CompTIA CompTIA Certifications SK0-005 Questions & Answers

• Question 211:

  A company deploys antivirus, anti-malware, and firewalls that can be assumed to be functioning properly. Which of the following is the MOST likely system vulnerability?

  A. Insider threat

  B. Worms

  C. Ransomware

  D. Open ports

  E. Two-person integrity

  Correct Answer: A

  Insider threat is the most likely system vulnerability in a company that deploys antivirus, anti-malware, and firewalls that can be assumed to be functioning properly. An insider threat is a malicious or negligent act by an authorized user of a system or network that compromises the security or integrity of the system or network. An insider threat can include data theft, sabotage, espionage, fraud, or other types of attacks. Antivirus, anti-malware, and firewalls are security tools that can protect a system or network from external threats, such as viruses, worms, ransomware, or open ports. However, these tools cannot prevent an insider threat from exploiting their access privileges or credentials to harm the system or network.

• Question 212:

  Which of the following must a server administrator do to ensure data on the SAN is not compromised if it is leaked?

  A. Encrypt the data that is leaving the SAN

  B. Encrypt the data at rest

  C. Encrypt the host servers

  D. Encrypt all the network traffic

  Correct Answer: B

  The administrator must encrypt the data at rest to ensure data on the SAN is not compromised if it is leaked. Data at rest refers to data that is stored on a device or a medium, such as a hard drive, a flash drive, or a SAN (Storage Area Network). Data at rest can be leaked if the device or the medium is lost, stolen, or accessed by unauthorized parties. Encrypting data at rest means applying an algorithm that transforms the data into an unreadable format that can only be decrypted with a key. Encryption protects data at rest from being exposed or misused by attackers who may obtain the device or the medium.

• Question 213:

  DRAG DROP

  A recent power Outage caused email services to go down. A sever administrator also received alerts from the datacenter's UPS.

  After some investigation, the server administrator learned that each POU was rated at a maximum Of 12A.

  INSTRUCTIONS

  Ensure power redundancy is implemented throughout each rack and UPS alarms are resolved. Ensure the maximum potential PDU consumption does not exceed 80% or 9.6A).

  1.

  PDU selections must be changed using the pencil icon.

  2.

  VM Hosts 1 and 2 and Mail Relay can be moved between racks.

  3.

  Certain devices contain additional details.

  Select and Place:

  

  Correct Answer:

  

• Question 214:

  HOTSPOT

  A systems administrator deployed a new web proxy server onto the network. The proxy server has two interfaces: the first is connected to an internal corporate firewall, and the second is connected to an internet-facing firewall. Many users at the company are reporting they are unable to access the Internet since the new proxy was introduced. Analyze the network diagram and the proxy server's host routing table to resolve the Internet connectivity issues.

  INSTRUCTIONS

  Perform the following steps:

  1.

  Click on the proxy server to display its routing table.

  2.

  Modify the appropriate route entries to resolve the Internet connectivity issue.

  If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

  

  Hot Area:

  

  Correct Answer:

  

• Question 215:

  A startup company needs to set up an initial disaster recovery site. The site must be cost- effective and deployed quickly. Which of the following sites should the company set up?

  A. Hot

  B. Cold

  C. Colocated

  D. Warm

  Correct Answer: B

  Explanation: A cold site is a backup facility with little or no hardware equipment installed. A cold site is the most cost-effective option among the three disaster recovery sites. However, due to the fact that a cold site doesn't have any preinstalled equipment, it takes a lot of time to properly set it up so as to fully resume business operations1.

• Question 216:

  A server technician has been asked to upload a few files from the internal web server to the internal FTP server. The technician logs in to the web server using PuTTY, but the connection to the FTP server fails. However, the FTP connection from the technician's workstation is sucessful. To troubleshoot the issue, the technician executes the following command on both the web server and the workstation:

  ping ftp.acme.local

  The IP address in the command output is different on each machine. Which of the following is the MOST likely reason for the connection failure?

