incorrect login attempts. Pause the video now if you want time to think about the answer.
The correct answer is A. USB device connections. This tool prints the kernel ring buffer, so what shows up are events seen by the kernel and its drivers, for example a USB device being detected. Login failures, session messages and desktop warnings come from user space services and are stored in other logs. Now, why are the other options incorrect? Option B is incorrect. Window manager warnings go to desktop session logs, not the kernel ring buffer. Option C is incorrect. Session closing messages are written by login and PAM services into system logs. Option D is incorrect. Failed logins are written to authentication logs such as /var/log/auth.log. Therefore, A, USB device connections, is the correct answer.
Play from 12:23 Question 9. A security team at a bank forbids several password changes in one day. What is the reason for this restriction? Here are the options. Option A. It prevents users from cycling through the stored history to get back to their earlier password. Option B. It forces the adoption of multifactor logins with stronger algorithms in place of passwords. Option C. It makes brute force guessing take too long to be practical. Option D. It raises how complex passwords are and improves overall system safety. Pause the video now if you want time to think about the answer.
The correct answer is A. It prevents users from cycling through the stored history to get back to their earlier password. Password history stops reuse of old passwords. If a person could change the password many times within a day, they could push the older ones out of the history and then set the original again. A daily limit blocks that trick. Now, why are the other options incorrect? Option B is incorrect. This rule says nothing about multifactor authentication or cryptographic algorithms. Option C is incorrect. The number of daily changes has no bearing on how long a brute force attack takes. Option D is incorrect. Limiting changes per day does not make any password more complex, it is about reuse. Therefore, A, It prevents users from cycling through the stored history to get back to their earlier password, is the correct answer.
Play from 14:08 Question 10. A new Python contributor asks what PEP 8 is. Which description is correct? Here are the options. Option A. A tool that installs packages for Python. Option B. The official recommendations for formatting and writing Python code. Option C. A Python variable that stores octal numbers. Option D. Python virtual environments. Pause the video now if you want time to think about the answer.
The correct answer is B. The official recommendations for formatting and writing Python code. PEP stands for Python Enhancement Proposal, and number 8 is the one that covers conventions such as naming, indentation and line length. It is guidance for how to write code, not a program, a variable or an isolation feature. Now, why are the other options incorrect? Option A is incorrect. The package installer is pip, while PEP 8 is a document about style. Option C is incorrect. Octal literals use a 0o prefix, which has nothing to do with PEP 8. Option D is incorrect. Virtual environments are a separate tooling feature for isolating dependencies. Therefore, B, The official recommendations for formatting and writing Python code, is the correct answer.
Play from 15:46 Question 11. A network engineer is turning a Linux server into a router between its interfaces. Which kernel parameter must be changed so packets can be passed from one interface to another? Here are the options. Option A. net.ipv4.ip_local_reserved_ports. Option B. net.ipv4.ip_forward. Option C. net.ipv4.ip_route. Option D. net.ipv4.ip_multicast. Pause the video now if you want time to think about the answer.
The correct answer is B. net.ipv4.ip_forward. A host drops packets that are not addressed to it unless forwarding is switched on. The ip_forward setting, when changed to 1, lets the kernel pass traffic between interfaces, which is what a router does. Now, why are the other options incorrect? Option A is incorrect. This parameter reserves specific port numbers so they are not handed out automatically, which has nothing to do with forwarding. Option C is incorrect. There is no standard kernel parameter with this name for forwarding. Option D is incorrect. Multicast behavior is separate from forwarding packets between interfaces. Therefore, B, net.ipv4.ip_forward, is the correct answer.
Play from 17:21 Question 12. A compliance officer at a government agency needs a tool that can automate checking systems against security baselines and handle vulnerability assessment. Which utility fits? Here are the options. Option A. AIDE. Option B. OpenSCAP. Option C. Nmap. Option D. SELinux. Pause the video now if you want time to think about the answer.
The correct answer is B. OpenSCAP. Automated policy checks need a tool built on the Security Content Automation Protocol. It compares a system against published baselines and reports findings, which covers both compliance and vulnerability work. Now, why are the other options incorrect? Option A is incorrect. AIDE watches for changes in file integrity and does not automate compliance scanning. Option C is incorrect. Nmap discovers hosts and scans ports, it does not evaluate compliance baselines. Option D is incorrect. SELinux enforces mandatory access control but is not a compliance scanning tool. Therefore, B, OpenSCAP, is the correct answer.
