CompTIAAssociate Level2026 Updated

CompTIA Linux+ XK0-005 Exam Guide 2026: Everything You Need to Pass

Updated May 1, 202612 min readWritten by Certsqill experts

Quick facts — XK0-005

Exam cost

$338 USD

Questions

Up to 90 items

Time limit

90 minutes

Passing score

720 / 900

Valid for

3 years (CE)

Testing

Pearson VUE

Who this exam is for

The CompTIA Linux+ XK0-005 certification is designed for professionals who work with or want to work with CompTIA technologies in a professional capacity. It is taken by cloud engineers, DevOps practitioners, IT administrators, and technical professionals looking to validate their expertise.

You do not need extensive prior experience to attempt it, but you will benefit from hands-on familiarity with the subject matter. The exam tests applied knowledge and architectural judgment, not just memorization. If you can reason about trade-offs and real-world scenarios, structured practice will handle the rest.

Domain breakdown

The XK0-005 exam is built around official domains, each with a fixed percentage of the question pool. This distribution should directly inform how you allocate your study time.

Domain

Weight

Focus areas

System Management

32%

Filesystem hierarchy (FHS), package management (apt, yum/dnf, rpm), file permissions (chmod, chown, ACLs, umask), hard vs symbolic links, system initialization (systemd, runlevels/targets), shell scripting basics.

Security

21%

File and directory permissions (SUID, SGID, sticky bit), SELinux/AppArmor contexts and modes, PAM modules, user and group management, SSH hardening (key-based auth, /etc/ssh/sshd_config), firewall configuration (iptables, firewalld, ufw).

Scripting, Containers & Automation

19%

Bash scripting (variables, conditionals, loops, functions, exit codes), regular expressions with grep/sed/awk, Git basics, Docker container management, orchestration concepts, Ansible for Linux automation.

Troubleshooting

28%

CPU/memory/disk performance analysis (top, vmstat, iostat, free, df/du), network troubleshooting (ip, ss, tcpdump, nmap), log analysis (journalctl, /var/log/), boot process troubleshooting, hardware diagnosis.

Note the domain with the highest weight — many candidates under-invest here because it feels conceptual. In practice, this is where the exam is most precise, with scenario-based questions that test specifics.

What the exam actually tests

This is not a memorization exam. Questions require applied judgment under constraints. Almost every question includes a scenario with explicit requirements and asks you to select the most appropriate solution.

Here are examples of the question types you will encounter:

Command output interpretation

"The output of "ls -la" on /etc/passwd shows "-rw-r--r-- 1 root root". What permissions does a regular user have on this file?"

Tests permission reading: owner (rw-) = read+write, group (r--) = read only, others (r--) = read only. Linux+ loves showing ls -la output and asking specific permission questions.

Bash scripting logic

"A script contains: if [ $1 -gt 100 ]; then echo "large"; fi. What output is produced when the script is run with the argument 50?"

Tests basic Bash scripting: comparison operators (-gt, -lt, -eq, -ne), quoting variable in brackets, and understanding that no output is produced when the condition is false (no else branch).

Performance troubleshooting

"A Linux server shows 98% CPU usage. The top command shows a process named python3 consuming 90% CPU. What should the administrator do first before killing the process?"

Tests systematic troubleshooting: identify the process, check what it is doing (strace/lsof), determine if it is legitimate before terminating. The sequence of investigation matters as much as the final action.

How to prepare — 4-week study plan

This plan assumes one hour per weekday and roughly 30 minutes of lighter review on weekends. It is calibrated for someone with some relevant experience. If you are starting from zero, add an extra week before Week 1 to familiarise yourself with the basics.

Week 1: System management + File system

File system hierarchy: know what belongs in /bin, /sbin, /etc, /var, /tmp, /home, /usr, /proc
Permissions: chmod (octal and symbolic), chown, umask default values and how they work
Package management: apt-get, dnf, rpm -ivh/-qa/-e — practice on both a Debian and RHEL-based VM
systemd: systemctl start/stop/enable/disable/status/mask — know all states and what they mean

Week 2: Security + SSH + Firewall

SELinux: getenforce, setenforce, chcon, restorecon, semanage fcontext — lab with a broken web server
AppArmor: aa-status, aa-enforce, aa-complain — understand profile enforcement vs complain mode
SSH: configure key-based auth, disable password auth in sshd_config, know /etc/ssh/ file purposes
firewalld: add services, add ports, permanent vs runtime, zone concepts (public, internal, trusted)

Week 3: Bash scripting + Containers

Bash variables: $1-$9 positional, $#, $?, $! — write a script using all of them
Conditionals and loops: if/elif/else, for, while, until — practice writing all four from memory
grep/sed/awk: write pipelines to extract and transform log file content
Docker: docker run, ps, images, exec, logs, rm, build — practice basic container lifecycle

Week 4: Troubleshooting + Mock exams

Performance: top, vmstat, iostat, sar — interpret output for CPU, memory, I/O bottlenecks
Network troubleshooting: ss -tulnp (replaces netstat), ip addr, ip route, tcpdump basics
Full timed mock exam — performance-based questions (PBQs) require Linux terminal skills
Review: focus on scripting, SELinux troubleshooting, and systemd unit file structure

Common mistakes candidates make

These patterns appear repeatedly among candidates who resit this exam. Knowing them in advance is worth several percentage points.

Only practicing on one distribution

Linux+ covers both Debian-based (Ubuntu, apt) and RHEL-based (CentOS/RHEL, dnf) distributions. A candidate who only knows apt will miss questions about rpm and dnf. Set up VMs for both Ubuntu and Rocky/AlmaLinux and practice on both.

Skipping Bash scripting

Scripting is 19% of the exam and includes a performance-based question that requires writing or debugging a Bash script. Candidates without scripting practice fail PBQs entirely. Write 5 scripts per week: backup scripts, log parsers, user creation scripts.

Memorizing SELinux concepts without lab practice

SELinux troubleshooting (fixing file context denials, running restorecon, using audit2allow) requires hands-on experience. Reading about SELinux produces surface-level knowledge that collapses on scenario questions. Break your SELinux context in a lab and fix it.

Treating containers and automation as optional

The XK0-005 revision significantly increased coverage of Docker and Ansible. Candidates with the older XK0-004 study materials miss these entirely. Know Docker container lifecycle commands and basic Ansible playbook structure before sitting the exam.

Is Certsqill right for you?

Honestly: Certsqill is built for candidates who have already done some studying and want to convert knowledge into exam performance. If you have never touched the subject, start with a foundational course first — then come to Certsqill when you are ready to practice.

Where Certsqill is strong: question depth, AI-powered explanations, and domain analytics. Every question is mapped to the exam blueprint. When you get something wrong, an AI-powered explanation shows why the right answer is right and why each wrong answer fails under the specific constraints in the question.

Where Certsqill is not a replacement: video courses and hands-on labs. Use Certsqill to test and sharpen — not as your first exposure to a topic you have never encountered.

Ready to start practicing?

Exam-accurate XK0-005 practice questions. AI-powered explanations. Try 20 free.