XK0 002

Exam Name: Linux+
Exam Type: CompTIA

Exam Code: XK0-002 Total Questions: 736
Question: 1
On an NIS client, the following is a portion of the output of cat /etc/passwd:
+Joe::::::::
+Sam::::::::
+:*::::::::/bin/false
Which of the following is true for all users other than Joe and Sam?
A. They have full access.

B. They are denied access.
C. They are granted limited access.
D. They gain access after being prompted for a shell.
Answer: B
Question: 2
How can a user view an X Window from a remote system on their local system?
A. from the local system:

export DISPLAY=local:0.0
B. from the remote system:
export DISPLAY=local:0.0
C. from the local system:
export DISPLAY=remote:0.0
D. from the remote system:
export DISPLAY=remote:0.0
Answer: B
Question: 3
Which of the following commands can be used to confirm that the FTP server is listening?
A. netstat -a ftp
B. netstat | grep ftp
C. netstat -u | grep ftp
D. netstat -a | grep ftp
Answer: D
Explanation:
-a Display all connections and listening ports
Question: 4
When a RAID 5
array is configured with a hot-spare disk under Linux, which of the following is the minimum
number of drives required?
A. 2
B. 3
C. 4
D. 5
Answer: C
Page 1 of 217
Exam Name: Linux+
Exam Type: CompTIA
Explanation:
Raid 5 requires 3 disks. Hotspare 1.
Question: 5
A system administrator wants to see if an RPM package is installed on a user workstation. Which
of the following commands should be used?
A. rpm -query <filename>

B. rpmfind <name of package>
C. rpm -qa | grep <name of package>
D. find -name rpm | grep <filename>
Answer: C
Explanation:
-q query, -a lists all installed packages
Question: 6
Which of the following can be used to determine who has scheduled a job?
A. who
B. whodo
C. at -d
D. at -l
Answer: D
Question: 7
Which of the following encryption schemes is the LEAST secure?
A. DES
B. MD5
C. AES
D. Blowfish
Answer: A
Explanation:
The Data Encryption Standard, a block cipher with 64-bit blocks and a 56-bit key
Like MD4, it produces a 128-bit hash. For details see RFC 1321
AES ciphers use a 128-bit block and 128, 192 or 256-bit keys
A block cipher using 64-bit blocks and keys of up to 448 bits
Question: 8
A Linux machine has a local address of 192.168.1.1 with subnet mask of 255.255.255.0. All
services are currently denied. Which of the following lines should be appended to hosts.allow file
to permit access to the Web service on the local subnet.
A. httpd: 192.168.1.0/24
B. ALL: 192.168.1.255/24
C. ALL except httpd: 192.168.1.1/24
D. 192.168.1.255/255.255.255.0:httpd
Answer: A
Page 2 of 217
Exam Name: Linux+
Exam Type: CompTIA
Explanation:
To permit access to the Web service, you need to permit access to the HTTP daemon (httpd).
You then need to specify which IP addresses can access it. 192.168.1.0 is the network address
of a host with an IP address of 192.168.1.1. The statement 'httpd: 192.168.1.' (without the 0) will
allow all machines in the 192.168.1.0 subnet access to the Web service.
Reference:
Roderick W. Smith. Sybex Linux + Study Guide: Page 364.
Incorrect Answers:
B. The ALL statement is invalid. It can only be used in the client list to mean 'all' IP addresses.
C. The ALL statement is invalid. It can only be used in the client list to mean 'all' IP addresses.
D. The server service come before the client list.
Question: 9
A Linux administrator is about to install a Linux server. The server has 256MB of RAM. Which of
the following sizes of the swap partition is generally recommended?
A. 128MB
B. 256MB
C. 512MB
D. 1024MB
Answer: C
Explanation:
swap partitions are used to support virtual memory. In other words, data is written to a swap
partition when there is not enough RAM to store the data your system is processing. If you are
unsure about what size swap partition to create, make it twice the amount of RAM on your
machine (but no larger than 2 GB). It must be of type swap.
Question: 10
Which driver, if any, is required to support L3 cache on the system processor?
A. msr.o
B. mtrr.o
C. cache.o
D. No driver is required.
Answer: D
Question: 11
A user wants to remotely connect to a Linux system to transfer files from an oversea IP address.
Which of the following programs allows the user to do this securely?
A. rcp
B. ftp
C. sftp
D. Telnet
Answer: C
Explanation:
sftp = secure ftp
Page 3 of 217
Exam Name: Linux+
Exam Type: CompTIA
Question: 12
When the command mke2fs -j is run, what type of system is created?
A. ext2
B. ext3
C. jfs
D. xfs
Answer: B
Explanation:
Simply run mke2fs -j /dev/hdXX to create a new ext3 filesystem on that device.
Question: 13
In addition to selected packages and partition maps, which of the following should also be
documented during a Linux server installation?
A. System hardware and user passwords

B. Root password and performance baseline
C. Daemon configuration and performance baseline
D. System hardware and daemon configuration
Answer: D
Question: 14
Which of the following commands can be run to determine which package owns /etc/exports?
A. rpm -qf /etc/exports

B. rpm -ql /etc/exports
C. rpm --file /etc/exports
D. rpm --verify /etc/exports
Answer: A
Explanation:
-q = query, -f = Lists the package that owns the specified file.
Question: 15
The rot user types 'echo $PATH' and sees the following output:
.:/bin:/usr/bin:/sbin:/usr/X11R6/bin:/usr/src
Which of the following parts of this path is considered to be a security risk?
A. .
B. /sbin
C. /usr/src
D. /usr/X11R6/bin
Answer: A
Explanation:
A common mistake in the past (?) was to keep '.' in the root's path. Malicious hacker makes
program 'ls' in his home directory. If root makes
Page 4 of 217
Exam Name: Linux+
Exam Type: CompTIA
# cd ~hacker
# ls
he executes ls command of hacker's.
Question: 16
Which of the following commands can be used to mount a Samba share?
A. smbmount //servername/sharename /mountdirectory -o username=mywindowsusername,

password=mywindowspassword
B. mount -t samba /servername/sharename /mountdirectory -o
username=mywindowsusername, password=mywindowspassword
C. mount -t smbf \\servername\sharename /mountdirectory -o username=mywindowsusername,
password=mywindowspassword
D. smbmount -t smbfs //servername/sharename /mountdirectory -o
username=mywindowsusername, password=mywindowspassword
Answer: A
Explanation:
To solve this problem, Samba also provides smbmount. As it's name implies smbmount is used
to mount filesystems being shared using SMB, and has a syntax similar to the tradition Linux
mount command: smbmount //server/service /mountpoint
Question: 17
Once a Linux Installation Disk image has been downloaded, which of the following is the next
step?
A. Run /sbin/verify_iso
B. Run chkdsk on the .iso system image
C. Verify the checksum match for the .iso
D. Check the file size to ensure the file is uncorrupted
Answer: C
Explanation:
Each package has an individual checksum that you can verify with the following command, where
package_name is the name of the package you downloaded:
shell> md5sum package_name
Question: 18
What is the result of the following command?
Sendmail -qp5m
A. Processes mail in blocks of five messages

B. Quits and restarts sendmail every five minutes
C. Limits queue to five messages
D. Processes mail every five minutes
Answer: D
Explanation:
-q[time] process saved messages in the queue at given intervals. 5m = every 5 minutes.
Question: 19
Page 5 of 217
Exam Name: Linux+
Exam Type: CompTIA
A Linux technician would like to change the default lpr queue to print to a new printer. Which file
should be edited to make this change?
A. /etc/vprint
B. /etc/printcap
C. /etc/lpd.conf
D. /etc/printers/default.conf
Answer: B
Explanation:
The lpd system is configured via /etc/printcap. Before configuring /etc/printcap it is a good idea to
make a printer test, to check if the physical connection between your computer and the printer is
working
Question: 20
Which of the following commands can be used to configure a router to reject the address for the
192.168.100.0/24 network using the route command?
A. route del -net 192.168.100.0 netmask 255.255.255.0 deny

B. route add -net 192.168.100.0 netmask 255.255.255.0 deny
C. route del -net 192.168.100.0 netmask 255.255.255.0 reject
D. route add -net 192.168.100.0 netmask 255.255.255.0 reject
Answer: D
Explanation:
route [-v] [-A family] add [-net|-host] target [netmask Nm] [gw Gw] [metric N] [mss M] [window W]
[irtt I] [reject] [mod] [dyn] [reinstate] [[dev]
If]
reject install a blocking route, which will force a route lookup to fail. This is for example used to
mask out networks before using the default route.
This is NOT for firewalling.
Question: 21
A company wants to install a Linux server to act as an internal file and print server. They have a
limited budget. Which of the following is the MOST important hardware investment for this user?
A. Hard drive
B. Processor
C. Video card
D. IEEE-1394 card
Answer: A
Question: 22
When using fdisk and a partition type of 85 is selected, which kind of partition will be created?
A. Swap
B. Reiserfs
C. Linux native
D. Linux extended
Answer: D
Page 6 of 217
Exam Name: Linux+
Exam Type: CompTIA
Explanation:
82 Linux Swap
83 Linux native
85 Linux extended
Question: 23
The man page for the 'ls' command states:
The full documentation for ls is maintained as a Texinfo manual.
Which of the following commands will retrieve the full documentation for the ls command?
A. Info ls
B. Infoman ls
C. Text ls
D. Man -info ls
Answer: A
Explanation:
Texinfo is a documentation system that uses a single source file to produce both online
information and printed output. It is primarily designed for writing software manuals.
For a full description of the Texinfo language and associated tools, please see the Texinfo
manual (written in Texinfo itself). Most likely, running this command from your shell: info texinfo
Question: 24
A user needs to attach a Linux laptop to a wireless access point using 802.11b. Which of the
following applications would allow the user to configure the WEP (Wired Equivalent Privacy) key?
A. WINE
B. wlancfg
C. wl-keygen
D. netconfig
Answer: B
Question: 25
When the application 'top' is used, which of the following interactive commands in 'top' will display
the process with highest memory usage?
A. L
B. I
C. R
D. M
Answer: C
Question: 26
Which of the following commands will display the last 15 lines of an application log?
A. Tail 15 filename
B. Cat filename | less 15
C. Grep -l 15 | cat
D. Cat filename | more 15
Page 7 of 217
Exam Name: Linux+
Exam Type: CompTIA
Answer: A
Explanation:
tail [OPTION]... [FILE]...
-n, --lines=N output the last N lines, instead of the last 10
Question: 27
Which of the following commands will allow a system administrator to determine which user have
attempted to logon but failed?
A. Lastb
B. Last
C. Cat /var/log/wtmp
D. Cat /var/log/btmp
Answer: A
Explanation:
Lastb is the same as last, except that by default it shows a log of the file /var/log/btmp, which
contains all the bad login attempts.
Question: 28
Which of the following commands is used to check the current iptables configuration?
A. iptables -LFZ
B. iptables -n -L
C. iptables natadd
D. iptables -A -D -C
Answer: B
Explanation:
-n, --numeric Numeric output. IP addresses and port numbers will be printed in numeric format.
By default, the program will try to display them as host names, network names, or services
(whenever applicable).
-L, --list List all rules in the selected chain. If no chain is selected, all chains are listed. It is legal to
specify the -Z (zero) option as well, in which case the chain(s) will be atomically listed and
zeroed. The exact output is effected by the other arguments given.
Question: 29
Which of the following commands allows an administrator to add an existing user's phone number
to the system as a comment?
A. Usermod -c 555-1234 bsmith

B. Modinfo -u bsmith 555-1234
C. Useradd -u bsmith -c 555-1234
D. Groupadd -u bsmith -c 555-1234
Answer: A
Explanation:
usermod [-c comment] [-d home_dir [-m]]
Question: 30
Suppose b is a link to another file. The output of ls -l b is:
Page 8 of 217
Exam Name: Linux+
Exam Type: CompTIA
lrwxrwxrwx 1 root root 1 Jun 13 12:44 b -> a
Which of the following is the effect if root issues the command 'chmod 600 b'
A. The user will receive an error message.

B. Permissions listed for oth the symbolic link and the target file are changed.
C. Permissions for the target file are set to 600 while permissions listed for the link are
unchanged.
D. Permissions associated with the symbolic link itself are set to 600 while permissions for the
target file are unchanged.
Answer: C
Explanation:
chmodnever changes the permissions of symbolic links. This is not a problem since the
permissions of symbolic links are never used. However, for each symbolic link listed on the
command line, chmod changes the permissions of the pointed-to file. In contrast, chmod ignores
symbolic links encountered during recursive directory traversals
Question: 31
Which of the following commands can be used to gather information about the CPU found during
boot?
A. dmesg | grep CPU

B. cat /proc/cpuinfo | grep CPU
C. find /var/log/dmesg | grep CPU
D. cat /var/log/messages | grep CPU
Answer: A
Explanation:
dmesg is used to examine or control the kernel ring buffer. The program helps users to print out
their bootup messages.
Question: 32
Which of the following is the correct way to specify the algorithm for an SSH (Secure Shell)
connection to 10.10.10.1?
A. ssh -a 3des 10.10.10.1

B. ssh -c 3des 10.10.10.1
C. ssh -alg=3des 10.10.10.1
D. ssh -crypto=3des 10.10.10.1
Answer: B
Explanation:
-c blowfish|3des|des Selects the cipher to use for encrypting the session.
Question: 33
Which of the following daemons could be used for printing on a Linux system?
A. lprd
B. sane
C. cupsd
Page 9 of 217
Exam Name: Linux+
Exam Type: CompTIA
D. postfix
Answer: C
Explanation:
cupsd - common unix printing system daemon
Question: 34
A new router is installed to share the Internet connection for all users on the LAN (Local Area
Network).
The router has an IP address of 10.1.1.1 on the LAN-side interface. Which of the following
commands on the client allows Internet access on the Linux workstations?
A. route add default gw 10.1.1.1

B. route change gateway 10.1.1.1
C. ifconfig eth0 dstaddr 10.1.1.1
D. ifconfig eth0 gateway 10.1.1.1
Answer: A
Explanation:
route[-v] [-A family] add [-net|-host] target [netmask Nm] [gw Gw] [metric N] [mss M] [window W]
[irtt I]
Question: 35
Which of the following modules is the first to load to provide any USB functionality?
A. usbmain
B. usbcore
C. usb-ohci
D. usb-storage
Answer: B
Question: 36
A newly created user, john, reports that he has access to the file '/var/mail/joe', but should not
have this access. Which of the following MOST likely caused this?
A. User john and joe are sharing a home directory.

B. User john is forwarding all of his mail to joe.
C. User john was created with the same UID (User ID) as the removed user named joe.
D. User joe's email is still cached by the system although his UID (User ID) has been removed.
Answer: C
Question: 37
A Linux system administrator needs to edit the quotas for a user. Which of the following
commands can be used to do this?
A. Edquota user
B. quota -e user
C. vi /quota.user
D. vi /~user/.quota
Answer: A
Page 10 of 217
Exam Name: Linux+
Exam Type: CompTIA
Explanation:
edquota [ -p protoname ] [ -ug ] [ -r ] [ -F format-name ] username...
Question: 38
Which of the following commands will add a user to a group from a Telnet session?
A. Useradd
B. Groupuse
C. Groupset
D. User2group
Answer: A
Question: 39
How could a user arrange for a command to be run daily at a certain time on a Linux system,
using the cron service?
A. Edit /etc/periodic/cron.daily
B. Specify the schedule using entries in a file at /etc/cron.conf
C. Use a text editor to create a file in /var/cron that specifies the schedule.
D. Create a file to specify the schedule, and use crontab to install the file.
Answer: D
Explanation:
crontab [file]
A crontab file consists of lines of six fields each. The fields are separated by spaces or tabs. The
first five are integers that specify the following: minute (0-59), hour (0-23), day of the month (1-
31), month of the year (1-12), day of the week (0-6 with 0=Sunday).
Question: 40
Which of the following files can be edited to enable the Telnet service?
A. /bin/init
B. /sbin/init
C. /etc/init.d/telnet
D. /etc/xinetd.d/telnet
Answer: D
Explanation:
Linux is configured to run the Telnet and FTP server, but by default, these services are not
enabled. To enable the telnet these service, login to the server as the root userid and edit the
files:
/etc/xinetd.d/telnet
In this file, find the line for disableand change it from the value "yes" to "no".
Question: 41
Which of the following commands could be used to show the waiting print jobs on printhost using
the CUPS printing system?
A. lpstat -h printhost
B. showqueue -h printhost
C. cups --queue -h printhost
Page 11 of 217
Exam Name: Linux+
Exam Type: CompTIA
D. lpr --list-jobs -h printhost
Answer: A
Explanation:
lpstat [ -E ] [ -h server ] [ -l ] [ -W which-jobs ] [ -a [ destination(s) ] ] [ -c [ class(es) ] [ -d ] [ -o [
destination(s) ] ] [ -p [ printer(s) ] ] [ -r ] [ -R ] [ -s ] [ -t ] [ -u [ user(s) ] ] [ -v [ printer(s) ] ]
-h server Specifies the CUPS server to communicate with.
Question: 42
The administrator suspects the system has been compromised and runs the ps command:
615 ? Ss 0:00 /usr/sbin/sshd

624 ? Ss 0:00 /usr/bin/X11/xfs -daemon
707 ? Ss 0:00 /usr/sbin/cron
709 ? Ss 0:00 /usr/.sbin/httpd
775 ? Ss 0:00 /usr/sbin/X11/xdm
776 tty1 Ss+ 0:00 /sbin/getty 38400 tty1
Which of the following should be investigated?
A. The cron process should have a lower PID (Process ID).

B. The httpd program is not normally in /usr/.sbin.
C. The xfs process should not be run in daemon modes.
D. The getty program should not run with 38400 baud.
Answer: B
Explanation:
/usr/.sbin is a hidden catalog.
Question: 43
A system is very likely compromised if which of the following has occurred?
A. The system is extremely slow

B. The /root file system is full.
C. Some commands behave abnormally
D. One of the hard drivs has crashed
Answer: C
Question: 44
The administrator needs to set permissions on the /tmp directory as follows:
drwxrwxrwt 9 root root 4096 Jun 13 09:42 tmp
Which of the following commands will accomplish this?
A. chmod 0777 /tmp

B. chmod 1777 /tmp
C. chmod 2777 /tmp
D. chmod 4777 /tmp
Answer: B
Page 12 of 217
Exam Name: Linux+
Exam Type: CompTIA
Explanation:
1000 - Turn on sticky bit.
Question: 45
Six Linux servers share a tape library in a different room located 80 meters away. Which of the
following technologies would allow these server to connect directly to the tape library?
A. Differential SCSI
B. Single-Ended SCSI
C. Fibre Channel
D. IEEE-1394
Answer: C
Explanation:
30 meters device to device (copper), 10 kilometers device to device (optical)
Question: 46
Which of the following symbols is added to the beginning of the password field in the /etc/passwd
file so that the user cannot log in?
A. +
B. -
C. !
D. /
Answer: C
Question: 47
On a dual-boot system, which of the following file systems would be accessible from both
Windows and Linux operating system?
A. xfs
B. ufs
C. vfat
D. reiserfs
Answer: C
Question: 48
Which of the following commands could be used to display all recognized drives and all existing
partitions?
A. fdisk -l
B. showdrives
C. ls /dev/disks/*
D. cat /proc/disks
Answer: A
Explanation:
-l List the partition tables for the specified devices and then exit. If no devices are given, those
mentioned in /proc/partitions (if that exists) are used.
Question: 49
Page 13 of 217
Exam Name: Linux+
Exam Type: CompTIA
If a system uses ACPI (Advanced Control and Power Interface), which of the following files would
be edited to map the power button to the desired command?
A. /etc/acpi.conf
B. /etc/modules.conf
C. /etc/acpi/events/power
D. /etc/acpi/powerbutton
Answer: C
Question: 50
The DNS administrator learns that the IP address of one of the Internet root name servers has
been changed. Which is the next course of action?
A. Update the root.hints file.

B. Update the named.root file
C. Update the resolve.conf file
D. Update the in-addr.arpa file.
Answer: A
Question: 51
To which of the following IRQ settings does ttyS1 default on a Linux server?
A. 3
B. 5
C. 4
D. 12
Answer: A
Question: 52
When executed, what type of installation file is created by the following command?
tar cvvjf filename file4 file2 file12
A. jar archieve
B. gzip archieve
C. bzip2 tarball
D. lha tarball
Answer: C
Question: 53
A Linux system will not boot, even in single-user mode, but hard drive diagnostics indicate that
the drive is working properly. Which of the following should be done to repair the file system?
A. Use the custom tool provided by the hard drive manufacturer.

B. Use a bootable Linux medium to boot into Linux and run fsck.
C. Use a bootable Linux medium to boot into Linux and run fdisk.
D. Reinstall Linux from the original install drive and apply all patches.
Answer: B
Explanation:
fsck is used to check and optionally repair a one or more Linux file systems.
Page 14 of 217
Exam Name: Linux+
Exam Type: CompTIA
Question: 54
The MBR (master boot record) created from lilo on a system is corrupt. How can this be fixed?
A. Boot using a rescue disk, verify the lilo.conf file and run "fixboot --mbr -t lilo".
B. Boot using the Linux distribution installation CD and run fsck on the /boot partition.
C. Boot using a rescue disk, verify the lilo.conf file and run "fdisk /mbr"
D. Boot using a live CD distribution and run chroot, verify the lilo.conf, and run lilo.
Answer: D
Question: 55
The company hires a temporary employee and wants to provide limited access to its production
server. Which of the following would accomplish the goal?
A. rbash
B. bash -r
C. exec bash
D. bash -limited
Answer: B
Question: 56
Which of the following commands should be used to allow SSH (Secure Shell) to connect to a
server with IP address 192.168.0.100?
A. sshd -6192.168.0.100
B. ssh -l user 192.168.0.100
C. sshd -l user 192.168.0.100
D. ssh -6 -l user 192.168.0.100
Answer: B
Explanation:
ssh - OpenSSH SSH client (remote login program)
-l login_name Specifies the user to log in as on the remote machine
-6 Forces ssh to use IPv6 addresses only.
Question: 57
The primary usages of the Snort application include which of the following?
A. Intrusion detection, vulnerability assessment, and network mapping.

B. Intrusion detection, virus detection, and malware detection
C. Intrusion detection, password cracking, and network scanning
D. Intrusion detection, packet sniffing, and packet logging
Answer: D
Explanation:
Snort is a lightweight network intrusion detection system, capable of performing real-time traffic
analysis and packet logging on IP networks. It can perform protocol analysis, content
searching/matching and can be used to detect a variety of attacks and probes, such as buffer
overflows, stealth port scans, CGI attacks, SMB probes, OS fingerprinting attempts, and much
more. Snort uses a flexible rules language to describe traffic that it should collect or pass, as well
as a detection engine that utilizes a modular plugin architecture. Snort has a real-time alerting
Page 15 of 217
Exam Name: Linux+
Exam Type: CompTIA
capability as well, incorporating alerting mechanisms for syslog, a user specified file, a UNIX
socket, or WinPopup messages to Windows clients using Samba's smbclient.
Snort has three primary uses. It can be used as a straight packet sniffer like tcpdump, a packet
logger (useful for network traffic debugging, etc), or as a full blown network intrusion detection
system.
Question: 58
Files created in the /home/ourgroup directory need to automatically have group ownership that is
identical to the directory itself. Which of the following actions will accomplish this?
A. Set the SGID bit using 'chmod g+s /home/ourgroup'.

B. Set the sticky bit using 'chmod 2770 /home/ourgroup'.
C. Assign private permissions on the directory using 'chown g+s /home/ourgroup'.
D. Set permanent permissions on the directory by running 'mkdir g+s /home/ourgroup'.
Answer: A
Question: 59
The following command is about to be executed:
Ifconfig eth0192.168.0.120 netmask 255.255.255.0 up
Which of the following will this command accomplish?
A. Sets eth0 to 192.168.0.120

B. Sets eth0 to listen for all addresses.
C. Adds an alias for 192.168.0.120 on eth0.
D. At the next reboot, the eth0 will be set to 192.168.0.120
Answer: A
Question: 60
How can the Apache working directory be set to /home/user/html from the commans line?
A. httpd -d /home/user/html
B. httpd -r /home/user/html
C. httpd --root /home/user/html
D. httpd --directory /home/user/html
Answer: A
Explanation:
httpd [ -X ] [ -R libexecdir ] [ -d serverroot ] [ -f config ] [ -C directive ] [ -c directive ] [ -D
parameter ]
Question: 61
A system administrator routinely needs to see the list of who has logged in and logged out on a
machine as well as their login times. Which of the following commands searches the
"/var/log/wtmp" file and displays who has logged onto the machine and when they logged on?
A. w
B. who
C. last
D. log --list
Page 16 of 217
Exam Name: Linux+
Exam Type: CompTIA
Answer: C
Explanation:
Shows login information about users, hosts, and terminals.
Question: 62
A user wants to copy files in the directory /tmp/tocd to the first recordable CD-ROM (CDRW)
device. Which of the following commands could do this?
A. cdrecord -R /tmp/tocd
B. mkisofs -o /dev/cd /temp/tocd
C. dd if=/tmp/tocd of=/dev/write
D. mkisofs /tmp/tocd | cdrecord dev=0,0,0-
Answer: D
Explanation:
cdrecord [ general options ] dev=device [ track options ] track1...trackn
Question: 63
Review the following Samba configuration file entry:
[global]
workgroup = NT-FAKERS
netbios name = DUDE
security = share
browseable = yes
[public]
guest ok = yes
writeable = yes
security = share
browseable = yes
path = /export/public
Which of the following lines allows the user to access the public share on this server without
authentication?
A. guest ok = yes
B. writeable = yes
C. security = share
D. browseable = yes
Answer: A
Explanation:
The guest ok parameter means access will be permitted as the default guest user
Question: 64
If the /etc/shadow file does not exist when pwconv is run, which of the following occur?
A. The system will give an error message.

B. /etc/passwd is renamed to /etc/shadow and a new soft link is created.
C. Entries in the /etc/passwd file are added to a new /etc/shadow file. The /etc/passwd file is
unchanged.
Page 17 of 217
Exam Name: Linux+
Exam Type: CompTIA
D. Password attributes in /etc/passwd are moved to a corresponding entry in a new /etc/shadow

file.
Answer: D
Explanation:
The pwconv command creates and updates /etc/shadow with information from /etc/passwd. If the
/etc/shadow file does not exist, this command will create /etc/shadow with information from
/etc/passwd. Password attributes (for example, password and aging information) that exist in an
/etc/passwd entry will be moved to the corresponding entry in /etc/shadow.
Question: 65
Which of the following fstab entries will mount a Samba share at boot time?
A. servername:sharename /mountdirectory smbfs

username=windowsusername,password=windowspassword 0 0
B. //servername/sharename /mountdirectory smbfs
C. //servername/sharename /mountdirectory sambafs
D. smbmount //servername/sharename /mountdirectory -o
username=windowsusername,password=windowspassword
Answer: B
Question: 66
Which of the following are the default permission of /tmp?
A. 1777
B. 1755
C. 0755
D. 0222
Answer: A
Question: 67
The network card in the server is on the Linux distributor's HCL (Hardware Compatibility List), but
no binary drivers are provided. The drivers may be downloaded in source code form only. Which
of the following is needed to make these drivers work?
A. The distributor's source code

B. The manufacturer's installation kit
C. The manufacturer's development library
D. The Linux kernel sources for the installed kernel
Answer: D
Question: 68
Which of the following files holds the XFree86 configuration by default?
A. XF86.conf
B. XF86Config
C. XFree86.conf
D. XFree86Config
Page 18 of 217
Exam Name: Linux+
Exam Type: CompTIA
Answer: B
Question: 69
A system administrator has recently downloaded a network analysis toll from a FTP repository.
After installation of the tool, suspicious behavior is noted. How can it be verified that the package
has not been altered?
A. Boot the system from a live CD distribution and run the fsck tool on the partition where the
package is installed.
B. Uninstall the application and re-install it while in single user mode and carefully watch the
install logs for suspicious activity.
C. Download the MD5 hash file from the original FTP site and compare it against the MD5 hash
generated from the downloaded file.
D. Download the MD5 hash file from the original software developer's website and compare it
against the MD5 hash generated from the downloaded file.
Answer: D
Question: 70
A mid-sized technology firm wants a dedicated machine to analyze data from previous client
projects.
Which of the following server packages would MOST likely be installed?
A. KDE
B. PHP
C. MySQL
D. LDAP (Lightweight Directory Access Protocol)
Answer: C
Question: 71
Which of the following commands can be used to verify that an NIS client is reading
authentication information from the NIS server?
A. ypwhich
B. yppasswd
C. nispasswd
D. ypcat passwd
Answer: D
Question: 72
Which of the following files sets the default time zone used by the date command?
A. /etc/timezone
B. /etc/localtime
C. /etc/default_time
D. /etc/defaults/date
Answer: B
Question: 73
The pwconv command does the following?
Page 19 of 217
Exam Name: Linux+
Exam Type: CompTIA
A. It removes the /etc/shadow file and places the encrypted passwords in the second field of the
/etc/passwd file.
B. It removes the /usr/lib/shadow file and places the encrypted passwords in the second field of
the /etc/passwd file.
C. It creates the /etc/shadow file, moves the encrypted passwords into it, and places an x in the
password field of the /etc/passwd file.
D. It creates the /usr/lib/shadow file, moves the encrypted passwords into it, and places an x in
the password field of the /etc/passwd file.
Answer: C
Question: 74
When a user begins to use a shell, the only information showing is the prompt. Which of the
following can be used to determine which commands are available?
A. Man
B. Help
C. Locate
D. Manual
Answer: B
Question: 75
Which of the following services commonly uses Port 139?
A. DNS
B. SMB
C. FTP
D. POP3
Answer: B
Question: 76
Which Apache configuration file controls the mapping of SSL certificates?
A. .htaccess
B. access.conf
C. httpd.conf
D. srm.conf
Answer: C
Question: 77
Which of the following commands will recursively search through all subdirectories from the
current directory for files owned by the root user?
A. find .-uid 0
B. grep -r root .
C. grep -u root .
D. find .-uname root
Answer: A
Question: 78
Page 20 of 217
Exam Name: Linux+
Exam Type: CompTIA
What command should be run in order to add /usr/local/program1/bin to the path and make it
active in the current shell?
A. setpath PATH=$PATH:/usr/local/program1/bin
B. setenv PATH=$PATH: /usr/local/program1/bin
C. export PATH=$PATH: /usr/local/program1/bin
D. PATH=PATH$:/usr/local/program1/bin
Answer: C
Question: 79
An error was returned stating that the proper MPEG-2 codec could not be found. Once the correct
codec is received, where should it be placed?
A. In the user's home directory

B. As an accessible device in /dev
C. In the application's specific codec directory
D. In the program's source directory, then compiled into it.
Answer: C
Question: 80
How can a Linux user use vi to edit the first 30 lines of a 60-line file and replace all occurrences of
'test' to 'TEST'?
A. :s/test/TEST/g
B. :/s/test/TEST/g
C. :30s/test/TEST/g
D. :1,30s/test/TEST/g
Answer: D
Explanation:
Any command that begins with a ":" is called a line mode command and performs its duty on the
line the cursor is currently on. However, you can override vi's default of operating only on the
current line by preceding them with a range of line numbers. For example, if we wanted to replace
guy with gal on lines 32 through 56 we would type
:32,56s/guy/gal/gTaken from http://unix.t-a-y-l-o-r.com/VBsr.html
Question: 81
` backup?
A. Full
B. Modular
C. Partial
D. Incremental
Answer: D
Question: 82
A system administrator of a 200-server network wants to simplify routine monitoring of log files on
each server. Which of the following is considered the BEST practice method to do this?
A. Create a script on the administrator's workstation to attach to each server and copy its log
files to the local drive.
Page 21 of 217
Exam Name: Linux+
Exam Type: CompTIA
B. Create a new server called 'loghost'. Modify the syslog.conf file on each server so log files
are forwarded to 'loghost'.
C. Run logcp at each server. Specify the administrator's workstation as the destination and "*"
for which log files to forward.
D. Create a script on each server to analyze each of the log files on the server and forward
important information to the administrator's workstation.
Answer: B
Explanation:
The answer is to have a special server set up to centrally receive all log files from the different
boxes in the network.
Question: 83
Which of the following is contained in the init.d directory?
A. New user templates

B. Access control lists
C. Service startup scripts
D. Infrared remote control configuration files
Answer: C
Question: 84
After a power outage, a Linux machine reboots but fails to mount all of its file systems. The file
systems are unable to be mounted manually. Which of the following should be done first?
A. Reboot to runlevel 6.
B. Reinstall the operating system.
C. Edit /etc/fstab and correct any problems identified.
D. Run fsck on each file system and try to mount again.
Answer: D
Explanation:
fsck is used to check and optionally repair a one or more Linux file systems.
Question: 85
Which of the following runlevels is generally used to ensure the Linux server will boot into full
multi-user mode without starting X Windows?
A. 0
B. 3
C. 5
D. 6
Answer: B
Explanation:
Default runlevel. The runlevels used by RHS are: 0 - halt (Do NOT set initdefault to this)
1 - Single user mode
2 - Multiuser, without NFS (The same as 3, if you do not have networking)
3 - Full multiuser mode
4 - unused
5 - X11 6 - reboot (Do NOT set initdefault to this)
Page 22 of 217
Exam Name: Linux+
Exam Type: CompTIA
Question: 86
How can an administrator prevent /etc/hosts from overriding DNS resolution?
A. Use a higher serial number in the DNS zone file.

B. Use a firewall to close the port used by "hosts".
C. Move the NIS entry beneath the DNS entries in /etc/resolv.conf
D. Change the order in which DNS and hosts are used by editing /etc/nsswitch.conf
Answer: D
Explanation:
The /etc/nsswitch.conf file is used to configure which services are to be used to determine
information such as hostnames, password files, and group files.
Question: 87
LPR access for specific hosts can be configured in which of the following files?
A. printcap
B. lpd.allow
C. hosts.equiv
D. hosts.allow
Answer: C
Question: 88
Users being reporting 'Unable to obtain IP address' error messages. Which of the following
daemons should the administrator verify is running?
A. kerneld
B. Named
C. Routed
D. dhcpd
Answer: D
Question: 89
An administrator need to synchronize a workstation's system time with a network server. Which of
the following services will allow the workstation to automatically set the time?
A. Time
B. utime
C. NTP (Network Tim Protocol)
D. NNTP (Network News Transport Protocol)
Answer: C
Question: 90
Which of the following commands will locate files that have been modified in the past two days?
A. locate -t2
B. find / -mtime 2
C. whereis -time 2
D. grep / -ctime 2
Page 23 of 217
Exam Name: Linux+
Exam Type: CompTIA
Answer: B
Explanation:
find [path...] [expression]
-mtime n File's data was last modified n*24 hours ago.
Question: 91
A superuser wants to transform the following permission set from
-rw-r--r-- 1 root root 4096 Apr 20 17:30 filename
To
-rwx-w---- 1 root root 4096 Apr 20 17:40 filename
Which of the following commands will accomplish this?
A. chmod u+x,g-w,o-r filename

B. chmod u+x,g+w-r,o-r filename
C. chmod 710 filename
D. chown 720 filename
Answer: B
Question: 92
The administrator must change the IP address of the server to 192.168.5.4/26. Which of the
following is the correct representation of the subnet mask?
A. 192.168.5.0
B. 192.168.5.255
C. 255.255.255.0
D. 255.255.255.192
Answer: D
Question: 93
Which of the following command lines can be used to show a map of the current process
hierarchy, including information about userid transition points?
A. pstree -u
B. psgraph -u
C. ps --map -u
D. top --map -u
Answer: A
Explanation:
pstree shows running processes as a tree.
-u Show uid transitions. Whenever the uid of a process differs from the uid of its parent, the new
uid is shown in parentheses after the process name.
Question: 94
Shadow passwords are disabled on a Linux server. Which of the following appears after a user's
name in the /etc/passwd file when a user account is disabled?
Page 24 of 217
Exam Name: Linux+
Exam Type: CompTIA
A. X
B. ?
C. &
D. *
Answer: D
Question: 95
When a user runs s l the following output is displayed:
drwxrwxrwt 3 john1 users2 4096 Aug 06 13:42 research
Who has permission to delete files in this directory?
A. All users
B. Only root and file owner
C. Only root and group owner
D. Only root, file owner, and group owner
Answer: B
Question: 96
An Acme SCSI controller was installed on the server to support the boot drive. The system, which
runs LILO and uses kernel 2.4.20, will no longer boot. After booting from the recovery CD-ROM,
the Acme driver (acme.o) is manually loaded and works. The driver is also available in the
modules directory on the server's hard drive. Which of the following commands will fix the
problem?
A. modprobe -p acme.o
B. lilo append=acme.o -v /boot/initrd-2.4.20.gz 2.4.20
C. mkinitrd -f --with=acme.o /boot/initrd-2.4.20.gz 2.4.20
D. cat "alias scsi_hostcontroller acme.o">>/etc/modules.conf
Answer: C
Question: 97
A user receives a file named package.rpm.bz2. Which of the following commands will
uncompress the file for use?
A. bunzip package.rpm.bz2
B. bunzip2 package.rpm.bz2
C. bzip -d package.rpm.bz2
D. bzip2 --uncompress package.rpm.bz2
Answer: B
Question: 98
A user wants the script 'name1' to process the contents of the file 'name2', then redirect the
output to the program 'name3'. Which of the following shell commands will do this?
A. name1 | name2 > name3

B. name1 < name2 | name3
C. name1 > name2 | name3
D. name1 | name2 < name3
Page 25 of 217
Exam Name: Linux+
Exam Type: CompTIA
Answer: B
Question: 99
Which of the following file systems CANNOT be mounted by using the mount command?
A. ext2
B. vfat
C. swap
D. iso9660
Answer: C
Explanation:
The Swap file system is used as virtual memory. This is not a 'mounted' file system. The swap
partition is configured during setup, and can be extended using the 'swapon' command.
Reference:
Roderick W. Smith. Sybex Linux + Study Guide: page 39, 465.
Incorrect Answers:
A. You can mount an ext2 file system using the 'mount -t ext2' command.
B. You can mount an VFAT file system using the 'mount -t vfat' command.
D. You can mount an iso9660 file system using the 'mount -t iso9660' command (iso9660 is used
for CD-ROM drives).
Question: 100
A Linux user has sent a report to the printer queue, but then realizes he needs to make
corrections to the report.
He now wants to remove the report from the printer queue. Which of the following should be
done?
A. Use the lpq command to remove the job

B. Use the kill command to remove the report
C. Use the lprm command to remove the report
D. Ask the superuser to remove the report from the queue because users cannot do this.
Answer: C.
Explanation:
The lprm command can be used to remove one or more print jobs from the print queue.
The command is issued with the job ID to delete a print job. The print queue and job Ids can be
viewed with the lpq command.
Reference:
Roderick W. Smith. Sybex Linux + Study Guide: page 557.
Incorrect Answers:
A. The lpq command is used to view the print queue, but not to delete print jobs.
B. The kill command is used to end a process. It cannot be used to delete individual print jobs.
D. A user can delete any print jobs that belong to the user.
Question: 101
What does the lpq command do?
A. Prints a file.
Page 26 of 217
Exam Name: Linux+
Exam Type: CompTIA
B. Removes a print job.

C. Sets up a printer on the system.
D. Shows status of the print queue.
Answer: D.
Explanation:
The lpq command is used to display the status of the print queue. The information displayed
includes the print job IDs and owners.
Reference:
Incorrect Answers:
A. The lpr command is used to print, not the lpq command.
B. The lprm command is used to remove a print job, not the lpq command.
C. The /etc/printcap file can be used to set up a printer, not the lpq command.
Question: 102
A system administrator who has forgotten his root password on a server can do which of the
following to change the root password?
A. Use the brute-force password sniffer.