Play from 18:45 Question 13. A monitoring engineer at an e-commerce company is configuring thresholds on server metrics. What is the main reason for setting them? Here are the options. Option A. To test whether each machine is healthy. Option B. To start a failed service again without human help. Option C. To raise a notification when a measured value goes past its limit. Option D. To work out how much of the time a service is available. Pause the video now if you want time to think about the answer.
The correct answer is C. To raise a notification when a measured value goes past its limit. A threshold is a boundary on a metric such as CPU or disk use. Crossing it triggers an alert so staff can react early, and that is the central purpose. Restarts, health probes and availability math are different functions. Now, why are the other options incorrect? Option A is incorrect. Health checks are active probes, while thresholds are limits applied to collected values. Option B is incorrect. Automatic restarts are a possible response to an alert, but they are not the main reason thresholds exist. Option D is incorrect. Availability comes from uptime tracking, not from thresholds. Therefore, C, To raise a notification when a measured value goes past its limit, is the correct answer.
Play from 20:30 Question 14. After an overnight alert, an administrator wants to find processes on a Linux server that have finished running but still occupy a slot in the process table. Which process state code should be searched for? Here are the options. Option A. T. Option B. D. Option C. Z. Option D. S. Pause the video now if you want time to think about the answer.
The correct answer is C. Z. When a child ends but its parent has not collected the exit status, the kernel keeps a small entry so the status can be read later. Tools such as ps display those defunct entries with a state letter that stands for zombie. Now, why are the other options incorrect? Option A is incorrect. T marks a process that is stopped, for example by SIGSTOP, and it can still be resumed, so it has not finished. Option B is incorrect. D means uninterruptible sleep, usually waiting on I/O, so the process is still active. Option D is incorrect. S is an interruptible sleep, where the process is alive and waiting for an event. Therefore, C, Z, is the correct answer.
Play from 21:55 Question 15. A network technician needs to check from a workstation whether a TCP port is accepting connections on a remote server. Which command is meant for this? Here are the options. Option A. netstat. Option B. ip. Option C. ping. Option D. nc. Pause the video now if you want time to think about the answer.
The correct answer is D. nc. Testing a port means attempting a connection to it. The netcat utility opens TCP or UDP connections to a chosen host and port, so success or failure shows whether anything is listening. Now, why are the other options incorrect? Option A is incorrect. netstat shows local sockets and statistics, it does not probe remote hosts. Option B is incorrect. ip configures addresses and routes, and it has no port checking function. Option C is incorrect. ping tests reachability with ICMP and says nothing about specific ports. Therefore, D, nc, is the correct answer.
Play from 23:22 Question 16. A virtualization admin at a lab needs to change a KVM guest's disk file from one image format into another. Which command does this? Here are the options. Option A. qemu-io. Option B. qemu-img. Option C. qemu-kvm. Option D. qemu-ng. Pause the video now if you want time to think about the answer.
The correct answer is B. qemu-img. Disk image handling in the QEMU family is done by one dedicated utility. Its convert subcommand rewrites an image between formats such as raw, qcow2 and vmdk. Now, why are the other options incorrect? Option A is incorrect. qemu-io is for low level disk I/O testing and debugging, not conversion. Option C is incorrect. qemu-kvm runs the virtual machine itself and does not manage image files. Option D is incorrect. This is not a real QEMU utility. Therefore, B, qemu-img, is the correct answer.
Play from 24:44 Question 17. A cloud engineer at a startup wants to use an AI assistant to produce infrastructure as code for deployments. Which of these is a recommended practice? Here are the options. Option A. Merging CI/CD pipelines. Option B. Pasting the output in directly whenever possible. Option C. Generating monolithic code. Option D. Linting generated code. Pause the video now if you want time to think about the answer.
The correct answer is D. Linting generated code. AI output can contain mistakes, so it needs automated checking before it goes anywhere near production. A linter catches syntax problems, style issues and likely bugs early, which raises quality and safety. Now, why are the other options incorrect? Option A is incorrect. Combining pipelines is unrelated to safely using AI generated code. Option B is incorrect. Using output unreviewed can bring in errors and security holes. Option C is incorrect. Large single blocks are harder to maintain, so modular pieces are preferred. Therefore, D, Linting generated code, is the correct answer.
