CompTIA · Linux+ XK0-006
Compliance and audit
Linux+ XK0-006 · Lesson 19 of 28 · 2:27:22
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the Linux+ XK0-006 exam (CompTIA Linux+ V8). In this lesson: detection and response, vulnerability scanning (CVEs, CVSS, backported patches, port scanners), standards (OpenSCAP, CIS Benchmarks), file integrity (AIDE, rpm verify, debsums), the software supply chain, secure data destruction, and login banners, with Pinecrest Media, a fictional video streaming company, as the running example. Includes three original practice questions.
Preview the topics
- A scanner flags OpenSSH on a Rocky Linux server as vulnerable, because its version number is older than the fixed one. The admin applied every update last week. What is the most likely explanation?
- After a break-in elsewhere, Pinecrest wants to know whether any program installed from a package on its web servers was changed since installation. Which command fits?
- A storage server with SSDs and a LUKS2 volume is retired today, and its data must be unrecoverable. What is the fastest reliable method?