B. Edit the /etc/inittab file to load without NIS.
C. Use the passwd command from the administrator group.
D. Reboot the system in runlevel 1 and use "init=/bin/sh" as a boot option.
Answer: D.
Explanation:
If you forget the root password, you can boot init into the shell and change the password using
the following commands:
boot: Linux init=/bin/sh
bash# mount -o remount / -rw
bash# passwd root
Reference:
Michael J. Tobler. New Riders, Inside Linux: Page 466.
Incorrect Answers:
A. A sniffer can only be used to capture a password traveling over the network.
B. If you bypassed NIS, you would still need the local root password.
C. There is no 'Administrator' group in Linux. The equivalent is the 'Root' group. You would still
need to be logged in to change the password.
Question: 103
The system administrator needs to create two new groups, 'develop' and 'admin'. Which of the
following should be done to accomplish this?
A. Use the newgrp command.

B. Use the groupadd command.
C. Use the creategroup command.
D. Enter the group data in the /etc/group.conf file.
Answer: B.
Page 27 of 217
Exam Name: Linux+
Exam Type: CompTIA
Explanation:
The groupadd command is used to create new groups.
Reference:
Incorrect Answers:
A. The newgrp command is used to change a user accounts group membership. It cannot be
used to create a group.
C. Creategroup is a non-existent command.
D. There is no group.conf file.
Question: 104
How would an administrator change the ownership of the directory /tmp/data/user1 from the
account 'user1' to the account 'user2'?
A. chown /tmp/data/user2 user 1

B. chown -R /tmp/data/user1 user2
C. chown -R user2 /tmp/data/user1
D. chown user2 /tmp/data/user1 user2
Answer: C.
Explanation:
The syntax of the chown command is 'chown <new owner> <directory/file>'. The -R option makes
the command recursive meaning that the ownership will be changed on the entire contents of the
directory.
Reference:
Mark Minasi. Sybex, Linux for Windows NT/2000 Administrators: page 212.
Incorrect answers:
A. The syntax is incorrect.
B. The new owner should be entered before the directory/file name.
D. The new owner is entered twice. It should only be entered once.
Question: 105
A user needs to securely connect to a server. It is mandatory that encrypted passwords be used.
Which of the following network utilities should be used?
A. ssh
B. rsh
C. tftp
D. telnet
Answer: A.
Explanation:
SSH (Secure Shell) provides a secure connection between an SSH server and an SSH host.
All data and passwords are encrypted over the connection.
Reference:
Page 28 of 217
Exam Name: Linux+
Exam Type: CompTIA
Incorrect answers:
B. RSH (Remote Shell) is very insecure. It allows a user on one system to run programs on
another system without authentication. RSH should be disabled on servers.
C. TFTP (Trivial File Transfer Protocol) is used to transfer files over a network. It is not used to
securely connect to a server.
D. Telnet sends passwords in plain text.
Question: 106
Which of the following commands should be run after editing the /etc/aliases file in order for
sendmail to recognize any changes to that file?
A - newaliases
B - makemap newaliases
C - killall -HUP sendmail
D - /etc/init.d/aliasd restart
Answer: A
Question: 107
A system is going to have its memory and CPU upgraded. This information will be created in
Linux in which of the following?
A. The /proc directory

B. The /etc/hwinfo.conf file
C. The /dev/hwinfo.conf file
D. The /usr/src/linux/devices directory
Answer: A.
Explanation:
The /proc directory isn't actually a directory. It's a virtual file system created by Linux to provide
information about hardware devices. For example, the command 'cat /proc/cpuinfo' will display
information about the CPU.
Reference:
Incorrect Answers:
B. There is no hwinfo.conf file.
C. There is no hwinfo.conf file.
D. The /usr directory contains Linux documentation and program files. It doesn't contain any
machine specific data.
Question: 108
When a new user account is created, the default settings are copied from which of the following?
A. /usr/skel
B. /etc/skel
C. /etc/start
D. /etc/default
Answer: B.
Explanation:
Page 29 of 217
Exam Name: Linux+
Exam Type: CompTIA
When a new user account is created, the default configuration files are copied from the /etc/skel
directory.
Reference:
Incorrect Answers:
A. This is the incorrect path to the default user account configuration files.
C. This is the incorrect path to the default user account configuration files.
D. This is the incorrect path to the default user account configuration files.
Question: 109
Which if the following commands can be used to compare two text files to find out how they are
different?
A. comp
B. diff
C. compare
D. filediff
Answer: B.
Explanation:
The diff command is used to display line by line differences between pairs of text files.
Reference:
http://www.numenor.demon.co.uk/ccfaq/common.htm
Incorrect Answers:
A. There is no comp command.
C. There is no compare command, although 'compare' can be used as an option for the 'tar'
utility.
D. There is no filediff command.
Question: 110
What command, when issued from a non-root user, will remove all files from the /tmp directory by
prompting the user for the root password?
A. cirtmp
B. rm -rf /tmp/* -su
C. su "rm 'rf /tmp*"
D. su -c "rm -rf /tmp*"
Answer: D
Explanation:
The su command is used to switch to another user account. If no username is specified with the
su command, then Linux assumes that you want to change to the root user account. The -c
option tells Linux to run a command in the context of the root account. The rm command is used
to remove the files. The -rf option, make the command recursive and forceful (i.e. it won't ask you
to confirm the file deletion).
Reference:
http://www.oreillynet.com/linux/cmd/s/su.html
Page 30 of 217
Exam Name: Linux+
Exam Type: CompTIA
Incorrect Answers:
A. There is no cirtmp command.
B. You must use su to switch user before the remove command.
C. You must use the -c option with su if you want it to run a command after switching user.
Question: 111
Which of the following commands can be used to go to the 25th line of a file in vi?
A. :25
B. 25G
C. G25
D. g25
Answer: B.
Explanation:
The way to go to a specific line in Vi is to use the "G" command. With a count, this command
positions you at the given line number. For example, "25G" puts you on line 25.
Reference:
http://vimdoc.sourceforge.net/cgi-bin/vim2html2.pl?page=usr_03.txt#03.5
Incorrect Answers:
A. You must use the "G" command to go to a specific line.
C. The "G" must follow the line number.
D. The "G" is case sensitive and follows the line number.
Question: 112
Which of the following commands can be used to create new directories?
A. rm
B. ls
C. mv
D. mkdir
Answer: D.
Explanation:
The mkdir command is used to create new directories.
Reference:
Incorrect Answers:
A. The rm command is used to remove a file or directory.
B. The ls command is used to list the contents of a directory.
C. The mv command is used to move or rename a file or directory.
Question: 113
A customer wants to backup her entire Website into a file. Which if the following commands
would best accomplish this?
A. tar -cvf www.tar /home/httpd/

B. tar -cvf /home/httpd /dev/st0
C. tar -cvf /home/httpd/ webbackup.tar
Page 31 of 217
Exam Name: Linux+
Exam Type: CompTIA
D. tar -cvf /dev/st0/web.tar /home/httpd/
Answer: A.
Explanation:
The syntax of the tar command is 'tar <options> <filename> <files to add>'. In this question, the
contents of the /home/httpd directory (the default location for a website) are backed up to a file
named www.tar. The -cvf options mean compressed, verbose and forceful.
Reference:
Roderick W. Smith. Sybex Linux + Study Guide: page 194/5.
Incorrect Answers:
B. You must specify a filename when using the tar command.
C. The source files and destination file are in the wrong order.
D. This command is trying to backup the files to a tape drive. However, when using 'tar' to backup
to a tape drive, you must use the '--file' option.
Question: 114
Which of the following commands is used to set default file permissions for any newly created
file?
A. mask
B. umask
C. fmask
D. createMask
Answer: B.
Explanation:
When a file is created, the file has a default set of permissions. For example, the creator of the
file is the owner of the file and the group is the owners primary group. However, these default
settings are known as the user mask can be changed with the umask command.
Reference:
Incorrect Answers:
A. The mask command is used when configuring the IP address of a Linux computer.
C. Fmask is a non-existent command.
D. Createmask is a non-existent command.
Question: 115
The following is an extract in a password file:
Smith: * : 1133 : 334 : John Smith: /usr/people/jsmith: /bin/tcsh
What is the purpose of the "*" IN Smith's password field?
A. To deactivate Smith's account.

B. To indicate that Smith is a superuser.
C. To force Smith to change his password at his next login.
D. To indicate that Smith's home directory is shared by other members of his group.
Answer: A.
Page 32 of 217
Exam Name: Linux+
Exam Type: CompTIA
Explanation:
When you create a user account with the adduser command, the account doesn't have a
password. The password field in the password file contains a "*". To enable the account, you
must specify a password with the passwd command. You can disable an account by placing a "*"
in the password field of the password file.
Reference:
Incorrect Answers:
B. The "*" is in the password field and so does not indicate that the account is a superuser.
C. The user will not be able to log in when the password field contains a "*" because the account
is disabled.
D. The "*" is in the password field and so is not related to the users' home directory.
Question: 116
A Linux system is planned to have both an Ethernet card and a modem. On each of these
networks the IP addresses are dynamically assigned. Which if the following services should be
considered for installation?
A. DNS
B. Pump
C. SNMP
D. Router
Answer: B.
Explanation:
The pump command is used to verify that the computer is receiving DHCP information from the
DHCP servers. It's output included the IP address, netmask and DHCP server address.
Reference:
Incorrect Answers.
A. DNS (Domain Name System) is used to resolve host names to IP addresses. It would not be
useful in this case.
C. SNMP (Simple Network Management Protocol) is used for the monitoring of hardware devices.
It would not be useful in this case.
D. A router is used to route traffic between networks. It would not be useful in this case.
Question: 117
Which if the following services is installed when a "workstation" installation is selected?
A. nntpd
B. Squid
C. XFree86
D. dhcpd
Answer: C.
Explanation:
XFree86 provides a graphic user interface and is installed by default when a workstation
installation is selected.
Page 33 of 217
Exam Name: Linux+
Exam Type: CompTIA
Reference:
Incorrect Answers:
A. NNTPd is the Network News Transfer Protocol daemon. This is a server service and is not
installed in a workstation configuration.
B. Squid is a proxy server application. This is a server service and is not installed in a workstation
configuration.
D. DHCPd is the Dynamic Host Configuration Protocol daemon. This is a server service and is
not installed in a workstation configuration.
Question: 118
Linux will be installed on a new system. Where will LILO be installed?
A. In the /boot directory.

B. In the /root directory.
C. In the master boot record.
D. In the /usr/sbin directory.
Answer: C.
Explanation:
LILO (the Linux boot loader) is installed by default in the Master Boot Record (MBR).
Reference:
Incorrect Answers:
A. LILO is installed by default in the Master Boot Record, not the /boot directory.
B. LILO is installed by default in the Master Boot Record, not the /root directory.
D. LILO is installed by default in the Master Boot Record, not the /usr/sbin directory.
Question: 119
Why is the Shadow Password Suite important?
A. It provides a second level of encryption for the /etc/passwd file.

B. It improves the encryption for all passwords in the /etc/passwd file.
C. It moves the passwords to a separate file that has more restrictive permissions.
D. It moves the passwords to a separate file and will also encrypt the password file.
Answer: C.
Explanation:
If you are not using the Shadow Password Suite, the users' passwords are stored in the
/etc/passwd file. This file can be read by anyone. When using the Shadow Password Suite, the
passwords are moved to another file, which can only be read by the root user.
Reference:
Roderick W. Smith. Sybex Linux + Study Guide: page 117-118.
Incorrect Answers
A. The Shadow Password Suite does not change the password encryption.
B. The Shadow Password Suite does not change the password encryption.
D. The Shadow Password Suite does not encrypt the password file.
Page 34 of 217
Exam Name: Linux+
Exam Type: CompTIA
Question: 120
Which if the following is the only required partition when Linux is installed?
A. /
B. /var
C. /etc
D. /boot
Answer: A.
Explanation:
At a bare minimum, Linux requires just one partition to install and boot. This is the root partition,
which is known as the / partition.
Reference:
Incorrect Answers:
B. Linux requires a root (/) partition, not a /var partition.
C. Linux requires a root (/) partition, not a /etc partition.
D. Linux requires a root (/) partition, not a /boot partition.
Question: 121
A DHCP server has been added to the network. The local system has been reconfigured to
connect using DHCP. How could an administrator restart the network services and test that the
interface and the DHCP server are functioning properly?
A - /sbin/route restart; iftonfig lo

B - /bin/netstat-R; ping comptia.org
C - /usr/bin/network restart; ping comptia.org
D - /etc/init.d/network restart; ifconfig eth0
Answer: D
Explanation:
After configuring DHCP you need to restart the network services with the etc/rc.d/init.d/network
restart command. You can verify that that your computer has received the DHCP settings by
pinging and internet address such as comptia.org.
Reference:
http://www.linuxheadquarters.com/howto/networking/networkconfig.shtml
Incorrect Answers:
A. Ifconfig is not the correct command to restart the network services.
B. Netstat is not the correct command to restart the network services.
C. Route restart is not the correct command to restart the network services.
Question: 122
The Ethernet card fails on a Linux machine without modular support, and is replaced by one from
a different manufacturer. The new card is verified as Linux compatible. When the system restarts,
the operating system does not recognize the new card.
Which if the following is necessary to finish the installation?
A. Change the network routing table.
Page 35 of 217
Exam Name: Linux+
Exam Type: CompTIA
B. Recompile the kernel with support for the new device.

C. Download a new driver and add it to the /dev directory.
D. Edit the Ethernet configuration file to point to the new device.
Answer: B.
Explanation:
A network card without modular support will have its drivers integrated into the kernel. If you
replace the network card with one from a different vendor, you'll need to recompile the kernel to
remove the old network card driver.
Reference:
Incorrect Answers:
A. The routing table is unrelated to the physical network card or its drivers.
C. You need to recompile the kernel to remove the old network card driver.
D. The old driver is integrated into the kernel and needs to be removed.
Question: 123
A client has downloaded the latest Linux kernel source and wants to compile and install it on a
home machine.
The downloaded file is named "linux-2.4.3.tar.gz". What command should be issued first?
A. tar xvf linux-2.4.3.tar.gz

B. tar xzvf linux-2.4.3.tar.gz
C. gzip -q linux-2.4.3.tar.gz; tar xvf linux-2.4.3.tar
D. gzip -c linux-2.4.3.tar.gz; tar cvf linux-2.4.3.tar
Answer: B.
Explanation:
The .tar.gz extension indicates that the file has been tarred and compressed (zipped) using the
tar and gzip programs. The first thing to do is to extract the files using the same programs. The
tar command invokes the tar program. The 'x' option means extract. The 'z' option means use
gzip to uncompress the files. The 'v' option means verbose mode and the 'f' option means to force
the operation with any conformation messages.
Reference:
Roderick W. Smith. Sybex Linux + Study Guide: page 194-195.
Incorrect Answers:
A. You need the 'z' option to invoke gzip.
C. You need to use the tar program and invoke gzip with the 'z' option.
D. You need to use the tar program and invoke gzip with the 'z' option.
Question: 124
An administrator has installed a DHCP daemon. Which if the following should be run to see if the
process is running?
A. top
B. dhcpd -restart
C. ps aux | grep dhcpd
D. rpm -check dhcpd
Page 36 of 217
Exam Name: Linux+
Exam Type: CompTIA
Answer: C.
Explanation:
The ps aux command displays all the running processes. The pipe (|) passes the output to the
grep utility. Grep is a search utility. Grep dhcpd will search for dhcpd in the output from the ps aux
command.
Reference:
http://www.unixgeeks.org/security/newbie/unix/man9/misc3.html#ps
Incorrect Answers:
A. The top command displays the running processes that are using the most CPU time. The
DHCP daemon doesn't use much CPU time and is therefore unlikely to be displayed using the
top command.
B. The dhcpd -restart command will restart the DHCP daemon. It will not verify the process is
running.
D. The rpm command cannot be used to verify that a process is running.
Question: 125
What minimum permission must a directory have for a user to both enter the directory and list its
contents?
A. Read only
B. Execute only
C. Write and read
D. Execute and read
Answer: D.
Explanation:
You can list the contents of a directory with the read permission. However, to enter the directory,
you need the execute permission.
Reference:
http://www.firstlinux.com/articles/cards/permissions.shtml
Incorrect Answers:
A. The read only permission will not allow you to enter the directory.
B. The execute permission will not allow you to list the contents of the directory.
C. The write permission will allow to create files in the directory. This is not the minimum required
permission to enter a directory and list its contents.
Question: 126
While a technician was installing Linux on a customer's server, the customer asked for the ability
to expand the partition size, as needed. Which of the following would best provide this ability?
A. HPFS
B. ext2
C. FAT32
D. ReiserFS
Answer: B.
Explanation:
Page 37 of 217
Exam Name: Linux+
Exam Type: CompTIA
There are more Linux utilities to expand an ext2 partition than partitions with a different file
system.
Reference:
Incorrect Answers:
A. There are more utilities to expand an ext2 partition than partitions with the HPFS file system.
C. There are more utilities to expand an ext2 partition than partitions with the FAT32 file system.
D. There are more utilities to expand an ext2 partition than partitions with the ReiserFS file
system.
Question: 127
What services would need to be installed to build a combination Web server and Domain Name
Server (DNS)?
A. Apache and BIND

B. Apache and Squid
C. ipchains and BIND
D. Squid and ipchains
Answer: A.
Explanation:
The Linux web server software is called Apache and the Linux DNS software is called BIND.
Reference:
Roderick W. Smith. Sybex Linux + Study Guide: page 56, 59.
Incorrect Answers:
B. Squid is a proxy server program.
C. IPChains is a firewall program.
D. Squid is a proxy server program and IPChains is a firewall program.
Question: 128
Which if the following should be done before installing Linux on a home computer?
A. Upgrade the computer's memory to at least 64 MB.

B. Create ext2 and swap partitions on the hard drive.
C. Verify the hardware on the Linux hardware compatibility list.
D. Defragment the drive using the computer's current operating system.
Answer: C.
Explanation:
The first thing to do before installing any operating system is to ensure that the system hardware
is compatible with the operating system.
Reference:
Roderick W. Smith. Sybex Linux + Study Guide: Chapter 1.
Incorrect Answers:
A. Linux will run on systems with less than 64 MB or RAM (memory).
B. The partitions can be created during the installation. It is not necessary to create them before
the installation.
Page 38 of 217
Exam Name: Linux+
Exam Type: CompTIA
D. The hard drive will be partitions and formatted during the installation and therefore will not
need defragmenting.
Question: 129
Which of the following services would need to be installed and configured in order to provide
proxy and caching services to a Linux network?
A. NFS
B. Squid
C. BIND
D. ipchains
Answer: B.
Explanation:
Squid is a full featured web proxy program running on Linux or Unix.
Reference:
http://www.squid-cache.org/
Incorrect Answers:
A. NFS is the Linux Network File System used for sharing files over a network. It does not provide
web proxy services.
C. BIND is the Linux DNS software. It does not provide web proxy services.
D. IPChains is the Linux Firewall software. It does not provide web proxy services.
Question: 130
A customer wants internal office information to be accessible by employees through a Web
browser. Which of the following Linux services should be used?
A. Squid
B. MySQL
C. Apache
D. Sendmail
Answer: C.
Explanation:
Apache is the Linux web server software. Web server software is needed to enable employees to
access office information through their web browsers.
Reference:
http://www.apache.org/
Incorrect Answers:
A. Squid is the Linux web proxy software. It does not provide web server services.
B. MySQL is a Linux database program. It does not provide web server services.
D. Sendmail is a Linux email server program. It does not provide web server services.
Question: 131
A user wants to set up his parallel port printer on the workstation's first parallel port. What device
identifier needs to be used during configuration?
A. /dev/lp0
B. /dev/lpa
Page 39 of 217
Exam Name: Linux+
Exam Type: CompTIA
C. /dev/lp1
D. /dev/tty0
Answer: A.
Explanation:
Hardware devices are identified in the /dev 'folder'. Parallel ports use the 'lp' identifier followed by
the number of the port. The first parallel port number is zero; therefore the first parallel port would
be listed as /dev/lp0.
Reference:
Roderick W. Smith. Sybex Linux + Study Guide: Page 548/9.
Incorrect Answers:
B. Parallel ports use lp followed by a numeric identifier. The first one being zero.
C. The first parallel port number is zero. Lp1 signifies the second parallel port.
D. Tty signifies a modem, not a parallel port.
Question: 132
A user has overwritten the master boot record. How could the Linux record be restored?
A. edit fstab
B. edit lilo.conf
C. run "fdisk /mbr"
D. run "/sbin/lilo"
Answer: B.
Explanation:
LILO (the Linux boot loader) consists of a program that converts the lilo.conf file into an installed
boot loader. Therefore, by editing the lilo.conf file, you can instruct LILO to recreate the linux boot
loader in the master boot record.
Reference:
Incorrect Answers:
A. The fstab file instructs Linux which partitions to mount and where to mount them. It does not
restore the master boot record.
C. Fdisk/mbr will write a new master boot record. However, it does not write a Linux boot loader
into the master boot record.
D. LILO needs to be run only after editing the lilo.conf file.
Question: 133
Which of the following actions will provide the greatest benefit to system administration in a large
organization?
A. Print out script source files.

B. Update packages and kernels as updates are released.
C. Document and log standards and changes to the systems.
D. Install all packages from the same source type, such as RPMs.
Answer: C.
Explanation:
Page 40 of 217
Exam Name: Linux+
Exam Type: CompTIA
It is highly recommended that you document the systems and company standards.
Reference:
Incorrect Answers:
A. Printing out scripts would not aid system administration.
B. Package and kernel updates should be thoroughly tested before being installed.
D. Packages can be installed from various source types as long as the installations are
documented.
Question: 134
A new computer came preconfigured with an internal PCI modem. After Linux was installed, the
modem does not respond. Which of the following is most likely the cause of the problem?
A. The modem is not Hayes compatible.

B. Linux does not support internal modems.
C. The installed kernel does not support Winmodems.
D. Linux requires modems that use the Rockwell chipset.
Answer: C.
Explanation:
When computers are supplied with internal PCI modems, the modems are usually Winmodems.
Linux has limited support for these modems.
Reference:
http://www.linmodems.org/
Incorrect Answers:
A. Most modems are Hayes compatible and therefore, this is an unlikely situation.
B. Linux does have limited support for internal modems.
D. Rockwell chipsets are not a requirement for modems running under Linux.
Question: 135
A system administrator is logged into a system as root. When trying to run the command
/usr/local/bin/a.out, the administrator does the following:
root@linux> cd /usr/local/bin
root@linux> a.out
bash: a.out: command not found
What command should be issued to start the program?
A. /a.out
B. chmod o-x a.out
C. su - user, a.out
D. chown root a.out
Answer: A.
Explanation:
You cannot run a command if you are in the same directory as the program. You must precede
the command with "/" or "./". When you precede the command with "/", you are running the
program from the root directory, so the program would need to be in the path. "./" means to go
Page 41 of 217
Exam Name: Linux+
Exam Type: CompTIA
back one level in the directory structure and run the command from there. For example, in this
question, "./" would go back to the /usr/local folder and run the command /bin/a.out.
Reference:
Incorrect Answers:
B. The chmod command is used to modify the permissions on a file. It is not required here.
C. The su command is used to run a command under a different account. The question states
that you are already logged in as root, so changing accounts is unnecessary.
D. The chown command is used to change ownership of a file. This is unnecessary because you
are running the command as root.
Question: 136
Which utility can remove, list, and add modules, as well as autoclean?
A. lsmod
B. insmod
C. modprobe
D. Modconfigurator
Answer: C.
Explanation:
The modprobe -r command is used to remove modules. Modprobe -a lists all the modules.
Modprobe with no options loads a module. Modprobe -k is used to autoclean the modules.
Reference:
Incorrect Answers:
A. Lsmod can only list the modules.
B. Insmod can only insert a module.
D. There is no modconfigurator command.
Question: 137
Which command will verify that an NIS client is bound to an NIS server?
A. ypwhich
B. nisbind
C. ypconfig
D. nis.client
Answer: A.
Explanation:
The ypwhich command returns the hostname of the NIS server. Without arguments, ypwhich
displays the NIS server for the local machine.
Reference:
http://www.oreillynet.com/linux/cmd/y/ypwhich.html
Incorrect Answers:
B. Nisbind is not the correct command.
C. Ypconfig is not the correct command.
Page 42 of 217
Exam Name: Linux+
Exam Type: CompTIA
D. Nis.client is not the correct command.
Question: 138
Which of the following files would modify the daemon which logs system activity?
A. /etc/syslog.conf
B. /usr/syslog.conf
C. /etc/systemlog.conf
D. /usr/etc/systemlog.conf
Answer: A.
Explanation:
Most system logs are maintained by the system log daemon and the kernel log daemon.
These services rely on the /etc/syslog.conf file for their configurations.
Reference:
Incorrect Answers:
B. The syslog.conf file is in the /etc directory, not the /usr directory.
C. Systemlog.conf is the wrong filename.
D. Systemlog.conf is the wrong filename.
Question: 139
In an Apache default installation, which of the following configuration files contains the
DocumentRoot?
A. root.html
B. httpd.conf
C. httpd.root
D. apache.conf
Answer: B.
Explanation:
Apache is the Linux web server software. It uses the httpd.conf file for its configuration.
The Document root parameter specifies the default location for the web pages.
Reference:
http://www.redhat.com/docs/manuals/linux/RHL-7.1-Manual/ref-guide/s1-configuration-config.html
Incorrect Answers:
A. The DocumentRoot parameter is specified in the httpd.conf file, not the root.html file.
C. The DocumentRoot parameter is specified in the httpd.conf file, not the httpd.root file.
D. The DocumentRoot parameter is specified in the httpd.conf file, not the apache.conf file.
Question: 140
How should an administrator test that Domain Name Services (DNS) are working correctly on a
client workstation?
A. ftp.comptia.org
B. ping 168.168.168.18
C. telnet 168.168.168.18
D. nslookup www.comptia.org
Page 43 of 217
Exam Name: Linux+
Exam Type: CompTIA
Answer: D.
Explanation:
The nslookup utility is used to query a DNS server. The command "nslookup www.comptia.org"
will return the IP address of www.comptia.org if the DNS is correctly configured on the
workstation and the DNS server is functioning correctly.
Reference:
Incorrect Answers:
A. Ftp.comptia.org is the FQDN for a machine called ftp in the comptia.org domain. It is not a
command that will test DNS.
B. Pinging an IP address will not test DNS.
C. Telnetting an IP address will not test DNS.
Question: 141
Review the following entry:
/dev/cdrom /cd iso9660 ro, user, noauto 0 0
What is this entry?
A. An "fstab" entry that lets any user mount the CD-ROM.

B. An "fstab" entry that allows only root to mount the CD-ROM.
C. An "mtab" entry that mounts a CD-ROM as a read-only device at boot time.
D. An "fstab" entry that mounts a CD-ROM as a read-only device at boot time.
Answer: A.
Explanation:
This entry in the fstab file allows any user to mount the CD-ROM (/dev/cdrom) in the /cd directory.
Iso9660 is the file system for the CD-ROM. Noauto means that the CD-ROM won't be
automatically mounted when the system boots. The first '0' means that the CD-ROM shouldn't be
backed up and the second '0' means that the CD-ROM file system shouldn't be checked for
errors when the machine boots.
Reference:
Incorrect Answers:
B. The 'user' option allows any user account to mount the CD-ROM.
C. The line is from the fstab file, not the mtab file.
D. The noauto option prevents the CD-ROM being mounted at boot time.
Question: 142
Configuring hosts.deny and hosts.allow will protect the server from intruders that attempt which if
the following?
A. Attacks from machines using TCP.

B. Exploitation of ICMP security holes.
C. Attacks from machines using IPX/SPX.
D. Exploitation of services that are started with TCP wrappers.
Page 44 of 217
Exam Name: Linux+
Exam Type: CompTIA
Answer: D.
Explanation:
Inetd is a service that listens for network connection and starts a requested server service.
Inetd can use a service called TCP Wrappers to start the server services. When a server service
is requested, inetd hands the request to TCP Wrappers. TCP Wrappers then authenticates the
request by using the hosts.deny and hosts.allow files and starts the server service if the
requesting client has permission.
Reference:
Incorrect Answers:
A. TCP Wrappers use the hosts.allow and hosts.deny files, not TCP.
B. TCP Wrappers use the hosts.allow and hosts.deny files, not ICMP.
C. TCP Wrappers use the hosts.allow and hosts.deny files, not IPX/SPX.
Question: 143
A user has installed and configured an internal modem to connect the workstation to the Internet.
The user claims that the modem is not connecting properly. What diagnostic tool can be used to
test the modem?
A. mgetty
B. minicom
C. pppconfig
D. A web browser
Answer: B.
Explanation:
Minicom is a graphical utility that runs in a console, used for testing PPP connections (Modems
use PPP to connect to the Internet via an ISP).
Reference:
http://www.oreilly.com/catalog/debian/chapter/ch11_07.html
Incorrect Answers:
A. Mgetty is not used to test modems.
C. PPPconfig is not used to test modems.
D. A web browser could be used to test Internet connectivity, but it can't test the actual modem.
Question: 144
Which of the following commands is used to associate a logical 32-bit or 128-bit IP address with a
physical Ethernet device?
A. arp
B. masq
C. mount
D. route
Answer: A.
Explanation:
ARP (Address Resolution Protocol) is used to map hardware addresses (sometimes referred to
as MAC addresses) to IP addresses.
Page 45 of 217
Exam Name: Linux+
Exam Type: CompTIA
Reference:
http://www.oreillynet.com/linux/cmd/a/arp.html
Incorrect Answers:
B. Masq is not used to associate hardware addresses with IP addresses.
C. The mount command is used to mount a hardware device. It is not used to associate hardware
addresses with
IP addresses.
D. The route command is used to add a static route to a routing table. It is not used to associate
hardware addresses with IP addresses.
Question: 145
A Linux system seems to be unstable, with several services unresponsive. Before rebooting,
which of the following commands could be entered to help ensure the system restarts into a
stable state?
A. sync
B. fsck
C. lilo
D. uptime
Answer: B.
Explanation:
An unstable system could be caused by file system errors. The fsck (File System Check)
command will check the file system for errors.
Reference:
Incorrect Answers:
A. Sync is used to ensure file system integrity when shutting down a machine. It does not check
the file system for errors.
C. Lilo is the Linux boot loader. . It does not check the file system for errors.
D. Uptime is a utility that displays the uptime of a system (the time a system has been running).
Question: 146
Which of the following commands searches the contents of files for a specific string?
A. find
B. grep
C. search
D. whereis
Answer: B.
Explanation:
The grep command can search the contents of files for a specific string.
Reference:
Incorrect Answers:
Page 46 of 217
Exam Name: Linux+
Exam Type: CompTIA
A. The find command is used to search for files that meet specified conditions (such as type). It
does not search the contents of the files for a specific string.
C. The search command does not search the contents of the files for a specific string.
D. The whereis command is used to locate the binary file, source code or manual pages for a
specified command. It does not search the contents of the files for a specific string.
Question: 147
A system is built for a new employee who needs a particular application for computing critical
data. The application is installed and tested. The application suddenly hangs. After killing the
process, which of the following is the best course of action to take?
A. Reinstall the application and restart X.

B. Go to /usr/local/apps/logfile to access specific information.
C. Go to /etc/log/<name of application>.log to read the error messages.
D. Check any error log generated by the application and the manufacturer's Website for known \
issues or patches.
Answer: D.
Explanation:
To troubleshoot a faulty application, you should look for any error messages in the logs and go to
the manufacturer's website to see if the problem is a known issue or if there is a patch (update)
for the application.
Incorrect Answers:
A. If the problem is caused by a known issue, the problem will reoccur after reinstalling the
application.
B. The application may not generate an error log in this path.
C. The application may not generate an error log in this path.
Question: 148
A customer reports that his server will not allow users to retrieve their email through POP3 or
connect to the server via telnet. What service needs to be restarted?
A. lmap
B. snmp
C. pop3
D. inetd
Answer: D.
Explanation:
POP3 and Telnet are two separate server services. These services are controlled by the inetd
service. It is unlikely that the POP3 and Telnet services would both fail at the same time. It is
more likely that the problem lies with the inetd service. Restarting the inetd service should rectify
the problem.
Reference:
Incorrect Answers:
A. Restarting the lmap service won't affect the POP3 and Telnet services.
B. Restarting the snmp service won't affect the POP3 and Telnet services.
C. Restarting the POP3 service may solve the POP3 problem, but it won't affect the Telnet
problem.
Page 47 of 217
Exam Name: Linux+
Exam Type: CompTIA
Question: 149
What are the full paths to the general log files that can be accessed to find out how a system is
running?
A. /var/log/messages
/var/log/mail
/var/log/wtmp
B. /etc/bootlog.log
/var/log/install.log
/etc/boot/messages
C. /usr/local/install.log
/usr/local/messages
/tmp/boot.log
D. /var/spool/logs/messages
/var/spool/logs/dmesg
/var/spool/log/install.log
Answer: A.
Explanation:
Most system log files are stored in subdirectories of the /var/log directory.
Reference:
Incorrect Answers:
B. These are the wrong paths to the system log files.
C. These are the wrong paths to the system log files.
D. These are the wrong paths to the system log files.
Question: 150
A user notices some problems with his Linux system. He finds a file in his home directory that he
has never seen before. It has the following permissions:
-r-sr-srwk 1 root root 531 Jan 19 02:15 shell.run
Where did the file come from?
A. The file was generated by cron.

B. The root account put the file there for his use.
C. The file is included in most common distributions.
D. This file was created when the root account security was breached.
Answer: B.
Explanation:
The file is owned by the root user account and the root group account.
Reference:
http://www.wbglinks.net/pages/reads/linux/filepermissions.html
Incorrect Answers:
A. This file would not be generated by Cron.
C. The file is not included in users' home directories in most distributions.
Page 48 of 217
Exam Name: Linux+
Exam Type: CompTIA
D. A root account security breach would not generate this file.
Question: 151
A customer calls the support desk and complains that her company's Web server is not
responding to requests from Web clients. When asked about recent work done on the machine,
she responds that the server has not been reconfigured recently and normally performs without
problems. A process list on the machine gives the following result:
PID TTY STAT TIME COMMAND

1 ? S 0:04 init
444 ? S 0:00 /usr/sbin/automount " "timeout 60 /misc file /etc/auto.misc
462 ? S 0:00 /usr/sbin/automount " "timeout 60 /net yp /auto.net
526 ? S 0:00 syslogd ~m 0
579 ? S 0:00 crond
595 ? S 0:00 xinetd ~reuse ~pidfile /var/run/xinetd.pid
625 ? SW 0:00 [lockd]
636 ? SW 0:00 [rpciod]
646 ? S 0:00 rpc.statd
796 ? S 0:00 gpm -t ps/2
814 ? S 0:00 httpd-perl -f /etc/httpd/conf/httpd-perl.conf
955 ? S 0:00 httpd
956 ? S 0:00 httpd
957 ? S 0:00 httpd
958 ? S 0:00 httpd
958 ? S 0:00 httpd
958 ? S 0:00 httpd
958 ? S 0:00 httpd
958 ? S 0:00 httpd
1080 tty1 S 0:00 /sbin/mingetty tt /etc/httpd/conf/http-perl.conf
1721 pts/1 R 0:00 ps -x
What is the best way to resolve this issue?
A. Use "/usr/sbin/httpd -r" to restart the Web server.

B. Stop the Web server by using "killall http" and restart it using "/usr/sbin/httpd".
C. Examine the httpd module list in /etc/httpd/modules/httpd.exp for incompatibilities.
D. Stop the Web server by using "kill -9 <pid>" and run fsck to make sure the /home httpd
partition is functioning properly.
Answer: B.
Explanation:
Server service (such as HTTPd) problems can usually be resolved by restarting the service.
The output above shows that there are numerous instances of the httpd service. To stop multiple
instances of a process, you would use the 'killall' command.
Reference:
Incorrect Answers:
A. There are multiple instances of the httpd service that need to be stopped before restarting the
service.
C. Restarting the httpd service should be the first step to resolving the problem.
D. The kill command is used to stop a single instance of a process. It will not stop multiple
instances of a process.
Page 49 of 217
Exam Name: Linux+
Exam Type: CompTIA
Question: 152
A user executed a Pearl script that initiated a connection request to a server without ever
completing the network connection. This was done multiple times until the server could no longer
communicate on the network. What kind of attack was initiated?
A. Spoofing
B. Trojan horse
C. Buffer overflow
D. Denial of Service
Answer: D.
Explanation:
A Denial of Service (DoS) attack is where multiple connection requests are made to a server
without completing the connection. This loads the server which prevents it communicating on the
network.
Reference:
Incorrect Answers:
A. Spoofing is sending data from a 'fake' network address. This is not described in the question.
B. A Trojan horse is a method used to gain entry to a system. This is not described in the
question.
C. A buffer overflow is not described in the question.
Question: 153
A user wants to have the latest version of elm installed. Which of the following will identify the
currently installed version?
A. Run "man elm"

B. Run "rpm -q elm"
C. Run "version elm"
D. Check /var/log/rpm
Answer: B.
Explanation:
The rpm -q command will query a package for information. The information will include the
installed files and their versions.
Reference:
Incorrect Answers:
A. The man elm command will display the manual pages for the elm program. It will not identify
the currently installed version.
C. The version elm command is an invalid command.
D. Checking the log files for the rpm package will not identify the currently installed version of
Elm.
Question: 154
What does the command "rpm -Uvh package-update-3.5.i386.rpm" do?
Page 50 of 217
Exam Name: Linux+
Exam Type: CompTIA
A. Uninstalls the package and related hidden files.

B. Upgrades the package and provides installation status.
C. Allows the user to view hidden files installed with the package.
D. Verifies that the package is installed correctly and reports errors.
Answer: B.
Explanation:
The rpm -Uvh command upgrades a package. The 'v' option is for verbose mode. This provides
the installation status. The package will still be installed if no previous versions exist.
Reference:
Incorrect Answers:
A. The 'e' option is used to uninstall a package.
C. The command does not display hidden files.
D. The 'vf' option is used to verify an installation.
Question: 155
An application is created that is called through the Web server. However, upon restarting the Web
server, it is discovered that the application is not writing its error to the Web error log properly.
Which of the following methods would resolve the problem?
A. Change the application to write its error logs into the /root directory.
B. Change the Web server user to 'root' so that applications run within it will run as root.
C. Change the permission and ownerships of the application to match the user group of the Web
server.
D. The application does not have sufficient rights to write the directory specified, so the suid bit
on the application must be set to allow it to run as root.
Answer: D.
Explanation:
It is most likely that the application does not have sufficient rights to write the directory specified.
Set User ID (SUID) is used to run a program as the user who owns the program (usually root)
rather than the user running the program.
Reference:
Incorrect Answers:
A. It would need root permissions to write to the root directory. Also, it is desirable to have
applications writing their error logs to the usual log file location.
B. It is a security risk to have the entire web server running as root. Only the application within it
needs to run as root.
C. The application needs to run as root.
Question: 156
Based on best practices, where is the best location to maintain documentation of work performed
on Linux servers at a site?
A. In a binder in the server room.

B. Off-site at a different facility.
C. In a text file kept on a Linux file server.
Page 51 of 217
Exam Name: Linux+
Exam Type: CompTIA
D. In a text file on the local machine where the changes were made.
Answer: A.
Explanation:
The documentation should be kept in a safe place, easily accessible by the network
administrators.
Reference:
Incorrect Answers:
B. The documentation should be easily accessible by the network administrators.
C. The documentation should not be kept on a computer, in case the computer fails.
D. The documentation should not be kept on a computer, in case the computer fails.
Question: 157
A system administrator has written a script that scans the password file for "unusual" things. For
which of the following should the script check?
A. A user with an unusual account name.

