CompTIA CompTIA Server+ SK0-005 Questions & Answers

• Question 11:

  A server administrator purchased a single license key to use for all the new servers that will be imaged this year. Which of the following MOST likely refers to the licensing type that will be used?

  A. Per socket

  B. Open-source

  C. Per concurrent user

  D. Volume

  Correct Answer: D

  This is the most likely licensing type that will be used because volume licensing allows a single license key to be used for multiple installations of a software product. Volume licensing is typically used by organizations that need to deploy software to a large number of devices or users.

  References: https://www.microsoft.com/en-us/licensing/licensing-programs/volume-licensing-programs

• Question 12:

  A technician is attempting to log in to a Linux server as root but cannot remember the administrator password. Which of the following is the LEAST destructive method of resetting the administrator password?

  A. Boot using a Linux live CD and mount the hard disk to /mnt. Change to the /mnt/etc directory. Edit the passwd file found in that directory.

  B. Reinstall the OS in overlay mode. Reset the root password from the install GUI screen.

  C. Adjust the GRUB boot parameters to boot into single-user mode. Run passwd from the command prompt.

  D. Boot using a Linux live CD and mount the hard disk to /mnt. SCP the /etc directory from a known accessible server to /mnt/etc.

  Correct Answer: C

  The least destructive method of resetting the administrator password would be option C, adjusting the GRUB boot parameters to boot into single-user mode and running passwd from the command prompt. This method allows the technician to

  reset the root password without making any changes to the system's configuration files or reinstalling the operating system.

  Option A involves editing the system's passwd file, which could potentially cause issues with user accounts and permissions.

  Option B involves reinstalling the OS, which is a very destructive method and would result in data loss and a complete reset of the system.

  Option D involves copying system configuration files from another server, which could potentially introduce new problems and is not a recommended method for resetting the root password.

• Question 13:

  Which of the following BEST describes overprovisioning in a virtual server environment?

  A. Committing more virtual resources to virtual machines than there are physical resources present

  B. Installing more physical hardware than is necessary to run the virtual environment to allow for future expansion

  C. Allowing a virtual machine to utilize more resources than are allocated to it based on the server load

  D. Ensuring there are enough physical resources to sustain the complete virtual environment in the event of a host failure

  Correct Answer: A

  This is the best definition of overprovisioning in a virtual server environment because it means allocating more CPU, memory, disk, or network resources to the virtual machines than what is actually available on the physical host. This can lead to performance issues and resource contention.

  References: https://www.hpe.com/us/en/insights/articles/10-virtualization-mistakes-everyone-makes-1808.html

• Question 14:

  An administrator is alerted to a hardware failure in a mission-critical server. The alert states that two drives have failed. The administrator notes the drives are in different RAID 1 arrays, and both are hot-swappable.

  Which of the following steps will be the MOST efficient?

  A. Replace one drive, wait for a rebuild, and replace the next drive.

  B. Shut down the server and replace the drives.

  C. Replace both failed drives at the same time.

  D. Replace all the drives in both degraded arrays.

  Correct Answer: C

  The most efficient step would be to replace both failed drives at the same time. This will allow for the quickest recovery time since both drives have failed and need to be replaced to restore data redundancy.

  Replacing one drive at a time, waiting for a rebuild, and then replacing the next drive will increase the risk of data loss if another drive fails during the rebuild process. Shutting down the server to replace the drives will result in extended downtime. Replacing all the drives in both degraded arrays is not necessary, as only the two failed drives need to be replaced.

• Question 15:

  Which of the following is a system that scans outgoing email for account numbers, sensitive phrases, and other forms of PII?

  A. SIEM

  B. DLP

  C. HIDS

  D. IPS

  Correct Answer: B

  DLP stands for Data Loss Prevention and it is a system that scans outgoing email for account numbers, sensitive phrases, and other forms of PII (Personally Identifiable Information). DLP can help prevent data breaches, comply with

  regulations, and protect the privacy of customers and employees. DLP can also block, encrypt, or quarantine emails that contain sensitive data.

  References:

  https://www.comptia.org/training/resources/exam-objectives/comptia-server-sk0-005-exam-objectives (Objective 3.2)

• Question 16:

  A systems administrator is trying to determine why users in the human resources department cannot access an application server. The administrator reviews the application logs but does not see any attempts by the users to access the application.

  Which of the following is preventing the users from accessing the application server?

  A. NAT

  B. ICMP

  C. VLAN

  D. NIDS

  Correct Answer: C

  If the application logs do not show any attempts by users to access the application server, it is likely that some network-related issue is preventing users from accessing the server.

  Out of the options given, the most likely culprit is VLAN (Virtual Local Area Network).

• Question 17:

  An administrator discovers a Bash script file has the following permissions set in octal notation:

  Which of the following is the MOST appropriate command to ensure only the root user can modify and execute the script?

  A. chmod go-rwx

  B. chmod u=rwx

  C. chmod u+wx

  D. chmod g-rwx

  Correct Answer: B

  The octal notation "777" represents full permissions (read, write, and execute) for the owner, group, and others. To ensure only the root user can modify and execute the script, we need to remove write and execute permissions for group and others while keeping the same permissions for the owner. Therefore, the most appropriate command would be:

  B. chmod u=rwx,g=,o= script_file

  This command sets the owner's permissions to read, write, and execute (u=rwx) while removing all permissions for the group (g=) and others (o=), effectively restricting modification and execution to the root user only.

• Question 18:

  A syslog server is configured to use UDP port 514. The administrator uses Telnet to check port 514 against the syslog server. However, the syslog server is not responding. Which of the following is the MOST likely reason why the syslog server is not responding?

  A. The syslog server is down.

  B. Telnet does not work on UDP.

  C. The firewall is blocking UDP port 514

  D. The log is full on the syslog server.

  Correct Answer: B

• Question 19:

  A server administrator recently replaced an overheating CPU in a server at a datacenter. Following the CPU replacement, the server logs indicate the server continues to overheat. Which of the following could help mitigate this issue?

  A. The UEFI/BIOS should be updated.

  B. The CPU should be replaced with a newer model.

  C. The graphics card should be replaced.

  D. An additional fan should be installed in the server.

  Correct Answer: D

• Question 20:

  A server technician downloaded new firmware from the manufacturer's website. The technician then attempted to install the firmware on the server, but the installation failed, stating the file is potentially corrupt.

  Which of the following should the technician have checked prior to installing the firmware?

  A. DLP configuration

  B. MBR failure

  C. ECC support

  D. MD5 checksum

  Correct Answer: D

  A MD5 checksum is a value that is calculated from a file using a cryptographic hash function. A MD5 checksum is used to verify the integrity of a file by comparing it with the original value provided by the manufacturer or the source. If the MD5 checksums match, it means that the file is authentic and has not been corrupted or tampered with. If the MD5 checksums do not match, it means that the file is potentially corrupt or malicious and should not be installed12. A DLF configuration (A) is a setting that determines how a dynamic link library (DLL) is loaded into memory and executed by an application. A DLF configuration does not check the integrity of a file. A MBR failure (B) is a problem that occurs when the master boot record (MBR) of a disk is damaged or corrupted, preventing the system from booting. A MBR failure does not check the integrity of a file. ECC support ?is a feature that enables error-correcting code (ECC) memory to detect and correct data errors in RAM. ECC support does not check the integrity of a file. References: https://www.comparitech.com/net-admin/file-integrity-monitoring-tools/ https://csrc.nist.gov/CSRC/media/Presentations/Firmware-Integrity-Verification-Monitoring-and-Re/images-media/day2_demonstration_330-420.pdf