CompTIA SK0-005 Online Practice Questions and Exam Preparation

CompTIA SK0-005 Online Questions & Answers

• Question 241:

  An administrator is receiving reports that users in a remote office are unable to log in to the domain. The network appears to be up between the sites, which are in different states.

  Which of the following is the most likely cause of the issue?

  A. The user accounts are locked out
  B. The NTP on the client side is misconfigured
  C. MFA is not working
  D. The wrong time zone was set in the remote office
  B. The NTP on the client side is misconfigured

  ---

  Explanation

  A misconfigured NTP (Network Time Protocol)on the client side can cause authentication issues because Active Directory relies on accurate time synchronization between clients and domain controllers for security purposes. If the clocks are

  out of sync, even by a few minutes, it can prevent users from authenticating to the domain. NTP misconfiguration (Answer B): If the client machines have incorrect time settings, it can disrupt Kerberos-based authentication, which is time-

  sensitive.

  Locked user accounts (Option A): While it can prevent login, it would affect individual users rather than a whole office.

  MFA (Option C): Multi-factor authentication not working would typically cause a login issue but is less likely across an entire remote office. Wrong time zone (Option D): While incorrect time zones can cause confusion, they usually don't

  prevent logins as long as the NTP server synchronizes the actual time correctly.

  This topic is covered underSK0-005 Objective 2.4:

  Troubleshoot common server problems.

• Question 242:

  Which of the following BEST describes a security control that requires validating the user's physical characteristics?

  A. OTP
  B. Biometrics
  C. RFID
  D. Security cameras
  B. Biometrics

  ---

  Explanation

• Question 243:

  A technician is configuring a new server with four disks for the development team. The requirements are disk redundancy and maximum usable disk capacity.

  Which of the following RAID levels should be used for this server?

  B. 1
  C. 5
  D. 10
  C. 5

  ---

  Explanation

  RAID 5offers bothdisk redundancyandmaximum usable disk capacityby using block-level striping with parity. RAID 5 allows one drive to fail while still retaining data, and it uses only one disk's worth of space for parity, maximizing the usable

  capacity.

  RAID 5 (Answer C):Provides redundancy with only one disk's space used for parity, maximizing storage.

  RAID 0 (Option A):Provides no redundancy; if one drive fails, all data is lost.

  RAID 1 (Option B):Mirrors data, so redundancy is provided, but only half the capacity is usable.

  RAID 10 (Option D):Combines RAID 1 and 0 for high performance and redundancy but requires half the disk space for mirroring.

  This topic is covered underSK0-005 Objective 1.5: Explain RAID levels and their benefits.

• Question 244:

  A server administrator is racking new servers in a cabinet with multiple connections from the servers to power supplies and the network. Which of the following should the administrator recommend to the organization to best address this situation?

  A. Rack balancing
  B. Cable management
  C. Blade enclosure
  D. Rail kits
  B. Cable management

  ---

  Explanation

  Cable management is the process of organizing, securing, and labeling cables in a server rack or cabinet. Cable management can help improve airflow and cooling, reduce clutter and confusion, prevent damage and interference, and enhance safety and aesthetics123. Cable management can be achieved by using various tools and accessories, such as cable trays, ties, hooks, clips, labels, ducts, and organizers12.

• Question 245:

  A company stores extremely sensitive data on an alt-gapped system. Which of the following can Be Implemented to increase security against a potential insider threat?

  A. Two-person Integrity
  B. SSO
  C. SIEM
  D. Faraday cage
  E. MFA
  A. Two-person Integrity

  ---

  Explanation

  Two-person integrity is a security measure that can be implemented to increase security against a potential insider threat on an air-gapped system. An air-gapped system is a system that is isolated from any network connection and can only be accessed physically. An insider threat is a malicious actor who has authorized access to an organization's system or data and uses it for unauthorized or harmful purposes. Two- person integrity is a system of storage and handling that requires the presence of at least two authorized persons, each capable of detecting incorrect or unauthorized security procedures, for accessing certain sensitive data or material. This way, no single person can compromise the security or integrity of the data or material without being noticed by another person. SSO (Single Sign-On) is a feature that allows users to access multiple applications or systems with one set of credentials, but it does not prevent insider threats. SIEM (Security Information and Event Management) is a tool that collects and analyzes log data from various sources to detect and respond to security incidents, but it does not work on air-gapped systems. A Faraday cage is a structure that blocks electromagnetic signals from entering or leaving, but it does not prevent physical access or insider threats. MFA (Multi-Factor Authentication) is a method that requires users to provide two or more pieces of evidence to verify their identity, such as something they know, something they have, or something they are, but it does not prevent insider threats.