B. A user with the default group of 'wheel'.
C. A user ID number that has been set to zero.
D. A group ID number that has been set to zero.
Answer: C.
Explanation:
Intruders usually create a user account with the ID number set to zero. A user account with a user
ID of zero has root privileges.
Reference:
Incorrect Answers:
A. An unusual name does not create a security risk.
B. A group account of 'wheel' does not pose a security risk.
D. A group account with an ID of zero is a root group. However, it would be better to look for user
accounts with an ID of zero.
Question: 158
Which of the following would correctly format a 3.5" diskette?
A. mkfs /dev/fd0
B. fdisk /dev/fd0
C. mount -f /mnt/floppy
D. mkfs -t vfat /mnt/floppy
Answer: A.
Explanation:
The mkfs (make file system) command is used to format a disk. /dev/fd0 is the first floppy
disk on a Linux system.
Reference:
Page 52 of 217
Exam Name: Linux+
Exam Type: CompTIA
Roderick W. Smith. Sybex Linux + Study Guide: Page 459-460.
Incorrect Answers:
B. Fdisk is used for partitioning a hard disk, not formatting a floppy disk.
C. The mount command is used to mount a drive, not to format a floppy disk.
D. Vfat is the wrong file system for a floppy disk. You should use the msdos option.
Question: 159
The administrator wants to use /sbin/special.sh to do a backup every Friday the 13th. What would
be a solution?
A. Run
at "Fri, 13" < /sbin/special.sh
B. Run
at 'date | cut -d -e \f3' /sbin/special.sh
C. Add "5 1 13 * 5 /sbin/spcial.sh " to his crontab
D. Add "1 1 13 ** if [ 'date' == "Frid" ]; then /sbin/special.sh fi " to his crontab
Answer: C.
Explanation:
The crontab is used to schedule a program such as a backup program. The first 5 signifies 5
minutes past the hour. The 1 signifies 01:00 (1.00 a.m.). The 13 signifies the date of the month.
The * signifies any month. The 5 signifies a Friday. This means that if the 13th day of a month is a
Friday, the program will run at 01:05 (5 past 1 in the morning).
Reference:
Michael J. Tobler. New Riders, Inside Linux: Page 408/9.
Incorrect Answers:
A. The 'at' command can schedule a program, but it will only run once. Also, the syntax is
incorrect.
B. The 'at' command can schedule a program, but it will only run once. Also, the syntax is
incorrect.
D. The syntax is incorrect.
Question: 160
Which of the following commands is used to determine if network interfaces are up and running?
A. cksum
B. netcfg
C. siginit
D. ifconfig
Answer: D.
Explanation:
The ifconfig command will display detailed information about an interface. The
information will include the operational status of the interfaces.
Reference:
Incorrect Answers:
Page 53 of 217
Exam Name: Linux+
Exam Type: CompTIA
A. Cksum is used to calculate a Cyclic Redundancy Check to check a file for errors. It is not used
to determine if network interfaces are up and running.
B. Netcfg is not used to determine if network interfaces are up and running.
C. Siginit is not used to determine if network interfaces are up and running.
Question: 161
Which of the following is LEAST affected by electromagnetic interference (EMI)?
A. Fiber Optic Cable

B. Encrypted Wireless
C. RG-68 Coaxial Cable
D. Shielded Twisted Pair (STP)
Answer: A.
Explanation:
Fiber Optic cable uses pulses of light along a glass fiber to transmit data. As it uses no copper
wires, it is immune to electromagnetic interference.
Reference:
http://www.erg.abdn.ac.uk/users/gorry/course/phy-pages/fibre.html
Incorrect Answers:
B. Wireless data transmission is susceptible to electromagnetic interference.
C. Coaxial Cable uses copper wires and is therefore susceptible to electromagnetic interference.
D. Shielded Twisted Pair (STP) cable uses copper wires and is therefore susceptible to
electromagnetic interference. It is less susceptible to EMI than UTP (unshielded twisted pair)
because the copper wires are shielded.
Question: 162
If the Linux installation process continuously locks up, which of the following should be done?
A. Repartition the drive.

B. Remove all unnecessary hardware.
C. Enable power management in the BIOS.
D. Ensure that the network card is installed prior to the installation.
Answer: B.
Explanation:
If a Linux installation continuously locks up, it is likely that a hardware device is incompatible with
Linux. To troubleshoot this, you should remove all unnecessary hardware, and add the hardware
one device at a time, to discover the incompatible device.
Incorrect Answers:
A. Repartitioning the drive will not resolve the problem.
C. Power management is more likely to cause problems, than resolve them.
D. It is not necessary to install the network card prior to an installation.
Question: 163
Under which of the following hardware upgrades would a system NOT have to be rebooted?
A. Upgrading the CPU.

B. Replacing a PS/2 mouse.
C. Adding a USB CDROM drive.
Page 54 of 217
Exam Name: Linux+
Exam Type: CompTIA
D. Installing additional RAM.
Answer: C.
Explanation:
One of the features of USB devices is that they are 'hot swappable'. This means that you
can disconnect and reconnect USB devices without needing to reboot the system.
Reference:
Incorrect Answers:
A. The CPU can only be changed when the system is shut down.
B. A PS/2 mouse may not work if it has been replaced without rebooting the machine.
D. RAM can only be installed when the system is shut down.
Question: 164
Which of the following connectors is hot pluggable?
A. Serial port
B. Parallel port
C. IEEE-1394 port
D. Ultra2 SCSI external connector
Answer: C.
Explanation:
An IEEE-1394 port is a firewire port. This is a relatively new technology provide high data transfer
rates and is hot pluggable.
Reference:
http://www.apple.com/firewire/
Incorrect Answers:
A. Serial ports are not hot pluggable.
B. Parallel ports are not hot pluggable.
D. Ultra2 SCSI ports are not hot pluggable.
Question: 165
When SCSI, video and I/O boards are installed in a PC, which of the following allows the installed
card to be integrated with the current system on a hardware level?
A. CMOS
B. POST
C. BIOS
D. Boot strap
Answer: A.
Explanation:
The CMOS chip is the 'configurable' part of the BIOS. When the computer boots, the BIOS reads
configuration information from the CMOS. The BIOS and CMOS are hardware and are not related
to the operating system which is software.
Reference:
Page 55 of 217
Exam Name: Linux+
Exam Type: CompTIA
http://www.wimsbios.com/
Incorrect Answers:
B. The POST (power on self test) is the process of the BIOS checking the system for installed
hardware during system boot up.
C. The BIOS cannot be directly configured. It reads its configuration information from the CMOS.
D. Boot Strap is the process of a computer booting up.
Question: 166
A user has three SCSI devices (two internal and one external) connected to his computer. He
adds another external device, and this device and one of the internal devices do not work. Which
of the following is the most likely cause?
A. An ID conflict
B. AN IRQ conflict
C. A memory conflict
D. A driver is not installed
Answer: A.
Explanation:
SCSI devices use SCSI identifiers (IDs). Each device must have a unique SCSI ID to function
correctly. If two devices have the same ID, none of the two devices will work.
Reference:
Incorrect Answers:
B. The SCSI devices don't have separate IRQs. The SCSI controller (to which the SCSI devices
are attached) uses one IRQ.
C. A memory conflict is less likely than an ID conflict.
D. If the driver wasn't installed, only the recently added device would not work. The previously
added devices would still work.
Question: 167
After the failed memory has been replaced, the PC does not boot and beeps several times. The
beep code indicates there is no memory. The technician observes that the old SIMMs use 9 chips
while the new SIMMs only use 8 chips. What is most likely the problem?
A. EDO memory is required

B. Parity memory is required
C. Fast Page Mode memory is required
D. Unregistered SDRAM memory is required
Answer: B.
Explanation:
Parity memory boards have an extra chip for parity checking.
Reference:
http://www.anandtech.com/showdoc.html?i=113&p=6
Incorrect Answers:
A. The extra chip indicates parity memory, not EDO memory.
C. The extra chip indicates parity memory, not Fast Page Mode memory.
Page 56 of 217
Exam Name: Linux+
Exam Type: CompTIA
D. The extra chip indicates parity memory, not SDRAM memory.
Question: 168
All of the following are common BIOS options EXCEPT
A. Mouse type
B. Parity/non parity
C. Floppy drive type
D. Hard drive auto-detect
Answer: A.
Explanation:
The mouse type is not a common BIOS option although the PS/2 mouse PORT is often
mentioned.
Incorrect Answers:
B. The option to disable or enable parity checking is common.
C. The floppy drive type, (3.5 inch or 5.25 inch) is a common option.
D. The option to disable or enable hard drive auto detection is common.
Question: 169
A user has just installed a new 3.5" diskette drive in his desktop computer. He turns the computer
on and discovers that the diskette drive light stays on all the time. What is the most likely reason
the light stays on?
A. The system BIOS is misconfigured.

B. The light on diskette drive is broken.
C. The power cable has not been connected properly.
D. The ribbon cable is inserted backwards in the drive.
Answer: D.
Explanation:
Inserting the ribbon cable backwards is an easy mistake to make and often causes the symptoms
mentioned in this question.
Reference:
http://www.computerhope.com/issues/ch000278.htm
Incorrect Answers:
A. The only configurable floppy drive option is the size. The BIOS default would most likely have
the correct size (3.5 inch) configured.
B. If the light was broken, it wouldn't come on at all.
C. If the power cable wasn't connected, the light wouldn't come on at all.
Question: 170
Which network interface card has BNC connector on it?
A. IR
B. Thinnet
C. Fiber optic
D. Twisted pair
Answer: B.
Page 57 of 217
Exam Name: Linux+
Exam Type: CompTIA
Explanation:
Thinnet (otherwise known as 10Base2) uses the BNC connector.
Reference:
http://searchnetworking.techtarget.com/sDefinition/0,,sid7_gci211681,00.html
Incorrect Answer:
A. IR (infra-red) is a wireless technology and therefore uses no connectors.
C. Fiber Optic does not use BNC connectors.
D. Twisted Pair does not use BNC connectors.
Question: 171
On a Plug-and-Play system, some legacy hardware (non-Plug-and-Play) is required. Which of the
following should be done to ensure the proper operation of all hardware on the system?
A. Enable IRQ routing in the BIOS.

B. Replace the BIOS with a non-Plug-and-Play BIOS.
C. Reserve the resources in CMOS for the legacy hardware.
D. Replace the legacy devices with current Plug-and-Play devices.
Answer: C.
Explanation:
The resources for the legacy devices should be reserved in the CMOS. This will prevent the
resources being dynamically assigned to plug and play devices, which would cause a resource
conflict.
Reference:
Incorrect Answers:
A. It is not necessary to enable IRQ routing in the BIOS.
B. It is not necessary to replace the BIOS.
C. It is not necessary to replace the devices.
Question: 172
A battery fails in a Linux workstation. Which of the following will need to be reconfigured to get the
system working after replacing the battery?
A. MBR settings
B. CMOS settings
C. POST settings
D. Data on each partition
Answer: B.
Explanation:
The CMOS relies on a battery to 'remember' its configuration. If the battery fails, the CMOS will
need to be reconfigured.
Reference:
http://www.pcmech.com/show/motherboards/80/
Incorrect Answers:
Page 58 of 217
Exam Name: Linux+
Exam Type: CompTIA
A. The MBR settings are written to the hard disk and do not rely on battery power.
C. The POST settings are in the BIOS which does not rely on battery power.
D. The data on each partition is written to the hard disk and does not rely on battery power.
Question: 173
A user adds a new CD-RW to an existing system with a diskette drive, single IDE hard disk drive,
and CDROM drive. The user then reports the system is taking longer to load applications. Which
of the following will most likely resolve the problem?
A. Switch the CD-RW to cable select.

B. Install CD-R accelerator software.
C. Replace the CD-RW drive, as it is damaged.
D. Move the CD-RW to the secondary IDE controller.
Answer: D.
Explanation:
Most systems come with two IDE controllers. The hard disk is always on the primary IDE
controller. System performance can be improved by installing CD devices on the secondary IDE
controller so that they are separate to the hard drive.
Reference:
Incorrect Answers:
A. Using cable select will not improve system performance.
B. Moving the CD device to the secondary IDE controller will improve performance without the
need for extra software. CD-R accelerator software may improve the CD-R performance, but it
won't improve the overall system performance.
C. It is unlikely that a faulty CD-RW would degrade the system performance.
Question: 174
A system's serial device is not operating correctly. Which of the following IRQs is likely to be
conflicting and causing the problem?
A. 4
B. 5
C. 7
D. 13
Answer: A.
Explanation:
Serial devices use COM ports. COM ports 1 and 3 use IRQ 4.
Reference:
Incorrect Answers:
B. IRQ 5 is commonly used by sound cards.
C. IRQ 7 is commonly used by the parallel port.
D. IRQ13 is used by the Math co-processor.
Question: 175
Page 59 of 217
Exam Name: Linux+
Exam Type: CompTIA
A user has just hot-swapped the CDROM with the diskette drive in his mobile system. Now the
diskette drive is not responding. Which of the following actions will correct the problem?
A. Reboot the system.

B. Reinstall the driver.
C. Remove the drive and reinstall it.
D. Set up hot-swapping capabilities in CMOS.
Answer: C.
Explanation:
If a device doesn't work after hot plugging it into a mobile system, the first troubleshooting step
would be to remove the device and reinstall it.
Incorrect Answers:
A. It may not be necessary to reboot the system. Try refitting the device first.
B. If the device worked before, then the driver is already installed and does not need reinstalling.
D. Laptop PCMCIA devices are hot swappable. This does not need to be configured in the
CMOS.
Question: 176
Which if the following IDs should be avoided when assigning IDs to SCSI peripherals?
A. 2
B. 4
C. 5
D. 7
Answer: D.
Explanation:
SCSI devices need separate SCSI IDs. The SCSI controller itself uses a SCSI ID. This is usually
ID 7.
Reference:
http://cmtunix.tstc.edu/database/hardware/scsi.html
Incorrect Answers:
A. The SCSI controller usually uses SCSI ID 7, not 2.
B. The SCSI controller usually uses SCSI ID 7, not 4.
C. The SCSI controller usually uses SCSI ID 7, not 5.
Question: 177
Which device commonly uses the ATAPI interface?
A. Modem
B. CD-ROM
C. Video card
D. Network card
Answer: B.
Explanation:
CD-ROM devices commonly use the ATAPI interface.
Page 60 of 217
Exam Name: Linux+
Exam Type: CompTIA
Reference:
Incorrect Answers:
A. Modems commonly use the serial interface, not the ATAPI interface.
C. Video Cards commonly use the AGP interface, not the ATAPI interface.
D. Network cards commonly use PCI interfaces, not the ATAPI interface.
Question: 178
A user believes that his telecommunications software is not dialing his modem properly. Which of
the following AT commands can be used to have the modem dial 432-3604?
A. AT4323604
B. ATM4323604
C. ATDT4323604
D. AT4323604DT
Answer: C.
Explanation:
The ATDT<number> command is used to have a modem dial a number.
Reference:
http://www.option.co.za/hayesat.htm#Hayes%20AT%20Commands
Incorrect Answers:
A. You need the ATDT command, not the AT command.
B. You need the ATDT command, not the ATM command
D. You need the ATDT command, not the AT command
Question: 179
A Linux vendor has recently come out with a necessary patch to the server software to improve
security on the server. Which of the following is the best practice, if any, for updating this patch on
a production system?
A. Never apply patches on production servers, because they may introduce errors and conflicts.
B. Apply the patch during business hours, to validate the patch under normal system operation.
C. Apply the patch onto a secondary system to test the patch before installing it on a production
machine.
D. Apply the patch immediately to the production system, because security patches need to be
installed right away.
Answer: C.
Explanation:
Any new software or software patch should be installed on a secondary system and thoroughly
tested before installation of production systems.
Reference:
Incorrect Answers:
A. A patch may introduce errors and conflicts, but this is why should test it first on a secondary
system.
B. A patch should be tested on a secondary system before installation on a production system.
Page 61 of 217
Exam Name: Linux+
Exam Type: CompTIA
D. Security patches should be installed as soon as possible, but not before testing on a
secondary system.
Question: 180
A Linux system crashes every day at the same time and needs to be rebooted. Which of the
following would provide evidence of what was happening on the system at that time?
A. Run dmesg
B. Run uptime
C. Look in /etc/shutdown
D. Look in /var/log/messages
Answer: D.
Explanation:
Most applications write error messages to files in the /var/log/messages directory. You should
look here to see if you can discover what is causing the system to crash.
Reference:
Incorrect Answers:
A. Dmesg is a utility that displays the text that is displayed during system startup. You need find
out what caused the system to crash before the reboot was necessary.
B. Uptime is a utility that displays how long the system has been running for.
C. Error messages are not written to this file or directory.
Question: 181
After installing Linux onto a dual-processor machine, the administrator suspects that only one
processor initialized successfully during the boot process. How could this be verified?
A. Run cpuinfo
B. Check /var/log/messages for errors.
C. Run dmesg to review the log file.
D. Run ps to see if both CPUs appear.
Answer: A.
Explanation:
Cpuinfo is a utility that displays information about all running processors on a system. If the
output contains information about only one processor, then only one processor is working.
Reference:
http://www.cpan.org/modules/by-category/04_Operating_System_Interfaces/Linux/Linux-Cpuinfo-
1.5.readme
Incorrect Answers:
B. A non-functional processor would generate any error messages in the error logs.
C. Dmesg displays the text that was displayed when the system booted. This will not contain any
information about a non-functional processor.
D. Ps lists the running processes, not the processors.
Question: 182
A system has a utility that is regularly updated with new versions. Rather than overwriting the
older versions, they need to be retained for testing purposes. Therefore, they keep older versions
Page 62 of 217
Exam Name: Linux+
Exam Type: CompTIA
in the following format utility1.3 utility1.4 utility1.5 What is the best way the system can be set up
so that users cam simply type "utility" to run the latest version of the application?
A. Copy the latest version of the utility to "utility".

B. Move the latest version of the utility to "utility".
C. Make a symbolic link "utility" to the latest version.
D. Make a symbolic link from the latest version to "utility.lnk".
Answer: C.
Explanation:
A symbolic link is like a shortcut. A symbolic link named utility will open the file (program/utility)
that the link points to, when a user types 'utililty'.
Reference:
Incorrect Answers:
A. A copy of the latest version of the program should not be renamed 'utility' because other files
that the program uses, might have links to the original program name.
B. The latest version of the program should be renamed 'utility' because other files that the
program uses, might have links to the original program name.
D. The symbolic link needs to point to the latest version of the program.
Question: 183
A machine that usually executes its tasks very quickly becomes remarkably slow. What
information from the ps command would suggest that a process is problematic and must be
killed?
A. A high CPU time.

B. A high process ID.
C. A high load average.
D. A high memory percentage.
Answer: A.
Explanation:
The PS command is used to display information about the running processes. A faulty process
can be recognized by having a high CPU time. This means that a high percentage of the
processor time is spent trying to run the process. This can usually be fixed by restarting the
process.
Reference:
Incorrect Answers:
B. The process ID is just an identifier for the process. A high ID would not slow the machine.
C. The PS command does not display the load average for the processor.
D. The PS command does not display information about the memory.
Question: 184
When dial-up users are able to connect to the dial-in Linux server but are unable to authenticate,
which of the following should be done?
A. Reboot the server.
Page 63 of 217
Exam Name: Linux+
Exam Type: CompTIA
B. Check spooler for errors.

C. Check that RAS is running.
D. Check that RADIUS is running.
Answer: D.
Explanation:
RADIUS stands for Remote Authentication Dial In User Service. It is a service that is used to
authenticate dial in users.
Reference:
http://www.gnu.org/software/radius/radius.html
Incorrect Answers:
A. It is not necessary to reboot the server; just start the RADIUS service.
B. The spooler is for printing, not authentication.
C. If RAS wasn't running, the users would not be able to dial in.
Question: 185
The system administrator is asked to install a file called zope-2.2.5-0.rpm. The administrator
downloads the file and attempts to install it. While installing the file the following error is
displayed: failed to open /var/lib/rpm/packages.rpm: Permission denied error: cannot open
/var/lib/rpm/packages.rpm
What has to be done before the program will work?
A. Run "rpm -i zope-2.2.5-0" as root.

B. Change ownership of file to 'root'
C. Run "rpm -i --nodeps zope-2.2.5-0" to bypass the error.
D. Return to the Website to receive an uncorrupted .rpm file.
Answer: A.
Explanation:
You must be logged in as root to install a program.
Incorrect Answers:
B. The file does not need to be owned by root, to enable its installation.
C. You cannot bypass a 'permission denied' error message.
D. The system was able to read the permissions, which means the file is not corrupted.
Question: 186
A Linux machine is not booting after a power outage. No rescue/boot disk is readily available.
Where could a rescue/boot disk be found?
A. In /boot
B. In /root
C. From linuxdocs.org
D. At the distribution's Website.
Answer: D.
Explanation:
You can download a rescue/boot disk from the distributions Website.
For example, you can download Redhat Linux boot disk images from:
ftp://ftp.redhat.com/pub/redhat/linux/7.3/en/os/i386/images/
Page 64 of 217
Exam Name: Linux+
Exam Type: CompTIA
Incorrect Answers:
A. There are no boot disk images in /boot.
B. There are no boot disk images in /root.
C. Linuxdocs.org contains documentation, not boot disk images.
Question: 187
Why is "netstat -nr" used in substitution of the route command when a network connection is not
functioning correctly?
A. "netstat -nr" displays the routing table without performing reverse name lookup.
B. Route requests the network driver for data, but "netstat -nr" will display the kernel's routing
table.
C. The route command can be used if the network is functional. The "netstat -nr" displays only
the local machine.
D. Route will attempt to contact and verify the connections to each host in the routing table using
ping.
If the network fails, route will stop responding.
Answer: C.
Explanation:
The Route command is used to display the routing table. If the network is not functional, the
routing table will only contain static routes; it will not contain any dynamic routes. The netstat
command displays information about the local machine whether the network is functional or not.
Reference:
Incorrect Answers:
A. Netstat is used rather than route because netstat displays information about the local machine.
B. Netstat is used rather than route because netstat displays information about the local machine.
D. Route does not attempt to contact and verify the connections to each host.
Question: 188
In order to control runaway processes, an administrator creates a cron job. Which of the following
commands should be run so that he can scan the logs later?
A. ps
B. sar
C. top
D. tail
Answer: C.
Explanation:
A 'runaway' process is a process that is using a high amount of CPU time. The 'top' command
displays the processes that use the highest amount of CPU time.
Reference:
Incorrect Answers:
A. The ps command displays all processes. We just need the processes with the highest amount
of CPU time.
Page 65 of 217
Exam Name: Linux+
Exam Type: CompTIA
B. There is no sar command.

C. The tail command displays the processes with the lowest amount of CPU time.
Question: 189
After setting up a cron job to backup a system to tape, the first few backups on the tape cartridge
are successful.
They then fail, reporting the "device is full." What could be the cause of the problems?
A. Tapes can only be used once.

B. The tape is not being erased.
C. The tape drive needs to be replaced.
D. Incremental backups need to be used.
Answer: B.
Explanation:
If you're using a single tape to run scheduled backups, then the cron job will need to be
configured to erase the tape before performing the backup.
Incorrect Answers:
A. Tapes can be used many times.
C. It is unlikely that the tape drive is faulty and therefore does not need to be replaced.
D. Incremental backups back up only the files that have changed since the last backup. These
backups use less tape space but the tape will eventually fill up if it isn't erased.
Question: 190
A new user has been issued a Linux system that automatically boots to an X login, but would
rather have the system automatically boot to the console login. How should the system be
configured to accommodate the user?
A. By typing "init 3" in an xterm.

B. By running the Xbootmgr utility.
C. By editing /etc/lilo.conf and adding the line:
boot = console
D. By changing the line in /etc/inittab that reads:
id :5:initdefault:
to read:
id:3:initdefault:
Answer: D.
Explanation:
The inittab file specifies the default runlevel for the machine. Run level 5 will automatically boot to
an X login. Runlevel 3 will boot to a console login.
Reference:
Roderick W. Smith. Sybex Linux + Study Guide: Page 410, 399.
Incorrect Answers:
A. Init 3 will change the runlevel to runlevel 3, but the default boot runlevel won't be changed.
B. Xbootmgr will not change the default runlevel of the machine.
D. The is an incorrect use of the boot command in a lilo.conf file.
Question: 191
Page 66 of 217
Exam Name: Linux+
Exam Type: CompTIA
A user complains that they can send and receive mail on the Internet, but cannot browse the
Web. They have tried using different Web browsers in X. Working offline is disabled. What is
most likely to be the problem?
A. The user is not typing the Web address correctly.

B. Web support was not added during the initial installation.
C. X dropped Web access to the browser and needs to be restarted.
D. There is a proxy sever that the browsers have not been configured to use.
Answer: D.
Explanation:
If you have a proxy server configured on the network, the client computers need to be configured
to use it to access the internet.
Reference:
http://www.squid-cache.org/
Incorrect Answers:
A. An incorrect web address would return a page not found error or a different website.
B. Web support is added by default in most installations.
C. This is not something that X can do.
Question: 192
A user-defined cronjob is configured incorrectly and is slowing down a server. What is the best
way to address this issue?
A. Use "cron-d*" to delete each user's cron jobs.

B. Use "userdel <user>" to delete the user to prevent additional cron jobs.
C. Use "crontab -u <user> -l" for each user to find out who has the incorrect crontab.
D. Prevent cron from launching any additional processes by using "killall -9 crond".
Answer: C.
Explanation:
You need to find out which users' cron job is causing the problem and stop the cron job.
Reference:
http://www.oreillynet.com/linux/cmd/c/crontab.html
Incorrect Answers:
A. It is not necessary to delete all the users' cron jobs.
B. It is not necessary to delete any user accounts.
D. Cron is already running a troublesome process. Killing any additional processes won't help.
Question: 193
Which of the following tasks cannot be accomplished with the touch command?
A. Create a new file.

B. Change a file's modification time.
C. Change a file's access time.
D. Change a file's creation time.
Answer: D.
Page 67 of 217
Exam Name: Linux+
Exam Type: CompTIA
Explanation:
The touch command is used to display information about a file, including its modification and last
access times. If the file doesn't exist, touch will create it. It cannot modify a file's creation time.
Reference:
http://www.oreillynet.com/linux/cmd/t/touch.html
Incorrect Answers:
A. If a file doesn't exist, touch can create it.
B. You can change a files modification time with the touch command.
C. You can modify a files access time with the touch command.
Question: 194
A site administrator instructs the technician to install Linux as a secondary OS on an existing
workstation. He wants to use the boot loader of the primary OS. When requested where to place
LILO, the technician should select which location?
A. BIOS
B. /etc/disktab
C. Master boot record
D. Partition superblock
Answer: B.
Explanation:
The default location for a Linux boot loader is in the Master Boot Record. However, if you want to
use the boot loader of another operating system, you'll need to put the Linux boot loader into a
directory in a Linux partition such as /etc/disktab.
Reference:
Incorrect Answers:
A. You cannot put a Linux boot loader into the BIOS.
C. If you want to use the boot loader of another operating system, you'll need to put the Linux
boot loader into a directory in a Linux partition such as /etc/disktab.
D. You cannot put a Linux boot loader into the partition superblock.
Question: 195
A network administrator attempted to configure the Ethernet interface. He issued the insmod
command along with the driver's object file. However, insmod reports errors about unresolved
symbols. Which of the following is the cause of the problem?
A. A driver of that type has already been installed.

B. The latest version of insmod is not installed.
C. The compiled driver is incompatible with the kernel.
D. The module is designed for a device of another type.
Answer: C.
Explanation:
Unresolved symbol errors are usually caused by attempting to install a module/driver which is
incompatible with the kernel.
Reference:
Page 68 of 217
Exam Name: Linux+
Exam Type: CompTIA
Incorrect Answers:
A. This would not cause an unresolved symbol error.
B. It is not necessary to have the latest version on insmod installed.
D. The module would still load if it were designed for another device. The device just wouldn't
work.
Question: 196
A computer has a FAT32 partition that takes up the entire 16 GB hard driver. Another operating
system is currently installed, but only uses 8 GB of the partition. What is the best way to install
Linux without removing the other operating system?
A. Run FIPS
B. Run rsize
C. Run fdisk
D. Run format
Answer: A.
Explanation:
To install Linux, you need to reduce the size of the FAT32 partition to free up enough space to
create a Linux partition. FIPS is a utility that can resize partitions without losing data.
Reference:
Incorrect Answers:
B. Rsize is the incorrect command.
C. Fdisk creates partitions but it cannot resize them.
D. Format will erase everything on the partition, not resize it.
Question: 197
A client terminal requires the BOOTP protocol in order to access the server. Which protocol must
be installed on the BOOTP server to communicate with the client terminal?
A. SMB
B. IGRP
C. OSPF
D. TCP/IP
Answer: D.
Explanation:
BootP is an IP protocol, commonly used with diskless workstations.
Reference:
http://www.webopedia.com/TERM/B/BOOTP.html
Incorrect Answers:
A. SMB is a NetBIOS protocol used for communication with Windows computers. It is not used
with BootP.
B. IGRP is a routing protocol. It is not used with BootP.
C. OSPF is a routing protocol. It is not used with BootP.
Page 69 of 217
Exam Name: Linux+
Exam Type: CompTIA
Question: 198
Where is the first place to look for error messages while installing and testing an application?
A. /tmp/boot.log
B. /var/log/dmesg
C. /var/log/messages
D. /var/log/kernel/errors
Answer: C.
Explanation:
Most applications write messages to error logs stored within /var/log/messages.
Reference:
Incorrect Answers:
A. This is not the default location for application error messages.
B. This is not the default location for application error messages.
D. This is not the default location for application error messages.
Question: 199
A new shell command is installed and does not perform correctly. It generates too much
diagnostic output to read on the screen and does not write to a log file. Which of the following
would capture the output for evolution?
A. Run the command as a daemon.

B. Make the changes to /etc/syslog.conf
C. Run the command in the background.
D. Add redirection to the command line.
Answer: D.
Explanation:
By redirecting the output to a command line in a console, you could read the output by scrolling
up the window.
Reference:
Incorrect Answers:
A. Running the command as a daemon would not capture the output.
B. Making changes to the syslog.conf file won't help because the program doesn't write to a log
file.
C. Running the command in the background would not capture the output.
Question: 200
Which runlevel only grants root access?
A. 0
B. 1
C. 2
D. 3
Answer: B
Page 70 of 217
Exam Name: Linux+
Exam Type: CompTIA
Explanation:
Runlevel 1 is 'single user maintenance mode'. In the mode, only the root user can log in to the
system.
Reference:
Incorrect Answers:
A. Runlevel 0 shuts down the computer.
C. Runlevel 2 is a multiuser mode in which any user can log in.
D. Runlevel 2 is a multiuser mode in which any user can log in.
Question: 201
A new employee having a problem with account login has the following enter in the /etc/passwd
file:
User1:*:51:501:John Doe:/home/user1:/bin/bash
What is wrong with this entry in the /etc/passwd file?
A. The UID is not valid.

B. The account is locked.
C. The UID and GID must match.
D. Spaces are not permitted between the first and last name.
Answer: B.
Explanation:
The second field is the password field. This account has no password as indicated by the '*'.
This means that the account is locked.
Reference:
Incorrect Answers:
A. The user ID is valid.
C. The User ID and Group ID do not have to be the same.
D. Spaces are permitted between the first and last name. (note: This is not the login name).
Question: 202
What command is used to remove an rpm package from Linux?
A. rpm -e <package name>

B. rm -rf <package name>
C. rpm -m <package name>
D. rpm --remove <package name>
Answer: A.
Explanation:
The rpm -e <package name> command is used to remove an rpm package.
Reference:
Page 71 of 217
Exam Name: Linux+
Exam Type: CompTIA
Incorrect Answers:
B. This is the command used to delete a directory. You would need to delete every file installed
by the package
if you were to use this command.
C. There is no -m option in the rpm program.
D. There is no --remove option in the rpm program.
Question: 203
In order to prevent monitor damage when configuring X, all of the following must be configured
correctly EXCEPT
A. RAMDAC
B. Video RAM
C. Refresh rate
D. Resolution capability
Answer: D.
Explanation:
The resolution capability is a graphics card setting. However, this setting when incorrectly
configured would not damage a monitor.
Reference:
Incorrect Answers:
A. The RAMDAC must be configured.
B. The Video RAM must be configured.
C. The refresh rate must be configured.
Question: 204
The following is an example of a ".forward" file found in user Audrey's home directory.
/audrey,[email protected]
Which of the following best describes what the mail handler will do when user "audrey" receives
mail?
A. It forwards a copy to comptia.org and does not keep a local copy.

B. It saves a copy of the mail locally and forwards a copy of the mail to [email protected].
C. It runs a program audrey that is found in the root directory and forwards the mail to
[email protected].
D. It runs a program called audrey that is found in the root directory and forwards the program's
results to comptia.org.
Answer: B.
Explanation:
A .foward file is used to tell an email client what to do with received email. You can have multiple
entries in the file, separated by commas. /Audrey will keep a copy in a directory called /Audrey.
[email protected] will forward a copy of the email to that address.
Reference:
Bryan Costales, O-Reilly Press. Sendmail. Page 429.
Incorrect Answers:
Page 72 of 217
Exam Name: Linux+
Exam Type: CompTIA
A. It will save a copy in the /Audrey directory.

C. It does not run a program called Audrey.
D. It does not run a program called Audrey.
Question: 205
What file should be edited to add two additional gettys to runlevel 3?
A. /etc/inittab
B. /etc/termcap
C. /etc/rc.dlinit.d/inittab
D. /usr/local/etc/getty.conf
Answer: A.
Explanation:
The /etc/inittab file contains the default configuration information for the various runlevels.
Reference:
Incorrect Answers:
B. /etc/termcap does not contain configuration information for the various runlevels.
C. /etc/rc.dlinit.d/inittab does not contain configuration information for the various runlevels.
D. /usr/local/etc/getty.conf does not contain configuration information for the various runlevels.
Question: 206
Which of the following programs can be reconfigured to boot Linux?
A. Minix
B. FIPS.EXE
C. Disk Druid
D. LOADLIN.EXE
Answer: D.
Explanation:
There are various boot loaders for Linux such as LILO, Grub and LOADLIN.EXE.
LOADLIN.EXE is a DOS program that can load Linux.
Reference:
Incorrect Answers:
A. Minix is an old UNIX operating system, not a Linux boot loader.
B. Fips is a partition resizing utility, not a Linux boot loader.
C. Disk Druid is a hard disk partitioning utility, not a Linux boot loader.
Question: 207
When BASH is invoked as an interactive login shell, in which of the following sequences are the
scripts sourced?
A - ~/.bash_login, ~/.bash_profile, /etc/profile, ~/.profile

B - /etc/profile, ~/.bash_profile, ~/.bash_login, ~/.profile
C - ~/.bash_profile, ~/.bash_login, ~/.profile, /etc/profile
D - /etc/profile, ~/.profile, ~/.bash_login, ~/.bash_profile
Page 73 of 217
Exam Name: Linux+
Exam Type: CompTIA
Answer: B
Question: 208
A server has the following Class C IP address:
192.168.1.2
What are the default network and broadcast addresses?
A. Network: 192.0.0.1; Broadcast: 192.0.0.2

B. Network: 192.0.0.0; Broadcast: 192.168.1.0
C. Network: 192.168.1.1; Broadcast: 192.168.1.0
D. Network: 192.168.1.0; Broadcast: 192.168.1.255
Answer: D.
Explanation:
The first three octets of a Class C address are the network address. The last octet is the host
portion of the address. The network address has a zero as the host portion (e.g. 192.168.1.0).
The broadcast address has 255 as the host portion (255 = all 1s in binary). This gives us
192.168.1.255 as the broadcast address.
Incorrect Answers:
A. These are incorrect network and broadcast addresses.
B. These are incorrect network and broadcast addresses.
C. These are incorrect network and broadcast addresses.
Question: 209
A new video card is added to a Linux workstation. Which of the following files is used to configure
X?
A. /usr/conf/Xconfig
B. /etc/X11R6/Xconfig
C. /etc/X11/XF86Config
D. /root/Xwindows/Xconf
Answer: C.
Explanation:
XF86Config is the configuration file for X. It resides in the /etc/X11 directory.
Reference:
Incorrect Answers:
A. This is not the correct file to configure X.
B. This is not the correct file to configure X.
D. This is not the correct file to configure X.
Question: 210
What command is used to remove a kernel module?
A. rmmod
B. rm module
C. rm -rf <module name>
D. /uninstall <module name>
Page 74 of 217
Exam Name: Linux+
Exam Type: CompTIA
Answer: A.
Explanation:
The 'rmmod' (remove module) command is the correct command to remove a module.
Reference:
Incorrect Answers:
B. The command rm module would delete a file called module from the current directory.
C. The rm -rf command would delete all files in a directory called <module name>.
D. This is a non-existent command.
Question: 211
User jsmith needs read and write access to the file named employees but should have no access
to the file named alary User jsmith is member of the groups smith and elso?
-rw-rw---- 1 jsmith root 113 Jun 16 12:59 employees

-rw-r---- 1 salary belso 4230 Jun 18 18:01 salary
Which of the following should be done to accomplish the goal?
A - Add jsmith to the group root

B - Remove jsmith to the group salary
C - Remove jsmith from the group belso
D - Remove jsmith from the group jsmith
Answer: C
Question: 212
Which of the following contains system user default configuration files and directories?
A. /etc/skel
B. /usr/config
C. /usr/local/bin
D. /etc/user.conf
Answer: A.
Explanation:
The default configuration files for user accounts are in /etc/skel. These settings are copied when
a user account is first created.
Reference:
Incorrect Answers:
B. The default user configuration files are not stored in the /usr/config directory.
C. The default user configuration files are not stored in the /usr/local/bin directory.
D. The default user configuration files are not stored in the /etc/user.conf file.
Question: 213
A new printer has been installed and the printcap file has been edited. Is the printer ready to use?
Page 75 of 217
Exam Name: Linux+
Exam Type: CompTIA
A. No, because the printer daemon must be restarted.

B. No, because there is also a spool daemon that will need to be restarted.
C. Yes, because the printer configuration files are read every time the printer spool is used.
D. Yes, because it is necessary to run the program called printcap which creates a separate file
used by the printer daemon.
Answer: A.
Explanation:
After making changes to the printcap file, you need to restart the printer daemon to activate the
changes.
Reference:
Incorrect Answers:
B. There isn't a separate spool daemon that needs to be restarted.
C. The printer is not ready for use without restarting the printer daemon.
D. The printer is not ready for use without restarting the printer daemon.
Question: 214
Which of the following protocols is used while configuring a workstation to dial into and connect to
a new ISP?
A. PPP
B. UDP
C. UUCP
D. SNMP
Answer: A.
Explanation:
PPP (point-to-point) protocol is the protocol used to connect to an ISP (Internet Service Provider).
Reference:
Incorrect Answers:
B. UDP is not used to connect to an ISP.
C. UUCP is not used to connect to an ISP.
D. SNMP is not used to connect to an ISP.
Question: 215
An Internet Web server is being installed. No DHCP server is available. What is the proper
method to obtain a valid Internet IP address?
A. Use ping.
B. Use netstat.
C. Use nslookup.
D. Contact the Internet Service Provider (ISP).
Answer: D.
Explanation:
Page 76 of 217
Exam Name: Linux+
Exam Type: CompTIA
When installing an Internet Web server, you'll need to contact the Internet Service Provider to find
out what IP address to assign to the Web server.
Reference:
Incorrect Answers:
A. Ping is used to test IP connectivity, not to obtain an IP address.
B. Netstat is used to troubleshoot network connectivity, not to obtain an IP address.
C. Nslookup is used to test DNS, not to obtain an IP address.
Question: 216
Which of the following tasks is the most important best practice when performing a new
installation of Linux for a customer?
A. Document all configuration settings used during the installation.