Play from 26:16 Question 18. A sysadmin at a media company launched a heavy maintenance job that is hogging the CPU and making other applications crawl. What should the administrator do to ease the problem? Here are the options. Option A. Run the remaining applications through the bg utility. Option B. Raise the CPU time using pidstat. Option C. Start the maintenance job with nohup. Option D. Reduce how important the maintenance job is by using renice. Pause the video now if you want time to think about the answer.
The correct answer is D. Reduce how important the maintenance job is by using renice. The scheduler shares CPU according to priority. Making the heavy job nicer with renice means it yields time to other processes while it keeps running, so the work still gets done and the other programs recover. Now, why are the other options incorrect? Option A is incorrect. bg only resumes a job in the background and does not affect scheduling priority. Option B is incorrect. pidstat only reports statistics, it cannot give out CPU time. Option C is incorrect. nohup keeps a process alive after logout and does not change its priority. Therefore, D, Reduce how important the maintenance job is by using renice, is the correct answer.
Play from 27:51 Question 19. A developer at a fintech startup wants an AI assistant to tune the performance of code that ships in the firm's paid product. What should the developer do first? Here are the options. Option A. Set up a self-hosted LLM on the internal network to handle the code tuning. Option B. Choose open-source LLMs whose code gets regular security reviews from the community. Option C. Compare the available AI chatbots to see which one tunes code best. Option D. Confirm that an internal policy exists covering how AI may be used in software development. Pause the video now if you want time to think about the answer.
The correct answer is D. Confirm that an internal policy exists covering how AI may be used in software development. Governance has to come before tooling. Code that goes into a paid product is valuable intellectual property, so the developer must learn what the organization permits before sending it to any AI service. Skipping that step risks leaks, compliance trouble, and legal exposure. Picking, comparing, or deploying a tool only makes sense once the rules are known. Now, why are the other options incorrect? Option A is incorrect. Building a private LLM is an implementation project that should only begin after leadership has approved AI use. Option B is incorrect. Choosing a model type is a later design decision and presumes that AI use has already been authorized. Option C is incorrect. Comparing chatbots is premature research when nobody has yet confirmed that AI use is allowed at all. Therefore, D, Confirm that an internal policy exists covering how AI may be used in software development, is the correct answer.
Play from 30:04 Question 20. Which top-level Linux directory stores shareable, read-only data, including the documentation that ships with installed software? Here are the options. Option A. /usr. Option B. /dev. Option C. /lib. Option D. /var. Pause the video now if you want time to think about the answer.
The correct answer is A. /usr. This tree is the standard home for installed programs, their libraries, man pages, and other documentation that can be shared across machines. The remaining locations serve narrower roles such as device nodes, essential libraries, or data that changes while the system runs. Now, why are the other options incorrect? Option B is incorrect. The /dev directory holds device nodes that represent hardware, not documentation. Option C is incorrect. The /lib directory carries libraries needed by core programs and is not where documentation lives. Option D is incorrect. The /var directory holds changing data such as logs and spool files, so it is not a documentation location. Therefore, A, /usr, is the correct answer.
Play from 31:38 Question 21. In Ansible, which component is responsible for listing the managed hosts and the groups they belong to? Here are the options. Option A. Collection. Option B. Playbook. Option C. Inventory. Option D. Fact. Pause the video now if you want time to think about the answer.
The correct answer is C. Inventory. Ansible needs to know which machines to manage, and the inventory supplies that map of hosts and groups, either as a static file or generated dynamically. Other pieces of Ansible describe work to run, bundled content, or data collected from targets. Now, why are the other options incorrect? Option A is incorrect. Collections package reusable content such as modules, roles, and plugins, not lists of machines. Option B is incorrect. A playbook defines the plays and tasks to run, and relies on an inventory to know where to run them. Option D is incorrect. Facts are details gathered from managed hosts at run time, not a list of the hosts themselves. Therefore, C, Inventory, is the correct answer.
