CompTIA SK0-005 Online Practice Questions and Exam Preparation

CompTIA SK0-005 Online Questions & Answers

• Question 311:

  The network's IDS is giving multiple alerts that unauthorized traffic from a critical application server is being sent to a known-bad public IP address. One of the alerts contains the following information:

  Exploit Alert

  Attempted User Privilege Gain 2/2/07-3:09:09 10.1.200.32 --> 208.206.12.9:80

  This server application is part of a cluster in which two other servers are also servicing clients. The server administrator has verified the other servers are not sending out traffic to that public IP address. The IP address subnet of the application servers is 10.1.200.0/26. Which of the following should the administrator perform to ensure only authorized traffic is being sent from the application server and downtime is minimized? (Choose two.)

  A. Disable all services on the affected application server.
  B. Perform a vulnerability scan on all the servers within the cluster and patch accordingly.
  C. Block access to 208.206.12.9 from all servers on the network.
  D. Change the IP address of all the servers in the cluster to the 208.206.12.0/26 subnet.
  E. Enable GPO to install an antivirus on all the servers and perform a weekly reboot.
  F. Perform an antivirus scan on all servers within the cluster and reboot each server.
  B. Perform a vulnerability scan on all the servers within the cluster and patch accordingly.
  C. Block access to 208.206.12.9 from all servers on the network.

  ---

  Explanation

• Question 312:

  Following a recent power outage, a server in the datacenter has been constantly going offline and losing its configuration. Users have been experiencing access issues while using the application on the server. The server technician notices the data and time are incorrect when the server is online. All other servers are working. Which of the following would MOST likely cause this issue? (Choose two.)

  A. The server has a faulty power supply
  B. The server has a CMOS battery failure
  C. The server requires OS updates
  D. The server has a malfunctioning LED panel
  E. The servers do not have NTP configured
  F. The time synchronization service is disabled on the servers
  A. The server has a faulty power supply
  B. The server has a CMOS battery failure

  ---

  Explanation

  datacenter has been constantly going offline = the power supply no longer functions properly since the power returned. losing its configuration = CMOS has no battery to reserve configuration.

• Question 313:

  An administrator has been asked to increase the storage capacity of a stand-alone file server, but no further expansion slots are available. Which of the following would be the FASTEST solution to implement with no downtime?

  A. Configure a RAID array.
  B. Replace the current drives with higher-capacity disks.
  C. Implement FCoE for more storage capacity.
  D. Connect the server to a SAN.
  D. Connect the server to a SAN.

  ---

  Explanation

• Question 314:

  A Linux server was recently updated. Now, the server stops during the boot process with a blank screen and an fs> prompt. Which of the following is the MOST likely cause of this issue?

  A. The system is booting to a USB flash drive.
  B. The UEFI boot was interrupted by a missing Linux boot file.
  C. The BIOS could not find a bootable hard disk.
  D. The BIOS firmware needs to be upgraded.
  B. The UEFI boot was interrupted by a missing Linux boot file.

  ---

  Explanation

• Question 315:

  An administrator is configuring a server to communicate with a new storage array. To do so, the administrator enters the WWPN of the new array in the server's storage configuration. Which of the following technologies is the new connection using?

  A. iSCSI
  B. eSATA
  C. NFS
  D. FCoE
  D. FCoE

  ---

  Explanation

  A very common interface for storage in servers is a Fibre Channel interface. These are used to connect devices in a high-speed fiber storage network. These networks typically use a fiber switch with devices connected to the switch using Fibre Channel interfaces. Servers will require some implementation of a fiber HBA. Each HBA has a unique World Wide Name (WWN), which like a MAC address uses an organizationally unique identifier (OUI) assigned by the IEEE. An example of a fiber switch to which the cables from the HBAs on the servers would attach.

• Question 316:

  A staff member who is monitoring a data center reports one rack is experiencing higher temperatures than the racks next to it, despite the hardware in each rack being the same. Which of the following actions would MOST likely remediate the heat issue?

  A. Installing blanking panels in all the empty rack spaces
  B. Installing an additional PDU and spreading out the power cables
  C. Installing servers on the shelves instead of sliding rails
  D. Installing front bezels on all the servers in the rack
  A. Installing blanking panels in all the empty rack spaces

  ---

  Explanation

• Question 317:

  A technician is monitoring a server and notices there is only one NIC plugged in, but the server has two. The NIC is oversaturated, and the technician would like to increase the available bandwidth. Which of the following solutions would be the BEST option to increase the speed of this NIC?

  A. Link aggregation
  B. Heartbeat
  C. Most recently used
  D. Active-active
  A. Link aggregation

  ---

  Explanation

  This is the best solution to increase the speed of the NIC because link aggregation is a technique that combines multiple physical network interfaces into a single logical interface. This can increase the bandwidth, redundancy, and load balancing of network traffic. Link aggregation requires both the server and the switch to support it and be configured accordingly.

  References: https://www.cisco.com/c/en/us/support/docs/lan-switching/etherchannel/12023-4.html

• Question 318:

  A server administrator is connecting a Linux server to a storage array. The administrator wants to use a file-based storage protocol to store data on the server. Which of the following protocols will the administrator MOST likely use?

  A. NFS
  B. FCoE
  C. iSCSI
  D. CIFS
  A. NFS

  ---

  Explanation

• Question 319:

  A server administrator is trying to determine the cause of a slowdown on a database server. Upon investigation, the administrator determines the issue is in the storage subsystem. Which of the following will MOST likely resolve this issue?

  A. Increasing IOPS by implementing flash storage
  B. Implementing deduplication on the storage
  C. Extending capacity by installing a 4TB SATA disk
  D. Reformatting the disk as FAT32
  A. Increasing IOPS by implementing flash storage

  ---

  Explanation

• Question 320:

  An organization implements split encryption keys for sensitive files. Which of the following types of risks does this mitigate?

  A. Hardware failure
  B. Malware
  C. Data corruption
  D. Insider threat
  D. Insider threat

  ---

  Explanation

  An insider threat is a type of risk that can be mitigated by implementing split encryption keys for sensitive files. An insider threat is a malicious actor who has authorized access to an organization's system or data and uses it for unauthorized or harmful purposes. An insider threat can cause data breaches, sabotage, fraud, theft, espionage, or other damages to the organization. Split encryption keys are a method of encrypting data using multiple keys that are stored separately and require collaboration to decrypt. Split encryption keys can prevent an insider threat from accessing or compromising sensitive data without being detected by another authorized party who holds another key. Hardware failure is a type of risk that involves physical damage or malfunction of hardware components such as hard drives, memory modules, power supplies, or fans. Hardware failure can cause data loss, system downtime, performance issues, or other problems for the organization. Hardware failure cannot be mitigated by split encryption keys, but by backup, redundancy, monitoring, and maintenance measures.