w shows currently logged-in users and their processes.

man shows manual pages.

id shows UID/GID for current user.

host is a DNS lookup tool.

Reference:

CompTIA Linux+ XK0-005 Study Guide, Domain 5.0 – Troubleshooting

“Use the w command to list current users and their activities.”

The chgrp command is used to change the group ownership of files and directories. By using this

command, the administrator can assign the files in the newly created directory to the human

resources group, which will allow the users in that group to access them. The other commands are

not relevant for this task. For example:

chattr is used to change the file attributes, such as making them immutable or append-only1.

chage is used to change the password expiration information for a user account2.

chcon is used to change the security context of files and directories, which is related to SELinux3.

:

The CompTIA Linux+ Certification Exam Objectives mention that the candidate should be able to

“manage file and directory ownership and permissions” as part of the Hardware and System

Configuration domain4.

The web search result 2 explains how to use the chgrp command with examples.

The web search result 3 compares the chmod and chgrp commands and their effects on file

permissions.

The command visudo -c can be used to check the validity of the sudo rules in the /etc/sudoers file.

The visudo command is a tool for editing and validating the /etc/sudoers file, which defines the rules

for the sudo command. The -c option checks the syntax and logic of the file and reports any errors or

warnings. The command visudo -c will verify the sudo rules and help the administrator avoid any

mistakes. This is the correct command to use for this task. The other options are incorrect because

they either do not check the validity of the file (test, sudo, or cat) or do not exist (sudo vi

check). : CompTIA Linux+ (XK0-005) Certification Study Guide, Chapter 18: Securing Linux Systems,

page 546.

File attributes are preventing file modification, which is causing the error message. The output

of lsattr /home/user/data.txt shows that the file has the immutable attribute (i) set, which means

that the file cannot be changed, deleted, or renamed. The command setfacl -b

/home/user/data.txt tries to remove the ACL from the file, but fails because of the immutable

attribute. The administrator needs to remove the immutable attribute first by using the

command chattr -i /home/user/data.txt and then try to remove the ACL again. The other options are

incorrect because they are not supported by the outputs. The administrator is using a highly

privileged account, as shown by the # prompt. The filesystem is mounted with the correct options, as

shown by the output of mount | grep /home. SELinux file context is not denying the ACL changes, as

shown by the output of ls -Z /home/user/data.txt. : CompTIA Linux+ (XK0-005) Certification Study

Guide, Chapter 11: Managing Files and Directories, pages 357-358.

The command dd if=/dev/sdc1 of=/dev/sdd1 copies the data from the input file (if) /dev/sdc1 to the

output file (of) /dev/sdd1, byte by byte. This is the correct way to clone a partition. The other options

are incorrect because they either compress the data (tar -cvzf), synchronize the files (rsync), or copy

the files over a network (scp), which are not the same as cloning a partition. : CompTIA Linux+ (XK0-

005) Certification Study Guide, Chapter 10: Managing Storage, page 321.

The system has reached its maximum permitted throughput, therefore iowait is increasing. The output of iostat -x shows that the device sda has an average throughput of 44.01 MB/s, which is equal to the disk maximum throughput of 44 Mbps. The output also shows that the device sda has an average iowait of 99.99%, which means that the CPU is waiting for the disk to complete the I/O requests. This indicates that the disk is the bottleneck and the system is slow due to the high iowait. The other options are incorrect because they are not supported by the outputs. The system has not reached its maximum IOPS, as the device sda has an average IOPS of 563.50, which is lower than the disk maximum IOPS of 690. The system is not mostly idle, as the output of top shows that the CPU is 100% busy. The system does not have a partitioned disk, as the output of lsblk shows that the device sda has only one partition sda1. : CompTIA Linux+ (XK0-005) Certification Study Guide, Chapter 17: Optimizing Linux Systems, pages 513-514.

The command gzip can extract files that are compressed with the gzip format, which has the

extension .gz. This is the correct command to use for the software package. The other options are

incorrect because they either compress files (bzip2 -z), unzip files that are compressed with the zip

format (unzip -v or funzip), or have the wrong options (-v or -z instead of -d). : CompTIA Linux+ (XK0-

005) Certification Study Guide, Chapter 11: Managing Files and Directories, page 353.

The user has the wrong shell assigned to the account, which is causing the issue. The output 1 shows

that the user’s shell is set to /bin/false, which is not a valid shell and will prevent the user from

logging in. The output 2 shows that the user’s home directory has the correct permissions (drwxr-xr-

x), and the output 3 shows that the user entered the correct password and was accepted by the SSH

daemon, but the session was closed immediately due to the invalid shell. The other options are

incorrect because they are not supported by the outputs. : CompTIA Linux+ (XK0-005) Certification

Study Guide, Chapter 13: Managing Network Services, page 413.

The command that will satisfy the requirement of having all files that are created by the user named

web have read-only permissions by the owner is echo “umask 377” >> /home/web/.bashrc. This

command will append the umask 377 command to the end of the .bashrc file in the web user’s home

directory. The .bashrc file is a shell script that is executed whenever a new interactive shell session is

started by the user. The umask command sets the file mode creation mask, which determines the

default permissions for newly created files or directories by subtracting from the maximum

permissions (666 for files and 777 for directories). The umask 377 command means that the user

does not want to give any permissions to the group or others (3 = 000 in binary), and only wants to

give read permission to the owner (7 - 3 = 4 = 100 in binary). Therefore, any new file created by the

web user will have read-only permission by the owner (400) and no permission for anyone

else. : CompTIA Linux+ (XK0-005) Certification Study Guide, Chapter 8: Managing Users and

Groups; Umask Command in Linux | Linuxize

The command restorecon -R -v /var/www/html will best resolve the issue. The issue is caused by the

incorrect SELinux context of the web server files under the /var/www/html directory. The output of ls

-Z /var/www/html shows that the files have the type user_home_t, which is not allowed for web

content. The command restorecon restores the default SELinux context of files based on the policy

rules. The options -R and -v are used to apply the command recursively and verbosely. This command

will change the type of the files to httpd_sys_content_t, which is the correct type for web content.

This will allow the web server to access the files and serve the pages to the browser. The other

options are incorrect because they either disable SELinux entirely (sed -i

's/SELINUX=enforcing/SELINUX=disabled/' /etc/selinux/config or setenforce 0), which is not a good

security practice, or enable an unnecessary boolean (setsebool -P httpd_can_network_connect_db

on), which is not related to the issue. : CompTIA Linux+ (XK0-005) Certification Study Guide, Chapter

18: Securing Linux Systems, page 535.