CompTIA CompTIA Certifications SK0-004 Questions & Answers

• Question 601:

  Which of the following methods should be used when classified or sensitive data is stored on a server?

  A. Directory encryption

  B. Whole disk encryption

  C. File encryption

  D. Partition encryption

  Correct Answer: B

• Question 602:

  A server administrator is configuring access control on a file server for an organization. The Human Resources manager is taking a leave of absence for three months, during which time an interim Human Resources manager will take over the duties of the position. Which of the following types of access control should be configured on the file server?

  A. MAC

  B. CBAC

  C. DAC

  D. RBAC

  Correct Answer: D

• Question 603:

  An administrator is building a web server to host an online banking application. The server should not have access to the internal network, and only ports that are used by the application should be opened. Which of the following MUST be implemented to meet the business requirements?

  A. Add the server to the internal network and use IPSec to encrypt communication between the web server and other devices.

  B. Use an ISA server to block access to the internal network.

  C. Use VPN to block all ports that are not used by the application.

  D. Use the company firewall to block all ports that are not used by the application.

  Correct Answer: D

• Question 604:

  Which of the following authentication protocols could be used to authenticate network administrators at a datacenter to manage switches over a remote SSH connection? (Select TWO).

  A. LDAP

  B. TACACS

  C. RADIUS

  D. SNMP

  E. IPSec

  F. MSCHAP

  Correct Answer: BC

• Question 605:

  An email administrator is tasked to setup a Linux mail server. One of the requirements is to close all ports except SSH, HTTPS, SMTP, POP3, and IMAP4. Which of the following commands should be used to see which ports are currently open on the mail server? (Select TWO).

  A. lsof

  B. netstat

  C. ipconfig

  D. traceroute

  E. ping

  F. dig

  Correct Answer: AB

• Question 606:

  A technician would like to restrict when internal hardware components on the server are accessed. Which of the following server hardening techniques should the technician implement?

  A. Intrusion detection

  B. BIOS password

  C. Chassis lock

  D. Disabled WOL

  Correct Answer: C

• Question 607:

  When using multifactor authentication, which of the following represents "something you have"?

  A. A password

  B. A PIN

  C. A fingerprint

  D. An ID card

  Correct Answer: D

• Question 608:

  A datacenter audit finds that a number of personnel are not using access cards when entering a secured area with a coworker. Which of the following security methods could be implemented to help prevent this behavior?

  A. Mantrap

  B. Keypad

  C. Smart card

  D. Security camera

  Correct Answer: A

• Question 609:

  A technician is tasked with connecting a server to a NAS. Which of the following connection types should be used?

  A. HBA

  B. Ethernet

  C. Fiber Fabric

  D. Multiplexer

  Correct Answer: B

• Question 610:

  A server administrator implements external storage for a file server. At a later time, another administrator wants to extend this storage to a second server but is unable to connect to two servers simultaneously. Which of the following storage types was implemented by the first administrator?

  A. DAS

  B. NAS

  C. VSAN

  D. SAN

  Correct Answer: A