B. Apply the latest patches and updates to the operating system and applications.
C. Use a single distribution for the operating system, utilities, and applications.
D. Use default settings during the installation and make custom changes after the operating
system is running and validated.
Answer: A.
Explanation:
When installing Linux for a customer, it is good practice to document all configuration settings
used during the installation. This will make it easier to troubleshoot any problems that may occur
in the future.
Reference:
Incorrect Answers:
B. Applying the latest patches is important, but documentation is more important.
C. Using a single distribution is a good idea, but documentation is more important.
D. Using default settings may make the installation easier, but this is not required and is not the
most important 'best practice'.
Question: 217
A user has just connected a SCSI scanner device to his computer. After installing the vendor's
drivers, the scanner cannot be correctly used by the software. All of the following are possible
reasons EXCEPT
A. The scanner device is damaged.

B. The SCSI ID is set incorrectly.
C. The last device is not terminated.
D. There is an IRQ conflict between the scanner and another device.
Answer: D.
Explanation:
SCSI devices don't use IRQs. They use SCSI IDs to differentiate between devices. Only the SCSI
controller to which the SCSI devices connect uses an IRQ.
Reference:
Page 77 of 217
Exam Name: Linux+
Exam Type: CompTIA
Incorrect Answers:
A. It is possible that the scanner is damaged.
B. It is possible that the SCSI ID is not set correctly.
C. It is possible that the last SCSI device on the SCSI chain is not terminated.
Question: 218
What may happen if a network cable and a power cable are too close together?
A. EMI may occur.

B. Jabber may occur.
C. Crosstalk may occur.
D. Power surges may occur on the network cable.
Answer: A.
Explanation:
All power cables produce an electro magnetic field around them. This magnetic field can interfere
with data traveling along a network cable if the network cable is close to the power cable. This is
known as EMI (Electro Magnetic Interference).
Reference:
http://www.kemcointernational.com/newcoatings.htm
Incorrect Answers:
B. Jabber can be caused by a faulty network card, not by a power cable.
C. Crosstalk can occur when network cables are close together. It is not caused by a power
cable.
D. Power surges would not occur on a network cable, if it was close to a power cable.
Question: 219
What is the advantage of using an extended capabilities port (ECP) over an enhanced parallel
port (EPP)?
A. Daisy chaining capability.

B. Bi-directional communication.
C. Omni-directional communication.
D. Direct memory access (DMA) capability.
Answer: D.
Explanation:
Extended Capabilities Ports support direct memory access (DMA). This is not supported by
Enhanced Parallel Ports.
Reference:
http://www.fapo.com/ecpmode.htm
Incorrect Answers:
A. Daisy chaining is support by both types of parallel port.
B. Bi-directional communication is support by both types of parallel port.
C. Omni-directional communication is support by both types of parallel port.
Question: 220
Page 78 of 217
Exam Name: Linux+
Exam Type: CompTIA
A technician booted a PC and noted that none of the four ATA devices were detected. He verified
that the devices were cabled properly, physically connected to the ATA controller and power
supply, and jumpered correctly. Which of the following is the most likely problem?
A. No PC can support four ATA devices.

B. The CMOS setup is set to ignore all ATA devices.
C. The BIOS does not appear to support ATA devices.
D. ATA devices have not been set up with the configuration diskette.
Answer: B.
Explanation:
ATA devices are usually auto-detected by the CMOS during system boot up. However, this can
be disabled. As all the devices are correctly fitted, this is the most likely cause of the problem.
Reference:
Incorrect Answers:
A. All modern PCs can support at least four ATA devices.
C. All modern BIOSs support ATA devices.
D. ATA devices do not need to be set up with a configuration diskette.
Question: 221
A technician wants to replace a system processor. What should he do before beginning the work?
A. Properly ground the PC.

B. Remove the CMOS battery.
C. Properly ground himself.
D. Ensure that the humidity is below 5%.
Answer: C.
Explanation:
When working with components in a PC, it is important to ground yourself to prevent static
electricity shocks which can destroy PC components. A common way to do this is to wear a strap
that fits to your wrist and connects to the metal case of the computer.
Reference:
Incorrect Answers:
A. You should ground yourself, not the PC.
B. You don't need to remove the CMOS battery to change the processor.
D. It is not necessary to ensure that the humidity is below 5%.
Question: 222
Enabling Init13h support on a SCSI controller card enables use of which of the following devices?
A. Scanner
B. Printer
C. Tape drive
D. Hard drive
Answer: D.
Page 79 of 217
Exam Name: Linux+
Exam Type: CompTIA
Explanation:
To use a SCSI hard disk, you need to ensure that Init13h support is enabled on the SCSI
controller.
Incorrect Answers:
A. Init13h support enables the use of a SCSI hard disk, not a scanner.
B. Init13h support enables the use of a SCSI hard disk, not a printer.
C. Init13h support enables the use of a SCSI hard disk, not a tape drive.
Question: 223
How can an ATA-66 hard drive be utilized with an UDMA-33 controller?
A. Flash the BIOS.

B. Install the hard drive normally.
C. An ATA-66 controller must be installed.
D. Reconfigure the jumper settings on the motherboard.
Answer: B.
Explanation:
An ATA-66 hard drive can run on a UDMA-33 controller.
Reference:
Incorrect Answers:
A. It is not necessary to flash the BIOS.
C. It is not necessary to install a new controller.
D. It is not necessary to reconfigure the jumper settings on the motherboard.
Question: 224
A single SCSI device is not recognized during SCSI BIOS initialization. Which of the following has
most likely caused this?
A. The SCSI bus is not properly terminated.

B. External SCSI devices are not supported by Linux.
C. More than one device is required for proper SCSI operation.
D. The cable is over the 2-foot limit for the type controller.
Answer: A.
Explanation:
It is most likely that the SCSI bus is incorrectly terminated. It is possible that the bus was
terminated at the device before the unrecognized device.
Reference:
Incorrect Answer:
B. External SCSI devices are supported by Linux.
C. You don't need more than one device on a SCSI chain for proper SCSI operation.
D. There is no 2 foot limit on a SCSI chain.
Question: 225
Page 80 of 217
Exam Name: Linux+
Exam Type: CompTIA
What is the Media Access Control (MAC) address of an Ethernet interface?
A. The encryption key used for IPSEC.

B. An identifier used when forwarding packets between routers.
C. A 32-bit address that is often associated with a logical name.
D. A hexadecimal number that makes a network interface card unique.
Answer: D.
Explanation:
Every network card has a 96 bit unique identifier 'burned' into the card. The 48 bits signify the
vendor of the card and the last 48 bits are unique for every card sold by the vendor. The 96 bit
number is usually displayed as a hexadecimal number.
Reference:
Incorrect Answers:
A. The MAC address is unrelated to IPSEC.
B. The MAC address is a hardware address. Routers use software addresses such a IP
addresses.
C. The 32 bit address is the IP address, not the MAC address.
Question: 226
After having worked for several months, a PC fails to boot and indicates that the HDD has bad
sectors. Which is the first action to take?
A. Reboot the system to remove the message.

B. Run the manufacturer's Diagnostic Utility.
C. Replace the defective HDD and reload the system.
D. Run Scandisk and Defrag to repair the damaged sectors.
Answer: B.
Explanation:
The best course of action would be to test the hard drive with the manufacturer's diagnostic utility
to confirm that the hard disk has bad sectors.
Incorrect Answers:
A. If the PC failed to boot to due a bad hard disk, it will fail again if you try to reboot.
C. It may not be necessary to replace the hard drive.
D. Defrag does not repair bad sectors and Scandisk is a Windows utility.
Question: 227
What is the maximum bandwidth of 100BaseTX in half-duplex mode?
A. 10 Mbps
B. 50 Mbps
C. 100 Mbps
D. 200 Mbps
Answer: C.
Explanation:
The 100 in 100BaseTX stands for 100 Mbps. In full duplex mode, this speed is doubled.
Page 81 of 217
Exam Name: Linux+
Exam Type: CompTIA
Reference:
http://www.wikipedia.com/wiki/100baseTX
Incorrect Answers:
A. The 100 in 100BaseTX stands for 100 Mbps, not 10.
B. The 100 in 100BaseTX stands for 100 Mbps, not 50.
D. The 100 in 100BaseTX stands for 100 Mbps. 200Mbps can be achieved in full duplex mode.
Question: 228
Exhibit:
Based on the exhibit, in which type of system would the device most commonly be used?
A. Network switch.
B. Network firewall.
C. Stand-alone server.
D. Mobile workstation.
Answer: D.
Explanation:
The exhibit shows a PCMCIA card. These are commonly used in laptops.
Reference:
Incorrect Answers:
A. This is not a network switch.
B. This is not a network firewall.
C. This is not a stand-alone (or any other) server.
Question: 229
During boot, the system reports a configuration error. The technician fixes the BIOS settings and
the problem is solved. After a cold reboot, the system reports the same configuration error. The
CMOS battery tests good.
What is the most likely problem?
Page 82 of 217
Exam Name: Linux+
Exam Type: CompTIA
A. Bad BIOS chip.

B. Bad system board.
C. Bad system memory.
D. Bad or missing command interpreter.
Answer: B.
Explanation:
When configuring the BIOS, you are actually configuring the CMOS. The BIOS reads the
information in the CMOS during boot up. The CMOS is remembering the configuration settings
and the battery is good, which suggest a bad system board (motherboard).
Reference:
Incorrect Answers:
A. The fact that you received the same error after configuring the CMOS suggests that the BIOS
was able to read the CMOS. Therefore, the BIOS chip is functional.
C. The system memory (RAM) is unrelated to the BIOS or CMOS.
D. A bad command interpreter would cause problems when running programs, not startup
problems.
Question: 230
Which type of memory not only detects, but also corrects single-bit errors?
A. EDO
B. ECC
C. Parity
D. RAMDAC
Answer: B.
Explanation:
In digital electronic systems, information is represented in binary format (1's and 0's).
When binary information is passed from one point to another, there is always some chance that a
mistake can be made; a 1 interpreted as a 0 or a 0 taken to be a 1. This can be caused by media
defects, electronic noise, component failures, poor connections, deterioration due to age, and
other factors. When a bit is mistakenly interpreted, a bit error has occurred.
Error correction is the process of detecting bit errors and correcting them and can be done in
software or hardware. For high data rates, error correction must be done in special-purpose
hardware because software is too slow.
Taken from ECC Tech http://members.aol.com/mnecctek/faqs.html
Incorrect Answers:
A. EDO RAM does not detect errors.
C. ECC Parity in itself does not correct errors.
D. RAMDAC is used with video adapters and does not perform error checking.
Question: 231
What AT command is used to reset a modem?
A. ATX
B. ATZ
C. ATDT
Page 83 of 217
Exam Name: Linux+
Exam Type: CompTIA
D. ATM0
Answer: B.
Explanation:
The ATZ command is the correct command to reset a modem.
Reference:
http://www.option.co.za/hayesat.htm#Hayes%20AT%20Commands
Incorrect Answers:
A. The ATX command does not reset a modem.
C. The ATDT command does not reset a modem.
D. The ATM0 command does not reset a modem.
Question: 232
Which IRQ is used by most FDD controllers?
A. 0
B. 2
C. 6
D. 8
Answer: C.
Explanation:
Floppy disk drive controllers commonly use IRQ 6.
Reference:
Incorrect Answers:
A. IRQ 0 is used by the system timer, not the FDD controller.
B. IRQ 2 is not used by any system devices but is used to enable the use of extra IRQs.
D. IRQ 8 is available for use by a device added to the system.
Question: 233
What command would allow an administrator to add an existing user's phone number to the
system as a comment?
A. usermod -c 555-1234 bsmith

B. modinfo -u bsmith 555.1234
C. useradd -u bsmith -c 555-1234
D. echo bsmith:x:502:502:555-1234:/home/chris:/bin/bash> /etc/passwd
Answer: A.
Explanation:
The usermod command is used to modify a user's settings. The -c option allows you to add a
comment. The comment should be followed by the username of the account that you are
modifying.
Reference:
http://www.oreillynet.com/linux/cmd/u/usermod.html
Page 84 of 217
Exam Name: Linux+
Exam Type: CompTIA
Incorrect Answers:
B. Modinfo is the wrong command to modify a user account.
C. Useradd is the wrong command to modify a user account.
D. Echo is the wrong command to modify a user account.
Question: 234
A group of users would like accounts created for them. They want to access a particular
application on the server. The group requires sharing the files created using the application. What
method would be used to accomplish these goals?
A. As root, edit the /etc/group file and include all the users to the 'users' group.
B. As root, run the adduser command to create the shared group, then adduser to create the
user accounts.
C. As root, run the adduser command to create the users' accounts, then edit the /etc/passwd
file to change each users GID.
D. As root, run the groupadd command to create the shared group, and then use the adduser
command to create the user accounts.
Answer: D.
Explanation:
The best way to enable users to share files is to put the users into a shared group. The group
must be created before the user accounts.
Reference:
Incorrect Answers:
A. The users that require access to the files should be placed into a separate group, not the
'users' group.
B. You need to run the groupadd command to create a group.
C. You need to create a shared group before you can add the users to it.
Question: 235
On a Linux system, where is the compiled kernel typically located?
A. /bin
B. /dev
C. /boot
D. /root
Answer: A.
Explanation:
The /bin directory typically contains the binary files used by the system. This includes the kernel.
Reference:
Incorrect Answers:
B. The kernel is not typically located in the /dev directory.
C. The kernel is not typically located in the /boot directory.
D. The kernel is not typically located in the /root directory.
Question: 236
Page 85 of 217
Exam Name: Linux+
Exam Type: CompTIA
Which of the following is the most dangerous command to run as root at the root prompt?
A. df*
B. fsck
C. rm-rf*
D. unmount -a
Answer: C.
Explanation:
The rm command is used to delete files or directory. The -rf options make the command recursive
and forceful. This means that the contents of any subdirectories will be deleted without giving any
confirmation messages. This command when run from the root prompt will effectively delete
every file on the system.
Reference:
http://www.oreillynet.com/linux/cmd/r/rm.html
Incorrect Answers:
A. The df command reports the amount of free disk space. This is not dangerous.
B. The fsck command checks the file system for errors. This is not dangerous.
D. The unmount command unmounts a disk drive or remote share. This is not dangerous.
Question: 237
What command in vi quits without saving changes?
A. :ZZ
B. :q!
C. :QQ
D. Esc-q
Answer: B.
Explanation:
To exit Vi without saving your changes, you would use the :q! command.
Reference:
http://www.bris.ac.uk/is/selfhelp/documentation/vi-r2/vi-r2.htm
Incorrect Answers:
A. This is the incorrect command to exit Vi.
C. This is the incorrect command to exit Vi.
D. This is the incorrect command to exit Vi.
Question: 238
A user has just completed an important document, and wishes to save it to his diskette drive and
remove the disk. How should the user unmount the diskette that is mounted on /floppy to ensure
that the data is saved on the disk?
A. umount /floppy
B. mount -u /floppy
C. unmount /dev/floppy,
D. Simply eject the disk and the system will unmount the disk.
Answer: A.
Page 86 of 217
Exam Name: Linux+
Exam Type: CompTIA
Explanation:
Care should be taken when ejecting floppy disks because Linux caches access to them. To save
the cached data to disk, you must use the umount command followed by the device name or
mount point.
Reference:
Incorrect Answers:
B. Mount is the wrong command.
C. /dev/floppy is the wrong mount point. The question states that the floppy is mounted as /floppy.
D. If you eject the disk without unmounting it, you will lose the cached data.
Question: 239
Which of the following commands can be used to generate a list of all errors recorded during the
month of March?
A. grep
B. find
C. more
D. syslogd
Answer: A.
Explanation:
Grep is a very useful tool for searching the contents of files based on various search criteria.
For example, you could return every line of text that contains the word 'March'.
Reference:
Incorrect Answers:
B. Find is used to find files, not search the contents of files.
C. More is used to find files, and display them one screen at a time.
D. Syslogd is used to generate TCP/IP error messages and write them to a file as specified in the
syslog.conf file.
Question: 240
The recommended minimum size of the swap partition is ______ MB?
Answer: 16.
Explanation:
The swap partition should ideally be twice the amount of physical RAM, although a minimum of
16 MB is recommended.
Reference:
Question: 241
The maximum size of the swap partition is _____ MB?
Answer: 128 (?)
Page 87 of 217
Exam Name: Linux+
Exam Type: CompTIA
Explanation:
The maximum size of a Linux swap partition is 128MB, although Linux supports up to 16 swap
partitions.
Reference:
Comment, possible incorrect answer: in the kernel archive, the limit is 8 files of 2 gig for an
maximum of 32 gig for the 2.4 and 2.6 kernel. [Andrew Morton] (the linuxhacker)
http://www.ussg.iu.edu/hypermail/linux/kernel/0306.0/1685.html
Question: 242
You have a computer with Windows 95 installed and want to install Linux on it.
However, there is no free space available. How could you manage to install Linux on this
computer with the least amount of effort?
A. Use fips to resize the partition containing the Windows 95.

B. Repartition the hard drive; reinstall Windows 95.
C. You cannot run Windows 95 and Linux on the same computer.
D. Create a directory under Windows 95 and install Linux in that directory.
Answer: A.
Explanation:
FIPS is a partition resizing tool. It can reduce the size of the Windows 95 partition without losing
any data, thus freeing up enough space to create a Linux partition.
Reference:
Incorrect Answers:
B. It is not necessary to reinstall Windows 95.
C. You can run Windows 95 and Linux on the same computer.
D. You cannot install Linux into a subdirectory in Windows 95.
Question: 243
You are partitioning your second SCSI hard drive. What command should you use?
A. fdisk sda2
B. fdisk sdb
C. fdisk hdb
D. fdisk hda2
Answer: B.
Explanation:
SCSI hard drives use the sd<letter> notation with the first drive being letter a (sda) and the
second drive being letter b (sdb).
Reference:
Incorrect Answers:
A. SCSI hard drives use letters, not numbers.
C. SCSI hard drives use sd not hd.
D. SCSI hard drives use sd not hd.
Page 88 of 217
Exam Name: Linux+
Exam Type: CompTIA
Question: 244
While using fdisk what command would you use to see the partition table?
A. w
B. m
C. a
D. p
Answer: D.
Explanation:
The p option used with fdisk is used to display the partition table.
Reference:
Incorrect Answers:
A. The w option is used to write the changes, not display the partition table.
B. The m option is used to display the main menu, not the partition table.
C. The a option is used to toggle a bootable flag on a partition, not display the partition table.
Question: 245
What type would you set on a partition to make it a swap partition?
A. 0x82
B. 0x83
C. s
D. swap
Answer: A.
Explanation:
Swap partitions use the type code 0x82.
Reference:
Incorrect Answers:
B. 0x83 is the type code for a file system partition.
C. S is not a partition type code.
D. Swap is not a partition type code.
Question: 246
You have a new, empty hard drive that you will use for Linux. What is the first step you use?
A. Create an extended partition to be used for the data.

B. Format the hard drive to use the ext2 filesystem.
C. Create a swap partition of type 82.
D. Create a primary partition using fdisk.
Answer: D.
Explanation:
Page 89 of 217
Exam Name: Linux+
Exam Type: CompTIA
The first step to installing Linux on a new hard disk is to create a primary partition. (This can also
be done as part of the installation process).
Reference:
Incorrect Answers:
A. Linux needs a primary partition to boot from, not an extended partition.
B. You need to create a partition before you can format it.
C. Linux needs a primary partition to boot from, not a swap partition.
Question: 247
You have created a primary partition, a swap partition and an extended partition.
You can format the primary partition but when you try to format the extended partition it fails.
What is the problem?
A. You should have created another primary partition instead of an extended partition.
B. Your syntax is wrong for the format command when attempting to format the extended
partition.
C. You cannot format an extended partition.
D. You have to use the fdformat command to format extended partitions.
Answer: C.
Explanation:
The purpose of an extended partition is to house logical partitions. For this reason, you cannot
format an extended partition (you must create a logical partition first).
Reference:
Incorrect Answers:
A. You don't need to create two primary partitions.
B. You successfully formatted the primary partition, so the syntax is likely to be correct.
D. There is no special command to format extended partitions.
Question: 248
When you create a new partition, you need to designate its size by defining the starting and
ending __________-
Answer: cylinders.
Explanation:
When creating a new partition, you are prompted to enter the starting and ending cylinders
(although you can specify a size in bytes, kilobytes, megabytes or gigabytes).
Reference:
Question: 249
In order to apply a filesystem to your new partitions you must format them. What command would
you use to create the ext2 filesystem?
Answer: mkfs.
Page 90 of 217
Exam Name: Linux+
Exam Type: CompTIA
Explanation:
The command used to format a partition (which creates a file system) is mkfs (make file system).
Reference:
Question: 250
When formatting your partition with the mkfs command, you can also pass to the command the
type of filesystem and the number of _______?
Answer: blocks.
Explanation:
When formatting a partition with the mkfs command, you can specify the number of blocks
although this isn't necessary because mkfs can calculate this based on the size of the partition.
Reference:
Question: 251
You have new documentation that you wish to install so that it will be available to your users.
Which directory would be the most appropriate to use for these files?
A. /tmp
B. /usr
C. /lib
D. /mnt
Answer: B.
Explanation:
Most documentation including man pages is kept in the /usr directory.
Reference:
Incorrect Answers:
A. /tmp is not the usual location for documentation.
C. /lib is not the usual location for documentation.
D. /mnt is not the usual location for documentation.
Question: 252
Each inode contains extensive information on a file. Which of the following is not contained in the
inode?
A. File size.
B. Filename.
C. File's owner.
D. Number of links to the file.
Answer: B.
Explanation:
An inode contains the type (for example, plain file, directory, symbolic link, or device file) of the
file; its owner, group, and public access permissions; the owner and group ID numbers; its size in
Page 91 of 217
Exam Name: Linux+
Exam Type: CompTIA
bytes; the number of links (directory references) to the file; and the times of last access and last
modification to the file. However, an inode does not contain the name of the file.
Reference:
http://perl.plover.com/yak/ext2fs/slide019.html
Incorrect Answers:
A. An inode does contain the file size.
C. An inode does contain the file's owner.
D. An inode does contain the number of links to a file.
Question: 253
When you issue the command ls -1, the first character of the resulting display represents the file's
_________-
Answer: type.
Explanation:
The first character displayed in the output of the ls -l command represents the file's type.
For example, d represents a directory.
Reference:
http://www.firstlinux.com/articles/cards/permissions.shtml
Question: 254
In order to run fsck on the root partition, the root partition must be mounted as _________.
Answer: read only.
Explanation:
Fsck must only be run on unmounted or read only partitions. This is because any changes to the
file system during normal read/write operations can confuse fsck and cause file system
corruption.
Reference:
Question: 255
You cannot mount /dev/hdb1 and suspect that the superblock is bad. How do you fix this?
A. Use the mkfs command.

B. Use the fsck command with the -f option.
C. Use the e2fsck to replace the superblock with a copy saved to another location on your disk.
D. Restore the superblock from your tape backup.
Answer: C.
Explanation:
The e2fsck utility can be used to replace the superblock with a copy saved to another location on
the disk.
Reference:
http://www.mandrakeuser.org/docs/admin/arecov3.html
Incorrect Answers:
Page 92 of 217
Exam Name: Linux+
Exam Type: CompTIA
A. The mkfs command will format the disk causing data loss.
B. Fsck cannot be used to restore the superblock.
D. You cannot restore the superblock from a tape backup because you cannot mount the drive.
Question: 256
Why should you track the amount of free space on your disk?
A. If there is no free space, you will not be able to write to that filesystem.
B. If there is no free space, you will not be able to install new applications.
C. If the amount of free space becomes less then 50 percent, then your system will slow down.
D. If the amount of free space is too low, you system will not boot.
Answer: A.
Explanation:
If there is no free space on a disk, you will not be able to write to that disk.
Incorrect Answers:
B. You will not be able to install new applications, but that is less of a problem than not being able
to write to the disk.
C. Disk space of less than 50% will not slow the system down.
D. Low disk space will not prevent the system booting.
Question: 257
You want to know how much space is being occupied by your user's home directories. Which of
the following will provide you with this information?
A. du -l /home
B. du -b /home
C. du -m /home
D. du -c /home
Answer: D.
Explanation:
The du (disk usage) command with the -c option will display the total used space in the specified
directory.
Reference:
Incorrect Answers:
A. The -l option is used to count the size of all files, whether or not they have already appeared
(i.e., via a hard link).
B. The -b option is used to display the size in bytes of all the files in the specified directory.
C. The -m option is used to display the size in megabytes of all the files in the specified directory.
Question: 258
You also need to know the amount of free space on the partition containing the user's home
directories.
Which of the following commands will provide this information?
A. df /home
B. df -i /home
C. df --sync
Page 93 of 217
Exam Name: Linux+
Exam Type: CompTIA
D. df -T
Answer: A.
Explanation:
The df (disk free) command is used to display the free space in the specified partition or directory.
Reference:
Incorrect Answers:
B. The -i option is used to display information about the inodes, not the free space.
C. You need to specify the /home directory. Also, the -sync option is incorrect.
D. You need to specify the /home directory. Also, the -T option is incorrect.
Question: 259
You notice that the amount of free space is getting low. When you check the contents of the /tmp
directory, you find several hundred files so you delete them. After deleting these temp files, you
check the amount of free space, however, it has not increased. What should you do?
A. Move the /tmp directory to another partition.

B. Delete the partition containing the /tmp directory, recreate it and restore its contents.
C. Delete the /tmp directory and recreate it.
D. Run fsck on the filesystem containing the /tmp directory.
Answer: C.
Explanation:
The easiest way to fix this is to delete and recreate the /tmp directory (it's easy because the
directory is empty).
Incorrect Answers:
A. It is not necessary to move the /tmp directory to another partition.
B. There are no contents to restore as they have been deleted.
D. Fsck is time consuming and hence unnecessary.
Question: 260
You have the /var directory on its own partition. You have run out of space. What should you do?
A. Reconfigure your system to not write to the log files.

B. Use fips to enlarge the partition.
C. Delete all the log files.
D. Delete the partition and recreate it with a larger size.
Answer: B.
Explanation:
FIPS is a partition resizing tool. It can reduce or enlarge a partition without losing data.
Reference: Roderick W. Smith. Sybex Linux + Study Guide: Page 43.
Incorrect Answers:
A. You should not prevent the system writing log files.
C. You should not delete all the log files.
D. It is unnecessary to delete the partition, which would require restoring the data.
Page 94 of 217
Exam Name: Linux+
Exam Type: CompTIA
Question: 261
You can start Linux in many different ways. Which of the following is not one of these?
A. Type linux from a DOS prompt under Windows 95.

B. Using a boot loader such as LILO.
C. From a floppy disk.
D. Type linux at the boot: prompt.
Answer: A.
Explanation:
'Linux' is not a DOS command and so cannot be used to start Linux.
Reference:
Incorrect Answers:
B. You can boot Linux using a boot loader such as LILO.
C. You can boot Linux with a Linux boot floppy disk.
D. You can boot Linux by typing Linux at the Linux boot prompt.
Question: 262
When the kernel is loading, it writes any messages to the _______ file.
Answer: /var/log/boot.messages.
Explanation:
When the kernel is loading, it writes any messages to the /var/log/boot.messages file.
Reference:
Question: 263
What command can you use to see the boot messages?
A. dmesg
B. cat kernel.messages
C. logview
D. man logs
Answer: A.
Explanation:
The dmesg utility displays all the boot messages that were displayed during system boot up.
Reference:
Incorrect Answers:
B. The boot messages are not stored in the kernel.messages file.
C. Logview is the incorrect command to view the boot messages.
D. Man logs would display the man files for a program named logs.
Question: 264
Page 95 of 217
Exam Name: Linux+
Exam Type: CompTIA
After the kernel is loaded, it calls the ______ daemon which is responsible for creating new
processes.
A. inittab
B. sys.conf
C. init
D. syslog
Answer: C.
Explanation:
The init daemon (initd) is sometimes known as a "super server", because it is responsible for
starting all the other services (processes).
Reference:
Incorrect Answers:
A. Inittab is the configuration file for the init daemon.
B. Sys.conf is not a daemon.
D. Syslog is not a daemon.
Question: 265
Each entry in the /etc/inittab file contains four fields the third of which is the Action field. What is
the purpose of this field?
A. Identifies the entry.

B. Specifies the command to execute.
C. Defines how to handle the entry.
D. Defines which runlevels this line applies to.
Answer: C.
Explanation:
The inittab file is the configuration file for the init daemon. The purpose of the action field is to tell
the init daemon what to do with each process. The format of each entry in the inittab file is ID:
runlevel: action: process.
Reference:
Incorrect Answers:
A. The ID field identifies the entry.
B. The process field specifies the command to execute.
D. The runlevel field defines which runlevels this line applies to
Question: 266
Which file should you examine to determine the defined runlevels for your system?
Answer: /etc/inittab
Explanation:
The inittab file is the configuration file for the init daemon. This file contains the defined runlevels
on a Linux system.
Page 96 of 217
Exam Name: Linux+
Exam Type: CompTIA
Reference:
Question: 267
How does single user mode differ from other runlevels?
A. Init does not read the /etc/inittab file.

B. Users can only log into the system across the network.
C. Network services are disabled.
D. All processes are stopped and the root filesystem is mounted as read-only when in single user
mode.
Answer: C.
Explanation:
Single user mode (sometimes known as single user maintenance mode or runlevel 1) is used to
carry out maintenance to a system. In this mode, network services are disabled and only the root
user can log in.
Reference:
http://www.redhat.com/docs/manuals/linux/RHL-7.3-Manual/custom-guide/s1-rescuemode-
booting-single.html
Incorrect Answers:
A. Init does read the inittab file.
B. Users cannot log in to the system; only root can log in.
D. Not all processes are stopped and the file system is not mounted in read only mode.
Question: 268
What should you type to change the runlevel of your system?
A. init [runlevel]
B. halt [runlevel]
C. /etc/inittab
D. sys.init [runlevel]
Answer: A.
Explanation:
The correct command to change the runlevel of a Linux system is 'init [runlevel]'.
Reference:
http://www.oreillynet.com/linux/cmd/i/init.html
Incorrect Answers:
B. Halt is the incorrect command.
C. /etc/inittab is not a command. It is a configuration file for the init daemon.
D. sys.init is not a command.
Question: 269
Where are the startup scripts defined?
A. /etc/init.d
B. /etc/scripts
C. /etc/start
Page 97 of 217
Exam Name: Linux+
Exam Type: CompTIA
D. /etc/inittab
Answer: A.
Explanation:
When a system starts up, the init daemon starts the scripts defined in the /etc/init.d folder
according to the configuration in the inittab file.
Reference:
Incorrect Answers:
B. This is the incorrect folder.
C. This is the incorrect folder.
D. Inittab is the configuration file for the init daemon.
Question: 270
Which of the following tasks is not controlled by one of the rc startup scripts?
A. Backup user's directories.

B. Run fsck.
C. Mount files ystem.
D. Load modules.
Answer: A.
Explanation:
The init daemon runs the rc startup scripts to start various processes when the system boots.
Backing up user directories is not controlled by one of these scripts.
Reference:
Incorrect Answers:
B. There is a script to run fsck.
C. There is a script to mount the file system.
D. There is a script to load modules.
Question: 271
Modules are pieces of kernel code that you can load or unload. What file do you use to pass
parameters to a module?
A. /etc/conf.mod
B. /etc/modules
C. /etc/inittab
D. /etc/conf.modules
Answer: D.
Explanation:
The /etc/conf.modules file is used to associate a module (driver) with hardware device.
Reference:
Page 98 of 217
Exam Name: Linux+
Exam Type: CompTIA
Incorrect Answers:
A. /etc/conf.mod is not the name of the module configuration file.
B. /etc/modules is not the name of the module configuration file.
C. The /etc/inittab file is used by the init daemon.
Question: 272
You have installed a new UPS (Uninterruptible Power Supply) and the powerd daemon. Which
file should you use to define the steps to be taken in the case of a power failure?
A. /etc/ups.conf
B. /etc/inittab
C. /etc/power.conf
D. /etc/conf.ups
Answer: B.
Explanation:
The init daemon is responsible for starting processes. The configuration file for the init daemon is
/etc/inittab. This file should be edited to instruct the system to run the powerd daemon in the
event of a power failure.
Reference:
Incorrect Answers:
A. The /etc/inittab file, not the /etc/ups.conf file, is used to configure the init daemon which is used
start the powerd daemon.
C. The /etc/inittab file, not the /etc/power.conf file, is used to configure the init daemon which is
used start the powerd daemon.
D. The /etc/inittab file, not the /etc/conf.ups file, is used to configure the init daemon which is used
start the powerd daemon.
Question: 273
You have made changes to the /etc/inittab after installing your UPS. How do you institute these
configuration changes without having to reboot your computer or have your users log off?
A. Issue the command source /etc/inittab.

B. Change the runlevel to single user mode.
C. Issue the init q command.
D. The init daemon only reads its configurations file during boot.
Answer: C.
Explanation:
The init q command is used to instruct the init daemon to reread the /etc/inittab file and carry out
the instructions in the file.
Reference:
Incorrect Answers:
A. Source is the incorrect command.
B. It is not necessary to change the runlevel.
D. The init daemon can be instructed to read its configuration file at any time.
Page 99 of 217
Exam Name: Linux+
Exam Type: CompTIA
Question: 274
Which of the following statements is not true about LILO?
A. It can be used on a floppy to boot Linux.

B. It must replace the master boot record on your hard drive.
C. It will work with other operating systems such as DOS and Windows.
D. It can specify up to 16 different boot images.
Answer: B.
Explanation:
The default location for the Linux boot loader is in the Master Boot Record (MBR), but this isn't a
requirement. It can be located elsewhere.
Reference:
Incorrect Answers:
A. LILO can be used on a floppy disk to install Linux.
C. LILO will work with other operating systems such as DOS and Windows.
D. LILO can be used to specify up to 16 different boot images.
Question: 275
You boot your system using LILO. Although you have four different boot images on your system,
you cannot remember what you named them and you do not want to boot your default image.
What should you do?
A. At the boot: prompt, press the Alt key.

B. Hold the shift key down when booting until you get a prompt.
C. At the boot: prompt, press the Tab key.
D. You have to boot your default image and then look at the configuration file.
Answer: C.
Explanation:
At the LILO boot prompt, you can use the tab key to toggle between the various boot images on
the system.
Reference:
Incorrect Answers:
A. You need to press the tab key, not the Alt key.
B. You don't need to hold the shift key down whilst booting.
D. You can choose any installed boot image, you don't have to boot the default image.
Question: 276
You have made changes to the LILO configuration file but you are not sure the changes will work.
How can you test the new configuration without installing it?
A. LILO -t
B. LILO -c filename
C. LILO -s filename
D. LILO
Page 100 of 217

Exam Name: Linux+
Exam Type: CompTIA
Answer: A.
Explanation:
The -t option used with LILO is used to test the LILO configuration file (/etc/lilo.conf).
Reference:
http://www-ugrad.cs.colorado.edu/udp/admin/linux-howto.html
Incorrect Answers:
B. You need the -t option to test the configuration, not the -c option.
C. You need the -t option to test the configuration, not the -s option.
D. The LILO command without any options will install LILO without testing the configuration file.
Question: 277
What is the complete name of the default configuration file for LILO?
Answer: /etc/lilo.conf
Explanation:
The LILO configuration file is /etc/lilo.conf.
Reference:
Question: 278
Part of your /etc/lilo.conf file is as follows:
boot=/dev/hda
map=/boot/map
install=/boot/boot.b
image=/boot/vmlinuz-2.0.36.0.7
label=linux
root=dev/dha1
You would like to start in a single user mode but you do not get a boot: prompt. What changes
should you make to the /etc/lilo.conf file to make a prompt appear every time you boot your
system?
A. Add a line containing prompt.

B. Add a line containing a timeout.
C. Add a line containing prompt=30.
D. Change the label to boot: instead of linux.
Answer: A.
Explanation:
To configure LILO to display a boot prompt, you need to add a line containing the word prompt to
the lilo.conf file. You must then run the LILO command to activate the changes.
Reference:
Incorrect Answers:
B. There is no timeout option for the lilo.conf file.
C. The line should contain just prompt, not prompt=30.
Page 101 of 217

Exam Name: Linux+
Exam Type: CompTIA
D. The label is just the displayed name of the operating system.
Question: 279
You have changed /etc/lilo.conf to cause a boot: prompt to show, however, when you restart your
computer you still do not have a prompt. What should you do?
A. Rename your configuration file to /etc/lilo.conf.new.

B. Install the configuration changes by issuing the command /sbin/lilo.
C. Install the configuration changes by issuing the command /sbin/lilo -t.
D. Install the configuration changes by issuing the command /sbin/lilo -u.
Answer: B.
Explanation:
After making changes to the lilo.conf file, you must run the lilo command to activate the changes.
Reference:
Incorrect Answers:
A. You must not rename the configuration file.
C. The -t option will test the configuration but not activate the changes.
D. You need to run the lilo command without any options to activate the changes.
Question: 280
When booting your system after installing LILO you see LIL- and then nothing happens. What
could be the problem?
A. LILO loaded successfully but the kernel is corrupt.

B. LILO is not installed properly.
C. LILO could only complete the first stage, usually media failure.
D. LILO could not load the map file, usually a geometry mismatch.
Answer: D.
Explanation:
If you only see LIL- when booting the system, it means that LILO could not load the map file.
Reference:
Incorrect Answers:
A. If LILO loaded successfully, you would see the word LILO during boot up.
B. If LILO wasn't installed properly, you wouldn't see any part of the work LILO during boot up.
C. If LILO could only complete the first stage, you would see the word LI during boot up.
Question: 281
You are going to install a new hard disk in your system. Which of the following commands will halt
your system so you can install the new hardware?
A. shutdown -k now
B. shutdown -h now
C. shutdown -r now
D. shutdown -t now
Page 102 of 217

Exam Name: Linux+
Exam Type: CompTIA
Answer: B.
Explanation:
The shutdown -h command will shut down your system properly. The -h option issues the halt
command as part of the shutdown process.
Reference:
Incorrect Answers:
A. The -k option would display a warning message, but would not actually shut down the system.
C. The -r option would cause the system to restart.
D. The -t option is used to delay the shutdown.
Question: 282
You have a technician who will come in after hours to install new hardware in your system. You
do not want to give him the root password, but he needs to be able to shutdown the system. How
can you accomplish this?
A. You cannot do this, only root can run the shutdown command.
B. Add his username to the /etc/shutdown.conf file.
C. Add his username to the /etc/shutdown.allow file.
D. Give him the root password and change it when you arrive the next morning.
Answer: C.
Explanation:
The /etc/shutdown.allow file contains the names of the user accounts that are permitted to
shutdown the system.
Reference:
Incorrect Answers:
A. Any user listed in the shutdown.allow file can shutdown the system.
B. Shutdown.conf is the wrong file.
D. It is not necessary or desirable to give the technician the root password.
Question: 283
You are going to reboot your system but want to warn your users to log off. Which of the following
commands will send a message to the users?
A. init
B. halt
C. reboot
D. shutdown
Answer: D.
Explanation:
When using the shutdown command, you can enter a message that will be displayed to users
before the system shuts down.
Reference:
Page 103 of 217

Exam Name: Linux+
Exam Type: CompTIA
Incorrect Answers:
A. The init command does not send a message to users.
B. The halt command does not send a message to users.
C. The reboot command does not send a message to users.
Question: 284
You want to review the man page on the files used to control host access, however, when you
enter man hosts_access you get the man page for routines used to programmatically manipulate
access. What is the problem?
A. The page you are looking for does not exist on your system.
B. The page you are looking for resides in a directory that is searched later.
C. You typed the name of the page incorrectly.
D. The installation of man pages on your system is corrupt.
Answer: C.
Explanation:
You typed the command incorrectly. The files used to control host access is hosts.allow, not
hosts_access. The correct command would be man hosts.allow.
Reference:
Incorrect Answers:
A. If a page didn't exist, you would get an error saying so. You wouldn't get a different page.
B. If the directory was searched later, you would still get the correct page eventually.
D. If the installation of the man pages is corrupt, you wouldn't receive any man pages.
Question: 285
You want to find how to set the manpath variable so you type man man. What would you type
while displaying the page to find the location where manpath is discussed?
A. grep manpath
B. find manpath
C. /manpath
D. locate manpath
Answer: C.
Explanation:
To search for text within a man page, you would use the / command followed by the word you
were looking for.
Incorrect Answers:
A. You could use the grep command, but you would have to come out of the man program to use
it.
B. Find is not a man program command. Furthermore, the find command cannot search for text. It
is used for locating files.
D. You could use the locate command, but you would have to come out of the man program to
use it.
Question: 286
Page 104 of 217

Exam Name: Linux+
Exam Type: CompTIA
You wish to find the man page that discusses how to change a password. You type man
password but you get the message that no manual entry for password exists.
Which command will find the appropriate page?
A. man -C password
B. man -k password
C. man -c password
D. man -q password
Answer: B.
Explanation:
The man -k command is used to search the man pages for a specified string.
Reference:
http://www.oreillynet.com/linux/cmd/a/apropos.html
Incorrect Answers:
A. -C is the wrong option to search the man pages for a specified string.
C. -c is the wrong option to search the man pages for a specified string.
D. -q is the wrong option to search the man pages for a specified string.
Question: 287
You have installed an additional set of man pages but in Spanish. You have one user who wishes
to use the Spanish pages rather then English ones. What should you do to accomplish this?
A. Edit the man.config file located in that user's home directory.

