CompTIA SK0-005 Online Practice Questions and Exam Preparation

CompTIA SK0-005 Online Questions & Answers

• Question 421:

  A company's IDS has identified outbound traffic from one of the web servers coming over port 389 to an outside address. This server only hosts websites. The company's SOC administrator has asked a technician to harden this server. Which of the following would be the BEST way to complete this request?

  A. Disable port 389 on the server
  B. Move traffic from port 389 to port 443
  C. Move traffic from port 389 to port 637
  D. Enable port 389 for web traffic
  A. Disable port 389 on the server

  ---

  Explanation

  OS Hardening

  Hardening the server should start with hardening the operating system. This involves a series of steps that should result in a server that offers a minimum of attack points to a hacker. Let's look at six steps that can lead to this result.

  Disable Unused Services/Close Unneeded Ports

  Any services that are not required on the server should be disabled. Only those required for the server to perform its role in the network should be left on. The easiest way to do this is to install a host firewall on the system and adopt a "disable

  by default" policy with respect to services by closing the port used for the service. Then manually enable any you need.

• Question 422:

  Which of the following would protect data in transit?

  A. SSL/TLS
  B. SHA-512
  C. MD5
  D. 3DES
  A. SSL/TLS

  ---

  Explanation

  Data in transit refers to data being transmitted over a network, and protecting it requires encryption:

  SSL/TLS (A): Secure Sockets Layer (SSL) and Transport Layer Security (TLS) are encryption protocols designed specifically to protect data in transit by encrypting communication between endpoints. This is the correct answer. SHA-512 (B):

  Secure Hash Algorithm (SHA) is a hashing algorithm, not an encryption method. It is used for integrity verification rather than securing data in transit. MD5 (C): Message Digest Algorithm 5 (MD5) is another hashing function, primarily used for

  checksums and integrity checks, not for encrypting transmitted data. 3DES (D): Triple Data Encryption Standard (3DES) is a symmetric encryption algorithm, but it is used for data at rest rather than data in transit. Since the question

  specifically asks about protecting data in transit, SSL/TLS is the correct answer.

  CompTIA Server+ SK0-005 Official Textbook, Chapter 9 ?Security and Encryption

• Question 423:

  Which of the following tools will analyze network logs in real time to report on suspicious log events?

  A. Syslog
  B. DLP
  C. SIEM
  D. HIPS
  C. SIEM

  ---

  Explanation

  SIEM is the tool that will analyze network logs in real time to report on suspicious log events. SIEM stands for Security Information and Event Management, which is a software solution that collects, analyzes, and correlates log data from various sources, such as servers, firewalls, routers, antivirus software, etc. SIEM can detect anomalies, patterns, trends, and threats in the log data and generate alerts or reports for security monitoring and incident response. SIEM can also provide historical analysis and compliance reporting for audit purposes.

  https://www.manageengine.com/products/eventlog/syslog-server.html

• Question 424:

  A bad actor leaves a USB drive with malicious code on it in a company's parking lot. Which of the following describes this scenario?

  A. Hacking
  B. Insider threat
  C. Phishing
  D. Social engineering
  D. Social engineering

  ---

  Explanation

  Leaving a USB drive in a company parking lot is a classic example ofsocial engineering, where the bad actor relies on human curiosity to prompt someone to pick up the USB drive and insert it into their computer, potentially infecting the

  system with malicious code. Social engineering (Answer D):The attacker manipulates human behavior (in this case, curiosity) to exploit security weaknesses. Hacking (Option A):Hacking refers to directly breaching security systems or

  exploiting software vulnerabilities, not manipulating humans. Insider threat (Option B):This involves a legitimate insider within the organization carrying out malicious activities, which isn't the case here. Phishing (Option C):Phishing typically

  involves emails or messages designed to deceive individuals into providing sensitive information.

  This topic is covered underSK0-005 Objective 4.2: Explain server security concepts and best practices.

• Question 425:

  An administrator needs to reconfigure a teamed network connection on a server in a remote data center. Which of the following will offer the most resilient connection while performing this change?

