// learn Β· linux+ track Β· 21 of 29 topics live

The CompTIA Linux+ animated track.

Every domain on the XK0-006 V8 exam, mapped to our animated lessons and hands-on tools. Five domains, 32 sub-objectives β€” sourced directly from the official CompTIA objectives PDF. Vendor-neutral; works for RHEL, Ubuntu, Debian, openSUSE, Arch.

CompTIA Linux+ XK0-006 exam preparation. Vendor-neutral Linux certification track covering System Management, Security, Scripting with Containers and Automation, and Troubleshooting. Animated lessons and interactive tools mapped to each exam objective.
// exam

CompTIA Linux+XK0-006V8

current exam β€” replaces XK0-005

coverage
21 / 29

Syllabus mirrors the official CompTIA Linux+ XK0-006 V8 Exam Objectives, Document Version 4.0 (Β© 2024 CompTIA). CompTIA publishes updates periodically β€” always cross-check the latest PDF on comptia.org before scheduling your exam.

// domain 1.023% of exam
5 / 7 live

System Management

Linux fundamentals, device management, storage, networking config, shell operations, backup and restore, and virtualization.

// domain 2.020% of exam
5 / 6 live

Services and User Management

Files and directories, local accounts, processes and jobs, software management, systemd, and containers.

// domain 3.018% of exam
4 / 6 live

Security

Authentication and authorization, firewalls, OS hardening, account hardening, cryptography, and compliance.

3.1Authorization, authentication, accounting
soon

PAM, Polkit, SSSD/Winbind realm, LDAP, Kerberos, Samba. Logging with journalctl, rsyslog, logrotate, /var/log. System audit with auditd and audit.rules.

3.2Firewalls
β—† live

firewalld (zones, services, rich rules, runtime vs permanent), ufw, nftables, iptables, ipset. Netfilter modules. Address translation (NAT, PAT, DNAT, SNAT), stateful vs stateless, IP forwarding.

3.3OS hardening
β—† live

Privilege escalation (sudo, /etc/sudoers, NOEXEC/NOPASSWD, visudo, wheel/sudo group, su -). File attributes (chattr/lsattr β€” immutable, append-only). Permissions (chmod octal/symbolic, chown, special bits, umask). ACLs (setfacl/getfacl). SELinux (restorecon, semanage, chcon, getsebool/setsebool, audit2allow, sealert, enforcing/permissive/disabled). Secure SSH (key vs password, PermitRootLogin, AllowUsers/Groups, SSH tunneling, SFTP). fail2ban, chroot, secure boot (UEFI). Avoid Telnet/FTP/TFTP.

3.4Account hardening
soon

Password complexity/length/expiration/reuse/history, MFA, breach-list checks, restricted shells (/sbin/nologin, /bin/rbash), pam_tally2, avoiding root for daily use.

3.5Cryptography concepts and technologies
β—† live

Data at rest (GPG file encryption, LUKS2 filesystem encryption, Argon2). Data in transit (OpenSSL/LibreSSL, TLS versions, WireGuard). Hashing (SHA-256, HMAC), weak algorithm removal. Certificate management β€” trusted root certs, no-cost vs commercial CAs, avoiding self-signed.

3.6Compliance and audit
β—† live

Detection (anti-malware, IoCs), vulnerability scanning (CVE, CVSS, backporting patches, port scanners, protocol analyzers), standards (OpenSCAP, CIS Benchmarks), file integrity (AIDE, rkhunter, signed packages), secure data destruction (shred, badblocks, dd from /dev/urandom, cryptographic destruction), security banners (/etc/issue, /etc/issue.net, /etc/motd).

// domain 4.017% of exam
3 / 5 live

Automation, Orchestration, and Scripting

Infrastructure as Code, shell scripting, Python basics, Git, and (new in XK0-006) responsible use of AI for sysadmin work.

4.1Automation and orchestration
β—† live

IaC (Ansible playbooks/inventory/modules/facts, Puppet classes/certificates, OpenTofu provider/resource/state/API), unattended deployment (Kickstart, cloud-init), CI/CD (version control, shift-left testing, GitOps, pipelines, DevSecOps), and deployment orchestration (Kubernetes Pods/Deployments/Services/Volumes/ConfigMaps/Secrets, Docker Swarm, Docker/Podman Compose).

4.2Shell scripting
β—† live

Parameter expansion ${var}, command substitution $(cmd), subshells, functions, IFS/OFS, conditionals (if/case), loops (for/while/until), the #! interpreter directive, comparisons (numeric -eq/-gt/..., string =/==/=~, file -d/-f/-z), regex with =~, variables (env/args, export/local/set/unset), and return codes ($?).

4.3Python basics for sysadmin
soon

Virtual environments, built-in modules, installing dependencies (pip), Python fundamentals (indentation, current versions, data types β€” bool/dict/float/int/list/string), extensibility via modules and packages, and PEP 8 best practices.

4.4Version control with Git
β—† live

.gitignore, init/clone/config, add/commit/diff/log, branch/checkout, fetch/pull/push, merge/squash/rebase, reset/stash, and tagging.

4.5Responsible use of AI
soon

NEW in XK0-006. Use cases (code/regex/IaC generation, documentation, compliance recommendations, security review, code optimization/linting). Best practices β€” avoid copy-paste without review, verify output. Data governance β€” LLM training risks, human review, local vs public models, corporate policy. Prompt engineering.

// domain 5.022% of exam
4 / 5 live

Troubleshooting

Monitoring concepts, then four common failure surfaces: hardware/storage/OS, networking, security, and performance.

// also see
Red Hat Certification track (RHCSA + RHCE)

Red Hat-specific deep dive into the same skills. Strong complement to vendor-neutral Linux+.

view β†’
back to /learn