B. Instruct the user in how to reset the MANPATH variable whenever he logs in.
C. Edit the .profile file located in that user's home directory.
D. You can only have one version of man pages installed on your system at a time.
Answer: C.
Explanation:
The manpath variable can be set in the .profile file and is used to instruct the man program where
to look for the man pages. You would need to edit this variable to point to the Spanish man
pages.
Reference:
http://www.uic.edu/depts/accc/hardware/borg/profile.html
Incorrect Answers:
A. You need to edit the .profile file, not the man.config file.
B. It is unnecessary to reset the manpath variable every time the user logs in. You only need to
set it once in the .profile file.
D. You can have multiple versions of man pages installed on a system.
Question: 288
You know that the info utility provides easier to understand documentation but you have never
used it. How can you access a tutorial on using info?
A. man info
B. info
C. info info
D. info help
Page 105 of 217

Exam Name: Linux+
Exam Type: CompTIA
Answer: C.
Explanation:
Info pages are easier to understand than the sometimes complex man pages. The info info
command is used to access a tutorial on the info program.
Reference:
Incorrect Answers:
A. Man info would display the man pages for the info program. Info info is used to access a
tutorial on the info program.
B. The info command would run the info program, but not display a tutorial about it.
D. Info help would display documentation on the help command.
Question: 289
There is considerable documentation covering various tasks provided as HOWTOs. These
documents are normally installed in which directory?
A. /etc/HOWTO
B. /usr/doc/HOWTO
C. /usr/HOWTO
D. /usr/lib/HOWTO
Answer: B.
Explanation:
The default location for the HOWTO documents is /usr/doc/HOWTO.
Note: /usr/share/doc/HOWTO deserves attention.
Reference:
Incorrect Answers:
A. The HOWTO documents are not located in the /etc/HOWTO directory.
C. The HOWTO documents are not located in the /usr/HOWTO directory.
D. The HOWTO documents are not located in the /usr/lib/HOWTO directory.
Question: 290
What does FAQ stand for?
Answer: frequently asked questions
Explanation:
Frequently asked questions are often referred to as FAQs.
Reference:
Question: 291
When you install a new application, documentation on that application is also installed. Where
would you look for the documentation after installing an application called MyApp?
A. /usr/MyApp
Page 106 of 217

Exam Name: Linux+
Exam Type: CompTIA
B. /lib/doc/MyApp
C. /usr/doc/MyApp
D. In the same directory where the application is installed.
Answer: C.
Explanation:
The default location for application documentation is in the /usr/doc/<application name> directory.
Reference:
Incorrect Answers:
A. Application documentation is located in the doc subdirectory of the /usr directory.
B. Application documentation is not located in the /lib/doc directory.
D. Application documentation is not located in the same directory where the application is
installed.
Question: 292
You need to update your HOWTOs. Where should you go to acquire the latest version?
A. Linux Mall and order a new CD.

B. Your local Linux User Group should have a copy.
C. The web site for your distribution.
D. Linux Documentation Project.
Answer: D.
Explanation:
The Linux Documentation Project has all the latest HOWTOs. They can be found at www.tldp.org.
Reference:
http://www.tldp.org/
Incorrect Answers:
A. You don't need to order a CD. The HOWTOs can be downloaded from the Linux
Documentation Project website.
B. Your local Linux User Group may have a copy - or they may not.
C. The website for your distribution will have HOWTOs relating to your distribution but not all the
applications that you may have installed.
Question: 293
You have a problem installing an older CD-ROM drive on one of your Linux servers. You have
checked the HOWTOs and FAQs but have not found your answer.
Where could you go to search the newsgroups to look for a solution?
A. http://www.deja.com
B. http://www.news.com
C. http://www.linux-help.com
D. http://www.lug.com
Answer: A.
Explanation:
www.deja.com is the Google search engine specifically designed to search for news groups.
Page 107 of 217

Exam Name: Linux+
Exam Type: CompTIA
Reference:
http://www.deja.com
Incorrect Answers:
B. You would not search for news groups at this site.
C. You would not search for news groups at this site.
D. You would not search for news groups at this site.
Question: 294
The whereis command is helpful in finding the location of a command as well as its related man
page. What is the disadvantage of using it?
A. Since it searched the entire directory tree, the whereis command can take an excessive
amount of time.
B. The whereis command will not find source files located on your system.
C. You have to update the whereis database in order to keep it current.
D. The whereis command only searches known directories that are hard coded into the
command.
Answer: D.
Explanation:
The whereis command searches for files in a restricted set of directories such as standard binary
file directories, library directories and man page directories.
Reference:
Incorrect Answers:
A. The whereis command does not search the entire directory tree.
B. You wouldn't use the whereis command to look for source files.
C. There is no whereis database to update.
Question: 295
You suspect that you have two commands with the same name as the command is not producing
the expected results. What command would you use to determine the location of the command
being run?
Answer: which.
Explanation:
The which command is used to display the full path to the program that would be run if a specified
command was issued.
Reference:
http://www.oreillynet.com/linux/cmd/w/which.html
Question: 296
You locate a command in the /bin directory but do not know what it does. What command can
you use to determine its purpose.
Answer: whatis.
Explanation:
Page 108 of 217

Exam Name: Linux+
Exam Type: CompTIA
The whatis command searches a database of short man pages to determine the purpose of a
command.
Reference:
http://www.oreillynet.com/linux/cmd/w/whatis.html
Question: 297
What command must you run to update the database used by the whatis command?
A. makewhatis
B. updatedb
C. make whatisdb
D. The database is updated automatically.
Answer: A.
Explanation:
The makewhatis command is used to update the whatis database.
Reference:
http://www.tac.eu.org/cgi-bin/man-cgi?makewhatis+8
Incorrect Answers:
B. Updatedb is the wrong command to update the whatis database.
C. Make whatisdb is the wrong command to update the whatis database.
D. The database is not updated automatically.
Question: 298
What does the apropos command do?
A. It is the same as the man -f command.

B. It is the same as the man -K command.
C. It searches the short descriptions from the man pages.
D. It uses the locatedb database to answer your query.
Answer: C.
Explanation:
The apropos command is similar to the whatis command in that is searches the short descriptions
from the man pages for a specified string. Whatis only searches for a single word.
Reference:
http://www.oreillynet.com/linux/cmd/a/apropos.html
Incorrect Answers:
A. It is not the same as the man -f command.
B. It is the same as the man -k command, not the man -K command (note the capital K).
D. It uses the whatis database, not the locatedb database.
Question: 299
Which of the following items would not be important for you to record in your system
documentation?
A. Any kernel patches you might apply.

B. Applications that are installed.
Page 109 of 217

Exam Name: Linux+
Exam Type: CompTIA
C. When did each user log on last?

D. What problems with the system you have had.
Answer: C.
Explanation:
Documentation is an important part of any system administrator's job. However, the last time
each user logged on is not important and does not need to be documented.
Reference:
Incorrect Answers:
A. Any kernel patches should be documented.
B. Any installed applications should be documented.
D. Any system problems should be documented.
Question: 300
Which of the following would improve your ability to provide user support?
A. Create a directory containing instructions for using all installed applications.

B. Email your user's your office hours.
C. Whenever a user has a problem, fix it and leave.
D. Use as much technical language as possible when explaining what went wrong.
Answer: A.
Explanation:
A directory containing instructions for using all installed applications would make a system
administrator's job much easier.
Reference:
Incorrect Answers:
B. It would be helpful for your users to know your working hours, but this is not as helpful as
application documentation.
C. You wouldn't leave after every problem you fixed.
D. Using as much technical language as possible when explaining what went wrong would
confuse the user and would gain nothing.
Question: 301
Which of the following commands will make your home directory your working directory?
A. cd
B. cd home
C. cd..
D. cd home/username
Answer: A.
Explanation:
When the cd command is used without specifying a directory, you will by default be taken to your
home directory.
Page 110 of 217

Exam Name: Linux+
Exam Type: CompTIA
Reference:
Incorrect Answers:
B. Cd home would take you to a subdirectory of your current directory named home.
C. The cd.. command would take you up one level in the directory tree.
D. The cd home/username command would not take you to your home directory.
Question: 302
Which of the following commands will show a list of the files in your home directory including
hidden files and the contents of all subdirectories?
A. ls -c home
B. ls -aR /home/username
C. ls -Af /home/username
D. ls -l /home/username
Answer: B.
Explanation:
The a option used with the ls command is used to display hidden files. The R option makes the
search recursive meaning that any subdirectories will be searched.
Reference:
http://www.oreillynet.com/linux/cmd/l/ls.html
Incorrect Answers:
A. The -c option is used to list files by status change time.
C. The -A option does not search the '.' directory.
D. The -l command displays the files permissions. It does not display hidden files and it does not
search subdirectories.
Question: 303
What command should you type to see all the files with an extension of 'mem' listed in reverse
alphabetical order in the /home/ben/memos directory.
Answer: ls -r /home/ben/memos/*.mem
Explanation:
The -r option displays the files in reverse order. The '*' is a wildcard which means that any file that
ends with .mem will be displayed.
Reference:
http://www.oreillynet.com/linux/cmd/l/ls.html
Question: 304
You have three files in the /home/ben/memos directory called letters, tom, and betty. How could
you determine each file's type by issuing only one command?
Answer: file letters tom betty
Explanation:
The file command is used to display a files type. You can enter multiple filenames after the file
command.
Page 111 of 217

Exam Name: Linux+
Exam Type: CompTIA
Reference:
http://www.oreillynet.com/linux/cmd/f/file.html
Question: 305
Which of the following commands will combine the contents of the files tom and betty into a new
file called friends?
A. ls tom betty > friends

B. cat tom betty > friend
C. more tom betty > friends
D. cat tom; cat betty > friends
Answer: B.
Explanation:
You can use the redirection operator (>) with the cat command to combine multiple files into one
file.
Reference:
Incorrect Answers:
A. You need the cat command, not the ls command.
C. You need the cat command, not the more command.
D. There is no semi-colon (;) between the filenames to be combined.
Question: 306
Which of the following cannot be accomplished with the cat command?
A. Create a new file.

B. Display the contents of a file.
C. Append information to another file.
D. Change the contents of a file.
Answer: D.
Explanation:
The cat command is typically used to display the contents of a file. It cannot be used to change
the contents of a file (although it can add append data to a file).
Reference:
Incorrect Answers:
A. You can create a new file with the cat <filename> command.
B. The most common use of the cat command is to display the contents of a file.
C. You can combine multiple files into one file or append information to a file with the cat
command.
Question: 307
Which of the following commands will display a file one screen at a time?
A. less
B. page
C. tr
Page 112 of 217

Exam Name: Linux+
Exam Type: CompTIA
D. cat
Answer: A.
Explanation:
The less command will display the contents of a file one screen at a time.
Reference:
http://www.oreillynet.com/linux/cmd/l/less.html
Incorrect Answers:
B. There is no page command.
C. Tr is used to translate characters. It does not display the contents of a file one screen at a
time.
D. The cat command is used to display the contents of files but it will scroll down to the bottom of
the file.
Question: 308
You are debugging a new application that is crashing. You want to watch the messages as they
are being written to the log. What command should you use?
A. tail
B. head
C. less
D. log
Answer: C.
Explanation:
less is a program for paging through files or other output.
Reference:
http://www.oreillynet.com/linux/cmd/cmd.csp?path=l/less
Incorrect Answers:
A. The tail command is used to display the last ten lines of a specified file.
B.The head command is used to print the first ten lines of a specified file.
D. log is not a valid command.
Question: 309
A customer needs a Linux server to act as a Microsoft Windows NT server. Which of the following
must be installed for this server?
A. Syslog daemon.
B. Network file system daemon.
C. Server message block daemon.
D. File transfer protocol daemon.
Answer: C.
Explanation:
Server Message Blocks (SMBs) are used by Windows clients for network communications.
The Server Message Block daemon provides this service.
Reference:
Page 113 of 217

Exam Name: Linux+
Exam Type: CompTIA
Incorrect Answers:
A. The syslog daemon is used to log system messages.
B. The Network File System daemon is used for communication between Linux computers.
D. The File Transfer Protocol daemon is commonly used for transferring files across the internet.
Question: 310
A user is having problems printing to the network printer. She has sent several jobs to the printer,
but nothing is printing out. She wants to power cycle the printer, but does not want the extra jobs
to print out when it comes back online. Which command would she use to accomplish this?
A. lpc
B. lpr
C. lpd
D. lprm
Answer: A.
Explanation:
The 'lpc clean all <printername> command is used to remove files that cannot be printed from the
specified printer queues. The 'lpc restart all <printername>' is used to restart the printer daemons
on the specified printers.
Reference:
http://www.oreillynet.com/linux/cmd/l/lpc.html
Incorrect Answers
B: The lpr command is used to send print jobs to a print queue.
C: Lpd is the line printer daemon. It accepts print jobs submitted by the lpr command.
D: The lprm command is used to remove specific print jobs from print queues. The print jobs must
be specified by job number which can be obtained using the lpq command.
Question: 311
Which command enables a user to make a newly created shell script executable?
A. /<filename>
B. chown +x <filename>
C. chmod +x <filename>
D. /configure <filename>
Answer: C.
Explanation:
To make a script executable, you need to add the execute permission to the file. The chmod
command is used to change the access mode (permission) of the file. The +x option keeps the
existing permissions and adds the execute permission.
Reference:
http://www.oreillynet.com/linux/cmd/c/chmod.html
Incorrect Answers
A: /<filename> is not the correct command.
B: The chown command is used to change the owner of a file, not to make it executable.
D: /configure <filename> is not the correct command.
Page 114 of 217

Exam Name: Linux+
Exam Type: CompTIA
Question: 312
An administrator who logged in as a standard user needs to kill process 1010 that was started by
the root user. Which of the following commands will kill the process?
A. kill 1010
B. su "kill 1010"
C. killall -9 1010
D. su -c "kill 1010"
Answer: D
Question: 313
The administrator for a Linux server needs to update the system and downloads the required
patch. The filename is "update.tar.gz". Which of the following commands would be the best way
to uncompress this file?
A. gzip -p update.tar.gz
B. tar -xzf update.tar.gz
C. gunzip -update.tar.gz
D. untar -xzf update.tar.gz
Answer: B.
Explanation:
A file with the tar.gz extension has been processed by two programs. The tar utility is used to 'tar'
multiple files into one archive and the gzip utility is used to compress the files. To uncompress the
file, you should use the tar command. The x option is used to extract the files. The z option is
used to invoke gzip to uncompress the files and the f <filename> option is used to specify the
filename.
Reference:
http://www.oreillynet.com/linux/cmd/t/tar.html
Incorrect Answers
A: The file was created with the tar utility which called the gzip utility to compress the files.
Therefore, you should use the tar command to uncompress the files.
C: The file was created with the tar utility which called the gzip utility to compress the files.
Therefore, you should use the tar command to uncompress the files.
D: Untar is not the correct command.
Question: 314
How could an administrator switch to single-user mode without rebooting the system?
A. init 0
B. init 1
C. cd /single
D. su -single
Answer: B.
Explanation:
Single user mode is known as runlevel 1. You can change the runlevel by issuing the 'init
<runlevel> command (in this case 'init 1').
Page 115 of 217

Exam Name: Linux+
Exam Type: CompTIA
Reference:
Incorrect Answers
A: Init 0 will change the system to runlevel 0. Runlevel 0 is used to halt the system.
C: Cd /single will change to a directory named /single.
D: Su -single will attempt to switch to a user named single.
Question: 315
An administrator needs to append the list of files in the /tmp directory to the existing file
"DoNotCreateBackup". What command would accomplish this goal?
A. ls /tmp || DoNotCreateBackup
B. ls /tmp && DoNotCreateBackup
C. ls /tmp >> DoNotCreateBackup
D. ls /tmp :: DoNotCreateBackup
Answer: C.
Explanation:
The >> symbols represent a command redirector. ">>" will take the output of the ls /tmp
command and instead of displaying it on screen, it will append it to a file (in this case, a file
named DoNotCreateBackup).
Reference:
http://www.netti.hu/doc/LinuxShellScript/rpf.htm
Incorrect Answers
A: || is not a valid command redirector.
B: && is not a valid command redirector.
D: :: is not a valid command redirector.
Question: 316
The following is the output from a ps command:
PID TTY TIME CMD

1054 pts/1 00:00:00 bash
6894 pts/1 00:00:00 nmap
7123 pts/1 00:00:00 ps
The nmap process has been taking up too much processing power. What command can be used
to run nmap with less resources?
A. bg nmap
B. stop | back 6894
C. CTRL-Q, bk nmap:6894
D. Kill 6894 : nice -n19 nmap <arguments>
Answer: D.
Explanation:
The Kill command is used to kill the process. The nice command is used to run a process with a
lower priority. The default 'niceness' is 10. The -n19 option will lower the priority of the process.
When using the nice command, the lowest priority is 19 and the highest is 1.
Page 116 of 217

Exam Name: Linux+
Exam Type: CompTIA
Reference:
http://www.oreillynet.com/linux/cmd/n/nice.html
Incorrect Answers
A: The bg command is used to run a process in the background. However, it doesn't lower the
priority of the process.
B: Stop | back is not the correct command.
C: CTRL-Q, bk is not the correct command. (CTRL-Q is often used to turn all output stopped on
screen back on).
Question: 317
The system administrator wants to connect to his servers remotely to create a new user. Which of
the following commands can be used?
A. ftp
B. ping
C. telnet
D. traceroute
Answer: C.
Explanation:
Telnet is used to access remote systems. Telnet is the user interface that communicates with
another host using the Telnet protocol. Commands entered into a telnet console are executed on
the remote system.
Reference:
http://www.oreillynet.com/linux/cmd/t/telnet.html
Incorrect Answers
A: FTP is used to transfer files using the FTP (File Transfer Protocol).
B: Ping is used to test IP connectivity.
D: Traceroute is another utility used to test IP connectivity by tracing the route to a remote host.
Question: 318
The current working directory is /var/spool/Tom/ip. What does the command "cd~" do?
A. Returns the user to the root directory.

B. Returns the user to their home directory.
C. Keeps the user in their current directory.
D. Returns the user to the parent directory of "ip".
Answer: B.
Explanation:
The 'cd~' command is the same as the 'cd' command in that it will return you to your home
directory.
Your home directory is the default directory you are taken to when you log in, which is why your
home directory is sometimes known as your login directory.
Reference:
http://www.redhat.com/docs/manuals/linux/RHL-7.3-Manual/getting-started-guide/s1-navigating-
cd.html
Incorrect Answers
Page 117 of 217

Exam Name: Linux+
Exam Type: CompTIA
A: To go to the root directory, you would have to enter the command: cd /.

C: The cd command is used to 'change directory'. It does not keep you in the current directory.
D: To go to the parent directory of the ip directory (in other words, to go up one level), you would
enter the command: cd.. or cd /var/spool/Tom.
Question: 319
Which Linux file shows which users have access to which groups?
A. /usr/group
B. /usr/users
C. /etc/group
D. /etc/users
Answer: C.
Explanation:
The /etc/group file contains a list of all the groups and the members of each group.
Reference:
Incorrect Answers
A: The group file is in the /etc directory, not the /usr directory.
B: /usr/users does not contain group information.
D: /etc/users does not contain group information.
Question: 320
Why would setting up separate file systems for /home and /var be appropriate?
A. Administrators can separate user files from business files.

B. The system is not subject to failure from log file or user quota overruns.
C. Guests accounts included in /var are separated from user accounts kept in /home.
D. Users can access /home for their personal applications and /var can store old applications.
Answer: A.
Explanation:
The /var directory contains 'variable' system data such as log files. It is a good idea to keep this
data separate from the users' personal data stored in their home directories.
Reference:
http://www.mandrakeuser.org/docs/basics/bfiles2.html
Incorrect Answers
B: Quota overruns would not cause a system failure.
C: There are no guest accounts in the /var directory.
D: /var is not used to store old applications.
Question: 321
A customer has installed a new IDE hard drive in a Linux system. The drive has been partitioned
and formatted with the ext2 file system. She is complaining that the new drive must be mounted
manually every time the computer is booted. What needs to be done?
A. Use a utility to edit fstab.

B. Add the proper drive module to the kernel.
Page 118 of 217

Exam Name: Linux+
Exam Type: CompTIA
C. Add the drive information to the /dev directory.

D. Change the runlevel to reflect the number of partitions in the system.
Answer: A.
Explanation:
The fstab file contains information about the filesystems. This information includes who can
mount the filesystems and whether the filesystem should be mounted automatically at system
bootup.
Reference:
Incorrect Answers
B: No drive module needs to be added to the kernel as the filesystem can be mounted manually.
C: The drive information must already be in the /dev directory as the filesystem can be mounted
manually.
D: It is not necessary to change the runlevel.
Question: 322
A technician discovers that the route command is being used incorrectly. Which of the following
resources is the quickest means of finding examples of correct usage?
A. Search the distribution documentation CD.

B. View the HOWTO pages on the Web browser.
C. Use the built-in help pages by typing "help route".
D. Use the built-in manual pages by typing "man route".
Answer: D.
Explanation:
Every system has manual pages installed by default. The manual pages contain information
about various commands including the syntax and the correct usage for each command. You can
access the manual pages using the 'man' command. To display information about the route
command, you would type 'man route'.
Reference:
http://www.oreillynet.com/linux/cmd/m/man.html
Incorrect Answers
A: Searching the distribution documentation CD (if there is one) would be a long way of doing it.
B: The HOWTO pages are very useful. However, using the man pages is quicker.
C: The 'help' pages are known as manual pages and can be accessed using the 'man' command,
not the help command.
Question: 323
A user wants to have a custom software daemon run each time the system starts. Where could
this be configured?
A. rc.local
B. ~/.bashrc
C. inetd.conf
D. /etc/profile
Answer: A.
Page 119 of 217

Exam Name: Linux+
Exam Type: CompTIA
Explanation:
Rc.local is a startup script that can be configured to start processes or daemons when the system
boots up. The rc.local file exists in the /etc directory or a script subdirectory such as /etc/rc.d.
Reference:
Incorrect Answers
B: The bashrc file is used to set environment variables for the BASH shell. It is not used to start
daemons.
C: Inetd.conf is used to configure the inet daemon. Inetd starts server processes when they are
requested. Inetd could be used to start the custom daemon, but it won't start the daemon until it
receives a request for it. For this reason, it is better to use the rc.local file.
D: The /etc/profile file is used to set defaults for environment variables. It is not used to start
daemons.
Question: 324
For which of the following reasons could the dd utility be used?
A. To locate and access system log files.

B. To create a bootable Linux system disk.
C. To automate editing system configuration files.
D. To automate access to system hardware information.
Answer: D.
Explanation:
The 'dd' utility is used to take input from an input file (IF) and output to an output file (OF). You
could use this to read information about hardware by taking input from the hardware configuration
files and output this information to a single file.
Reference:
http://www.oreillynet.com/linux/cmd/d/dd.html
Incorrect Answers
A: The dd utility cannot be used to locate system log files.
B: The dd utility cannot be used to create a Linux system disk.
C: Editing system configuration files cannot be automated because the configuration information
would be different each time, and therefore should be manually entered into the files.
Question: 325
At boot time, the computer reported that there are problems with inodes and blocks. What is the
problem, and how is it corrected?
A. The boot sector is corrupt and needs to be replaced.

B. The file system has become corrupt and needs to be repaired.
C. The partition table has become corrupt and needs to be repaired.
D. The drive is configured using an improper file system and needs to be reformatted.
Answer: B
Explanation:
Page 120 of 217

Exam Name: Linux+
Exam Type: CompTIA
If you get errors about inodes and blocks during system boot up, the most likely problem is that
you have a corrupted file system. This can be caused by improperly shutting down the machine.
You should use a disk repair utility such as fsck to attempt to recover the filesystem.
Reference:
http://theory.uwinnipeg.ca/faqs/section4.html
Incorrect Answers
A: If the boot sector was corrupt, the boot loader would not be able to run. Therefore, you would
not get errors related to a corrupted filesystem because the filesystem hasn't been read yet.
C: If the partition table had become corrupt, the system would not be able to find the partitions.
This would not result in inode or block error messages.
Question: 326
A user is attempting to login to a Linux machine but her password keeps getting rejected. Which
of the following actions should be done first to try to solve the problem?
A. Reboot the machine.

B. Replace the keyboard.
C. Check to see if root can login.
D. Check to see if <Caps Lock> is on.
Answer: D.
Explanation:
Passwords are case sensitive. The most common cause of logon failure due to a rejected
password is the keyboard Caps Lock being on.
Incorrect Answers
A: Restarting the machine won't affect someone's ability to log on if their password is wrong.
B: It is possible that the keyboard is faulty, but it is more likely that the Caps Lock is on.
C: You would check to see if root can log in if you were sure you're password is correct and the
Caps Lock is off.
Question: 327
A customer wants to determine which TCP ports are in use on his Linux server. Which of the
following commands should be used?
A. tftp
B. lsport
C. minicom
D. netstat
Answer: D.
Explanation:
Netstat is a TCP/IP command used to show the network status. For all active sockets, it will print
the protocol, the number of bytes waiting to be received, the number of bytes to be sent, the port
number, the remote address and port, and the state of the socket. The -t option with Netstat is
used to display just the TCP ports.
Reference:
http://www.oreillynet.com/linux/cmd/n/netstat.html
Incorrect Answers
Page 121 of 217

Exam Name: Linux+
Exam Type: CompTIA
A: TFTP (Trivial File Transfer Protocol) is used to transfer files, not to display TCP port
information.
B: Lsport is used to list printer ports, not TCP ports.
C: Minicom is a utility used for connection modem dial up connections.
Question: 328
An operator is concerned that errors occurred during the last tape backup. Which of the following
is the LEAST helpful in determining that a successful backup was performed?
A. View the log file.

B. Perform a test restore.
C. Run a diagnostic of the tape drive.
D. Inspect the tape media with appropriate utilities.
Answer: C.
Explanation:
If you are concerned about possible errors during a backup operation, the first thing you should
do it to check the log files. You should also test the backup by performing a test restore and
inspect the tape media. If the tape media proves to be faulty or the restore fails, then you would
know that the backup was unsuccessful.
Running a diagnostic of the tape drive is probably the least helpful of the answers given. The tape
drive may pass the diagnostics, but that wouldn't guarantee that the backup was successful. If the
tape drive failed the diagnostics, it still doesn't necessarily mean that the backup was
unsuccessful.
Incorrect Answers
A: Viewing the log file is the first thing you should do.
B: Performing a test restore is a good way of testing a successful backup.
D: Inspecting the tape media should be done as tapes do wear out after a while.
Question: 329
A customer wants to identify all of the services that were initially loaded by his server upon boot
and compare these with services that are currently running.
How should he look for this information?
A. examine /boot and run "ps-ef".

B. examine /var/log/dmesg and run "ps -e".
C. examine /etc/init.d and run "whatis -x".
D. examine /var/log/boot.log and run "ps -ax".
Answer: D
Explanation:
The /var/log/boot.log file will contain all the messages displayed at boot time (plus any other
system messages). This will include the services being started at boot time. The ps -ax command
will display all currently running processes.
Reference:
http://www.oreillynet.com/linux/cmd/p/ps.html
Incorrect Answers
A: /boot does not contain the messages displayed at boot time.
B: The dmesg utility can be used to display boot messages. However, to display the currently
running processes, you need to use the ax options with the ps command.
Page 122 of 217

Exam Name: Linux+
Exam Type: CompTIA
C: Whatis is not used to display the currently running processes.
Question: 330
A user is trying to connect to a system via HTTP. How could an administrator verify that HTTP
services are running after a default installation?
A. Run "finger http".

B. Run "restart httpd".
C. Run "ps aux | grep http".
D. View /var/messages to verify that the service started.
Answer: C.
Explanation:
The ps aux command is used to list all currently running processes. The output of this command
is then handed to the grep command using the pipe (|) redirector. The grep http command will
take the output from the ps aux command and search it for any occurrences of 'http'. If any
occurrences of http are found, then you know that http is running.
Reference:
http://www.oreillynet.com/linux/cmd/p/ps.html
Incorrect Answers
A: The finger command is used to display information about users, not about processes.
B: The 'restart httpd' command incorrect. 'Httpd restart' would restart the httpd process, but it isn't
used to tell you if the process is currently running.
D: /var/messages is the wrong file to verify that the service started. This information would be in
/var/log/boot.log.
Question: 331
The administrator uses the rpm command to install a new software package but he gets the
following error message:
cannotget exclusive lock on database

error:cannot open /var/lib/rpm/packages.rpm
What is the best way to solve the problem?
A. Run "rpm -initdb".

B. Run "rpm -rebuilddb".
C. Copy the package to the directory /var/lib/rpm/.
D. Check whether a second instance of rpm is already running.
Answer: D.
Explanation:
The error stated in the question is usually caused by another instance of rpm already running.
Killing the other rpm instance should solve the problem.
Reference:
http://www.yolinux.com/TUTORIALS/LinuxTutorialSysAdmin.html#RPM
Incorrect Answers
A: "rpm -initdb" is used to build a new database. This is not necessary.
Page 123 of 217

Exam Name: Linux+
Exam Type: CompTIA
B: "rpm -rebuilddb" is used to rebuild an existing database. This may solve the problem but it is
not the first thing you should try.
C: The error "cannot open /var/lib/rpm/packages.rpm" suggests that the package exists in the
directory. Otherwise, you would get an error saying it couldn't find the file.
Question: 332
What is the quickest way to create a file that lists all the groups to which the user 'bob' belongs?
A - where is bob >> bob_groups.txt

B - grep bob /etc/group > bob_groups.txt
C - find /etc/passwd bob >> bob_groups.txt
D - cd /etc; cat groups | grep bob | vi > bob_groups.txt
Answer: B.
Explanation:
The grep command is used to search files for occurrences of a string - in this case bob in the
/etc/group file. The output of this command is placed into a file name bob_groups.txt using the >
command redirector. Using the > redirector, the file bob_groups.txt will be created if it doesn't
already exist.
Reference:
http://www.oreillynet.com/linux/cmd/g/grep.html
http://www.netti.hu/doc/LinuxShellScript/rpf.htm
Incorrect Answers
A: The whereis command is used to locate the binary file and man pages for a command.
C: The find command is used to find files, not to find occurrences of a string within a file.
D: This command would almost work but it is a long way of doing it. The only thing wrong with the
command is that is has two redirectors together ( | followed by >).
Question: 333
A Linux system boots up with only "LI" instead of LILO.
What does this indicate?
A. LILO is not installed.

B. The video driver is corrupted.
C. The hard drive is not functioning properly.
D. The second stage bootloader was unable to start.
Answer: D.
Explanation:
If LI is displayed during bootup, it indicates that the first stage boot loader was able to load the
second stage boot loader, but has failed to execute it.
Reference:
http://www.linuxpeople.cc/howto/liloerrorshowto.htm?link
Incorrect Answers
A: LI was displayed. This indicates that LILO is installed.
B: LI being displayed has nothing to do with the video driver.
C: If the hard drive wasn't functioning properly, it is unlikely that the first stage of LILO (LI) would
be able to run.
Page 124 of 217

Exam Name: Linux+
Exam Type: CompTIA
Question: 334
A system with an existing Linux installation has an onboard network interface already configured
as 'eth0' that is functioning properly. A PCI network interface card is inserted into an empty PCI
slot and configured as 'eth1'. After the network services are restarted, neither network interface
device has network connectivity. Both devices have link lights, the correct drivers are installed
and are supported by the kernel. There is no error message generated.
A. A motherboard defect caused both cards to stop functioning properly.

B. It is not possible to run an onboard and expansion NIC in the same PC.
C. An IP conflict between the cards caused networking services to fail at boot.
D. The kernel swapped the identification of the NICs causing neither to operate properly.
Answer: C.
Explanation:
The most likely cause of the problem is that both network cards are configured with the same IP
address thus causing a conflict.
Incorrect Answers
A: Both network cards have link lights. Therefore, it is unlikely to be a motherboard problem.
B: It is possible to run an onboard and expansion NIC in the same PC.
D: It is very unlikely that the kernel would swap the identification of the NICs.
Question: 335
The server has been rebooted after a kernel panic. Which of the following files can be viewed to
try to determine the problem?
A. wtmp
B. dmesg
C. boot.log
D. messages
Answer: D ?
Explanation:
The boot.log file contains system messages. Examining this file might give some indication of the
problem. The /var/log/messages file will contain error messages generated by the kernel before
the machine was rebooted. Therefore, /var/log/messages would be the first file to look at to
determine the problem.
Reference:
Incorrect Answers
A: The wtmp file contains information about logins.
B: Dmesg displays the kernel messages displayed at bootup. We need to see the error
messages generated before the reboot.
C: The boot.log file may contain some indication of the problem; however, /var/log/messages
would be the first file to look at to determine the problem.
Question: 336
Using which of the following commands creates a risk of destroying data on a mounted file
system?
Page 125 of 217

Exam Name: Linux+
Exam Type: CompTIA
A. fsck
B. mkfs
C. mount
D. setserial
Answer: B.
Explanation:
The mkfs command is used to create a filesystem on a hardware device such as a hard disk or a
mount point. Creating a new filesystem over an existing filesystem will destroy the data on the
existing filesystem.
Reference:
http://www.oreillynet.com/linux/cmd/m/mkfs.html
Incorrect Answers
A: Fsck (file system checker) is used to check the file system for errors. Although this can cause
problems if the filesystem is mounted as read only, it is not as dangerous at the mkfs command.
C: The mount command is used to mount a filesystem. Running this command on a filesystem
that is already mounted would just generate an error message. It would not cause the loss of
data.
D: Setserial is a program designed to set and/or report the configuration information associated
with a serial port. It would not cause the loss of data on a mounted filesystem.
Question: 337
What is the first step in troubleshooting a system problem?
A. Collect information.
B. Test a possible solution.
C. Make a hypothesis about a solution.
D. Try to modify the configuration files.
Answer: A.
Explanation:
The first step in troubleshooting should always be to collect information about the problem.
This information can determine whether the problem is hardware or software related, and what
the possible cause of the problem could be. When you know the cause of the problem, you can
try to find a solution to the problem.
Incorrect Answers
B: You need to know the cause of the problem before you can test a solution to the problem.
C: You need to know the cause of the problem before you can try to find a solution to the
problem.
D: You need to know the cause of the problem so that you know what configuration changes to
make.
Question: 338
Which of the following is NOT a valid SCSI connector?
Page 126 of 217

Exam Name: Linux+
Exam Type: CompTIA
Answer: C.
Explanation:
This is a DB15 connector commonly used to connect to VGA monitors.
Reference:
http://www.ramelectronics.net/html/scsi_connecters.html
http://www.nullmodem.com/HD-DB-15.htm
Incorrect Answers
A: This is a DB 25 connector.
B: This is an HD 68 connector.
D: This is a 50 pin Centronics connector.
Question: 339
Exhibit:
Which of the following types of memory modules is shown in the exhibit?
A. SIMM
B. DIMM
C. RIMM
D. SIPP
Answer: B.
Explanation:
The exhibit shows a 168 pin DIMM.
Reference:
http://www.orcalogic.co.uk/Products/Products.htm
Page 127 of 217

Exam Name: Linux+
Exam Type: CompTIA
Incorrect Answers
A: This is not a SIMM.
C: This is not a RIMM.
D: This is not a SIPP.
Question: 340
What Linux service is responsible for exporting and importing directories with another system on
a network?
A. NFS
B. tftp
C. Squid
D. Exportfs
Answer: A.
Explanation:
The NFS service (Network File Service) is used to share directories on a network. The Network
Filesystem (NFS) protocol provides transparent remote access to shared files across networks.
The NFS protocol is designed to be portable across different machines, operating systems,
network architectures, and transport protocols.
Reference:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/nfs.html
Incorrect Answers
B: TFTP (trivial file transfer protocol) is used to transfer files across a network. It is not used for
exporting or importing directories.
C: Squid is a web proxy program. It is not used for exporting or importing directories.
D: Exportfs is a command used to export directories. However, it is the NFS service that is
responsible for the exporting and importing of directories.
Question: 341
A medium-sized business wants to use GNOME or KDE. Which of the following hardware
components is required?
A. SCSI Card
B. Modem Card
C. Video Card
D. Network Card
Answer: C.
Explanation:
Gnome and KDE provide graphical desktop environments for Linux computers. To use these
graphical desktop environments, you will need a graphics card otherwise known as a video card.
Reference:
Incorrect Answers
A: A SCSI card is required if you have SCSI devices. It is not needed to enable the use of Gnome
or KDE.
Page 128 of 217

Exam Name: Linux+
Exam Type: CompTIA
B: A modem card is required if you want a dial up connection (to an ISP for example). It is not
needed to enable the use of Gnome or KDE.
D: A network card is required if you want to connect to a LAN (local area network). It is not
needed to enable the use of Gnome or KDE.
Question: 342
A customer installed a new intranet in their company, but the new network is not working.
Connection attempts from the clients to the hosts generate "unknown host" errors. Pinging the
server's IP address from a client is successful. What service needs to be added to the network to
fix this issue?
A. BIND
B. Squid
C. xinetd
D. portmap
Answer: A.
Explanation:
BIND (Berkeley Internet Name Daemon) is a common type of DNS service. DNS is used to map
hostnames to IP addresses. In this question, you can ping the server's IP address; therefore, you
have network connectivity. You are unable to ping the hostname which means you have a name
resolution problem. Adding the DNS service (BIND) to the network will solve this problem.
Reference:
http://www.isc.org/products/BIND/
Incorrect Answers
B: Squid is a web proxy program. It is not used for name resolution.
C: Xinetd is the Linux 'superserver'. It is used to start services on a Linux computer.
D: Portmap is used with NFS to mount filesystems.
Question: 343
A client requires a system that is able to store all of his customer records and records of
transactions. What type of server should the client implement?
A. Proxy Server
B. Database Server
C. Messaging Server
D. Application Server
Answer: B.
Explanation:
A database is used to store information. This information could be about anything.
However, a common use of a database is to store customer information. A database server is a
network server hosting a database, that can be accessed by workstations on the network.
Reference:
http://linas.org/linux/db.html
Incorrect Answers
A: A proxy server is used to provide an internet connection and web caching functionality. It is not
used to store customer information.
Page 129 of 217

Exam Name: Linux+
Exam Type: CompTIA
C: A messaging server is used to provide messaging functionality on a network. It is not used to

store customer information.
D: An application server is used to provide access to applications to workstations on a network. It
is not used to store customer information.
Question: 344
Which of the following information is NOT returned by ifconfig on a machine connected to an
Ethernet network?
A. Ip address
B. Mac address
C. Computer hostname
D. Active network interface
Answer: C.
Explanation:
The ifconfig command is used to configure a network interface or to obtain information about the
network interface. The information includes the IP address, the hardware (MAC) address, and the
active network interface. However, it does not display the hostname of the computer.
Reference:
http://www.oreillynet.com/linux/cmd/i/ifconfig.html
Incorrect Answers
A: The ifconfig command displays the IP address.
B: The ifconfig command displays the MAC address.
D: The ifconfig command displays information about the active interface including packets
received/sent.
Question: 345
The system administrator notices that the system is running slow. What should be done to find
the processes that are using the most resources?
A. Use the command "renice" to show the processes with the highest priority.
B. Use the command "ps a" to list the top five processes with the highest priority.
C. Use the command "jobs" to give a constantly updated list of CPU-intensive processes.
D. Use the command "top" to give a real-time updated list of processes ranked by CPU usage.
Answer: D.
Explanation:
The 'top' command is used to display information (frequently refreshed) about the most CPU-
intensive processes currently running. If a process is using an excessive amount of CPU time,
killing or restarting the process may improve system performance.
Reference:
http://www.oreillynet.com/linux/cmd/t/top.html
Incorrect Answers
A: The renice command can be used to adjust the priority of a process. However, it does not
display the processes with the highest priority.
B: The ps a command will list all running processes. It is easier to use the top command to
display just the most CPU-intensive processes.
C: The 'jobs' command to not display a constantly updated list of CPU-intensive processes.
Page 130 of 217

Exam Name: Linux+
Exam Type: CompTIA
Question: 346
Which of the following commands is used to obtain the summary of hard disk partitions?
A. fsck
B. fdisk
C. fsck -l
D. fdisk -l
Answer: D.
Explanation:
The fdisk command is used to create/view hard disk partitions. The -l option is used to display
information about all the hard disk partitions.
Reference:
http://www.rt.com/man/fdisk.8.html
Incorrect Answers
A: Fsck is used to check the filesystem for errors. It is not used to display partition information.
B: The fdisk command with no options will start a menu driven program, listing various options.
The fdisk command on it's own does not display partition information.
C: Fsck is used to check the filesystem for errors. It is not used to display partition information.
Question: 347
Which of the following can be used to apply the package "package-update-3.5.i386.rpm" to the
original rpm package?
A. rpm -qa package-update-3.5.i386.rpm

B. rpm-Uvh package-update-3.5i386 rpm
C. rpm -ivh package-update-3.5.i396.rpm
D. rpm --update package-update-3.5.i386.rpm
Answer: B.
Explanation:
The U option used with rpm is used to install a package or upgrade an existing package.
The v and h options are used to display a series of pound signs (#) to indicate the progress of the
installation/upgrade.
Reference:
Incorrect Answers
A: The qa options are used to query the installed packages. This will display information such as
the installed files for the package.
C: The i option is used to install a package. However, when using the i option to install a
package, a package with the same name must not already exist on the system.
D: Update is not the correct option to upgrade the package.
Question: 348
An assistant network administrator has just been assigned the task of performing a daily check of
the security system. A script will be created that will be executed daily as a cron job. Which of the
following commands can be included in the script which directly relates to enhancing and
checking the system security?
Page 131 of 217

Exam Name: Linux+
Exam Type: CompTIA
A. find /-name * >> /var/log/daily

B. chmod -R 4000 / >> /var/log/daily
C. find / -perm 4000 >> /var/log/daily
D. grep -Ril root /ect/* >> /var/log/daily
Answer: C.
Explanation:
Setuid executable files can be run as the file owner rather than the user running the file.
This can be a security risk as it could give an intruder root access to your system. You can use
the find / -perm 4000 command to search for setuid files. The output of the search is appended to
a file called /var/log/daily with the >> redirector.
Reference:
http://www.intersectalliance.com/projects/LinuxConfig/LinuxConfig-4.0.html
Incorrect Answers
A: This command would search / (the root directory) for any (*) filename and list the output in the
/var/log/daily file. This would result in a list of every file on the system.
B: The chmod command is used to change the permissions on files (in this case, every file on the
system). It cannot be used to enhance security.
D: This command would search every file in /etc/ for an occurrence of the word root. This doesn't
improve security.
Question: 349
An administrator needs to maintain a log of work performed on a Linux server. Which of the
following written records is the most important to maintain?
A. Updates to hardware drivers.

