Objective 2.2XK0-005

2.2 Given a scenario, implement identity management.

Objective 2.2 sits in Security, which carries 21% of the Linux+ exam. The questions below are original, written from the official objective title above, and each explanation cites the CompTIA page it rests on.

Objective title verbatim from the official objectives. CompTIA exam page

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

2-2SecurityModerate

An auditor asks why /etc/shadow exists at all when /etc/passwd already lists accounts. What is the key property?

It replicates automatically across hostsNothing replicates the file between hosts by itself.
It loads faster than the passwd fileLoad speed is not a property the file exists for.
It stores group memberships as wellGroup membership lives in the group files.
It must not be readable by regular usersCorrect · your answerCorrect. Restricted readability is the point of the file.

Correct.

Concept

Password hashes moved out of the world-readable account list into a file whose whole design premise is restricted read access.

Why D

The shadow file holds the password and aging information and must not be readable by regular users if password security is to be maintained.

#shadow#passwords

Now you: objective 2.2 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

2-2SecurityModerate

A technician inspects a service account's line in /etc/shadow and finds the password field begins with an exclamation mark. What does that mean?

Sample question 2 of 3

2-2SecurityHard

A user's password expired last month and a grace field allowed continued logins for a time that has now also elapsed. What is their state?

Sample question 3 of 3

2-2SecurityModerate

During a hardening review, a line in /etc/shadow has an empty password field. What does that permit?

Full Linux+ question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Security