Play from 33:03 Question 22. A security team at a regional bank is defending a rule that forces passwords to expire regularly. What is the primary purpose of such a policy? Here are the options. Option A. Making users move to an authentication method that needs no password. Option B. Raising the strength and complexity of the passwords people choose. Option C. Limiting how long a leaked or otherwise exposed password stays usable. Option D. Preventing people from recycling the same passwords over and over. Pause the video now if you want time to think about the answer.
The correct answer is C. Limiting how long a leaked or otherwise exposed password stays usable. Forced rotation is a damage-control measure. If a credential has been stolen or leaked without anyone noticing, a scheduled change cuts short the period in which an attacker can use it. Expiration by itself says nothing about how strong a new password is, and it does not change the login method. Now, why are the other options incorrect? Option A is incorrect. Expiration still relies on passwords; it does not move anyone to passwordless sign-in. Option B is incorrect. Rotation does not make a password stronger; complexity rules are a separate setting. Option D is incorrect. Blocking reuse is the job of a password history setting, not the main aim of expiration. Therefore, C, Limiting how long a leaked or otherwise exposed password stays usable, is the correct answer.
Play from 34:55 Question 23. How would you most accurately describe a webhook? Here are the options. Option A. An SNMP-based interface for watching network devices. Option B. A way of moving confidential data between two systems. Option C. A callback delivered over HTTP when a particular event occurs. Option D. A login mechanism used between web servers. Pause the video now if you want time to think about the answer.
The correct answer is C. A callback delivered over HTTP when a particular event occurs. One system registers a URL, and when something happens the other system sends an HTTP request to that address with details of the event. This push model lets services react immediately instead of polling, which is why it is used for event-driven automation. Now, why are the other options incorrect? Option A is incorrect. SNMP is a separate management protocol, and webhooks do not rely on it. Option B is incorrect. Webhooks can carry sensitive content, but that is not what defines them; the event callback is. Option D is incorrect. Webhooks are notifications, not an authentication scheme, though they may be paired with one. Therefore, C, A callback delivered over HTTP when a particular event occurs, is the correct answer.
Play from 36:36 Question 24. Which command would give an administrator the most complete hardware inventory of a Linux machine? Here are the options. Option A. lscpu. Option B. dmesg. Option C. lsmod. Option D. dmidecode. Pause the video now if you want time to think about the answer.
The correct answer is D. dmidecode. Firmware tables hold details about the BIOS, motherboard, processor, memory modules, and more, and dmidecode reads and prints them in readable form. That makes it the broadest source of hardware information among these tools, which each cover only a narrow slice. Now, why are the other options incorrect? Option A is incorrect. The lscpu command describes only the processor, not the whole machine. Option B is incorrect. The dmesg command prints kernel and boot messages, which are not a structured inventory. Option C is incorrect. The lsmod command lists loaded kernel modules, which are software, not hardware. Therefore, D, dmidecode, is the correct answer.
Play from 37:59 Question 25. A support engineer at an insurance company plans to use a public generative AI service for some work. Which of these is a responsible use? Here are the options. Option A. Asking it to audit the security settings of production server configuration files. Option B. Asking it to write regular expressions using sample data that has been anonymized. Option C. Running a lint pass on confidential proprietary code taken from the company Git repository. Option D. Having it correct spelling and formatting across files of patient medical records. Pause the video now if you want time to think about the answer.
The correct answer is B. Asking it to write regular expressions using sample data that has been anonymized. A public service can be used safely only when nothing sensitive is submitted. Anonymized samples carry no private details, and the result is just a text pattern, so there is no privacy or confidentiality exposure. Each other task would send protected or confidential material to an outside provider. Now, why are the other options incorrect? Option A is incorrect. Configuration files reveal details about internal infrastructure and security posture, which should not be shared with a public service. Option C is incorrect. Proprietary source code is confidential intellectual property and should not be submitted to public AI tools. Option D is incorrect. Medical records are protected health information under privacy rules, so sending them to a public service would be irresponsible. Therefore, B, Asking it to write regular expressions using sample data that has been anonymized, is the correct answer.
Play from 39:59 Question 26. Which description fits Ansible best? Here are the options. Option A. A monitoring product for cloud infrastructure. Option B. A CI/CD platform that automates builds through pipelines. Option C. An automation tool driven by playbooks written in YAML. Option D. A configuration management product that uses its own declarative language built on Ruby. Pause the video now if you want time to think about the answer.