B. Updates of user passwords.
C. New users added to the system.
D. File system check times and results.
Answer: A.
Explanation:
Documenting work performed on a server is very important for troubleshooting purposes.
It is often helpful to know the exact version of your hardware drivers. This will make it easier for
an administrator to know if he/she has the most recent version of the drivers.
Incorrect Answers
B: Documenting updates to user passwords is not necessary. Documenting the actual passwords
is definitely not recommended.
C: Documenting new users is not necessary. A list of user accounts can be obtained at any time.
D: Documenting file system check times could be useful as it could indicate a deteriorating hard
disk. However, just noting any file system errors would suffice.
Question: 350
The /etc/passwd file for a Linux system has an "x" in the second field. What does this indicate?
A. The user account is disabled.

B. The user is configured for X login.
C. The system is using shadow passwords.
D. The user is required to change the password at next login.
Page 132 of 217

Exam Name: Linux+
Exam Type: CompTIA
Answer: C.
Explanation:
The second field is the password field. Linux distributions that use shadow password files
typically place an 'x' in this field. Others place the encrypted password in this field.
Reference:
Incorrect Answers
A: If the user account was disabled, the password field would contain a '*'.
B: The x does not mean the account is configured for an X login.
D: The x does not mean the user is required to change the password at next login.
Question: 351
A user creates a cron job that deletes all files in /tmp and /var/tmp on her home machine each
night. However, she notices several days later that some of the files have not been deleted. What
can she do so the cron job performs correctly?
A. Write a shell script to remove the files.

B. Make a new crontab while logged in as root.
C. Log in as superuser and delete the files manually.
D. Edit her user crontab while logged in as superuser.
Answer: B.
Explanation:
To delete the files, she must have the necessary permissions on all the files. To ensure she has
the necessary permissions, she should make a new crontab while logged in as root. This will
make the cron job run with root permissions, and successfully delete all the files.
Incorrect Answers
A: If she used a shell script, she would still need the necessary permissions to delete the files.
C: Deleting the files manually is unnecessary.
D: Editing the crontab won't make the cron job run with root permissions.
Question: 352
A system administrator of a 200-server network wants to simplify routine monitoring of log files on
each server. What is the industry-recommended method to do this?
A. Create a script on the administrator's workstation to attach to each server and copy its log files
to the local drive.
B. Create a new server called 'loghost'.
Modify the syslog.conf file on each server so log files are forwarded to 'loghost'.
C. Run logcp at each server.
Specify the administrators workstation as the destination and "*" for which log files to forward.
D. Create a script on each server to analyze each of the log files on the server and forward
important information to the administrator's workstation.
Answer: B.
Explanation:
Page 133 of 217

Exam Name: Linux+
Exam Type: CompTIA
To simplify the monitoring of log files, you should use a central logging server. You can modify
the syslog.conf file on each server to configure the servers to save their log files on the central
logging server.
Incorrect Answers
A: You shouldn't store important log files on a workstation.
C: This would have to be done every time you wanted the logs copied to your machine.
D: It would be difficult to define 'important information' in a script.
Question: 353
A user tells the administrator that he has found the entry "..." in his home directory, and he did not
create this entry. Which of the following actions should the administrator take and why?
A. Leave the directory as it is because "..." refers to the parent directory.

B. Lock the directory and examine its contents to determine if this is a security risk.
C. Leave the directory as it is because the "..." was created by a normal system process at login.
D. Run fsck on the /home partition because the "..." is an indication of possible file corruption.
Answer: B.
Explanation:
The '...' directory is not created by default. Someone must have created it. Therefore, you should
lock the directory and examine its contents to determine if this is a security risk.
Incorrect Answers
A: '...' does not refer to the parent directory. '..' (2 dots) refers to the parent directory.
C: The '...' directory isn't created by a process at login.
D: A '...' directory doesn't indicate possible file system corruption.
Question: 354
Users on a machine need to run the command run_file that requires superuser permissions in
order to write to other files. Which of the following will allow that to happen?
A. Run " ./run_file -su root".

B. Use the chrootcommand.
C. Edit the users ".login" files.
D. Change run_fileto a SUID command.
Answer: D.
Explanation:
The Set User ID (SUID) option is used in conjunction with executable files, and tells Linux to run
the program with the permissions of whoever owns the files, rather than with the permissions of
whoever runs the file. For example, if the root user owns the file, the file will run with root
permissions when any user runs the file.
Reference:
Incorrect Answers
A: The su command is used to 'switch user' and open a shell with the permissions of that user.
However, the syntax in this answer is incorrect.
B: The chroot command is not used to run a command as root.
C: Editing the login files will not enable a user to run a program as root.
Page 134 of 217

Exam Name: Linux+
Exam Type: CompTIA
Question: 355
A user has accumulated over 500 MB of programs stored in 25 directories. Now he would like to
backup the programs to his home computer by creating a compressed archive and then using ftp
to transfer the data to his computer at home.
Which of the following is the best way to do this?
A. Use gunzip to create a compressed form for each file.

B. Use zcat to create an archive and use gzip to compress the archive.
C. Use tar with the "z" option to create a compressed archive in one step.
D. Use zcat to compress all of the files and then tar to create an archive.
Answer: C.
Explanation:
Tar is the best utility to use to create an archive containing multiple files. The z option invokes the
gzip utility to compress the files as part of the archive creation process.
Reference:
http://www.oreillynet.com/linux/cmd/t/tar.html
Incorrect Answers
A: Gunzip is used to uncompress files, not to compress them.
B: Zcat is not used to create an archive. It is used to list the contents of an archive.
D: Zcat is not used to compressed files. It is used to list the contents of an archive.
Question: 356
How can an original file or kernel be preserved before being updated or patched on a Linux
system?
A. Edit the /etc/profile/changelog file and add the filename or kernel version to be backed up.
B. Use the upu, the Update Protection Utility in X to protect the original file or kernel, which is
saved in /usr/src.
C. From the directory containing the file to be backed up, type "cp <original file or kernel name>
<original file or kernel name>.bak".
D. Files and kernels cannot be saved because the updates will permanently overwrite the
originals by default to eliminate the possibility of version conflicts.
Answer: C.
Explanation:
The best way to preserve the original version of a file or kernel is to make a backup of it. The
easiest way to create a backup of a file is to make a copy of it. The command to copy a file is 'cp'.
Reference:
http://www.oreillynet.com/linux/cmd/c/cp.html
Incorrect Answers
A: Editing the /etc/profile/changelog won't preserve an original copy of a file.
B: I don't know if there is an 'Update Protection Utility'. However, if the utility exists, it is still not
the easiest way to preserve an original copy of a file.
D: Files and kernels can be preserved by making a backup copy of them.
Question: 357
Which of the following commands, when issued, protects a file named classic from being deleted
by root?
Page 135 of 217

Exam Name: Linux+
Exam Type: CompTIA
A. chattr +c classic
B. chattr +i classic
C. chmod 000 classic
D. chmod a-rwx classic
Answer: B.
Question: 358
You are installing the Linux operating system on a computer. You want the Linux installation
program to search for bad blocks. Which steps in the Linux installation process for most Linux
distribution enables the installation program to search for bad blocks?
A. The hard disk formatting step.

B. The hard disk partitioning step.
C. The installation type step.
D. The Linux Loader (LILO) configuration step.
Answer: A.
Question: 359
Which of the following lines of text, when added to the /etc/crontab file, will run the cleanup script
on the first day of every month at 2:05 A.M.?
A. 2 5 *1* cleanup
B. 5 2 1 1 * cleanup
C. 5 2 1 * * cleanup
D. 2 5 * * 1 cleanup
Answer: C.
Question: 360
Which of the following best describes what will occur when the su -c 'kill 392' root command is
issued and a valid password is entered?
A. A user will kill the process named 392, which was started by root.
B. A user is given root-level permissions, and the process with PID number 392 will be
terminated.
C. A user is given root-level permissions, and the processes started in March of 1992 will be
terminated.
D. The root user will kill all of the processes that were started by root.
Answer: B
Question: 361
Which of the following can you use if you want to configure a Linux computer only as a firewall?
A. Apache
B. BIND
C. iptables
D. Squid
Answer: C.
Question: 362
Page 136 of 217

Exam Name: Linux+
Exam Type: CompTIA
Your Linux computer has a serial mouse on COM1. You want to connect an external modem to
the computer.
Connecting the modem to which of the following ports can cause the modem and mouse to
malfunction?
A. COM2
B. COM3
C. COM4
D. USB
Answer: B.
Question: 363
Which of the following statements best describes what will happen when the rpm - qa command
is issued?
A. The name of each installed package will be displayed.

B. All of the packages installed on the computer will be verified.
C. Detailed information about an installed package will be displayed.
D. The name of each file contained within a package will be displayed.
Answer: A.
Question: 364
Which device normally uses a DMA channel?
A. PCI modem
B. Laser Printer
C. ISA sound card
D. Cable video tuner
Answer: C
Question: 365
A technician installs a SCSI card and three SCSI devices on a new system. The system does not
recognize any of the SCSI devices or the controller. What is the most likely cause?
A. There is an Int13h conflict.

B. There is a SCSI ID conflict.
C. There is an I/O address conflict.
D. There are no Linux drivers installed.
Answer: C
Question: 366
Which of the following devices are hot-swappable?
A. PS/2 mouse
B. AGP video card
C. CardBus network card
D. Parallel port printer
Answer: C
Question: 367
Page 137 of 217

Exam Name: Linux+
Exam Type: CompTIA
A user adds a serial trackball to his system. Now, neither the existing mouse nor the trackball
work.
Which of the following will most likely correct the problem?
A. Reboot the system.

B. Perform a BIOS upgrade.
C. Reconfigure the COM ports.
D. Reinstall the modem drivers.
Answer: C
Question: 368
A user replaces an old 4 GB IDE drive with a new 30 GB IDE drive. During the installation
process, Linux recognizes only 8 GB of the available disk space. Which of the following is most
likely the problem?
A. The BIOS does not support larger hard drives.

B. The hard disk controller has no LBA capability.
C. The value of the hard disk size in the CMOS is set incorrectly.
D. The hard disk has to be low-level formatted to access the full capacity.
Answer: A
Question: 369
During a cold boot of a system, which test examines the CPU, memory and video?
A. CMOS
B. POST
C. DIOS
D. Bootstrap
Answer: B
Question: 370
ATAPI technology is a standard for which of the following items?
A. CPUs
B. Power supplies
C. Mass storage devices
D. Modulater/demodulater
Answer: C
Question: 371
Unshielded twisted-pair is used for which of the following networks?
A. 10Base2
B. 10Base5
C. 10BaseF
D. 10BaseT
Answer: D
Question: 372
Based on the exhibit, in what type of I/O bus should the card shown be used?
Page 138 of 217

Exam Name: Linux+
Exam Type: CompTIA
A. PCI
B. ISA
C. EISA
D. MicroChannel
Answer: A
Question: 373
Which of the following is a field replaceable unit?
A. CPU fan
B. PCI bridge
C. Lavel 1 cache
D. Onboard SCSI controller
Answer: A
Question: 374
The current BIOS version on two workstations does not support the processor that will be
installed, but the same motherboard with new BIOS version does. Which of the following is the
best way to resolve the problem?
A. Update the CMOS using a HEX editor.

B. Flash the BIOS with a binary or HEX file.
C. Replace the old motherboard with a new one.
D. Use the debug command to copy the BIOS from a new motherboard.
Answer: B
Question: 375
A new PC is delivered to the site. Upon the initial power up, there is no video display, no beeps
are heard, but the hard drive and fans power up. Which of the following has most likely caused
this problem?
A. The mouse is not connected.

B. The diskette drive has failed.
C. The CPU is not seated properly.
D. The network card is not installed.
Answer: C
Page 139 of 217

Exam Name: Linux+
Exam Type: CompTIA
Question: 376
Which of the following can a parity error indicate?
A. A DIMM is failing
B. The IDE hard drive is corrupt
C. The IRQ settings are incorrect
D. The software is not compatible with the hardware
Answer: A
Question: 377
A user has just purchased a new external modem and wants to install it on his Linux desktop
workstation. What port on the workstation would be used?
A. USB
B. PS/2
C. HD-68
D. RJ-11
Answer: A
Question: 378
Exhibit
Study the exhibit. When a user installs his new Linux desktop computer, what port would he use
to connect a CAT5 cable to establish a connection on the network?
A. A.
B. B
C. C
D. D
Answer: B
Question: 379
Exhibit
Page 140 of 217

Exam Name: Linux+
Exam Type: CompTIA
Study the exhibit. A user wants to install an external CDROM drive onto a system. Which
interface should be used?
A. A
B. B
C. C
D. D
Answer: B
Question: 380
What should be terminated on a SCSI bus with one internal hard drive and one external
CDROM?
A. The hard drive only

B. The SCSI interface card only
C. Both the hard drive and the CDROM drive
D. The SCSI controller, hard drive, and CDROM drive
Answer: C
Question: 381
A user installed a new hard drive into a system with an existing hard drive. He then connected a
ribbon cable to the new hard disk. He powered on the computer, but the system did not boot.
Which of the following most likely caused the problem?
A. The hard disk needs a new MBR.

B. The hard disk drive was not low-level formatted first.
C. The controller was damaged by an electrical discharge.
D. The ribbon cable was inserted backward on the hard disk.
Answer: D
Question: 382
What is the difference between "shutdown -h now" and "init 0"?
Page 141 of 217

Exam Name: Linux+
Exam Type: CompTIA
A. "init 0" does not power down the Linux system

B. "init 0" does not halt the system during power down
C. "init 0" does not send a broadcast message to logged-in users
D. "init 0" does not stop services before powering down the system.
Answer: C
Question: 383
An administrator recursively copies the /home directory to a new hard drive using the command
cp -R /home /usr/home
What further actions are required, if any, to make the files accessible to the users?
A. Give executable permission to the users on the new home directory.

B. Change ownership of the files, and assign directory permissions to users.
C. Change ownership of the files; directory permissions are automatically assigned.
D. No further action is required. All permissions are replicates using the cp command
Answer: B
Question: 384
Which of the following commands is issued to create the group 'sqleditors' on a system?
A. group +sqleditors
B. addgroup sqleditors
C. groupadd sqleditors
D. echo sqleditors:x:601: > /ets/groups
Answer: C
Question: 385
A software developer completed his annual report yesterday. He is now trying to print the report
and submit it to his supervisor; however, he has forgotten the name and path of the report file.
Which of the following commands can be used to obtain a listing of recently modified files?
A. locate -t2
B. find / -mtime 2
C. whereis -time 2
D. grep / -ctime 2
Answer: B
Question: 386
A user logs onto the system as root. He attempts to execute the script file a,sh. He is getting the
message "Execute permission denied". What command must be used before the file can be
executed?
A. chgrp
B. chown
C. chmod
D. execute
Answer: C
Page 142 of 217

Exam Name: Linux+
Exam Type: CompTIA
Question: 387
Which of the following commands creates a tar file called back.tar that contains all files ending
with extension ".c" in the current directory?
A. tar back.tar *.c

B. tar xvf | *.tar *.c
C. tar cvf back.tar *.c
D. tar cvzf | *.tar *.c
Answer: C
Question: 388
Where are log files normally found?
A. /bin
B. /etc
C. /tmp
D. /var
Answer: D
Question: 389
A user wants to load a PDF file from the CDROM. What command would allow the user to access
this file?
A. mount -dos /dev/cdrom

B. mnt /dev/cd0 /mount/cdrom
C. mount -t vfat /mnt/cdrom /dev/cdrom
D. mount -t iso9660 /dev/cdrom /mnt/cdrom
Answer: D
Question: 390
Which of the following commands can be used to place print jobs in the print queue?
A. pr
B. lpq
C. lpr
D. lprm
Answer: C
Question: 391
Which of the following strings indicate that the input of the program called printData should be
redirected from the file calles "myData"?
A. printData . myData
B. printData > myData
C. printData < myData
D. printData | myData
Answer: C
Question: 392
Page 143 of 217

Exam Name: Linux+
Exam Type: CompTIA
What is the most secure way to connect to a remote machine?
A. ssh
B. ftp
C. http
D. telnet
Answer: A
Question: 393
Which of the following commands will create 'bsmith' as a user in the group 'web_users'?
A. useradd bsmith web_users

B. useradd -g web_users bsmith
C. useradd web_users bsmith
D. groupadd -group web_users bsmith
Answer: B
Question: 394
A Linux system administrator has forgotten the root password. Which of the following would be
the best way for the system administrator to gain access to the machine?
A. Reinstall Linux.
B. Enter runlevel 0 and run passwd.
C. Reboot and use the mdrecovery utility.
D. Reboot, enter Linux single-user mode and run passwd.
Answer: D
Question: 395
Which of the following commands kan be used to save and resume editing the file in the vi editor?
A. :w
B. :x
C. :v
D. :s!
Answer: A
Question: 396
How can the X Window manager be restarted?
A. Press <Ctrl><Alt><Delete>
B. Press <Ctrl><Alt><Backspace>
C. Press <Ctrl><Alt><F5>, login, and type "startx"
D. Change consoles and type the command "kill -9 X"
Answer: B
Question: 397
What information about the user does the "x" provide in the following line in the /etc/passwd file?
chris:x:501:501:chris smith:/home/chris:/bin/bash
A. The user is disabled.
Page 144 of 217

Exam Name: Linux+
Exam Type: CompTIA
B. The user has no password.

C. The user has a blank password.
D. The user has a shadow password.
Answer: D
Question: 398
Which of the following commands should be used to move the file named John1 from the
directory /home/j/john/temp to /home/j/john/save?
A. mv /home/j/john/temp/john1 /home/j/john/save
B. mv /home/j/john/save /home/j/john/temp/John1
C. mv /home/j/john/temp/John1 /home/j/john/save
D. mv /home/j/john/save/john1 /home/j/john/temp
Answer: C
Question: 399
After completing an installation of Linux, the technician is asked to document the current
configuration and place this in a public location. The technician documented the following items:
1. Administrator contact information

2. System network settings
3. Application configuration
4. Installed components
Which of the following did the technician fail to include?
A. The root password

B. Disk partitioning scheme
C. Location of common system files
D. Cost of replacement system components
Answer: B
Question: 400
A system technician needs to determine with hardware modules are loaded on a particular Linux
server.
Which of the following commands will perform this task?
A. lsmod
B. modules
C. insmod -list
D. modprobe -list
Answer: A
Question: 401
Which of the following is the best way to change video resolution from 800x600 to 1024x768?
A. Run xf86config to change the resolution.

B. Reinstall Linux with more options for X Server.
C. Reinstall X Server with support for the 1024x768 resolution.
D. Restart X Server after typing "resolution=1024x768" as root.
Page 145 of 217

Exam Name: Linux+
Exam Type: CompTIA
Answer: A
Question: 402
A user tries to dial into his ISP. The modem dials and connects, but loses the connection after a
few seconds. The log files indicate tat an "Authentication failed" error occurred, but the password
in the configuration file on the client system is correct. Which of the following is most likely to be
the problem?
A. The phone line is bad.

B. The user dialed the wrong phone number.
C. The ppp_auth kernel module is not loaded.
D. The wrong authentication protocol was used by PPP.
Answer: D
Question: 403
What port is commonly used by the POP3 protocol?
A. 25
B. 53
C. 69
D. 110
Answer: D
Question: 404
Below is a list of possible steps to take in order to change manually from the old IP address to
new IP address of a computer.
I. Use ifconfig to disable the network interface

II. Use ifconfig to enable the network interface using the new IP address
III. Update the arp table with the new address
IV. Update the routing table with the new paths
V. Use insmod to insert a new driver
Which of the steps are required?
A. I, II, and IV only

B. I, II and V only
C. I, III, and IV only
D. I, II, IV and V only
Answer: A
Question: 405
A user typed the following command on a machine:
ifconfig eth0:1 192.168.155.5 up
What would be the effect of typing this on a machine that already has an address of
192.168.155.1 assigned to eth0?
A. It will replace the current IP address with 192.168.155.5.

B. It will assign 192.168.155.5 to eth0 as a second IP address
C. It will replace the old broadcast address with 192.168.155.5.
Page 146 of 217

Exam Name: Linux+
Exam Type: CompTIA
D. It will assign the address of 192.168.155.5 to the second physical Ethernet card.
Answer: B
Question: 406
Which of the following files includes device names, mount points, filesystem types, permissions
and information about whether to mount the device at boot time?
A. /dev/info
B. /etc/fstab
C. /boot/info
D. /etc/inittab
Answer: B
Question: 407
Which of the following commands will set the current system time to 3:00 PM, February 3, 2002?
A. date 020315002002
B. dateset 020320021500
C. time 0300:02:03:2002
D. timeset 1500.02.03.2002
Answer: A
Question: 408
Which of the following is a configuration file that contains the system virtual console
specifications?
A. XF86Config
B. /etc/profile
C. /etc/inittab
D. /etc/vconsole
Answer: C
Question: 409
Which file can be edited to disable FTP, POP, and RSH services?
A. /etc/ports
B. /ets/inittab
C. /etc/inetd.conf
D. /etc/remote.conf
Answer: C
Question: 410
If a video card is not recognized by the X configuration utility during the installation process,
which of the following actions should be taken to enable X to display after installation is
complete?
A. Edit the /etc/inittab to boot the X Window System

B. Identify the chipset on the video card and obtain the driver from the manufacturer.
C. Inspect the CMOS for information on the video card and install the drivers that came with the
video card.
Page 147 of 217

Exam Name: Linux+
Exam Type: CompTIA
D. Edit /etc/lilo.conf to include a boot message to the kernel pointing to the location of the video
drivers.
Answer: B
Question: 411
What is the main difference, if any, between GRUB and LILO?
A. LILO does not support hard drives larger than 30 GB.

B. GRUB does not support passing of kernel boot options.
C. GRUB does not have to be rewritten to the hard drive after changing the configuration file.
D. There is none.
Answer: C
Question: 412
Which of the following commands is used to cancel print jobs?
A. lpq
B. lpc
C. lpr
D. lprm
Answer: D
Question: 413
Users contact the administrator and complains that they are unable to browse the Web. nslookup
on a popular known site produces the following error: "Host/domain not found", while a ping to a
known WAN IP address is successful. Which service needs to be restarted and why?
A. Samba. The file server is not responding.

B. BIND. Name resolution is not taking place.
C. Squid. The proxy server is not responding.
D. HTTPD. The WAN Web Servers are not responding
Answer: B
Question: 414
Which of the following commands can be run to gather specific information regarding the
hardware in the system?
A. dmesg
B. tail sysinfo
C. cat /var/log/spool
D. cat /var/log/syslog
Answer: A
Question: 415
A Linux system is used for various Internet services and remote user access. When a problem
arises with one of the machine's services, which of the following actions is the LEAST likely to
disrupt other services on that machine?
A. Kill a daemon
B. Reboot the machine
Page 148 of 217

Exam Name: Linux+
Exam Type: CompTIA
C. Change to runlevel 1
D. Disable a network device
Answer: A
Question: 416
A user calls into the support line and reports that he is unable to unlock his desktop. After several
attempts, he is sure that he has entered his password correctly. What is the first thing to do to
troubleshoot this situation?
A. Change his password.

B. Check to see if <Caps Lock> is on.
C. Check if he has a valid password.
D. Check to see if his account is active.
Answer: B
Question: 417
A system will not allow root to ssh into the system. All others can connect via ssh. Which of the
following configuration files should be edited to permit connection as the root user?
A. ssh_config
B. pam_deny.so
C. sshd_config
D. /root/.ssh/allowed_connections
Answer: C
Question: 418
tar automatically compresses and decompresses using which of the following options?
A. c
B. z
C. /z
D. -c
Answer: B
Question: 419
The Linux system is not assigning IP addresses to client systems. After a reboot and executing
the command "dhcpd start", the problem is not corrected. After changing to the correct directory,
which of the following commands should be used to permit IP addresses to be assigned?
A. ./dhspd start
B. ./dhcpd restart
C. touch dhcpd.leases
D. chkconfig --level 3 dhcpd on
Answer: C
Question: 420
The Linux system has experienced a power failure. After the system is booted up, it hangs with
file system corruption messages. What is the best way to resolve this?
A. Boot into single-user mode and run fsck.
Page 149 of 217

Exam Name: Linux+
Exam Type: CompTIA
B. Boot into multi-user mode and run chkdsk.

C. Boot into single-user mode and run mdrecoveryd.
D. Boot into multi-user mode and run "/sbin/shutdown -t3 -r now".
Answer: A
Question: 421
Which of the following is a common switch used to display command syntax for most programs?
A. /?
B. -h
C. --man
D. -help
Answer: B
Question: 422
While attempting to start an application in an X Window System environment, the following error
occurs:
Error: Can't open display
What most likely led to this error?
A. The application is not an X application.

B. It is the wrong version of the application.
C. The application was compiled with the wrong graphics library.
D. The administrator has used "su -" to log into the current account.
Answer: D
Question: 423
Which of the following would correct a corrupt master boot record and allow a clean boot into
Linux?
A. Boot Linux and type "fdisk /MBR"

B. Boot any OS and type "fdisk /MBR"
C. Boot DOS with a boot diskette and type "lilo"
D. Boot Linux with a boot diskette and type "lilo"
Answer: D
Question: 424
Which of the following commands is most useful to determine whether an Ethernet card problem
is caused by hardware or the Linux kernel?
A. init and ps
B. route and ping
C. dmesg and ifconfig
D. kupdate and mprobe
Answer: C
Question: 425
Page 150 of 217

Exam Name: Linux+
Exam Type: CompTIA
A system is configured to dual-boot Linux with another operating system that is located on
/dev/hda1.
LILO is the choosen boot manager. The system reboots without access to the other operating
system.
What lines should be added to lilo.conf to allow access to the other operating system?
A. table = LILO
label = <shortened name of operating system>
other = /dev/hda
B. O/S = <shortened name of operating system>
location = /dev/hda1
bootmgr = LILO
C. label = /dev/hda1
table = /dev/had
other = <shortened name of operating system>
D. other = /dev/hda1
label = <shortened name of operating system>
table = /dev/hda
Answer: D
Question: 426
"netstat -i" is typed at the command line. All of the following information will be displayed
EXCEPT
A. Transmission errors for each network interface

B. The number of packets dropped for each network interface
C. The number of packets received for each network interface
D. A list of masqueraded connections for each network interface
Answer: D
Question: 427
Which of the following commands would be used to watch the mail log for errors?
A. locate
B. tail -f
C. monitor -f
D. cat mail.log
Answer: B
Question: 428
Linux is being installed on a system that uses SCSI hardware. During partitioning, an error is
produced that says there are no valid devices found on which to install partitions. The hard drive
spins up. The SCSI controller is functioning properly and supported by Linux. The cable is a
known good cable and there is proper termination. What is the problem?
A. The SCSI hard drive is not jumpered to the proper SCSI ID.
B. The SCSI controller needs to be reset to factory defaults.
C. The SCSI controller on the hard drive needs a firmware update.
D. The SCSI controller on the hard drive has an intermittent problem.
Answer: A
Page 151 of 217

Exam Name: Linux+
Exam Type: CompTIA
Question: 429
What command is used to access the information about memory availability and usage in Linux?
A. cat /dev/meminfo
B. cat /var/log/mem
C. cat /proc/meminfo
D. cat /etc/memory/usage
Answer: C
Question: 430
A customer has installed a new hard drive on a Linux system. What would be the order of tasks to
allow her to put her MP3 collection on the new drive?
A. fsck,mount,mkfs
B. mount,mkfs,chkfs
C. cfdir,mkfs,mount
D. mkfs,mount,fschk,cp
Answer: C
Question: 431
A system administrator complains that a user's system has been forwarding unsolicited email
(spam) to mass email lists. Which of the following actions needs to be done to sendmail to stop
the spam?
A. Change the firewall rules.

B. Restart the sendmail daemon.
C. Restrict relay domains in the sendmail configuration.
D. Change the SMTP mail server in the sendmail configuration.
Answer: C
Question: 432
What is the purpose of cron?
A. Manage incoming and outgoing mail

B. Runs specified commands at defined times
C. Sets the system clock to a specified time
D. Changes the permission settings on a file or directory
Answer: B
Question: 433
Which command will extract the file "backup-4-19-2001.tgz"?
A. unzip backup-4-19-2001.tgz
B. tar xf backup-4-19-2001.tgz
C. tar xzf backup-4-19-2001.tgz
D. uncompress backup-4-19-2001.tgz
Answer: C
Question: 434
Page 152 of 217

Exam Name: Linux+
Exam Type: CompTIA
A user calls the help desk, complaining that upon issuing a command to list files in her home
directory, a "permission denied" error is received. Which of the following actions should be taken
to resolv the problem?
A. Delete the user's home directory and re-create it.

B. Ask the user for some patience while the server is rebooted.
C. Run "chmod 007" on the user's home directory and have the user try again.
D. Check the UID:GID of the user's home directory and change it if necessary.
Answer: D
Question: 435
Which of the following types of backup minimizes system downtime during restore?
A. FDD backup
B. Full backup
C. Incremental backup
D. Differential Backup
Answer: B
Question: 436
A system administrator routinely needs to see the list of who has logged in and out on a machine,
as well as their login times. Which of the following commands searches the "/var/log/wtmp" file
and displays who has logged onto the machine and when they logged on?
A. who
B. last
C. log -l
D. wtmplst
Answer: B
Question: 437
A user who wants the status listing of all network interfaces will use which of the following
commands to obtain this information?
A. ifconfig -a
B. ifconfig up
C. ifconfig eth*
D. ifconfig --all
Answer: A
Question: 438
A Linux superuser is unable to delete a file. The user is also unable to change permission for the
file.
A. The file is actually a hard link.

B. The file has the immutable flag set.
C. The file has been fragmented across directories.
D. The superuser does not have permission to access the file.
Answer: B
Page 153 of 217

Exam Name: Linux+
Exam Type: CompTIA
Question: 439
Which of the following packages helps to identify a bad password?
A. CERT
B. Hack
C. Crack
D. Tiger
Answer: C
Question: 440
Which of the following commands will list all rpm packages installed on the system?
A. rpm -d
B. rpm -i
C. rpm -qa
D. rpm -Uvh
Answer: C
Question: 441
The system technicians and administrators at a facility are poor at keeping maintenance records
up-to-date. The administrator decides to keep only the minimum information in the records and
require that it be updated. Which of the following information is the most important to maintain?
A. Dates and times that the server was rebooted

B. Version numbers of patches applied to services
C. Information about new users added to the system
D. Records of which administrators have logged in to the system
Answer: B
Question: 442
The system administrator needs to examine the processes that the user with the login of 'john'
currently owns. Which of the following commands would best do this?
A. ps john
B. ps -r john
C. ps -U john
D. ps -all | grep john
Answer: C
Question: 443
What Linux service is responsible for successfully sharing files over a NetBios network?
A. NFS
B. Samba
C. XFree86
D. Xwindows
Answer: B
Question: 444
Page 154 of 217

Exam Name: Linux+
Exam Type: CompTIA
Why would Kernel 2.3.19-2 be an INAPPROPRIATE kernel for a production web server?
A. It is a test version of the kernel.

B. It is not the most recent kernel available.
C. It needs to be upgraded to Kernetl 2.3.20 for network support.
D. This version of the Linux kernel has a known problem with Apache.
Answer: A
Question: 445
A customer wants to upgrade an old UNIX server to a current version of a Linux OS. The SCSI
controller manufacturer is out of business. What should be done to verify that the SCSI controller
will work with Linux?
A. Verify that SCSI emulation is activated in the kernel.

B. Use the man pages to verify there is a SCSI module available for the controller.
C. Use the kernel editor to vierify there is a SCSI module installed for the controller.
D. Use the Linux distribution Hardware Compability List to verify that the controller is supported.
Answer: B
Question: 446
A customer is concerned about attacks to his network from the Internet. The customer wants a
system that will prevent unauthorized intrusion from outside his network. What type of server
does the customer require?
A. Firewall
B. Web Server
C. Database Server
D. System Management Server
Answer: A
Question: 447
During installation of a Linux system, the customer decided to use the ReiserFS file system rather
than ext2. What is the most likely reason for this choice?
A. ext2 allows only 8 character file names.

B. ReiserFS allows partitions to be journaled.
C. ReiserFS has built-in USB file system support.
D. There are no differences between ext2 and ReiserFS.
Answer: B
Question: 448
A Linux workstation is being integrated into a network that uses older Novell Netware servers
(version 2.2 and 3.12). The workstations use only the Netware client software to communicate
with the server and to share data. Which of the following protocols should be installed on the
Linux workstation?
A. TCP/IP
B. NetBIOS
C. IPX/SPX
D. Apple Talk
Page 155 of 217

Exam Name: Linux+
Exam Type: CompTIA
Answer: C
Question: 449
A customer has recompiled his kernel to a new image including new modules. GRUB is not being
used as the boot loader. After editing the necessary configuration files, what command should be
issued?
A. /etc/lilo
B. /sbin/lilo
C. /sbin/loadlin
D. ./start kernel
Answer: B
Question: 450
What command is commonly issued to compile and install an application from its source code?
A. run
B. rpm
C. make
D. install
Answer: C
Question: 451
The system administrator has just completed the installation and configuration of a DNS server to
be used for external name resolution. The DNS service need to be validated before bringing the
server into production.
What would be the best method to validate the proper operation of the service?
A. Ping an external IP address.

B. Get a Web page from within the local area network.
C. Run the dig command for an external domain name.
D. Run traceroute to the DNS server and analyze the hops.
Answer: C
Question: 452
A package that a user installed has never run successfully and returns a large number of errors.
What is the first action that should be taken?
A. Run "verify <package_name>"

B. Run "rpm --verify <package_name>"
C. Validate that the /boot directory exists
D. Validate that kernel.lib is the correct version
Answer: C
Question: 453
An error message appears that states that no modular support is available. What caused this
error message?
A. A module is corrupted and must e reinstalled

B. The installation is corrupt and must be reinstalled
C. A device being installed is not functioning and must be replaced.
Page 156 of 217

Exam Name: Linux+
Exam Type: CompTIA
D. The kernel does not support loadable modules and must be recompiled.
Answer: Pending. Send your suggestions at [email protected]
Question: 454
The user installs the second SCSI hard drive into the computer and needs to partition it. Which of
the following commands must be run to partition the disk?
A. fdisk /dev/hdb
B. fdisk /dev/hd2
C. fdisk /dev/sdb
D. fdisk /dev/sd2
Answer: Pending. Send your suggestions at [email protected]
Question: 455
During installation of a new server, the technician enabled Shadow Passwords and MD5
Passwords.
What changes have been made on the server?
A. NFS has now been disabled.

B. Access to /etc/passwd is now limited to root.
C. The maximum password length is now 64 characters.
D. User passwords are now kept in the /etc/shadow file.
Answer: D
Question: 456
Which of the following passwords would be the most secure?
A. xpF57se
B. range76
C. 76range
D. LasVegas
Answer: A
Question: 457
Which of the following packages is usually more important for a "workstation" installation than a
"server" installation?
A. DNS Server
B. DHCP Server
C. Proxy Server
D. XFree86 Server
Answer: D
Question: 458
Which of the following commands will mount a USB flash drive successfully in Linux?
A - mount/dev/sda1 /mnt/usb
B - mount -t usbfs /dev/usb001 /mnt/usb
C - mount/dev/uda1 /mnt/usb
D - mount/dev/hde1 /mntlusb
Page 157 of 217

Exam Name: Linux+
Exam Type: CompTIA
Answer: A
Question: 459
A technician added a PCI network card to a stable Linux server. The server is now generating I/O
errors when the kernel module for the network card is loaded. Which of the following actions will
solve the problem?
A - Disable the power management in the BIOS.