  A. Use of an OOB solution
  B. Use of a crash cart
  C. Use of a VNC console
  D. Use of an RDP console
  A. Use of an OOB solution

  ---

  Explanation

• Question 426:

  A developer is creating a web application that will contain ve web nodes. The developer's main goal is to ensure the application is always available to the end users. Which of the following should the developer use when designing the web application?

  A. Round robin
  B. Link aggregation
  C. Network address translation
  D. Bridged networking
  A. Round robin

  ---

  Explanation

• Question 427:

  Which of the following technologies would allow an administrator to build a software RAID on a Windows server?

  A. Logical volume management
  B. Dynamic disk
  C. GPT
  D. UEFI
  B. Dynamic disk

  ---

  Explanation

  Dynamic disk is a technology that allows an administrator to build a software RAID on a Windows server. Dynamic disk is a type of disk management that supports creating volumes that span multiple disks, stripe data across disks, mirror

  data between disks, or use parity for fault tolerance. Dynamic disk can be used to create RAID 0 (striping), RAID 1 (mirroring), RAID 5 (striping with parity), or spanned volumes on Windows servers. Logical volume management is a

  technology that allows creating and resizing logical volumes on Linux servers. GPT (GUID Partition Table) is a standard for defining the partition structure on a disk. UEFI (Unified Extensible Firmware Interface) is a specification for the

  interface between the operating system and the firmware.

  References:

  https://www.howtogeek.com/school/using-windows-admin-tools-like-a-pro/lesson2/

  https://www.howtogeek.com/howto/40702/how-to-manage-and-use-lvm-logical-volume-management-in-ubuntu/ https://www.howtogeek.com/193669/whats-the-difference-between-gpt-and-mbr-when-partitioning-a-drive/ https://

  www.howtogeek.com/56958/htg-explains-how-uefi-will-replace-the-bios/

• Question 428:

  A company wants to deploy software to all users, Out very few of men will be using the software at any one point in time. Which of the following licensing models would be BEST lot the company?

  A. Per site
  B. Per concurrent user
  C. Per core
  D. Per instance
  B. Per concurrent user

  ---

  Explanation

  Per concurrent user licensing is a model that allows a fixed number of users to access the software at any one point in time. This model is best for the company that wants to deploy software to all users, but very few of them will be using the software at any one point in time. This way, the company can save money by paying only for the number of simultaneous users, rather than for every user who has access to the software. Per site licensing is a model that allows unlimited users within a specific location to use the software. Per core licensing is a model that charges based on the number of processor cores on the server where the software is installed. Per instance licensing is a model that charges based on the number of copies of the software running on different servers or virtual machines.

  References: https://www.pcmag.com/encyclopedia/term/concurrent-use-license https://www.techopedia.com/definition/1440/software-licensing

• Question 429:

  Which of the following BEST measures now much downtime an organization can tolerate Curing an unplanned outage?

  A. SLA
  B. BIA
  C. RTO
  D. MTTR
  C. RTO

  ---

  Explanation

  RTO (Recovery Time Objective) is a measure of how much downtime an organization can tolerate during an unplanned outage. It is the maximum time allowed for restoring normal operations after a disaster. RTO is one of the key metrics for disaster recovery planning and testing. SLA (Service Level Agreement) is a contract that defines the expected level of service and performance between a provider and a customer. BIA (Business Impact Analysis) is a process that identifies and evaluates the potential effects of a disaster on critical business functions and processes. MTTR (Mean Time To Repair) is a measure of how long it takes to fix a failed component or system.

  References: https://parachute.cloud/rto-vs-rpo/ https://www.techopedia.com/definition/13622/service-level-agreement-sla https://www.techopedia.com/definition/1032/business-impact-analysis-bia https://www.techopedia.com/definition/8239/mean-time-to-repair-mttr

• Question 430:

  A systems administrator recently upgraded the memory in a server, and now the server does not turn on, and nothing is displayed on the screen. Which of the following is the NEXT step the administrator should take to diagnose the error without opening the machine?

  A. Perform a cold reboot.
  B. Listen for POST code beeps.
  C. Call technical support.
  D. Check the monitor connection.
  B. Listen for POST code beeps.

  ---

  Explanation