The correct answer is C. An automation tool driven by playbooks written in YAML. Ansible describes desired work in readable YAML playbooks, so no custom programming language is needed. It focuses on configuration and automation, not on observing systems or running build pipelines, even though it can be called from pipeline jobs. Now, why are the other options incorrect? Option A is incorrect. Ansible automates configuration changes and is not a tool for monitoring cloud resources. Option B is incorrect. Ansible is not a pipeline platform, although it can be one step inside a CI/CD workflow. Option D is incorrect. The Ruby-based language description fits other tools; Ansible uses YAML instead. Therefore, C, An automation tool driven by playbooks written in YAML, is the correct answer.
Play from 41:42 Question 27. Which statement best defines journald on a systemd-based Linux host? Here are the options. Option A. A daemon that saves audit records onto disk. Option B. A facility that writes crash dumps when the kernel fails. Option C. A systemd service that gathers and keeps log messages. Option D. A service that maintains the journal of a filesystem. Pause the video now if you want time to think about the answer.
The correct answer is C. A systemd service that gathers and keeps log messages. Journald is the logging component of systemd. It receives messages from the kernel, services, and applications and stores them in a structured, searchable form. Its name is easy to confuse with other journaling and recording features, which are handled by different software. Now, why are the other options incorrect? Option A is incorrect. Audit records are written by auditd, although journald may also receive some of them. Option B is incorrect. Crash dumps after a kernel failure come from kdump, not journald. Option D is incorrect. Filesystem journaling, as in ext4 or XFS, is part of the filesystem driver and is unrelated to journald. Therefore, C, A systemd service that gathers and keeps log messages, is the correct answer.
Play from 43:25 Question 28. A monitoring engineer needs the term for gathering events from many systems into one central place. Which practice does this describe? Here are the options. Option A. Threshold monitoring. Option B. Log aggregation. Option C. Webhooks. Option D. Health checks. Pause the video now if you want time to think about the answer.
The correct answer is B. Log aggregation. Collecting records from many sources into one searchable location is what aggregation means for logs. It makes correlation and analysis easier than visiting each machine. The other terms cover alerting on limits, notifications, and status probes. Now, why are the other options incorrect? Option A is incorrect. Threshold monitoring raises alerts when a metric crosses a limit and does not centralize events. Option C is incorrect. Webhooks are event callbacks, not a way to pool log data. Option D is incorrect. Health checks test whether a service is up and do not gather events in one place. Therefore, B, Log aggregation, is the correct answer.
Play from 44:55 Question 29. An engineer at a hosting provider plans to live-migrate running virtual machines between two hypervisor hosts. Which two properties must be the same on both hosts? (Choose two). Here are the options. Option A. Available memory. Option B. Disk storage path. Option C. USB ports. Option D. Network speed. Option E. CPU architecture. Option F. Available swap. Pause the video now if you want time to think about the answer.
The correct answers are B. Disk storage path, and E. CPU architecture. A guest in motion keeps executing the same instructions on the new host, so both processors must share a compatible architecture. The destination also has to open the same disk images, which means the storage must be reachable at the same path on both sides. Other resources only need to be adequate, not identical. Now, why are the other options incorrect? Option A is incorrect. The destination merely needs enough free memory for the guest, and the amounts do not have to match. Option C is incorrect. USB ports are peripheral hardware and have no bearing on migration. Option D is incorrect. Link speed affects how fast the migration finishes, but it does not need to be the same. Option F is incorrect. Swap is a local host resource, so its size does not have to match between hosts. Therefore, B and E are the correct answers.
Play from 46:44 Question 30. A platform engineer is writing a Dockerfile and wants the program /usr/sbin/queue-agent to run whenever a container from the image starts. Which instruction does this? Here are the options. Option A. EXPOSE. Option B. ONBUILD. Option C. FROM. Option D. ENTRYPOINT. Pause the video now if you want time to think about the answer.
The correct answer is D. ENTRYPOINT. The instruction that defines the main process launched at container start is the entrypoint, so the program named there runs automatically each time. The remaining instructions choose a base image, declare ports, or register triggers for later builds. Now, why are the other options incorrect? Option A is incorrect. EXPOSE only documents which ports the container listens on and starts nothing. Option B is incorrect. ONBUILD sets triggers that fire when the image is used as a base for another build, not at container start. Option C is incorrect. FROM selects the base image and does not launch any process. Therefore, D, ENTRYPOINT, is the correct answer.