B - Move the network card to another available slot.
C - Reconfigure the network card to use a different IP address.
D - Change the server BIOS setting to disable the network card BIOS.
Answer: B
Question: 460
Which of the following is supported when creating a Linux VPN (Virtual Private Network)?
A - RC2
B - 3DES
C - chap
D - NTLMv2
Answer: B
Question: 461
If /etc/syslog.conf has the following entry:
mail.* -iVar/log/mail.log
Which of the following log events will this line cause to be logged to mail.log?
A - The events generated by a user called ail?

B - The events logged by a program called ail?
C - The events logged to the mail facility at any priority.
D - The events logged from any host that begins with the name mail.
Answer: C
Question: 462
Which of the following commands can be used to check for file corruption?
A - md5sum
B - cat-vet
C - checkfile
D - tar --checksum
Answer: A
Question: 463
A user wants to know how to set up SSH (Secure Shell) to communicate between systems
without requiring passwords. Which of the following is the BEST way to accomplish this?
A - Use ssh-keygen to generate public-private keys.

B - Disable passwords on specific accounts that will use SSH.
Page 158 of 217

Exam Name: Linux+
Exam Type: CompTIA
C - Add systems that do not need passwords to the /etc/ssh.hosts file.

D - Use RSH (Remote Shell) rather than SSH because it does not require passwords.
Answer: A
Question: 464
Which of the following configurations does cardmgr read at startup on a Linux system?
A - PCI cards
B - USB cards
C - SCSI cards
D - PCMCIA cards
Answer: D
Question: 465
Alter an upgrade of Apache, Web pages are no longer available and are replaced with a default
page. Which of the following files should be edited or replaced to correct the problem?
A - srm.conf
B - httpd.conf
C - xinetd.conf
D - /etc/services
Answer: B
Question: 466
Which of the following is a common tool used to determine what services and ports are running
on a remote Linux box?
A - arp
B - nmap
C - netstat
D - ifconfig
Answer: B
Question: 467
Which of the following services needs to be installed on a server to support new diskless client
workstations?
A - named and httpd

B - dhcpcd and rexec
C - remoted and dhcpd
D - PXE (Preboot execution Environment) and tftpd
Answer: D
Question: 468
x iptables table?
A - iptables-L
B - iptables-A
C - iptables-F
D - iptables --delete
Page 159 of 217

Exam Name: Linux+
Exam Type: CompTIA
Answer: C
Question: 469
A user complained that a laptop system seems slow. Which of the following commands can be
used to see what processor was detected on boot?
A - proc
B - POST
C - dmesg
D - cpuinfo
Answer: C
Question: 470
The LILO boot configuration needs to be updated to support a new IDE hard drive that was
installed. How should this be accomplished?
A - Run “lilo -o /dev/hda”

B - Edit lilo.conf and run “lilo -v-v”
C - Edit IiIo.conf and run “liloconf -v –v”
D - Set LILO=/dev/hda and then run “lilocont /dev/hda”
Answer: B
Question: 471
A Linux system is configured with a RAID 5 array consisting of six 20GB hard drives. How much
usable storage space is available?
A - 50
B - 80
C - 100
D - 120
Answer: C
Question: 472
Which of the following allows for secure remote command line access?
A - SSH (Secure Shell)

B - SSL
C - Telnet
D - Rlogin
Answer: A
Question: 473
A technician created a new directory for use by a user “User12”. User12 is unable to create new
files or subdirectories within this new directory. Using the is command, the technician observes
the following:
drwxr-xr-x 2 root root 4096 May 24 1 3:11 dirname
Which of the following is the BEST way to enable User12 to use the directory without letting other
users manipulate its content?
Page 160 of 217

Exam Name: Linux+
Exam Type: CompTIA
A - chmod 700 dirname

B - chown dirname User12
C - chgrp User12 dirname
D - chown User12:User12 dirname
Answer: D
Question: 474
Which of the following files contains the key or keys required to login using SSH (Secure Shell)
without a password?
A - .ssh/known_keys
B - .ssh/trusted_keys
C - .ssh/allowed_keys
D - .ssh/authorized_keys
Answer: D
Question: 475
Which of the following itconfig commands can be used to assign the P address 192.168.1.15/24
to the second NIC (Network Interface Card) in a workstation?
A - ifconfig eth1 192.168.1.15 subnet 255.255.255.0

B - ifconfig eth2 192.168.1.15 subnet 255.255.255.0
C - ifconfig eth1 192.168.1.15 netmask 255.255.255.0
D - ifconfig eth2 192.168.1.15 netmask 255.255.255.0
Answer: C
Question: 476
Which of the following protocols is used while configuring a Linux workstation to use a connection
via a DSL modem?
A - ATM
B - SLIP
C - PPTP
D - PPPoE
Answer: D
Question: 477
A - ATM
B - DNS
C - SSH (Secure Shell)
D - SMTP
Answer: C
Question: 478
A Linux technician accessed the Web server on http://1 27.0.0.1 with a default install of Apache,
and received a orbidden message. Where can the technician find detailed messages about this
problem?
Page 161 of 217

Exam Name: Linux+
Exam Type: CompTIA
A - error_log
B - httpd_log
C - access_log
D - apache_log
Answer: A
Question: 479
After the Linux technician has completed the server configuration documentation, where should
this documentation be stored, according to best practice?
A - In a binder, securely stored in an area located near the server

B - In a predetermined secure location on-site, but not in the server room
C - In an approved tire-proof container, located in a secure off-site facility
D - In an office, to be tiled and labeled appropriately with the rest of the system
documentation
Answer: A
Question: 480
Which of the following environment variables specifies the location where user files are stored by
default?
A - PATH
B - HOME
C - FILES
D - SHELL
Answer: B
Question: 481
A company’s mail server is unable to send mail to the domain comptia.org. Which of the following
commands might help determine if their DNS records are correct?
A - dig comptia.org
B - mailtest comptia.org
C - dig -t mx comptia.org
D - dig -t ms comptia org
Answer: C
Question: 482
Which of the following commands is used to search the whole directory structure to locate a
specific file, but still can execute other commands while the ‘find’ command is searching for the
file?
A - find / filename &

B - find / -name filename
C - find / -name filename &
D - find filename> background
Answer: C
Question: 483
Page 162 of 217

Exam Name: Linux+
Exam Type: CompTIA
A file with permission set to octet 540 allows which of the following?
A. Read and write permissions to root, and read-only permission to the group. No
permission to others.
B. Read and execute permissions to root, and read-only permission to the group. No
C. Read and write permissions to the owner, and read-only permission to the group. No
D. Read and execute permissions to the owner, and read-only permission to the group.
No permission to others.
Answer: D
Question: 484
A network administrator has enabled lP forwarding on a Linux server with the following command:
echo “1” > /proc/sys/net/ipv4/ip_forward
After the server is restarted several weeks later, IP forwarding is not working.
Which of the following commands should the network administrator have issued?
A - Run save proc

B - Restart the network daemon
C - Edit the /etc/sysctl.conf file
D - Run echo “1” > /proc/sys/net/ipv4/ip_forward –save
Answer: C
Question: 485
A Linux print server must limit access to its printers. Only the database server must be allowed to
print. Which method is considered best practice?
A - Edit /etc/hosts.lpd to only include the database server

B - Edit /etc/printcap and add a filter to only include the database server
C - Limit file permissions on the printer filter to users on the database server
D - Limit file permissions on the spool directory to users on the database server
Answer: A
Question: 486
Which of the following processors would be fully supported by glibc-2.5.3-100.i86.rpm?
A - HP Alpha processor
B - IBM PowerPC processor
C - Intel Pentium lll processor
D - Silicon Graphics MIPS processor
Answer: C
Question: 487
In which subdirectory of the Apache root should scripts be placed?
A - bin
B - htbin
Page 163 of 217

Exam Name: Linux+
Exam Type: CompTIA
C - htdocs
D - cgi-bin
Answer: D
Question: 488
Which of the following commands can be used to view the first 10 lines of the bootlog file?
A - top /var/log/boot.log
B - head /var/log/boot.log
C - tail /var/log/boot.log
D - first /var/log/boot.log
Answer: B
Question: 489
Which of the following types of partitions can be used to provide a reliable shared partition on a
dual-boot system with Linux and Windows 96?
A - Ext2
B - FAT
C - HFS (Hierarchical File System)
D - NTFS
Answer: B
Question: 490
Which of the following commands should be used to monitor system logs in real time?
A - tail -s /var/log/messages
B - tail -v /var/log/messages
C - tail -r /var/log/messages
D - tail -f /var/log/messages
Answer: D
Question: 491
Which of the following files should be edited to provide static name to lP address mapping?
A - /etc/hosts
B - /etc/host.conf
C - /etc/resolv.cont
D - /etc/hosts.allow
Answer: D
Question: 492
A user has a cron job that clears print queues at midnight each day. The cron job has run
correctly for several months; however the job apparently did not run the night before.
Which of the following should be done FIRST to resolve the problem?
A - Check the process list for an instance of crond running.

B - Checkthe user’s cron job for syntax errors and correct as needed.
C - Check to make sure the printer is connected to the server and powered on.
D - Check to make sure the user was properly logged into the network the night before.
Page 164 of 217

Exam Name: Linux+
Exam Type: CompTIA
Answer: A
Question: 493
Which of the following commands sets the permissions of a file to the following?
-rwsr-sr-x
A - chmod 6755 filename

B - chmod 1755 filename
C - chown 2755 filename
D - change 4755 filename
Answer: A
Question: 494
Which of the following is a reversible encryption standard?
A - AES
B - MD5
C - SHA
D - MD4
Answer: A
Question: 495
After replacing the network card in a Linux machine, a user wants to find out if the card was
detected properly at boot. Which of the following commands will provide this information?
A - ls-l/dev/eth*
B - dmesg | grepeth
C - hwstat | grepeth
D - cat /proc/net | grep eth
Answer: B
Question: 496
Which of the following commands displays the name of the current shell?
A - shell
B - cat/proc/shell
C - echo $SHELL
D - uname-s
Answer: C
Question: 497
Root logins should NOT be allowed over the network for which of the following reasons?
A - It restricts sudoers who can su to root.

B - It prevents the system from being rebooted remotely.
C - It stops bruteforcing attempts on the root account over the network.
D - It creates accountability by writing all “su” attempts to a su log.
Answer: C
Page 165 of 217

Exam Name: Linux+
Exam Type: CompTIA
Question: 498
A set of computers is used for technical support. The manager has asked that users have
restricted time periods in which they can login. Which of the following must be edited to
accomplish this?
A - /etc/pam.conf
B - /etc/logon.conf
C - ~/.bashrc
D - /etc/group
Answer: A
Question: 499
An administrator needs to add support for PERL to Apache for the company’s Website. The
administrator wants to do this by adding pen_module to the Apache configuration.
How can this be done?
A - Run http -Im perl _module from the command line.

B - Run httpd --module perl_module from the command line.
C - Remove the #from #AddModule perl_module libexec/httpd/libssl.so in httpd.conf file.
D - Remove the # from #LoadModule perl_module libexec/httpd/libssl.so in httpd.conf file.
Answer: D
Question: 500
Which of the following is a valid entry for /etc/fstab?
A- /dev/hd1 /mnt/hda1l ntfs defaults, noatime, notail 0 0

B - /dev/hdb1 /mntlhdb1 ext3 defaults, noatime, notail 0 0
C - /dev/hda1 /proc/hda1 ntfs defaults,noatime, notail 0 0
D - /dev/hdb1 /mnt/hdb1 reiser defaults,noatime,notail 0 0
Answer: B
Question: 501
Which of the following Linux systems would MOST likely be without a monitor and keyboard?
A - Web browser kiosk

B - Thin client workstation
C - Database server appliance
D - Portable network traffic analyzer
Answer: C
Question: 502
A system administrator wants to disable shell access ror a user. Which of the following is the
appropriate shell to set?
A - /bin/sh
B - /bin/false
C - /bin/passwd
D - /bin/disable
Page 166 of 217

Exam Name: Linux+
Exam Type: CompTIA
Answer: B
Question: 503
The system administrator notices the following file in a user’s home directory:
-rwsr-xr-x 1 root userl 628684 Jun 1309:38 ksh
Which of the following does this file indicate?
A - The system has been compromised.

B - Only root has shared access for ksh.
C - The ksh service needs to be restarted.
D - ksh was inadvertently installed in user’s directory.
Answer: A
Question: 504
An administrator wants to install Linux onto a computer that does not have a CD-ROM drive.
Which of the following is the BEST way to complete the installation?
A - Install via TFTP (Trivial File Transfer Protocol) from the network.
B - Install via FTP from an FTP server
C - Install via NFS (Network File Server) from a Web server.
D - Copy the CD-ROM files to the machine using the 3.5” diskette drive.
Answer: B
Question: 505
Examine the following /etc/passwd file:
root:X:1423:0:99999:7:::
dgringold:X:11423:0:99999:7:::
jjones: !!:11432:0:99999:7:: 11688:
tgold:!!:11342:11231:11678:7:::
Which of the following is the password field?
A - The firstfield
B - The second field
C - The third field
D - The fourth field
Answer: B
Question: 506
The UMASK value is set to 22. Which of the following will the default permissions be on
lilename.txt when the file is created?
A - r-xr-wr-w
B - ----w--W
C - rwxr-xr-x
D - rw-r--r-
Answer: D
Page 167 of 217

Exam Name: Linux+
Exam Type: CompTIA
Question: 507
The output of an “ls - la” is the following:
-rw-r-xrwx 5 root root 4096 Apr 20 10:03 file.txt
How many hard links have been created to this file?
A-0
B-4
C-5
D-6
Answer: B
Question: 508
Which of the following is an IDS (Intrusion Detection System)?

B - Snort
C - openssl
D - ethereal
Answer: B
Question: 509
How can a user change their default BASH shell prompt?
A - Change the $PS1 variable in ~ /.cshrc

B - Change the $PS1 variable in ~/.profile
C - Change the $PPOMPT variable in ~/.cshrc
D - Change the $PROMPT variable in ~/.profile
Answer: B
Question: 510
Which of the following commands can be used to start and stop printers and classes?
A - Ipr
B - Iprm
C - startand and stop
D - enable and disable
Answer: D
Question: 511
A server requires more swap space. A new swap partition is created at /dev/sdb2 using fdisk.
After editing the configuration, which of the following commands is used to activate the new
partition?
A - swapon-a
B - mkfs-swap
C - sfdisk/dev/sdb2
D - mount-t vfs /dev/sdb2
Answer: A
Page 168 of 217

Exam Name: Linux+
Exam Type: CompTIA
Question: 512
Which of the following is a secure authentication method?
A - MD5
B - RC5
C - Blowfish
D - Kerberos
Answer: D
Question: 513
How would a user send/etc/aliases as the text of an email to another user on the same system?
A - wall -s ‘Our Aliases’ > /etc/aliases

B - mail someone@localhost -s ‘Our Aliases’ </etc/aliases
C - postfix someone@localhost -s ‘Our Aliases’ </etc/aliases
D - sendmail someone@localhost -s ‘Our Aliases’ > /etc/aliases
Answer: B
Question: 514
Which of the following files contains a list of file systems that can be currently mounted on the
system if all supported modules have been loaded?
A - /etc/filesystems
B - /var/filesystems
C - /dev/filesystems
D - /proc/filesystems
Answer: D
Question: 515
Why should “/tmp” be located on a separate partition from the “/” file system?
A - /tmp requires a lot of space.

B - /tmp is used to simulate RAM.
C - /tmp file system is cleared alter every reboot.
D - /tmp could become full and fill up the root file system.
Answer: D
Question: 516
Which runlevel would be used to repair a system and grant access to the root user only?
A-0
B-1
C-2
D-6
Answer: B
Question: 517
An administrator types the command s xl and the following is a portion of the output obtained:
Page 169 of 217

Exam Name: Linux+
Exam Type: CompTIA
Which process number should be killed to stop the map?and term?processes?
A - 15
B - 820
C - 1707
D - 1921
Answer: C
Question: 518
An update CD-ROM for a distribution contains the latest RPMs for all packages that they provide.
Which of the following is the BEST command to use to update all of the existing RPMS on a
server without making any other changes?
A - rpm -F /mnt/cdrom/RPMS/*.rpm
B - rpm -i /mnt/cdrom/RPMS/*.rpm
C - rpm -update /mnt/cdrom/RPMS/*.rpm
D - rpm --update /mnt/cdrom/RPMS/*.rpm
Answer: A
Question: 519
Which of the following Linux files is used to assign users to groups?
A - /usr/group
B - /etc/group
C - /etc/users
D - /etc/passwd
Answer: B
Question: 520
A Linux administrator just installed Xfree86. Which of the following files should the administrator
edit in order to change the default system runlevel from 3 to 5 ?
A - /etc/inittab
B - /etc/runlevels
C - /etc/rc.sysinit
D - /etc/defaultrunlevel
Answer: A
Page 170 of 217

Exam Name: Linux+
Exam Type: CompTIA
Question: 521
A user has added a PCMCIA wireless network card to a Linux laptop. The network services tail
on boot. After boot, if they are restarted by hand, network services load properly. Which of the
following could solve the problem?
A - Check that the PCMCIA ports are enabled in the BIOS.

B - Reinstall the wireless network card drivers on the system.
C - Check the order of execution of services in the boot scripts.
D - Reconfigure the wireless access point to access Linux connections.
Answer: C
Question: 522
Which of the following commands can be used to back up all the files in the current directory and
compress them?
A - tar zcvf backup.tgz *

B - gtarzcvf backup.tgz *
C - tar-Zxvf backup.tgz *
D - tar -cvf - * | gunzip> backup .tgz
Answer: A
Question: 523
A Linux server is configured as a router, but the administrator notices that packets are no longer
being routed. Which of the following should the administrator run on the server to verify routing
functionality?
A - cat/proc/self/status
B - /etc/rc.d/squid status
C - /etc/rc.d/network status
D - cat /proc/sys/net/ipv4/ip_forward
Answer: D
Question: 524
A user who has a file open in vi wants to search for the next occurrence of the word ‘coexistence’.
Which of the following commands will accomplish this from within the editor’s command mode?
A - /coexistence
B - ;f coexistence
C - ;s/coexistence
D - -- find_forward coexistence
Answer: A
Question: 525
The following command run as root will search the system for which of the following? find /-name
‘.*’
A - All directories
B - All hidden files
C - All files created in /
D - All files created today
Page 171 of 217

Exam Name: Linux+
Exam Type: CompTIA
Answer: B
Question: 526
Which of the following is the FIRST step that should be taken prior to installing Linux on new
hardware?
A - Verify that the hard drive has been formatted.

B - Run the sysprep utility from the Linux vendor’s CD.
C - Download all appropriate device drivers from the Linux vendors Website.
D - Review the HCL (Hardware Compatibility List) on the Linux distributor’s Website.
Answer: D
Question: 527
When a Linux laptop runs on battery, the hard drive performance significantly decreases. Which
of the following can improve the hard drive performance?
A - Increase the amount of swap space on the disk.

B - Decrease the amount of swap space on the disk.
C - Increase the APM (Advanced Power Management) value for the hard drive.
D - Decrease the APM (Advanced Power Management) value for the hard drive.
Answer: C
Question: 528
If the command below is executed in a user’s home directory, which of the following would be
accomplished? echo hello>> allusers
A - Sends the message ‘hello’ to all users on the system.

B - Creates a new file called ‘hello’ and sends itto all users.
C - Sends the message ‘hello’ to all currently logged in users.
D - Appends ‘hello’ to the end of the file llusers? if it exists.
Answer: D
Question: 529
Which of the following files is commonly included with source code to automate the compilation?
A - Makefile
B - Autorun
C - README.config
D - Auto.so
Answer: A
Question: 530
A technician needs to create a diskette to transfer data from a Linux server to a Windows 2000
server. The diskette is unformatted. Which of the following commands should be used to prepare
the diskette for writing?
A - mount /dev/fd0 /mnt/floppy mkdosfs /dev/fd0

B - mkfs -text2 /dev/fd0 mount /dev/fd0 /mnt/floppy
C - mount /dev/fd0/mnt/floppy mkfs-t msdos/dev/fd0
D - mkdosfs /dev/fd0 mount -t msdos /dev/fd0 /mnt/floppy
Page 172 of 217

Exam Name: Linux+
Exam Type: CompTIA
Answer: D
Question: 531
Which of the following packages is used to implement Telnet services on major Linux
distributions?
A - rsh
B - sshd
C - xinetd
D - rtelnetd
Answer: C
Question: 532
A user complains that the mount point the system uses for the CD-ROM device is too long. The
user wants to change the mount point from /media/cdrom to /cdrom. Which of the following files
needs to be edited?
A - /etc/mtab
B - /etc/fstab
C - /etc/mount
D - /etc/exports
Answer: B
Question: 533
An employee has been terminated from the company. Which of the following commands will
remove the user from the system and maintain the contents of the employee’s home directory?
A - userdel
B - passwd -l
C - usermod -f
D - userdel -r
Answer: A
Question: 534
In the file /etc/nsswitch.conf, what does the following line do?
~ hosts: nis files dns
A - NIS requests are forwarded to DNS.

B - NIS is used first for hostname resolution.
C - /etc/hosts is used for all NIS, NetBIOS, and DNS lookups.
D - NSS (Network Security Services) lookup is enabled for NIS, DNS, and remote files.
Answer: B
Question: 535
A user needs the ability to create new users on a system. How can the user be given this
privilege without the root password?
A - Add the user to the /etc/sudoers file

B - Edit the /etc/sysconfig/policies file
C - Make the user a member of the operator group
Page 173 of 217

Exam Name: Linux+
Exam Type: CompTIA
D - Grant the user execute privileges to useradd, groupadd, and usermod
Answer: A
Question: 536
After a printer is removed from a Linux workstation, which of the following commands can be
used to restart the printing module?
A - lp restart
B - cups restart
C - /etc/init.d/ lp restart
D - /etc/init.d/cups restart
Answer: D
Question: 537
A Linux technician is preparing to install a 64-bit Ultra 320 SCSI PCI controller on a x86 system.
Which of the following must the system have to allow this to work at full functionality?
A - 64 bit PCl slot

B - 64 bit diskette
C - 64 bit processor
D - 64 bit memory path
Answer: A
Question: 538
The user would like to find documentation files of an installed package. Which of the following is
the MOST likely place to find the documentation?
A - /etc/doc
B - /documents
C - /usr/share/doc
D - /usr/local/doc
Answer: C
Question: 539
Which of the following files is used to specify drives to be mounted on boot?
A - nfs
B - mtab
C - fstab
D - inet.d
Answer: C
Question: 540
Which of the following is the economical choice for high capacity off-site archiving?
A - NVRAM
B - SCSI
C - Tape
D - Optical Recordable
Page 174 of 217

Exam Name: Linux+
Exam Type: CompTIA
Answer: C
Question: 541
A Linux system has been installed using Chinese. The system administrator has been asked to
change the language setting to English. Which of the following commands can be used to do
this?
A - lsmod
B - depmod
C - xmodmap
D - keyboard
Answer: C
Question: 542
Which of the following is the BEST tool to measure system performance baseline over a period of
time?
A - sar
B - var
C - pmap
D - netstat
Answer: A
Question: 543
After properly installing both the sound card and modules, the technician attempted to play an
MP3 file, but no sound was heard. Which of the following is MOST likely to be the problem?
A - The sound card does not support MP3 playback.

B - The sound module was not added to the kernel.
C - The sound card is not on the HCL (Hardware Compatibility List).
D - The ALSA (Advanced Linux Sound Architecture) sound server was not started.
Answer: D
Question: 544
A user downloads the software package “package .tar.bz2” from the vendor. Which of the
following command lines can be used to extract the contents of the package?
A - tar xf package.tar.bz2
B - tar xvf package.tar.bz2 | bzip2 -d
C - bzip2 -d < package.tar.bz2 | tar xvf -
D - bzip2 package.tar | tar xvf package.tar.bz2
Answer: C
Question: 545
A user typed the following command on a machine:
ifconfig eth0:1 192.160.155.5 up
Which of the following is the effect of typing this on a machine that already has an address of
192.160.155.1 assigned to eth0?
Page 175 of 217

Exam Name: Linux+
Exam Type: CompTIA
A - The gateway address will be replaced with 192.160.155.5.

B - The current IP address will be replaced with 192.160.155.5.
C - 192.160.155.5 will be assigned to eth0 as a second IP address.
D - The address of 192.160.155.5 will be assigned to the second physical NIC
Answer: C
Question: 546
Which of the following tripwire commands can be run to analyze the current status of the system?
A - tripwire --check
B - tripwire --verify
C - tripwire --status
D - tripwire --monitor
Answer: A
Question: 547
Which of the following describes the contents of the file etc/ftpusers?
A - Users that may log in using FTP

B - Hosts that may connect through FTP
C - Hosts that may not connect through FTP
D - Users that may not log in using FTP
Answer: D
Question: 548
Which of the following packages helps to identify simple passwords?
A - Hunt
B - Hack
C - gnupg
D - Crack
Answer: D
Question: 549
User jones’ cannot login to a Linux server. The technician checked the server records and noted
that shadow passwords are disabled. The technician also noted that /etc/passwd contains the
following entry:
jones:*:1001:300:Bob Jones:/home/jones:/bin/bash
Which of the following is MOST likely to be the problem?
A - The account is expired.

B - The account is disabled.
C - Jones used the wrong password.
D - The account is using a service UID (User ID).
Answer: B
Question: 550
When an ATA-133 hard drive is installed, which otthe rollowing cables should be used?
Page 176 of 217

Exam Name: Linux+
Exam Type: CompTIA
A - 40 pin 80 wire
B - 80 pin 40 wire
C - 80 pin 80 wire
D - 68 pin 68 wire
Answer: A
Question: 551
Which of the following can be used to view username, UID (User ID), GID (Group ID), full name,
home directory, and default shell information?
A - cat/etc/group
B - cat /etc/services
C - cat/etc/shadow
D - cat/etc/passwd
Answer: D
Question: 552
The directory /home is on an ext2 file system. The owner is able to delete other files in the
directory, but all attempts by the owner of /home/owner/A to delete the one file result in the output
bash:
A: Permission denied
Given the file listing:
-rw-r--r-- 1 owner owner5 Jun 13 12:14 A
Which of the following should be checked next in order to diagnose this problem?
A - mkfs
B - dmesg
C - rm -r /home/owner
D - lsattr /home/owner/A
Answer: D
Question: 553
Which of the following commands could be used to set the number of days a user can maintain
the same password?
A - uname
B - chfn
C - usermud
D - chpasswd
Answer: C
Question: 554
A new tape drive has been added to a Linux system. Which of the following commands can be
used to verify that the tape drive is operational?
A - tcpdump ftape
B - tar-xvf tape
C - mount -f ftape
Page 177 of 217

Exam Name: Linux+
Exam Type: CompTIA
D - dmseg | grep ftape
Answer: D
Question: 555
Before performing a new Linux server installation, what part of the installation should be planned
and documented?
A - System hardware, partition map, required services, user passwords

B - System hardware, required packages, required services, partition map
C - Partition map, root password, required packages, performance baseline
D - Partition map, required packages, daemon configuration, performance baseline
Answer: B
Question: 556
The company wants to have its laptops perform a clean shutdown of the Linux operating system
when the power button is pressed. Which of the following modules must be installed to
accomplish this?
A - APM (Advanced Power Management)

B - ACPI (Advanced Control and Power Intertace)
C - power
D - i2c-core
Answer: B
Question: 557
A system report indicates that /var is full. Which of the following is the MOST likely resolution to
the problem?
A - Truncate the log files.

B - Increase the allowable size of swap file.
C - Ensure that users have not exceeded disk quota.
D - Remove unnecessary applications that may be using too much disk space.
Answer: A
Question: 558
Users begin reporting that they receive ‘Unable to resolve hostname’ error messages. Which of
the following daemons should the administrator verify is running?
A - bind
B - dhcpd
C - resolvd
D - named
Answer: D
Question: 559
Which of the following syslog keywords has the highest priority?
A - err
B - crit
C - emerg
Page 178 of 217

Exam Name: Linux+
Exam Type: CompTIA
D - alert
Answer: C
Question: 560
Which of the following is necessary for a user to scan images from a flatbed scanner?
A - gimp
B - sane
C - cops
D - twain
Answer: B
Question: 561
For troubleshooting, a technician needs to boot an SMP (Symmetric Multi-Processor) system to
use a single CPU. Which of the following is the correct parameter to pass to the kernel at boot
time?
A - nosmp
B - disable-smp
C - block-cpu-1
D - enable_smp=no
Answer: A
Question: 562
The administrator wants to deny ICMP traffic from being forwarded. Which of the following
commands would accomplish this?
A - iptables -A FORWARD -p icmp -j DENY

B - iptables -A FORWARD -p icmp -j DROP
C - iptables -A FORWARD -p udp --dport icmp -j DROP
D - iptables -A FORWARD -a all -proto ICMP -j REJECT
Answer: B
Question: 563
A user wants to install Linux as a dual-boot option on the second hard drive on the primary IDE
controller. Which of the following devices would be the target of the Linux partitioning?
A - /dev/hda
B - /dev/hdb
C - /dev/sda
D - /dev/sdb
Answer: B
Question: 564
A business wants to be able to track all Websites that are visited by its employees. Which or the
following Linux packages would BEST serve this need?
A - BIND
B - Samba
C - Apache
Page 179 of 217

Exam Name: Linux+
Exam Type: CompTIA
D - Squid
Answer: D
Question: 565
In which of the following runlevels is X Windows started by default
A-2
B-3
C-5
D-6
Answer: C
Question: 566
A technician is creating MPEG-2 video files in Linux. In addition to a video card with input source,
which of the following multimedia components is also required?
A - Xfree86
B - Sound card
C - MPEG-2 encoder
D - MPEG-2 capable camera
Answer: C
Question: 567
A Linux administrator is trying to set up a server that provides the MOST secure communication
for remote administration. Which of the following is the BEST choice for this situation?

B - RSH (Remote Shell)
C - FreeRADIUS
D - Kerberos
Answer: A
Question: 568
Using the BASH shell, which of the following commands will set number of entries in the
command history to 1000?
A - set NEWSIZE=1000
B - setenv HSIZE=1000
C - alias HISTORY=1000
D - export HISTSIZE=1000
Answer: D
Question: 569
Which of the following commands will display a list of system hardware after the Linux system
boots?
A - proc
B - POST
C - dmesg
D - systeminfo
Page 180 of 217

Exam Name: Linux+
Exam Type: CompTIA
Answer: C
Question: 570
Users are unable to print to a remote printer on a Linux server. The technician determines that all
of the users and machines have the right to print to the server. The permissions on the printer’s
spool directory are set to allow access to all users. Users can print to other printers on the server.
Which of the following is MOST likely the problem?
A - The /etc/printcap file is missing.

B - The SUID bit on this printer’s spool directory is not set.
C - Root does not have read permission on the print filter.
D - Users do not have execute permission on the print filter.
Answer: B
Question: 571
A production Web server is experiencing an unusually large amount of new incoming TCP
connections. Which of the following is MOST likely the problem?
A - DoS (Denial of Service)

B - Virus
C - Too manyusers
D - NIC malfunction
Answer: A
Question: 572
The IDS (Intrusion Detection System) reports many events that are not security incidents. Which
of the following is the term for these types of events?
A - True positives
B - True negatives
C - False positives
D - False negatives
Answer: C
Question: 573
A Linux server is to be used as a Web server. Which of the following is the BEST way to
configure its Ethernet adapter?
A - Use an IP alias.
B - Use a static IP address.
C - Configure the DHCP Server.
D - Configure the DHCP Client.
Answer: B
Question: 574
An administrator wants to create a script that installs NewFonts.rpm on several desktop
computers. The script should check if the RPM is already installed. Which of the following
commands would determine if NewFonts.rpm is already installed?
A - rpm-a NewFonts
Page 181 of 217

Exam Name: Linux+
Exam Type: CompTIA
B - rpm-q NewFonts
C - rpm --list NewFonts
D - rpm --checksig NewFonts
Answer: B
Question: 575
A recent hard drive addition to a server has a problem: the administrator has to manually mount
the drive every time the server is rebooted. Which of the following needs to be done in order to
resolve this issue?
A - Edit the /etc/fstab file.

B - Load a kernel module for the drive.
C - Editthe/dev entry for the device.
D - Change the default run level in /etc/inittab.
Answer: A
Question: 576
A user wants to derine a new Web space. The browser header will be examined by Apache to
determine which Web space the client will be sent, rather than by examining the port number of
IP address. Which of the following directives can be used to accomplish this?
A - HeaderSite
B - VirtualHost
C - VirtualWebsite
D - NamedSiteEntry
Answer: B
Question: 577
The administrator notices malicious network traffic from the example.com domain and would like
to contact the example.com administrator. Which of the following commands would display
contact information for this domain?
A - whois
B - fuser
C - whoip
D - ipuser
Answer: A
Question: 578
Which of the following are the default permissions for a symbolic link file?
A - Same as the target file

B - Full access to everyone
C - Full access to root only
D - Full access to the owner only
Answer: B
Question: 579
An administrator needs to check which users are utilizing the u command and when it is being
utilized. Which of the following log files reveals this information?
Page 182 of 217

Exam Name: Linux+
Exam Type: CompTIA
A - /etc/wtmp
B - /etc/sudoers
C - /var/log/lastlog
D - /var/log/messages
Answer: D
Question: 580
Which of the following commands is used to rebuild the man page database used by the hatis
command?
A - man-k
B - whatis-r
C - makewhatis
D - man --rebuilddb
Answer: C
Question: 581
A daemon unexpectedly terminates. Which of the following files can be viewed to determine the
source of the problem?
A - wtmp
B - dmesg
C - boot.log
D - messages
Answer: D
Question: 582
Using SSH (Secure Shell), what is the correct syntax for the user doe4?to login remotely to the
examplecom server?
A - ssh jdoe4 example.com

B - ssh -| jdoe4 example .com
C - ssh --userjdoe4example.com
D - ssh example.com jdoe4:password
Answer: B
Question: 583
A hard drive is taking a long time to complete file copies. The user suspects that the IDE drive
may not be using DMA. Which of the following commands can be used to verify the hard drive
connected on /dev/hda has DMA enabled?
A - sysinfo /dev/hda
B - fdisk-l /dev/hda
C - grep dma /proc/hdinfo
D - grep dma /proc/ide/hda/settings
Answer: D
Question: 584
Which of the following encryption algorithms are natively supported for the /etc/shadow file?
Page 183 of 217

Exam Name: Linux+
Exam Type: CompTIA
A - RC4
B - DES
C - 3DES
D - twofish
Answer: B
Question: 585
Which of the following commands can be used to verify if a specific cron job is scheduled?
A - at -m
B - crond -q
C - crontab -l
D - cat /proc/timer/crond
Answer: C
Question: 586
A technician is installing hardware in a Linux system that is not supported by the current kernel.
The Linux distribution does not provide any updates. Where should the user obtain a newer
kernel?
A - The gnu.org Website

B - The kernel.org Website
C - The SourceForge Website
D - The hardware manufacturer’s Website
Answer: B
Question: 587
Which of the following file system types should be used for the /boot partition, assuming it should
be accessible from a minimal boot kernel?
A - jfs
B - ext2
C - ext3
D - reiserfs
Answer: B
Question: 588
Which of the following commands creates a swap file system?
A - swapon
B - mkswap
C - mkswapfs
D - mkswapfsiso
Answer: B
Question: 589
Which of the following commands is used to obtain the summary of mounted hard drive
partitions?
Page 184 of 217

Exam Name: Linux+
Exam Type: CompTIA
A - df
B - fsck
C - ls-la
D - fdisk-l
Answer: A
Question: 590
DMA (Direct Memory Access) is required for which of the following items?
A - Mouse
B - Keyboard
C - Serial port
D - Sound card
Answer: D
Question: 591
On an NIS client, ‘cd ~www’ changes to /var/www. The correct location for the NlS
‘www’ user is /mnt/www.
'ypcat passwd | grep www' reports:
www:X:73:NIS www user:/mnt/www:/bin/sh
Which of the following is the BEST solution to the problem?
A - Remove the www user from the NIS passwd map.

B - Remove the www userfrom the local passwd file.
C - Change the home directory for the www user in the NIS passwd map.
D - Change the home directory for the www user in the local passwd file.
Answer: B
Question: 592
A user is trying to print a .pdf document using the following command:
lpr flyer.pdf
Which of the following results will MOST likely occur?
A - An error message will appear.

B - The flyer.pdf file will be displayed.
C - The flyer.pdf file will print correctly.
D - The printer will print pages with strange characters.
Answer: D
Question: 593
A Linux technician needs to check the current resource utilization for processes.
Which of the following commands should be used?
A - top
B - sar
C - pmap
D - netstat
Page 185 of 217

Exam Name: Linux+
Exam Type: CompTIA
Answer: A
Question: 594
An administrator watches a Linux system boot and noticed an error with one of the hda partitions.
It went by too quickly on the screen for the administrator to read the details. How can this
information be recalled?
A - top
B - fsck
C - debug
D - demesg
Answer: D
Question: 595
An administrator wants to temporarily disable the eth0 network interface on a server. Which of the
following commands will accomplish this?
A - ifconfig disable
B - ifconfigeth0 off
C - ifconfig eth0 disable
D - ifconfig eth0 down
Answer: D
Question: 596
A network problem occurs somewhere between a Linux PC and a remote Website. Which of the
following commands will help locate the point of failure?
A - netstat
B - netview
C - pathping
D - traceroute
Answer: D
Question: 597
No users can connect via SSH (Secure Shell). The SSH daemon is confirmed to be running.
Which of the following configuration riles may need to be edited to permit logins?
A - /etc/passwd
B - pam_deny.so
C - sshd_config
D - /etcMnetd.conf
Answer: C
Question: 598
A user wants to create an image of a system boot disk in order to copy it. Which of the following
commands will do this?
A - dd
B - cpd
C - xcopy
D - cp--disk
Page 186 of 217

Exam Name: Linux+
Exam Type: CompTIA
Answer: A
Question: 599
The /usr/bin/passwd command has the following permissions:
-r-s--x--x 1 root root passwd
Which of the following will occur?
A - The command will have the sticky bit set.

B - The command restricts permissions to the superuser.
C - The command runs with permissions of the superuser.
D - The command would use SSL (Secure Socket Layer) by default.
Answer: C
Question: 600
Which of the following configuration files should a Linux administrator edit in order to restrict the
use of su to a single group?
A - /etc/pam.d/su
B - /etc/login.conf
C - /eft/environment
D - /etc/sysctl.conf
Answer: A
Question: 601
A user created the following grub.conf file.
default=0
timeout=10
splashimage=(had l)/grub/splash.xpm.gz
title Linux Server (2.4.22)
root(hda1)
kernel /vmlinuz-2.4.22 ro root=LABEL=/ hdc=ide-scsi rhgb
initrd initrd-2.4.22
Which of the following is wrong with this file?
A - The splashimage should not be gzipped.

B - The correct path should be /boot/vmlinuz-2.4.22.
C - The root partition should be mounted “rw”, not “ro”.
D - The hard drive label should be (hd0,0), not (hda1).
Answer: D
Question: 602
An administrator needs to adjust the MTU (Maximum Transmission Unit) value on an Ethernet
interface. Which of the following commands can be used to change the current MTU value to a
new one?
A - route
B - netstat
Page 187 of 217

Exam Name: Linux+
Exam Type: CompTIA
C - iptables
D - ifconfig
Answer: D
Question: 603
A new driver version has been downloaded. When it is compiled it asks for the location of the
kernel sources. Where are the kernel sources normally located?
A - /usr/src
B - /usr/kernel
C - /opt/kernel
D - /usr/kernel/src
Answer: A
Using octal permissions, how would a user modify the file test.txt to have the following access
privileges?
-rwxr----- 1 user 1 staff 0 8 May 11:45 test.txt
A - chmod 740 test.txt

B - chmod 310 test txt
C - chmod 047 test .txt
D - chmod 013 test.txt
Answer: A
Question: 604
Which of the following is the tunction of the ARP (Address Resolution Protocol)?
A - It maps a hostname to a MAC address.

