nerdexam
CompTIA

XK0-005 · Question #184

A systems administrator wants to disable the Linux Kernel WatchDog Timer Driver for security purposes. Which of the following will accomplish this task?

The correct answer is A. Add blacklist watchdog to the /etc/modprobe.d/blacklist file. To disable the Linux Kernel WatchDog Timer Driver, the appropriate kernel module must be prevented from loading.

System Management

Question

A systems administrator wants to disable the Linux Kernel WatchDog Timer Driver for security purposes. Which of the following will accomplish this task?

Options

  • AAdd blacklist watchdog to the /etc/modprobe.d/blacklist file.
  • BRename the /etc/modprobe.d/watchdog file to watchdog.off instead.
  • CRemove the watchdog=1 from the /usr/modules/watchdog.conf file.
  • DAdd watchdog=0 to the /etc/modprobe.conf file.

How the community answered

(45 responses)
  • A
    93% (42)
  • B
    2% (1)
  • C
    4% (2)

Why each option

To disable the Linux Kernel WatchDog Timer Driver, the appropriate kernel module must be prevented from loading.

AAdd blacklist watchdog to the /etc/modprobe.d/blacklist file.Correct

Blacklisting a kernel module prevents the kernel from loading it automatically at boot time or on demand. Adding `blacklist watchdog` to a file in the `/etc/modprobe.d/` directory (e.g., `/etc/modprobe.d/blacklist.conf`) ensures the `watchdog` module is not loaded.

BRename the /etc/modprobe.d/watchdog file to watchdog.off instead.

Renaming a file in `/etc/modprobe.d/` is not a generic method for blacklisting and would only work if that specific file was directly loading the module.

CRemove the watchdog=1 from the /usr/modules/watchdog.conf file.

There is no standard `/usr/modules/watchdog.conf` file for this purpose, and removing a parameter is not the correct way to disable a module entirely.

DAdd watchdog=0 to the /etc/modprobe.conf file.

`/etc/modprobe.conf` is an outdated location for module configuration, and adding `watchdog=0` would typically be a module parameter, not a disable command.

Concept tested: Blacklisting Linux kernel modules

Source: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/kernel_administration_guide/ch-kernel-modules#s2-blacklist-a-module

Topics

#Kernel Modules#System Configuration#Linux Administration#Watchdog Timer

Community Discussion

No community discussion yet for this question.

Full XK0-005 Practice