Play from 48:13 Question 31. A junior sysadmin at a logistics firm starts a job with the command nohup ping example.org & and now wants to bring that job back to the current terminal. Which command should be run? Here are the options. Option A. jobs. Option B. fg. Option C. renice. Option D. exec. Pause the video now if you want time to think about the answer.
The correct answer is B. fg. A job that was sent to the background with an ampersand is returned to interactive control by moving it to the foreground. The other utilities only list jobs, change scheduling priority, or swap out the shell image. Now, why are the other options incorrect? Option A is incorrect. This only lists background jobs and does not attach any of them to the terminal. Option C is incorrect. This changes the scheduling priority of a process and has no effect on terminal attachment. Option D is incorrect. This replaces the running shell with another program instead of resuming a background job. Therefore, B, fg, is the correct answer.
Play from 49:34 Question 32. On a hosting company's Linux server, which of these mount points is a virtual filesystem whose contents disappear at reboot because they exist only in memory? Here are the options. Option A. /var. Option B. /proc. Option C. /usr. Option D. /boot. Pause the video now if you want time to think about the answer.
The correct answer is B. /proc. Kernel and process information is generated on the fly and is never written to disk, so this pseudo filesystem is rebuilt every time the machine starts. Directories backed by real storage keep their data across reboots. Now, why are the other options incorrect? Option A is incorrect. This directory sits on disk and keeps logs, spools, and caches across reboots. Option C is incorrect. This directory is on disk and holds installed programs and libraries that persist. Option D is incorrect. This directory is on disk and stores the kernel and bootloader files that persist. Therefore, B, /proc, is the correct answer.
Play from 51:01 Question 33. A data science team at a hospital is preparing material to train an internal model. Which choice is an example of a good AI practice? Here are the options. Option A. Always running a linter on proprietary source code. Option B. Drawing samples only from a group of closely similar users when building the model. Option C. Removing or masking sensitive data. Option D. Pasting content straight into a terminal without checking it. Pause the video now if you want time to think about the answer.
The correct answer is C. Removing or masking sensitive data. Protecting privacy comes first when data feeds a model. Scrubbing or masking personal and confidential fields beforehand keeps that information from leaking through model output and helps avoid compliance problems. Now, why are the other options incorrect? Option A is incorrect. Linting is a code quality check and is not a data protection practice for AI; the word always also makes it an unreasonable rule. Option B is incorrect. Sampling only similar users produces a biased, unrepresentative model instead of a sound one. Option D is incorrect. Pasting unchecked content into a terminal is risky and could run harmful or unintended commands. Therefore, C, Removing or masking sensitive data, is the correct answer.
Play from 52:46 Question 34. A company runs Linux servers that must let staff sign in with their existing Windows domain accounts. Which technology provides this authentication? Here are the options. Option A. PAM. Option B. SSH Daemon. Option C. Samba. Option D. Kerberos. Pause the video now if you want time to think about the answer.
The correct answer is D. Kerberos. Windows domains rely on a ticket-based network authentication protocol, and Linux hosts use that same protocol to verify domain users. The other choices either provide a framework, a remote access service, or file sharing rather than the domain authentication method itself. Now, why are the other options incorrect? Option A is incorrect. PAM is a local framework that calls authentication modules but is not the domain protocol itself. Option B is incorrect. The SSH daemon provides remote login and is not designed to authenticate against a Windows domain on its own. Option C is incorrect. Samba provides file and print sharing and domain integration, but the underlying authentication protocol is something else. Therefore, D, Kerberos, is the correct answer.
Play from 54:22 Question 35. A new hire on a help desk team needs to alter who may read, write, or execute an existing file on a Linux box. Which command does that? Here are the options. Option A. umask. Option B. chgrp. Option C. chown. Option D. chmod. Pause the video now if you want time to think about the answer.
The correct answer is D. chmod. The read, write, and execute settings for the owner, group, and others make up a file's mode, and the mode is edited with this one utility. The remaining commands deal with ownership or with defaults for newly created files. Now, why are the other options incorrect? Option A is incorrect. This sets the default permission mask for newly created files and does not change an existing file. Option B is incorrect. This changes the group that owns a file, not its permission bits. Option C is incorrect. This changes the owning user of a file, not its permission bits. Therefore, D, chmod, is the correct answer.