B - It maps a MAC address to a hostname.
C - It maps an IP address to a MAC address.
D - It maps a MAC address to an P address.
Answer: C
Question: 605
Which of the following tools can be used to identify poor password usage from the user by
auditing password usage?
A - crypt
B - passwd
C - crackpasswd
D - crack
Answer: D
Question: 606
A Linux administrator converted the root file system from ext2 to ext3, but neglected to update
/etct/stab. Which of the following will happen the next time the system boots?
A - The root file system will be corrupted.

B - The kernel will halt mounting the root file system.
Page 188 of 217

Exam Name: Linux+
Exam Type: CompTIA
C - The file system will be automatically detected as ext3.

D - The system will boot as normal, except journaling will be disabled.
Answer: D
Question: 607
Which of the following commands enables a user to make a newly-created shell script executable
by only its owner?
A - ./<filename>
B - chown 755 <filename>
C - /configure <filename>
D - chmod u+x <filename>
Answer: D
Question: 608
An administrator needs to add a new application to an existing Linux machine. The application is
available in source code and distributed in a file called “application.tar.gz”. After extracting the file,
which of the following is the next step in installing the application?
A - run rpm
B - run apt-get
C - run configure, make, make install
D - move the extracted directory to /usr/local/application
Answer: C
Question: 609
A - FTP
B - POP3
C - SMTP
D - SMNP
Answer: C
Question: 610
Which of the following commands can be used to provide a reverse lookup of an IP address?
A - rarp 192.16a.0.50
B - dig-x 192.168.0.50
C - riockup 192.168.0.50
D - hostname-r 192.168.0.50
Answer: B
Question: 611
A Linux user has a file named backup.tar. How can the detailed file information in the file be
viewed without extracting the contents?
A - tar lf backup.tar
B - tar tf backup.tar
C - tar lvf backup tar
Page 189 of 217

Exam Name: Linux+
Exam Type: CompTIA
D - tar tvf backup.tar
Answer: D
Question: 612
A user is unable to access the Internet from their Client. The clients TCP/IP settings are
192.168.1.87/26. The default gateway’s P address is 192.168.1.1. What command must be
entered on the client machine to enable communications to the Internet?
A - ifconfig eth0 up 192.168.1.87 netmask 255.255.255.128

B - ifconfig eth0 up 192.168.1.87 netmask 255.255.255.192 broadcast 192.168.1.255
C - ifconfig eth0 up 192.168.1.87 netmask 255.255,255.255
D - ifconfig eth0 up 192.168.1.1 netmask 255.255.255.0
Answer: A
Question: 613
A Linux user wants to access the X interface on a remote server. How can this be made secure?
A - Use SSH (Secure Shell) to forward X11.

B - Install a secure version of X.
C - Install an X server on the local client.
D - Configure local X sever to allow the remote host.
Answer: A
Question: 614
A USB memory stick is plugged into a server, but the mount command generates the following
error:
mount special device /dev/sda1 is not a valid block device
Which of the following is the MOST likely cause of this error?
A - /dev/sda does not exist.

B - The USB memory stick is not formatted.
C - The kernel module loader is not available.
D - A USB 2.0 device was plugged into a USS 1.0 socket.
Answer: C
Question: 615
Which of the following commands can be used to confirm checksums on the Samba package?
A - rpm -V samba.rpm
B - rpm -v samba.rpm
C - rpm -c samba.rpm
D - rpm -i samba.rpm
Answer: A
Question: 616
Which of the following is used to register a new printer with CUPS on a system using default
settings?
Page 190 of 217

Exam Name: Linux+
Exam Type: CompTIA
A - cupsct
B - cups --add-printer
C - lynx http://127.0.0.1:631
D - edit /etc/cups/printcap
Answer: C
Question: 617
Which of the following commands will secure a script file so it could be modified only by the
owner?
A - chmod 700 file

B - chmod 770 file
C - chmod 077 file
D - chmod 777 file
Answer: A
Question: 618
Under which of the following sce/varios should an administrator initiate single user mode?
A - To suspend a user account

B - To reset a forgotten user password
C - To run fsck on a damaged filesystem
D - To check the root and postmaster mail boxes
Answer: C
Question: 619
A compary currently has tour Linux servers and wants to Install a fifth server to perform user
authentication. Which of the following is a “Id protocol for centralized user authentication?
A - MD4
B - LDAP
C - SHA1
D - 3DES
Answer: B
Question: 620
Which of the following contains user default configuration files and directories?
A - /etc/skel
B - /usr/config
C - /etc/users.conf
D - /usr/default.conf
Answer: A
Question: 621
An administrator wants to add a new forward DNS Zone file to the Linux DNS server. Which of
the following files should be edited to ensure the server will return answers for this zone?
A - dns.conf
B - named.conf
Page 191 of 217

Exam Name: Linux+
Exam Type: CompTIA
C - resolv.conf
D - nameserver.conf
Answer: B
Question: 622
Which of the following commands can be used to create a link to the file /home/joe/help in
/tmp/help.old?
A - In -s help help old

B - In -s /home/joe/help /tmp/help.old
C - In -s /tmp/help.old /home/joe/help
D - In -v /home/joe/help /tmp/help.old
Answer: B
Question: 623
Which of the following will happen when the following command is run?
userdeI johnd
A. The user johnd is removed from the system, deleting all of the data in his home directory
B. The user johnd is removed from the system while keeping all of the data in his home
directory.
C. The user johnd is removed from the system and all of his data is moved to the /var/archive
directory.
D. The user johnd is removed from the system and all data in the home directory is moved to the
/home/deletedusers directory.
Answer: B
Question: 624
Which of the following commands is used to show all of the root processes running on a system?
A - psroot
B - jobs 0
C - ps -au root
D - cat /proc/sys/proc
Answer: C
Question: 625
The /etc/exports file on a Linux system contains the following entry:
/var logger(ro,no_root_squash)
In this file, the name ogger is which of the following?
A - A username
B - A hostname
C - A program name
D - A directory or filename
Answer: B
Question: 626
Page 192 of 217

Exam Name: Linux+
Exam Type: CompTIA
When the command ‘gcc’ is run in a newly created directory, the system returns the error
command notfound
Alter confirming gcc is installed on the system, which environmental variable must be modified to
correct this problem?
A - $PATH
B - $PROMPT
C - $DISPLAY
D - $EXECUTABLES
Answer: A
Question: 627
A Linux machine always reboots shortly after the boot loader completes. The system should boot
into multi-user mode with a non-graphical interlace. In order to correct this, which file needs to be
edited and what is the correct parameter?
A - inittab
id:5:initdefault:
B - inittab
id:3:initdefault:
C - sysinit.conf
initdefault 3
D - sysinit.conf
initdefault 5
Answer: B
Question: 628
A Linux server has been configured as a gateway to allow local LAN access to the Internet. Users
can ping the gateway address but cannot access the Internet. Alter further troubleshooting, it has
been determined that IP forwarding is not enabled on the Linux server. Which of the following
commands will enable routing?
A - route add IP_FORWARD eth0

B - sysctl -a net.ipv4.conf.forwarding = 1
C - echo “1” > /proc/sys/netfipv4/ip_forward
D - sysctl -n net.ipv4.conf.eth0.forwarding = 1
Answer: C
Question: 629
What does enabling the “dead keys” option during installation do?
A - It disables the function keys.

B - It enables application shortcut keys.
C - It provides the ability to create special characters.
D - It disables unused keys based on the language option selected.
Answer: C
Question: 630
Page 193 of 217

Exam Name: Linux+
Exam Type: CompTIA
A telecommunications controller will be installed in a Linux server. The model number is available
to identify the card. How can the Linux technician confirm that the device is supported by the
Linux distribution?
A - Check the government’s telecommunications Website.

B - Check the /etc/sysconfig directory.
C - Check the /dev directory.
D - Check the Linux distribution’s Website.
Answer: D
Question: 631
Which or the following commands lists the rile systems available for the NFS (Network File
System) server upiter?
A - ls jupiter
B - ls -l jupiter
C - showmount e jupiter
D - showmount -e jupiter
Answer: D
Question: 632
Which of the following commands could an administrator use to switch to single-user mode
without rebooting the system?
A - init 1
B - chroot -so
C - su --single
D - sudo --single
Answer: A
Question: 633
Which of the following commands allows a user to view undelivered messages on a server using
sendmail as the MTA (Mail Transport Agent)?
A - mail
B - smtpd
C - mailq
D - sendmail -bd
Answer: C
Question: 634
Which of the following is used to terminate a hue loop in a BASH shell?
A - end
B - wend
C - done
D - elihw
Answer: C
Question: 635
Page 194 of 217

Exam Name: Linux+
Exam Type: CompTIA
A user named ‘john’ needs to have read, write, and execute permissions to the following file:
/home/joh n/resume.
John currently has read-only permission. Which of the following commands can be used to add
write and execute permissions for him without changing anyone else’s permissions?
A - chown-f
B - chmod 700
C - chmod u+wx
D - chown -u +wx
Answer: C
Question: 636
How could a user substitute all instances of C with omputer in a file named instructions and
display the results in the terminal window?
A - sed s/PC/computer/g instructions

B - sed -s PC -r computer instructions
C - cat instructions | awk Computer
D - cat instructions | awk ‘/PC/ print computer’
Answer: A
Question: 637
Which of the following commands is used to check the status of a sottware RAID?
A - cat /proc/mdstat
B - cat /proc/ide/raid
C - mkraid --status
D - mkraid --verify
Answer: A
Question: 638
A system is running slowly and the administrator wants to find the process that is using the MOST
resources. Which of the following will accomplish this?
A - Use op to list processes ranked by CPU utilization.

B - Use obs to list CPU-intensive processes in order.
C - Use ice -I -n 1 to list the process with highest CPU utilization.
D - Use is tree to list processes with the highest foreground priority.
Answer: A
Question: 639
Which of the following packages would be selected during installation to provide a Web server?
A - Bind
B - Squid
C - Apache
D - Mozilla
Answer: C
Page 195 of 217

Exam Name: Linux+
Exam Type: CompTIA
Question: 640
Which of the following is used to secure http communications?
A - Blowfish
B - SSH (Secure Shell)
C - PGP (Pretty Good Privacy)
D - TLS (Transport Layer Security)
Answer: D
Question: 641
Which of the following services could be used to provide remote configuration of the networking
address, routing, and DNS settings for other devices on a network?
A - dhcpd
B - routed
C - netsetup
D - netconfig
Answer: A
Question: 642
Company security policy requires that all authentication errors be logged to a printed hard copy.
Which of the following entries in /etc/syslog.conf would BEST accomplish this?
A - auth.err | lpr
B - auth.err -print
C - auth.err +/dev/lp0
D - auth.err -/var/log/auth -Ipr
Answer: A
Question: 643
If the IP address of a host on the network is known, which of the following commands can be
used to find the MAC address of that host?
A - arp
B - dig
C - nslookup
D - traceroute
Answer: A
Question: 644
A Linux technician is installing a new SCSI tape drive. Which of the following is the default ID on
a SCSI controller card?
A-1
B-7
C - 11
D - 16
Answer: B
Page 196 of 217

Exam Name: Linux+
Exam Type: CompTIA
Question: 645
After setup has completed, the user decides to test the DVD drive to ensure it was installed
properly. After issuing mount /mnt/dvdrom, the error “mount: no medium found” is returned.
Which of the following actions will MOST likely solve this problem?
A - Create the directory /mnt/dvdrom.

B - Issue the command “mount /dev/dvdrom /mnt/dvdrom”.
C - Ensure that /mnt/dvdrom has an entry in /etc/fstab.
D - Insert a DVD into the drive, then re-issue the mount command.
Answer: D
Question: 646
When a USB memory stick is used on a Linux server, which of the following device files would
likely be used to access it?
A - /dev/sda
B - /dev/ram0
C - /dev/usb/hd1
D - /dev/usb/auer0
Answer: A
Question: 647
A Samba server is not functioning properly. Which of the following commands should be run to
verify that the configuration is correct?
A - testparm
B - smbcheck
C - smbd --check
D - chkconfig samba
Answer: A
Question: 648
The administrator sees this line in /etctrstab:
/dev/md0 / ext3 defaults 0 1
Which of the following BEST describes the /dev/mdO device?
A - ATA device
B - SCSI device
C - LOOP device
D - RAID device
Answer: D
Question: 649
Which of the following can be used to determine if the entries in /etc/shadow are corrupt?
A - pwd
B - pwck
C - grpck
D - passwd
Page 197 of 217

Exam Name: Linux+
Exam Type: CompTIA
Answer: B
Question: 650
A new user must have local FTP access but not interactive login access. The following entry in
/etc/passwd corresponds to this user:
repositoryuser:x:502:502::/home/repositoryuser:/bin/fales
Upon testing, repositoryuser cannot login to the FTP server. Which of the following is MOST likely
the problem?
A - The repositoryuser is not in the FTP group.

B - There is an entry in /etc/ftpusers for repository user.
C - There is an entry in /etc/shells for repository user’s shell.
D - There is no entry in /etc/exports for repository user’s home directory.
Answer: B
Question: 651
When remotely administering a Linux machine using SSH (Secure Shell), the administrator added
a rule to deny traffic on Port 22. SSH is now no longer accepting connections. Which of the
following would resolve this problem?
A - Restart the SSH service

B - SSH to Port 23 and remove the rule
C - Remove the rule before it is activated
D - From the system console, remove the Port 22 rule
Answer: D
Question: 652
Which of the following commands would ensure thatthe Linux serverwould send packets destined
for 192.168.100.0/25 to 192.168.200.5
A - route 192.168.100.0 netmask 255.255.255.126 gw 192.168.200.5

B - route 192.168.100.0 netmask 255.255.255.192g w 192.168.200.5
C - routeadd-net 192.160.100.0 netmask 255.255.255.128 gw 192.168.200.5
D - routeadd-net 192.168.100.0 netmask 255.255.255.192 gw 192.168.200.5
Answer: C
Question: 653
When a new Snort system is installed, where should the system be placed on the network?
A - On the network perimeter

B - On the core network router
C - On an isolated network segment
D - Near the system administrator’s workstation
Answer: A
Question: 654
A workstation user is unable to mount a CD-ROM drive. Which of the following commands can be
used to confirm the operating system recognizes the drive ?
Page 198 of 217

Exam Name: Linux+
Exam Type: CompTIA
A - find cdrom
B - dmesg | grepCD
C - cat fstab | grep CD
D - cat mtab | grep cdrom
Answer: B
Question: 655
A system administrator inherits a Linux system with a 2.2 kernel. After upgrading to a 2.4 kernel,
the ipchains commands no longer function. Which of the following is the likely cause?
A - The 2.4 kernel does not support ipchains

B - The ipchains package needs to be upgraded
C - The old ipchains module needs to be loaded
D - The new kernel was not compiled with ipchains support
Answer: D
Question: 656
A new administrator is asked to reconfigure a Linux machine. The prior administrator did not give
the root password to the current administrator. Which of the following is the FIRST step the new
administrator should do to reset the root password?
A - Boot to single user mode.

B - Reinstall the operating system.
C - Run a password recovery utility.
D - Use view to edit the password file.
Answer: A
Question: 657
Which of the following is the BEST security practice for compiling the package from the source?
A - Compile and install the package as root.

B - Compile as a normal user and install as root.
C - Compile as root and install as a normal user.
D - Compile and install the package as a normal user.
Answer: B
Question: 658
Which of the following is the default file name for the ake command?
A - Make
B - Config.in
C - Makefile
D - Config.make
Answer: C
Question: 659
Which of the following processes has the lowest PID (Process ID)?
A - init
B - klogd
Page 199 of 217

Exam Name: Linux+
Exam Type: CompTIA
C - kswapd
D - syslogd
Answer: A
Question: 660
The administrator issues the ‘ls -l/home’ command and sees the following output
drwxr-sr-x 2578 578 4096 Jun 13 13:50 userl
The output indicates which of the following?
A - User1 is a.
B - The user1 directory has 578 modes.
C - The userl entry was deleted from /etc/passwd.
D - The userl directory is now owned by user 578.
Answer: D
Question: 661
Which of the following virtual console sessions does XFree86 use by default?
A-1
B-3
C-5
D-7
Answer: D
Question: 662
An administrator wishes to mount an NFS (Network File System) export of the directory /usr
located on 100.0.1 onto the local mount point called /usr. Which of the following commands
should be used?
A. mount
B. mountd
C. remount
D. smbmount
Answer: A
Question: 663
Which of the following protocols is used by NIS?
A - rpc
B - ftp
C - snmp
D - dhcp
Answer: A
Question: 664
The /var/log/messages file was deleted and the syslog daemon did not recreate it. Which of the
following commands would remedy this situation?
Page 200 of 217

Exam Name: Linux+
Exam Type: CompTIA
A - touch /var/log/messages
B - syslogd --recreate-file
C - logform /var/log/messages
D - cat /dev/random > /var/log/messages
Answer: A
Question: 665
The administrator discovers that the SSH (Secure Shell) key may have been compromised.
Which of the following commands would the administrator run to create a new key?
A - keygen-ssh
B - ssh-keygen
C - make ssh-key
D - make clean | ssh-key
Answer: B
Question: 666
A user is editing a file in vi and wants to run the command s ux without leaving vi. Which of the
following commands will do this?
A - :#ps -aux
B - :! ps -aux
C - :// ps -aux
D - :cmd ps -aux
Answer: B
Question: 667
When a login shell exits, BASH reads and executes commands from which of the following files?
A - ~/.bash_exit
B - ~/.logoff_now
C - ~/.bash_logout
D - ~/.logoff_shell
Answer: C
Which of the following is a popular open source tool that is used for vulnerability assessment?
A - dig
B - nessus
C - slocate
D - nslookup
Answer: B
Question: 668
Which of the following commands will display information in the manual page for the passwd file?
A - man 2 passwd
B - man 5 passwd
C - man-k 2 passwd
D - man -k 5 passwd
Page 201 of 217

Exam Name: Linux+
Exam Type: CompTIA
Answer: B
Question: 669
Which of the following is a valid command to format a partition as Reiser FS?
A - mkfs/dev/hda6
B - reiserfs/dev/hda6
C - mkIs.reiserfs /dev/hda6
D - mkIs -reiserts /dev/hda6
Answer: C
Question: 670
The user of a Linux workstation reports slow network performance during heavy Web access.
The workstation is connected to an unmanaged switch. Which of the following is MOST likely the
problem?
A - The network card is bad.

B - The network card is disabled.
C - The network card is in promiscuous mode.
D - The network card duplex setting is incorrect.
Answer: D
Question: 671
Where is the ACPI (Advanced Control and Power Interface) power management dynamic
information stored when devis is compiled into the kernel?
A - /dev
B - /usr
C - /var
D - /proc
Answer: D
Question: 672
The command is -l file is issued. and the result is:
-rwxrw---x 5 root wheel 8192 Jan01 21:00 file
Which of the following chmod commands corresponds to the current permissions of the file?
A - chmod 471 file

B - chmod 623 file
C - chmod 726 file
D - chmod 761 file
Answer: D
Question: 673
A Linux disk indicates that it has errors. Which of the following commands tests an entire ext2 file
system and repairs errors without user interaction?
A - fdisk-V
Page 202 of 217

Exam Name: Linux+
Exam Type: CompTIA
B - e2fsck-a
C - e2fsck-V
D - e2fsck -y
Answer: D
Question: 674
Which of the following commands will allow a Linux administrator to view waiting print jobs for all
printers?
A - lpq-a
B - lpq -A
C - printq -A
D - printq -a
Answer: A
Question: 675
Which of the following commands can be used to display the location of all the setuid regular files
on /mnt?
A - find /mnt -mode s -ls

B - find /mnt -setuid -ls
C - find fmnt -suid -type f -ls
D - find /mnt -type f -perm -u+s -ls
Answer: D
Question: 676
The following line is found in /etc/inittab
~ 3:2345:respawn:/sbin/mingetty tty3 ~
What is the meaning of the second field in this conflguratlon line?
A - A terminal id
B - Atimeoutvaiue
C - Afiag oroption code
D - A list of runlevels
Answer: D
Question: 677
Which of the rollowing packages is needed on a server to allow other Linux workstations to
authenticate local users through the server?
A - NIS
B - lmapd
C - Samba
D - NFS (Network File System)
Answer: A
Question: 678
Page 203 of 217

Exam Name: Linux+
Exam Type: CompTIA
A RAID controller is to be installed in Linux as the boot device. Which of the following sources will
BEST confirm that the hardware is supported by the version of Linux being installed?
A - Internet search engine

B - www.linuxdoc.org
C - Linux distribution Website
D - RAID manufacturer’s Website
Answer: C
Question: 679
Which of the following commands will create the directory /home/gawd/tools/security regardless
of the existence of its parent directories?
Page 204 of 217

Exam Name: Linux+
Exam Type: CompTIA
A - md -m /home/gawd/tools/security
B - mkdir -m /home/gawd/tools/security
C - mkdir -p fhome/gawd/tools/security
D - mkdir --makepath /home/gawd/tools/security
Answer: C
Question: 680
Which of the following IRQs is commonly used by /dev/hda?
A-3
B-7
C - 14
D - 15
Answer: C
Question: 681
After a company-standard installation, a user with a Swedish keyboard has the English character
set loaded. Which of the following configuration files should be edited to support the specific
country keyboard?
A - Xmodmap
B - keyb.conf
C - XF86Config
D - .bash_profiles
Answer: C
Question: 682
How should a Linux administrator prevent the root user from logging in remotely via SSH (Secure
Shell)?
A - Add enyLogin to /root/.ssh/sshd_config

B - Add enypootLogin to /etc/.ssh/sshd_config
C - Add ermitLogin no to /root/.ssh/sshd_config
D - Add ermitRootLogin no to /etc/ssh/sshd_config
Answer: D
Question: 683
The system administrator wishes to view vmstat output once every 10 seconds for the next
minute. Which of the following commands accomplishes this?
A - vmstat 10 6
B - vmstat-10-1min
C - vmstat 10; steep 60
D - vmstat--time=’1 min’ 10
Answer: A
Question: 684
Which of the following commands can be used to ensure that all the files in /home/user and its
subdirectories are accessible only by the owner of /home/user?
Page 205 of 217

Exam Name: Linux+
Exam Type: CompTIA
A - chmod 711 /home/user

B - chmod 700 /home/user
C - chown user /home/usert/*
D - chown -R user /home/user
Answer: B
Question: 685
Which of the following RAID configurations is BEST for a streaming-video server where reliability
is NOT important?
A - RAID 0
B - RAID 1
C - RAID 3
D - RAID 5
Answer: A
Question: 686
Which command would set a file’s permissions to the following?
rwxr--r--
A - chmod 744 filename

B - chmod 755 filename
C - chmod o+x filename
D - chmod u=rw filename
Answer: A
Question: 687
An administrator would like to test a newly installed printer. Which of the following commands
would accomplish this
A - print -check
B - lpr-P/dev/zero
C - echo testing | lpr
D - lpr -test </dev/zero
Answer: C
Question: 688
Ping requests to a network gateway fail. It is determined that an interface’s subnet mask is
incorrect. Which of the following commands will correct this issue?
A - if eth0 subnet 255.255.255.0 up

B - ifconfig eth0 netmask 255.255.255.0
C - ifup eth0 subnet_mask=255.255.255.0
D - ethtool eth0 subnet_mask=255.255.255.0
Answer: B
Question: 689
Which of the following services is commonly started from xinetd?
Page 206 of 217

Exam Name: Linux+
Exam Type: CompTIA
A - smbd
B - httpd
C - sendmail
D - fingerd
Answer: D
Question: 690
Which of the following commands can be used to view a user’s crontab entry?
A - cronview
B - crontab -l
C - crontab -v
D - crontab -e
Answer: B
Question: 691
In a Linux software RAID 1 array created during the installation process, the primary IDE master
has a hardware failure. Now the system will not boot. Which of the following will allow the system
to boot properly and salvage the information?
A - Run fsck on the faulty drive.

B - Use Disk Druid to repair the array.
C - Use fdisk to repair the partition table.
D - Remove the faulty drive from the system.
Answer: D
Question: 692
An application is tailing and indicates that the error.log should be viewed. but no location is
provided. How can this tile for the error.log be found effectively?
A - find / -n error.log
B - find -name error.log
C - find / -name error.log
D - find / -daystart -amin 60 -name error.log
Answer: C
Question: 693
Alter installing or updating a dynamically linked library, the technician needs to reload
/etc/ld.so.conf and refresh the dynamic linker’s cache so new programs that need the new library
can run. Which of the following programs should be run?
A - ldconfig
B - ldupdate
C - Id --reload
D - kill -HUP1
Answer: A
Question: 694
Page 207 of 217

Exam Name: Linux+
Exam Type: CompTIA
Which of the following settings of the UMASK would cause new files to be created with mode
640?
A - 037
B - 177
C - 367
D - 640
Answer: A
Question: 695
Which of the following tile systems are compatible with a partition that is typed as 82?
A - vfat
B - ext3
C - swap
D - reiserts
Answer: C
Question: 696
The root user receives a ‘Permission denied’ error message when trying to write files to an NFS
(Network File System) mounted directory. Which of the following is the MOST likely cause of this
error?
A - The server needs to allow NFS UDP packets.

B - The directory needs to be remounted as NFSv3.
C - The server share needs to specify no_root_squash.
D - The server is not allowing the client to connect.
Answer: C
Question: 697
If a user wishes to monitor the last three lines of the log file messages.log and update it every 15
seconds, which of the following commands should be issued?
A - sar -f -s 15 -n 3 messages.log
B - tail -f -s 15 -n 3 messageslog
C - watch -f -s 15-n 3 messages.log
D - follow -f -s 15-n 3 messages.log
Answer: B
Question: 698
A Linux specialist wants to check which shares are offered by a Windows server. Which of the
following commands is used to perform this task?
A - smbclient
B - smbserver
C - listshares
D - showshares
Answer: A
Question: 699
Page 208 of 217

Exam Name: Linux+
Exam Type: CompTIA
A Linux administrator has decided to remove a software package called exim.rpm. Which of the
following commands could be used to uninstall the software?
A - rm -r exim
B - uninstall exim
C - rpm --erase exim
D - rpm --uninstall exim
Answer: C
Question: 700
A customer requires that the following packages be installed on a server
quota
raidtools
Samba
Amanda
yp-serv
For which of the following purposes is this server MOST likely to be used?
A - Firewall
B - File server
C - Database server
D - Streaming media server
Answer: B
Question: 701
A Linux server may have vulnerabilities if which of the following occurs?
A - The system is unpatched.

B - There are too many users.
C - The SSH (Secure Shell) is disabled.
D - The Apache Web server is running.
Answer: A
Question: 702
How would an administrator ensure that the command /usr/local/radius/startrad.pl was executed
atter each reboot?
A - Copy the command to the /boot directory.

B - Place the command in the /etc/rc.boot file.
C - Place the command in the /etc/rc.local file.
D - Place the command in the /etc/sysconfig/startup.cfg file.
Answer: C
Question: 703
A technician needs to extract the entire archive ‘backup .tar.bz2’ Which of the following
commands will accomplish this?
A - tar xjf backup.tar.bz2

B - tar xZa backup.tar.bz2
Page 209 of 217

Exam Name: Linux+
Exam Type: CompTIA
C - tar xbf backup.tar.bz2

D - tar x--bz2 backup.tar.bz2
Answer: A
Question: 704
A Linux user wants to create a hard link named ile2 in the current directory that points to
/usr/var/file. Which of the following commands can be used?
A - In file2 /usr/var/file
B - In /usr/var/file file2
C - In -h file2 /usr/var/file
D - In -h /usr/var/file file2
Answer: B
Question: 705
The administrator has added a specific route for 192.168.3.0/24 to the routing table as shown
below:
Destination Gateway Genmask Flags Metric Ref Use Iface

192.168.3.0 192.168.1.243 255.255.255.0 UG 0 0 0 eth0
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth
0 0.0.0.0 192.168.1.1 0.0.0.0 UG 0 0 0 eth0
Which of the following is a valid method for removing the route?
A - edit /proc/net/netstat
B - route remove 192.168.3.0 255.255.255.0
C - route remove -net 192.166.3.0 netmask 255.255.255.0 gw 192.168.1.1
D - route del -net 192.168.3.0 netmask 255.255.255.0 gw 192.168.1.243
Answer: D
Question: 706
An administrator is seeking to view the information contained in the wtmp log file. Which of the
following commands is designed to display the contents of this file in human-readable format?
A - Last
B - wshow
C - showtmp
D - displaytmp
Answer: A
Question: 707
A user wants to set up a parallel port printer on the workstation’s second parallel port. Which of
the following device identifiers needs to be used during configuration?
A - /dev/lpl
B - /dev/epp2
C - /dev/prn2
D - /dev/ecpl
Answer: A
Page 210 of 217

Exam Name: Linux+
Exam Type: CompTIA
Question: 708
Which of the following BASH shell built-in commands can be used to apply a CPU time limit of 90
seconds on the current shell session?
A - limits -t 90
B - ulimit -t 90
C- setlimit-t90
D - echo 90 >/proc/me/limits/time
Answer: B
Question: 709
The system administrator wants to create a list of all of the RPM packages installed on a server in
alphabetical order. Which of the following is a quick and easy way to do this?
A - rpmdb --dump rpmlist.text

B - rpm -q --dump rpmlist.text
C - rpm -q -a sort> rpmlist.text
D - rpm -qa %-1 ,[A-Z]% > rpmlist.text
Answer: C
Question: 710
The DNS administrator needs to change the IP address of the primary Webserver. Any down time
would have a major impact. Which of the following is the BEST way to minimize the down time?
A - Update /etc/resolv.conf on the Webserver.

B - Change the Webserver PTR record to the new hostname.
C - Notify the domain registrar of the change in advance.
D - Change the Webserver TTL (Time-To-Live) record to 5 minutes.
Answer: D
Question: 711
A new RPM package returns a large number of errors and has never run successfully. Which of
the following commands should be run as a FIRST step to troubleshooting this problem?
A - verify <package_name>
B - rpm -V <package_name>
C - rpmdb -v <installation_file>
D - diff --rpm <package_name> <installation_file>
Answer: B
Question: 712
A new shell command generates too much output to read on the screen and does not write to a
log file. Which of the following would capture the output for evaluation?
A - Run the command as a daemon

B - Reduce MOG_LEVEL=6 in /etc/syslog.conf to a lower number
C - Pipe the output to the cat command
D - Use on the command line
Answer: D
Page 211 of 217

Exam Name: Linux+
Exam Type: CompTIA
Question: 713
Which of the following commands could be used to convert the ext2 file system on /dev/hda2 to
use the ext3 file system?
A - tune2fs-j /dev/hda2
B - e2image -j /dev/hda2
C - mkfs -t ext3 -j /dev/hda2
D - e2label -t ext3 /dev/hda2
Answer: A
Question: 714
Which of the following commands can be used to hide the file “help.new”?
A - atrrib -h help.new
B - chmod 4000 help.new
C - mvhelp.new .help.new
D - cp help.new .help.new
Answer: C
Question: 715
The system administrator suspects the machine has been compromised and would like to search
the system for any setuid programs. Which of the following commands would accomplish this?
A - rpm-Va
B - search u+s
C - locate --suid
D - find/ -perm -4000
Answer: D
Question: 716
A script set to run using /bin/sh has executed a grep command, and grep has returned an error. If
the grep result is analyzed by the following logic:
if [ “$?“ = 0 ]
then
echo BLUE
else echo GREEN
fi
Which of the following will be the scripts output?
A - End
B - BLUE
C - GREEN
D - Error Unexpected input “$“
Answer: C
Question: 717
The named service needs to be secured. Which of the following would BEST accomplish this?
Page 212 of 217

Exam Name: Linux+
Exam Type: CompTIA
A - Run named as root.

B - Run named in a chroot jail.
C - Run named in UDP mode only.
D - Run named on a non-standard port.
Answer: B
Question: 718
A technician wants to allow the computer to sniff incoming and outgoing packets on the Ethernet
interface. Which of the following ifconfig commands will do this correctly?
A - ifconfig eth0 promisc

B - ifconfig eth0 unicast
C - ifconfig eth0 multicast
D - ifconfig eth0 listenall
Answer: A
Question: 719
A Linux workstation that has been configured with the IP address of 192.168.4.235/26 and a
default gateway of 192.168.4.1. It can ping a server at 192.168.4.250. The workstation cannot
ping a second server at 192.168.5.3. The administrator has verified that the default gateway
setting is correct. Which of the following is the problem?
A - The Ethernet card is faulty.

B - The Ethernet cable is faulty.
C - The netmask is wrong and should be changed to 255 .255.255 .0.
D - The netmask is wrong and should be changed to 255.255.255.128.
Answer: C
Question: 720
After downloading a new Linux distribution for a new installation. the administrator discovers the
machine does not have a bootable CD-ROM drive. Which of the following DOS utilities would the
administrator use to write a diskette image onto a 3.5” diskette?
A - copy
B - xcopy
C - linload
D - rawwrite
Answer: D
Question: 721
Which of the following is the function of the chroot command?
A - Change the root password.

B - Change the root login name.
C - Change the root application.
D - Change the root directory for the shell.
Answer: D
Question: 722
Page 213 of 217

Exam Name: Linux+
Exam Type: CompTIA
Which of the following programs could be used to display a remote login prompt on a serial line or
terminal?
A - sshd
B - agetty
C - portmap
D - console
Answer: B
Question: 723
After the LILO configuration file is edited, which of the following needs to be done to implement
the changes?
A - lilo
B - loadlin
C - lilo.conf
D - fdisk-mbr
Answer: A
Question: 724
Which of the following commands can be used to find all instances of files in the /etc directory
containing tp in the file name?
A - find *ntp
B - find ntp*
C - find /etc/ntp
D - find /etcr/* ntp*
Answer: D
Question: 725
When a file server is installed, which of the following directories would MOST likely be on a
separate partition?
A - /usr
B - /var
C - /home
D - /local
Answer: C
Question: 726
A Linux administrator wants to disable the use of setuid and setgid files for the /var file system.
How would this be accomplished?
A - Add an entry to /etc/setuid.conf

B - Run the command “tune2fs --nosuid /var”
C - Add an entry to the options list in /etc/fstab
D - Add an entry to the options list in /etc/sysctl.conf
Answer: C
Question: 727
Page 214 of 217

Exam Name: Linux+
Exam Type: CompTIA
A workstation is unable to browse a Website by name. Which of the following files must be
checked to confirm DNS settings?
A - /etc/init.d
B - /etc/resolv.conf
C - /etc/named.conf
D - /etc/nameserver.conf
Answer: B
Question: 728
A Linux system is powered down unexpectedly. After reboot, an automatic disk check is run and
numerous mode errors are reported and corrected. Which of the following file systems was
MOST likely used?
A - jfs
B - ext2
C - ext3
D - ReiserFS
Answer: B
Question: 729
The following is part of the Samba configuration file:
[aprinter]
path = /usr/spool/public
read only = yes
printable = yes
Which of the following lines needs to be added to the file to allow print access to everyone?
A - users = *
B - printall = yes
C - guestok = yes
D - anonymous = yes
Answer: C
Question: 730
A user who is installing Linux inserts the install CD-ROM and then reboots the computer.
However, the computer boots into Windows. Which of the following MOST likely caused the
problem?
A - The MD5 sum is erroneous.

B - The hard drive does not support Linux.
C - The computer BIOS has the wrong boot order.
D - The user needs to install a Windows driver.
Answer: C
Question: 731
Which of the following modules is a dependency module for PCMCIA card services?
A - hid
Page 215 of 217

Exam Name: Linux+
Exam Type: CompTIA
B - tulip
C - parport_pc
D - yenta_socket
Answer: D
Question: 732
Which of the following group-level permissions is needed to create user accounts?
A. adm
B. root
C. nobody
D. ntadmin
Answer: B
Question: 733
Which of the following access control models uses roles to determine access permissions?
A. MAC
B. DAC
C. RBAC
D. None of the above.
Answer: C
Question: 734
Which access control model uses predefined access privileges control access to a resource?
A. MAC
B. RBAC
C. DAC
D. None of the above.
Answer: A
Question: 735
Which of the following commands will mount a USB flash drive successfully in Linux?
A. Predefined access privileges.

B. mount -t usbfs /dev/usb001 /mnt/usb
C. mount /dev/uda1 /mnt/usb
D. mount /dev/hde1 /mnt/usb
Answer: A
Question: 736
At boot time, the computer reported that there are problems with inodes and blocks. Which of the
following is the pAt boot time, the computer reported that there are problems with inodes and
blocks. Which of the following is the problem and how is it corrected?roblem and how is it
corrected?
A. The boot sector is corrupt and needs to be replaced.

B. The file system has become corrupt and needs to be repaired.
C. The partition table has become corrupt and needs to be repaired.
Page 216 of 217

Exam Name: Linux+
Exam Type: CompTIA
D. The drive is configured using an improper file system and needs to be reformatted.
Answer: A, B
End of Document
Page 217 of 217

XK0 002

Uploaded by

Copyright:

Available Formats

XK0 002

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

XK0 002

Uploaded by

Copyright:

Available Formats

What are some common Linux commands covered in the exam?

What are some common Linux commands covered in the exam?

What file system was most likely used given the scenario described?

What file system was most likely used given the scenario described?

Exam Name: Linux+

Exam Type: CompTIA

A. They have full access.

A. from the local system:

A. rpm -query <filename>

A. System hardware and user passwords

A. rpm -qf /etc/exports

Which of the following parts of this path is considered to be a security risk?

A. smbmount //servername/sharename /mountdirectory -o username=mywindowsusername,

A. Processes mail in blocks of five messages

A. route del -net 192.168.100.0 netmask 255.255.255.0 deny

The full documentation for ls is maintained as a Texinfo manual.

A. Usermod -c 555-1234 bsmith

lrwxrwxrwx 1 root root 1 Jun 13 12:44 b -> a

A. The user will receive an error message.

A. dmesg | grep CPU

A. ssh -a 3des 10.10.10.1

A. route add default gw 10.1.1.1

A. User john and joe are sharing a home directory.

D. lpr --list-jobs -h printhost

615 ? Ss 0:00 /usr/sbin/sshd

Which of the following should be investigated?

A. The cron process should have a lower PID (Process ID).

A. The system is extremely slow

drwxrwxrwt 9 root root 4096 Jun 13 09:42 tmp

Which of the following commands will accomplish this?

A. chmod 0777 /tmp

A. Update the root.hints file.

A. Use the custom tool provided by the hard drive manufacturer.

A. Intrusion detection, vulnerability assessment, and network mapping.

A. Set the SGID bit using 'chmod g+s /home/ourgroup'.

Ifconfig eth0192.168.0.120 netmask 255.255.255.0 up

Which of the following will this command accomplish?

A. Sets eth0 to 192.168.0.120

A. The system will give an error message.

D. Password attributes in /etc/passwd are moved to a corresponding entry in a new /etc/shadow

A. servername:sharename /mountdirectory smbfs

A. The distributor's source code

A. In the user's home directory

A. New user templates

A. Use a higher serial number in the DNS zone file.

-rw-r--r-- 1 root root 4096 Apr 20 17:30 filename

-rwx-w---- 1 root root 4096 Apr 20 17:40 filename

Which of the following commands will accomplish this?

A. chmod u+x,g-w,o-r filename

drwxrwxrwt 3 john1 users2 4096 Aug 06 13:42 research

Who has permission to delete files in this directory?

A. name1 | name2 > name3

A. Use the lpq command to remove the job

B. Removes a print job.

A. Use the brute-force password sniffer.

A. Use the newgrp command.

A. chown /tmp/data/user2 user 1

A. The /proc directory