CompTIA SK0-005 Online Practice Questions and Exam Preparation

CompTIA SK0-005 Online Questions & Answers

• Question 191:

  Which of the following would a systems administrator implement to ensure all web traffic is secure?

  A. SSH
  B. SSL
  C. SMTP
  D. PGP
  B. SSL

  ---

  Explanation

  Secure Sockets Layer (SSL): SSL and its successor Transport Layer Security (TLS) enable client and server computers to establish a secure connection session and manage encryption and decryption activities.

  https://paginas.fe.up.pt/~als/mis10e/ch8/chpt8-4bullettext.htm

• Question 192:

  Joe, a user in the IT department, cannot save changes to a sensitive file on a Linux server. An is -la shows the following listing: -rw-r--r 1 Ann IT 6780 12 June 2019 filename

  Which of the following commands would BEST enable the server technician to allow Joe to have access without granting excessive access to others?

  A. chmod 777 filename
  B. chown Joe filename
  C. chmod g+w filename
  D. chgrp IT filename
  C. chmod g+w filename

  ---

  Explanation

• Question 193:

  A server administrator has been asked to implement a password policy that will help mitigate the chance of a successful brute-force attack. Which of the following password policies should the administrator implement first?

  A. Lockout
  B. Length
  C. Complexity
  D. Minimum age
  A. Lockout

  ---

  Explanation

• Question 194:

  An administrator is configuring a new server for use as a database server. It will have two mirrored drives to hold the operating system, and there will be three drive bays remaining for storage. Which of the following RAID levels will yield the BEST combination of available space and redundancy?

  A. RAID 0
  B. RAID 1
  C. RAID 5
  D. RAID 10
  C. RAID 5

  ---

  Explanation

  The RAID level that would yield the BEST combination of available space and redundancy in this scenario is RAID 5. RAID 0 provides no redundancy and would not be a suitable choice for a database server where data protection is crucial.

  RAID 1 provides disk redundancy by mirroring two drives but would result in only half of the total storage capacity being available. In this case, the three remaining drive bays would provide less storage than RAID 5. RAID 10 provides both disk redundancy and increased storage capacity by combining mirroring and striping. However, since there are only three remaining drive bays, it would not be possible to set up RAID 10.

  RAID 5 provides a good balance of storage capacity and disk redundancy by striping data across multiple disks with parity data distributed among the disks. This configuration requires at least three drives and can withstand the failure of one

  disk. In this scenario, RAID 5 would provide the best balance of available space and redundancy for the remaining three drive bays.

• Question 195:

  A server room contains ten physical servers that are running applications and a cluster of three dedicated hypervisors. The hypervisors are new and only have 10% utilization. The Chief Financial Officer has asked that the IT department do what it can to cut back on power consumption and maintenance costs in the data center.

  Which of the following would address the request with minimal server downtime?

  A. Unplug the power cables from the redundant power supplies, leaving just the minimum required.
  B. Convert the physical servers to the hypervisors and retire the ten servers.
  C. Reimage the physical servers and retire all ten servers after the migration is complete.
  D. Convert the ten servers to power-efficient core editions.
  B. Convert the physical servers to the hypervisors and retire the ten servers.

  ---

  Explanation

  Option B, which involves converting the physical servers to the hypervisors and retiring the ten servers, would address the request with minimal server downtime and reduce power consumption and maintenance costs. Since the hypervisors

  are new and have low utilization, there is ample capacity to virtualize the existing physical servers. This would reduce the number of physical servers, resulting in lower power consumption and maintenance costs.

  Option A, which involves unplugging power cables, may result in unexpected downtime and would not reduce power consumption or maintenance costs.

  Option C, which involves re-imaging the physical servers and retiring them after the migration is complete, would require significant downtime and would not necessarily reduce power consumption or maintenance costs.

  Option D, which involves converting the physical servers to power-efficient core editions, may reduce power consumption, but would not necessarily ad

• Question 196:

  A technician is unable to access a server's package repository internally or externally. Which of the following are the MOST likely reasons? (Choose two.)

  A. The server has an architecture mismatch
  B. The system time is not synchronized
  C. The technician does not have sufficient privileges
  D. The external firewall is blocking access
  E. The default gateway is incorrect
  F. The local system log file is full
  C. The technician does not have sufficient privileges
  D. The external firewall is blocking access

  ---

  Explanation

  C. The technician does not have sufficient privileges to access the package repository.

  D. The external firewall is blocking access to the package repository.

  Therefore, options C and D are the correct answers.

  Option A (architecture mismatch) may cause issues with software installation or updates, but it is not related to the server's package repository access. Option B (system time not synchronized) may cause authentication issues but is unlikely

  to affect package repository access. Option E (incorrect default gateway) may affect network connectivity, but it is not directly related to package repository access. Option F (local system log file full) may affect logging and monitoring but is

  unlikely to affect package repository access.

• Question 197:

  A server administrator needs to ensure all Window-based servers within a data center have RDP disabled. There are thousands of servers performing various roles. Which of the following is the BEST way to meet this requirement?

  A. Run chkconfig --level 345 RDP off.
  B. Create a PowerShell script to disable the RDP service.
  C. Run chkconfig --list RDP.
  D. Create a Bash shell script to disable the Windows Remote Management service.
  E. Create a GPO to disable the Windows Remote Management service
  B. Create a PowerShell script to disable the RDP service.

  ---

  Explanation

• Question 198:

  A data center has 4U rack servers that need to be replaced using VMs but without losing any data. Which of the following methods will MOST likely be used to replace these servers?

  A. VMFS
  B. Unattended scripted OS installation
  C. P2V
  D. VM cloning
  C. P2V

  ---

  Explanation

• Question 199:

  A data center employee shows a driver's license to enter the facility Once the employee enters, the door immediately doses and locks, triggering a scale that then weighs the employee before granting access to another locked door. This is an example of.

  A. mantrap.
  B. a bollard
  C. geofencing
  D. RFID.
  A. mantrap.

  ---

  Explanation

  A mantrap is a security device that consists of a small space with two sets of interlocking doors, such that the first set of doors must close before the second one opens. A mantrap can be used to control access to a data center by verifying the identity and weight of the person entering. A bollard is a sturdy post that prevents vehicles from entering a restricted area. Geofencing is a technology that uses GPS or RFID to create a virtual boundary around a location and trigger an action when a device crosses it. RFID is a technology that uses radio waves to identify and track objects or people.

  References: https://www.techopedia.com/definition/16293/mantrap https://www.techopedia.com/definition/1437/bollard https://www.techopedia.com/definition/23961/geofencing https://www.techopedia.com/definition/506/radio-frequency-identification-rfid

• Question 200:

  Which of the following is the MOST secure method to access servers located in remote branch offices?

  A. Use an MFA out-of-band solution
  B. Use a Telnet connection
  C. Use a password complexity policy
  D. Use a role-based access policy
  D. Use a role-based access policy

  ---

  Explanation

  MFA and out of band could be an answer but MFA isn't specific to just secure remote access .. it is for the entire network. Out of band would be authentication that is done outside of the original communication.

  Telnet is not secure

  A password complexity policy has nothing to do with most secure access method RBAC provides a consistent authentication and authorization mechanism for users access. Role-based access control (RBAC) restricts network access based

  on a person's role within an organization and has become one of the main methods for advanced access control. The roles in RBAC refer to the levels of access that employees have to the network.