Play from 55:42 Question 36. A security team at a bank wants a recognized set of hardening guidelines for configuring operating systems and applications on its Linux servers according to security best practices. Which reference should they follow? Here are the options. Option A. CVE. Option B. CIS Benchmarks. Option C. GDPR. Option D. ISO 27001. Pause the video now if you want time to think about the answer.
The correct answer is B. CIS Benchmarks. Peer-reviewed configuration guides published by the Center for Internet Security give concrete hardening steps for operating systems and software. The other items are a vulnerability numbering scheme, a privacy law, and a management standard, so none of them gives configuration settings. Now, why are the other options incorrect? Option A is incorrect. CVE is an identifier system for known vulnerabilities, not a configuration guide. Option C is incorrect. GDPR is a data protection regulation and does not give system hardening settings. Option D is incorrect. ISO 27001 is an information security management standard and not a detailed configuration baseline. Therefore, B, CIS Benchmarks, is the correct answer.
Play from 57:24 Question 37. Which protocol would a network team at a university use to poll routers and switches for health and performance information? Here are the options. Option A. SMTP. Option B. DHCP. Option C. SNMP. Option D. DNS. Pause the video now if you want time to think about the answer.
The correct answer is C. SNMP. Polling devices for their status, counters, and health data is the job of the management protocol designed for exactly that. The other protocols handle mail delivery, address assignment, and name resolution. Now, why are the other options incorrect? Option A is incorrect. SMTP transfers email and does not report on device health. Option B is incorrect. DHCP hands out IP addresses and does not monitor devices. Option D is incorrect. DNS resolves names to addresses and does not monitor devices. Therefore, C, SNMP, is the correct answer.
Play from 58:46 Question 38. A student at a coding bootcamp reads several statements about Python 3. Which statement is accurate? Here are the options. Option A. Programs written for Python 2 all run on it unchanged. Option B. It produces binaries that are compatible with Java. Option C. Functionality can be added to it by means of modules. Option D. Its source code is proprietary and closed. Pause the video now if you want time to think about the answer.
The correct answer is C. Functionality can be added to it by means of modules. The language is built to grow through importable modules and third-party packages. The other claims are wrong: it is open source, it broke compatibility with the previous major version, and it is a separate runtime from Java. Now, why are the other options incorrect? Option A is incorrect. Python 3 deliberately broke compatibility with Python 2, so older code often needs changes. Option B is incorrect. Python and Java use separate runtimes, and Python output is not binary compatible with Java. Option D is incorrect. Python is open source, not closed or proprietary. Therefore, C, Functionality can be added to it by means of modules, is the correct answer.
Play from 1:00:20 Question 39. A data analyst wants to reuse code stored in a separate file from inside a Python script. Which keyword makes that module available to the script? Here are the options. Option A. def. Option B. __name__. Option C. import. Option D. __init__. Pause the video now if you want time to think about the answer.
The correct answer is C. import. Loading a module into a script is done with the statement made for that purpose, which gives access to outside libraries and code packages. The remaining names define functions or hold special values, so they do not load modules. Now, why are the other options incorrect? Option A is incorrect. def defines a function and does not load a module. Option B is incorrect. __name__ is a special variable describing the execution context of a script, not a loader. Option D is incorrect. __init__ is a special method for initializing class instances and does not load modules. Therefore, C, import, is the correct answer.
Play from 1:01:44 Question 40. A large university keeps its accounts in a tree-structured directory spread over several servers. Which protocol do clients use to look up users, groups, computers, and organizational units there? Here are the options. Option A. KRB-5. Option B. LDAP. Option C. SMB. Option D. TLS. Pause the video now if you want time to think about the answer.
The correct answer is B. LDAP. Querying a hierarchical directory of identities and organizational units is the purpose of the lightweight directory access protocol, which is common for centralized identity management. The other protocols handle ticket authentication, file sharing, and encryption. Now, why are the other options incorrect? Option A is incorrect. Kerberos authenticates principals with tickets and is not a directory query protocol. Option C is incorrect. SMB shares files and printers, not directory entries. Option D is incorrect. TLS secures connections with encryption and does not serve directory data. Therefore, B, LDAP, is the correct answer.