  References: https://www.howtogeek.com/169080/air-gap-how-to-isolate-a-computer-to-protect-it-from-hackers/ https://www.howtogeek.com/428483/what-is-end-to-end-encryption-and-why-does-it-matter/ https://www.howtogeek.com/202794/what-is-the-difference-between-127.0.0.1-and-0.0.0.0/

• Question 246:

  The HIDS logs on a server indicate a significant number of unauthorized access attempts via USB devices at startup. Which of the following steps should a server administrator take to BEST secure the server without limiting functionality?

  A. Set a BIOS/UEFI password on the server.
  B. Change the boot order on the server and restrict console access.
  C. Configure the host OS to deny login attempts via USB.
  D. Disable all the USB ports on the server.
  B. Change the boot order on the server and restrict console access.

  ---

  Explanation

  Changing the boot order on the server and restricting console access would prevent unauthorized access attempts via USB devices at startup, as the server would not boot from any external media and only authorized users could access the console. Setting a BIOS/UEFI password on the server would also help, but it could be bypassed by resetting the CMOS battery or using a backdoor password. Configuring the host OS to deny login attempts via USB would not prevent booting from a malicious USB device that could compromise the system before the OS loads. Disabling all the USB ports on the server would limit functionality, as some peripherals or devices may need to use them.

  References: https://www.pcmag.com/how-to/dont-plug-it-in-how-to-prevent-a-usb-attack https://www.techopedia.com/definition/10362/boot-order https://www.techopedia.com/definition/10361/console-access https://www.techopedia.com/definition/102/bios-password https://www.techopedia.com/definition/10363/cmos-battery

• Question 247:

  A server administrator is experiencing difficulty configuring MySQL on a Linux server. The administrator issues the getenforce command and receives the following output: ># Enforcing

  Which of the following commands should the administrator issue to configure MySQL successfully?

  A. setenforce 0
  B. setenforce permissive
  C. setenforce 1
  D. setenforce disabled
  A. setenforce 0

  ---

  Explanation

  The command that the administrator should issue to configure MySQL successfully is setenforce 0. This command sets the SELinux (Security-Enhanced Linux) mode to permissive, which means that SELinux will not enforce its security policies and will only log any violations. SELinux is a feature that provides mandatory access control (MAC) for Linux systems, which can enhance the security and prevent unauthorized access or modification of files and processes. However, SELinux can also interfere with some applications or services that require specific permissions or ports that are not allowed by SELinux by default. In this case, MySQL may not be able to run properly due to SELinux restrictions. To resolve this issue, the administrator can either disable SELinux temporarily by using setenforce 0, or permanently by editing the /etc/selinux/config file and setting SELINUX=disabled. Alternatively, the administrator can configure SELinux to allow MySQL to run by using commands such as semanage or setsebool.

  https://blogs.oracle.com/mysql/selinux-and-mysql-v2

• Question 248:

  Hosting data in different regional locations but not moving it for long periods of time describes:

  A. a cold site.
  B. data at rest.
  C. on-site retention.
  D. off-site storage.
  A. a cold site.

  ---

  Explanation

• Question 249:

  A technician is creating a network share that will be used across both Unix and Windows clients at the same time. Users need read and write access to the files. Which of the following would be BEST for the technician to deploy?

  A. iSCSI
  B. CIFS
  C. HTTPS
  D. DAS
  B. CIFS

  ---

  Explanation

• Question 250:

  A recently deployed server is experiencing significant connection issues after being plugged into the network switch. An administrator was asked to review the server configuration and finds the following:

  10Gb server NIC with 50-micron optic installed 10m single-mode fiber patch cable to the switch 10Gb switch interface with short-range optic installed

  Which of the following steps should the administrator take next?

  A. Replace the switch optic with one that supports MMF
  B. Replace the server NIC with one compatible with single-mode fiber
  C. Replace the optic in the server with a short-range optic
  D. Replace the fiber cable with a 32.8ft (10m) OM4 cable
  A. Replace the switch optic with one that supports MMF

  ---

  Explanation

  The server's NIC is equipped with a 50-micron optic, indicating it is designed for multimode fiber (MMF). However, the current setup uses a single-mode fiber (SMF) patch cable. To resolve the connectivity issue, the administrator should replace the switch's optic module with one that supports MMF, ensuring compatibility between the server NIC and the network infrastructure.