Exam XK0-005 topic 1 question 202 discussion

I agree with HappyDay I will say C is correct also but in terms of order of operations. it would be D. umount /dev/sdc E. fdisk /dev/sdc (refer to Happy's explanation) H. Enable or start the luks encryption Then you would do C after encrypting with LUKs but sadly it says choose only 3 choices.

D. umount /dev/sdc The filesystem is currently mounted (as seen in the dmesg output), and you cannot encrypt a mounted partition. You must unmount the device before formatting or encrypting it. E. fdisk /dev/sdc You may need to delete existing partitions and create a new one (like /dev/sdc1) to prepare the disk for encryption and new formatting. fdisk helps manage the partition table H. cryptsetup luksFormat /dev/sdc1 This command initializes the partition with LUKS encryption It formats the partition for encrypted use (you’ll need to confirm and enter a passphrase)

H. cryptsetup luksFormat /dev/sdc1 This command initializes the LUKS partition on /dev/sdc1, preparing it for encryption. B. pvcreate /dev/sdc This command initializes a physical volume for use by LVM, which might be used after the LUKS setup. C. mkfs.ext4 /dev/mapper/LUKS0001 - L ENCRYPTED After setting up LUKS and mapping it, this command formats the LUKS-encrypted device with the ext4 filesystem.

Given the scenario where a systems administrator is enabling LUKS (Linux Unified Key Setup) on a USB storage device with an ext4 filesystem format, the following steps should be performed: 1. **Unmount the USB storage device** to ensure that it is not in use. This is necessary to modify the filesystem.    - **D. `umount /dev/sdc`** 2. **Initialize LUKS on the USB storage device** to set up encryption.    - **H. `cryptsetup luksFormat /dev/sdc1`** 3. **Create the filesystem on the LUKS encrypted device**. Since the requirement is to have an ext4 filesystem, use mkfs.ext4.    - **C. `mkfs.ext4 /dev/mapper/LUKS0001 -L ENCRYPTED`** Thus, the correct steps are: - **D. `umount /dev/sdc`** - **H. `cryptsetup luksFormat /dev/sdc1`** - **C. `mkfs.ext4 /dev/mapper/LUKS0001 -L ENCRYPTED`**