XK0-005 Question #184: Real Exam Question with Answer & Explanation

Question

A systems administrator wants to disable the Linux Kernel WatchDog Timer Driver for security purposes. Which of the following will accomplish this task?

Options

• AAdd blacklist watchdog to the /etc/modprobe.d/blacklist file.
• BRename the /etc/modprobe.d/watchdog file to watchdog.off instead.
• CRemove the watchdog=1 from the /usr/modules/watchdog.conf file.
• DAdd watchdog=0 to the /etc/modprobe.conf file.

Explanation

To disable the Linux Kernel WatchDog Timer Driver, the appropriate kernel module must be prevented from loading.

Common mistakes.

• B. Renaming a file in /etc/modprobe.d/ is not a generic method for blacklisting and would only work if that specific file was directly loading the module.
• C. There is no standard /usr/modules/watchdog.conf file for this purpose, and removing a parameter is not the correct way to disable a module entirely.
• D. /etc/modprobe.conf is an outdated location for module configuration, and adding watchdog=0 would typically be a module parameter, not a disable command.

Concept tested. Blacklisting Linux kernel modules

Reference. https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/kernel_administration_guide/ch-kernel-modules#s2-blacklist-a-module

No community discussion yet for this question.