CompTIA XK0-005 Actual Questions

To enable IP forwarding, the kernel parameter net.ipv4.ip_forward must be set to 1. This is done by appending net.ipv4.ip_forward=1 to /etc/sysctl.conf and applying the changes using sysctl -p. This command ensures that the system can forward packets between different network interfaces.

The grep -ir "out of memory" /var/log command searches through log files in /var/log for any instances of "out of memory" errors, which indicate that the oom-killer terminated processes due to insufficient memory. This is the quickest way to determine if the oom-killer caused the MySQL process to be killed.

The +t option sets the "sticky bit" on a directory, which restricts deletion or renaming of files in the directory to the file's owner or the root user. This is commonly used in shared directories like /tmp, where multiple users may have access, but only the file owner should be allowed to modify their own files. The command chmod +t /directory/ applies this permission.

Some good security practices when hardening a Linux server are:

Removing unnecessary packages (B) to reduce the attack surface and eliminate potential vulnerabilities

Disabling the SSH root login possibility (E) to prevent unauthorized access and brute-force attacks on the root account References:

[CompTIA Linux+ Study Guide], Chapter 9: Securing Linux, Section: Hardening Linux

[How to Harden Your Linux Server]