Play from 1:03:10 Question 41. A trainee at an internet provider is exploring the Linux directory tree and wants the folder that holds the operating system's own commands and programs. Which directory is it? Here are the options. Option A. /etc. Option B. /bin. Option C. /sys. Option D. /var. Pause the video now if you want time to think about the answer.
The correct answer is B. /bin. Essential command binaries that every user and the system rely on live in this standard directory of the filesystem hierarchy. The other directories hold configuration, kernel interfaces, or variable data. Now, why are the other options incorrect? Option A is incorrect. /etc holds configuration files, not executables. Option C is incorrect. /sys is a virtual interface to kernel and device information, not a place for utilities. Option D is incorrect. /var holds variable data such as logs and spools, not core executables. Therefore, B, /bin, is the correct answer.
Play from 1:04:41 Question 42. During a boot troubleshooting class, an instructor asks what purpose initrd serves. Which description is accurate? Here are the options. Option A. It stores the trusted certificates and private keys of the machine. Option B. It must be present before anyone can connect over SSH. Option C. It holds the essential kernel modules and drivers needed to bring the system up. Option D. It is needed to set up a random number device on the system. Pause the video now if you want time to think about the answer.
The correct answer is C. It holds the essential kernel modules and drivers needed to bring the system up. This temporary root image is loaded early by the bootloader and supplies the drivers required to reach the real root filesystem. Without it the kernel might be unable to mount its storage and finish booting. Now, why are the other options incorrect? Option A is incorrect. Certificates and keys are not stored in the initial RAM disk. Option B is incorrect. SSH access is not related to the initial RAM disk, since SSH starts after boot. Option D is incorrect. Random device setup is not the role of the initial RAM disk. Therefore, C, It holds the essential kernel modules and drivers needed to bring the system up, is the correct answer.
Play from 1:06:25 Question 43. In which format are Ansible playbooks normally written? Here are the options. Option A. JSON. Option B. XML. Option C. CSV. Option D. YAML. Pause the video now if you want time to think about the answer.
The correct answer is D. YAML. Playbooks use a human-readable, indentation-based data format that expresses plays, tasks, and roles cleanly. The other formats are not the normal way to author them. Now, why are the other options incorrect? Option A is incorrect. JSON is a data format that Ansible can read in places, but playbooks are normally not written in it. Option B is incorrect. XML is not used to write playbooks. Option C is incorrect. CSV is a flat table format and cannot describe plays and tasks. Therefore, D, YAML, is the correct answer.
Play from 1:07:39 Question 44. A lab technician needs a virtual machine to attach to the physical network on its own, independent of the host's own connection. Which virtual network type should be selected? Here are the options. Option A. Bridged. Option B. NAT. Option C. Internal. Option D. Host-only. Pause the video now if you want time to think about the answer.
The correct answer is A. Bridged. Bridging places the virtual machine directly on the physical LAN as a separate device that gets its own address from the network. The other modes route through the host or confine traffic to virtual links. Now, why are the other options incorrect? Option B is incorrect. NAT shares the host's address and connection rather than acting independently. Option C is incorrect. An internal network connects only virtual machines with one another and not the physical network. Option D is incorrect. Host-only networking limits traffic to the host and its virtual machines. Therefore, A, Bridged, is the correct answer.
Play from 1:09:01 Question 45. A team lead at a software company asks what playbooks are used for on Linux systems. Which choice describes that use best? Here are the options. Option A. Providing the security details a container needs. Option B. Defining the tasks and settings needed to roll out an application. Option C. Supplying the instructions for setting up version control on a repository. Option D. Providing the storage volume details required by a pod. Pause the video now if you want time to think about the answer.
The correct answer is B. Defining the tasks and settings needed to roll out an application. Automation playbooks describe a set of tasks and configuration that bring systems to a desired state, such as deploying software. The other choices describe unrelated areas like version control, container security, and pod storage. Now, why are the other options incorrect? Option A is incorrect. Container security details are not the purpose of a playbook. Option C is incorrect. Version control setup is not the job of a playbook. Option D is incorrect. Pod storage volume details are defined in Kubernetes manifests, not playbooks. Therefore, B, Defining the tasks and settings needed to roll out an application, is the correct answer.
