CompTIA SK0-005 Online Practice Questions and Exam Preparation

CompTIA SK0-005 Online Questions & Answers

• Question 441:

  An administrator is working on improving the security of a new domain controller. A report indicates several open ports on the server. Which of the following ports should the administrator disable?

  A. 135
  B. 636
  C. 3268
  D. 3389
  D. 3389

  ---

  Explanation

  The port that should be disabled on the firewall is port 3389. Port 3389 is used by Remote Desktop Protocol (RDP), which is a protocol that allows remote access and controlof a Windows system through a graphical user interface. RDP can pose a security risk if it is not properly configured or secured, as it can expose the system to unauthorized or malicious access from external sources. Therefore, port 3389 should be disabled on the firewall unless it is needed for legitimate purposes.

  References: CompTIA Server+ SK0-005 Certification Study Guide, Chapter 3, Lesson 3.3, Objective 3.3

• Question 442:

  An administrator notices a server is offline. Upon checking the console, the administrator discovers the server is stuck at: Configuring Memory.............

  After a reboot, the server still exhibits the same behavior. The administrator is able to log in to the OOB remote management but is unable to log in to the server.

  Which of the following is the most likely cause of this issue?

  A. A DIMM has failed
  B. The VRAM is insufficient
  C. The RAID cache has failed
  D. The BIOS needs to be updated
  A. A DIMM has failed

  ---

  Explanation

  The error message "Configuring Memory..." and the fact that the server is stuck at this point strongly suggest thata DIMM (memory module) has failed. Memory issues are commonly diagnosed when servers hang during the memory

  configuration phase of boot. DIMM failure (Answer A):When a memory module fails, the server can get stuck at the memory initialization process during boot. VRAM insufficiency (Option B):VRAM (video memory) issues would typically cause

  display-related errors, not memory configuration issues. RAID cache failure (Option C):RAID cache issues would lead to storage errors but not prevent the system from configuring memory.

  BIOS update (Option D):While BIOS issues can cause boot failures, the error message suggests a memory-specific issue.

  This topic relates toSK0-005 Objective 3.3: Diagnose hardware problems.

• Question 443:

  A server administrator encounters some issues with the server OS after applying monthly patches. Which of the following troubleshooting steps should the administrator perform?

  A. Implement rollback procedures.
  B. Upgrade the drivers.
  C. Reinstall the OS.
  D. Reboot the server.
  A. Implement rollback procedures.

  ---

  Explanation

  This option would restore the server OS to a previous state before applying the monthly patches. This would help troubleshoot the issues caused by the patches and determine if they are compatible with the server OS. The other options would either not address the issues, cause data loss, or require more time and resources

• Question 444:

  A server administrator needs to harden a server by only allowing secure traffic and DNS inquiries. A port scan reports the following ports are open:

  A. 21
  B. 22
  C. 23
  D. 53
  E. 443
  F. 636
  D. 53

  ---

  Explanation

  22 = Secure Shell (Secure)

  53 = DNS (as requested by the question)

  443 = HTTPs (Hyper Text Transfer Protocol Secure)

  636 = LADPs (Lightweight Directory Access Protocol Secure)

  21 = File Transfer Protocol (Not Secure)

  23 = Telnet (Not Secure)

  The administrator should only allow secure traffic and DNS inquiries on the server, which means that only ports 22, 53, and 443 should be open. Port 22 is used for SSH (Secure Shell), which is a protocol that allows secure remote login and

  command execution over a network connection using a command-line interface (CLI). Port 53 is used for DNS (Domain Name System), which is a service that translates domain names into IP addresses and vice versa. Port 443 is used for

  HTTPS (Hypertext Transfer Protocol Secure), which is a secure version of HTTP that encrypts the data exchanged between a web browser and a web server.

  https://www.csoonline.com/article/3191531/securing-risky-network-ports.html

• Question 445:

  Which of the following should a server administrator use when writing a script with a function that needs to be run ten times?

  A. Loop
  B. Variable
  C. Comparator
  D. Conditional
  A. Loop

  ---

  Explanation

  A loop is a programming construct used to repeat a block of code multiple times. In this case, if a function needs to run ten times, a loop (such as afor looporwhile loop) would be the appropriate choice.

  Loop (Answer A): This allows the function to be executed repeatedly without writing redundant code.

  Variable (Option B): A variable is used to store data, but it doesn't handle repetition.

  Comparator (Option C): Comparators are used to compare values, not for repeating code.

  Conditional (Option D): Conditionals (if, else) are used for decision-making, not repeating actions multiple times.

  This topic is related toSK0-005 Objective 1.1: Understand basic scripting and automation concepts.

• Question 446:

  Which of the following BEST measures how much downtime an organization can tolerate during an unplanned outage?

  A. SLA
  B. BIA
  C. RTO
  D. MTTR
  C. RTO

  ---

  Explanation

• Question 447:

  A global organization keeps personnel application servers that are local to each country. However, a security audit shows these application servers are accessible from sites in other countries. Which of the following hardening techniques should the organization use to restrict access to only sites that are in the same country?

  A. Configure a firewall
  B. Close the unneeded ports
  C. Install a HIDS
  D. Disable unneeded services.
  A. Configure a firewall

  ---

  Explanation

  Monitors Network Traffic

  https://www.fortinet.com/resources/cyberglossary/benefits-of-firewall

• Question 448:

  A Linux server requires repetitive tasks for reconfiguration. Which of the following would be the best scripting language to use?

  A. PowerShell
  B. Batch command file
  C. Bash
  D. Visual Basic
  C. Bash

  ---

  Explanation

  Bash is a scripting language that is commonly used in Linux systems to automate tasks and manipulate text. Bash scripts can run commands, variables, functions, loops, and conditional statements. PowerShell is a scripting language that is mainly used in Windows systems, while batch command files are simple text files that contain a series of commands to be executed by the command-line interpreter. Visual Basic is a programming language that is used to create applications, not scripts.

  References: [CompTIA Server+ Certification Exam Objectives], Domain 4.0: Server Administration, Objective 4.2: Given a scenario, perform proper server maintenance techniques.

• Question 449:

  Which of the following must a server administrator do to ensure data on the SAN is not compromised if it is leaked?

  A. Encrypt the data that is leaving the SAN
  B. Encrypt the data at rest
  C. Encrypt the host servers
  D. Encrypt all the network traffic
  B. Encrypt the data at rest

  ---

  Explanation

  The administrator must encrypt the data at rest to ensure data on the SAN is not compromised if it is leaked. Data at rest refers to data that is stored on a device or a medium, such as a hard drive, a flash drive, or a SAN (Storage Area Network). Data at rest can be leaked if the device or the medium is lost, stolen, or accessed by unauthorized parties. Encrypting data at rest means applying an algorithm that transforms the data into an unreadable format that can only be decrypted with a key. Encryption protects data at rest from being exposed or misused by attackers who may obtain the device or the medium.

• Question 450:

  Which of the following distributes a load across all interfaces?

  A. Link aggregation group
  B. Most recently used algorithm
  C. Active-passive configuration
  D. Failover
  A. Link aggregation group

  ---

  Explanation

  A link aggregation group (LAG) is a technique that combines multiple physical network interfaces into a single logical interface. This allows for the distribution of traffic across all the interfaces in the group, increasing bandwidth and

  redundancy. A LAG can use different modes to balance the load, such as address hashing, dynamic, or most recently used algorithm.

  References: CompTIA Server+ Study Guide, Chapter 6: Networking, page 239.