  A. A misconfigured firewall

  B. A misconfigured hosts.deny file

  C. A misconfigured hosts file

  D. A misconfigured hosts.allow file

  Correct Answer: C

  Remove PuTTY from the question it's intended as a distraction. The key is "ping ftp.acme.local The IP address in the command output is different on each machine." hosts.allow and hosts.deny are for ACL not direction a host file that is different on each machine would cause the IP address to be different

• Question 217:

  A server administrator needs to harden a server by only allowing secure traffic and DNS inquiries. A port scan reports the following ports are open:

  A. 21

  B. 22

  C. 23

  D. 53

  E. 443

  F. 636

  Correct Answer: D

  22 = Secure Shell (Secure)

  53 = DNS (as requested by the question)

  443 = HTTPs (Hyper Text Transfer Protocol Secure)

  636 = LADPs (Lightweight Directory Access Protocol Secure)

  21 = File Transfer Protocol (Not Secure)

  23 = Telnet (Not Secure)

  The administrator should only allow secure traffic and DNS inquiries on the server, which means that only ports 22, 53, and 443 should be open. Port 22 is used for SSH (Secure Shell), which is a protocol that allows secure remote login and

  command execution over a network connection using a command-line interface (CLI). Port 53 is used for DNS (Domain Name System), which is a service that translates domain names into IP addresses and vice versa. Port 443 is used for

  HTTPS (Hypertext Transfer Protocol Secure), which is a secure version of HTTP that encrypts the data exchanged between a web browser and a web server.

  Reference:

  https://www.csoonline.com/article/3191531/securing-risky-network-ports.html

• Question 218:

  Which of the following BEST describes the concept of right to downgrade?

  A. It allows for the return of a new OS license if the newer OS is not compatible with the currently installed software and is returning to the previously used OS

  B. It allows a server to run on fewer resources than what is outlined in the minimum requirements document without purchasing a license

  C. It allows for a previous version of an OS to be deployed in a test environment for each current license that is purchased

  D. It allows a previous version of an OS to be installed and covered by the same license as the newer version

  Correct Answer: D

  The concept of right to downgrade allows a previous version of an OS to be installed and covered by the same license as the newer version. For example, if a customer has a license for Windows 10 Pro, they can choose to install Windows

  8.1 Pro or Windows 7 Professional instead and still be compliant with the license terms. Downgrade rights are granted by Microsoft for certain products and programs, such as Windows and Windows Server software acquired through Commercial Licensing, OEM, or retail channels. Downgrade rights are intended to provide customers with flexibility and compatibility when using Microsoft software.

• Question 219:

  A server administrator mounted a new hard disk on a Linux system with a mount point of /newdisk. It was later determined that users were unable to create directories or files on the new mount point. Which of the following commands would successfully mount the drive with the required parameters?

  A. echo /newdisk >> /etc/fstab

  B. net use /newdisk

  C. mount -o remount, rw /newdisk

  D. mount -a

  Correct Answer: C

  The administrator should use the command mount -o remount,rw /newdisk to successfully mount the drive with the required parameters. The mount command is used to mount file systems on Linux systems. The -o option specifies options for mounting file systems. The remount option re-mounts an already mounted file system with different options. The rw option mounts a file system with read-write permissions. In this case, /newdisk is a mount point for a new hard disk that was mounted with read-only permissions by default. To allow users to create directories or files on /newdisk, the administrator needs to re-mount

• Question 220:

  A technician is attempting to update a server's firmware. After inserting the media for the firmware and restarting the server, the machine starts normally into the OS. Which of the following should the technician do NEXT to install the firmware?

  A. Press F8 to enter safe mode

  B. Boot from the media

  C. Enable HIDS on the server

  D. Log in with an administrative account

  Correct Answer: B

  The technician should boot from the media to install the firmware on the server. Firmware is a type of software that controls the low-level functions of hardware devices, such as BIOS (Basic Input/Output System), RAID controllers, network cards, etc. Firmware updates are often provided by hardware manufacturers to fix bugs, improve performance, or add new features to their devices. To install firmware updates on a server, the technician needs to boot from a media device (such as a CD-ROM, DVD-ROM, USB flash drive, etc.) that contains the firmware files and installation program. The technician cannot install firmware updates from within the operating system because firmware updates often require restarting or resetting the hardware devices.