XK0-005 · Question #184
A systems administrator wants to disable the Linux Kernel WatchDog Timer Driver for security purposes. Which of the following will accomplish this task?
The correct answer is A. Add blacklist watchdog to the /etc/modprobe.d/blacklist file. To disable the Linux Kernel WatchDog Timer Driver, the appropriate kernel module must be prevented from loading.
Question
A systems administrator wants to disable the Linux Kernel WatchDog Timer Driver for security purposes. Which of the following will accomplish this task?
Options
- AAdd blacklist watchdog to the /etc/modprobe.d/blacklist file.
- BRename the /etc/modprobe.d/watchdog file to watchdog.off instead.
- CRemove the watchdog=1 from the /usr/modules/watchdog.conf file.
- DAdd watchdog=0 to the /etc/modprobe.conf file.
How the community answered
(45 responses)- A93% (42)
- B2% (1)
- C4% (2)
Why each option
To disable the Linux Kernel WatchDog Timer Driver, the appropriate kernel module must be prevented from loading.
Blacklisting a kernel module prevents the kernel from loading it automatically at boot time or on demand. Adding `blacklist watchdog` to a file in the `/etc/modprobe.d/` directory (e.g., `/etc/modprobe.d/blacklist.conf`) ensures the `watchdog` module is not loaded.
Renaming a file in `/etc/modprobe.d/` is not a generic method for blacklisting and would only work if that specific file was directly loading the module.
There is no standard `/usr/modules/watchdog.conf` file for this purpose, and removing a parameter is not the correct way to disable a module entirely.
`/etc/modprobe.conf` is an outdated location for module configuration, and adding `watchdog=0` would typically be a module parameter, not a disable command.
Concept tested: Blacklisting Linux kernel modules
Source: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/kernel_administration_guide/ch-kernel-modules#s2-blacklist-a-module
Topics
Community Discussion
No community discussion yet for this question.