CompTIA CompTIA Certifications SK0-005 Questions & Answers

• Question 301:

  A server has experienced several component failures. To minimize downtime, the server administrator wants to replace the components while the server is running. Which of the following can MOST likely be swapped out while the server is still running? (Select TWO).

  A. The power supply

  B. The CPU

  C. The hard drive

  D. The GPU

  E. The cache

  F. The RAM

  Correct Answer: AC

  The power supply and the hard drive are two components that can most likely be swapped out while the server is still running, if they support hot swapping or hot plugging. Hot swapping or hot plugging means that the device can be added or

  removed without shutting down the system. The operating system automatically recognizes the changes that have been made. This feature is useful for minimizing downtime and improving availability. The CPU, the GPU, the cache, and the

  RAM are not hot swappable and require the system to be powered off before replacing them.

  References:

  https://www.geeksforgeeks.org/what-is-hot-swapping/

  https://www.howtogeek.com/268249/what-is-hot-swapping-and-what-devices-support-it/

• Question 302:

  Which of the following licenses would MOST likely include vendor assistance?

  A. Open-source

  B. Version compatibility

  C. Subscription

  D. Maintenance and support

  Correct Answer: C

  Subscription - is type of license that can be supported and maintained by vendor

• Question 303:

  Which of the following technologies would allow an administrator to build a software RAID on a Windows server?

  A. Logical volume management

  B. Dynamic disk

  C. GPT

  D. UEFI

  Correct Answer: B

  Dynamic disk is a technology that allows an administrator to build a software RAID on a Windows server. Dynamic disk is a type of disk management that supports creating volumes that span multiple disks, stripe data across disks, mirror

  data between disks, or use parity for fault tolerance. Dynamic disk can be used to create RAID 0 (striping), RAID 1 (mirroring), RAID 5 (striping with parity), or spanned volumes on Windows servers. Logical volume management is a

  technology that allows creating and resizing logical volumes on Linux servers. GPT (GUID Partition Table) is a standard for defining the partition structure on a disk. UEFI (Unified Extensible Firmware Interface) is a specification for the

  interface between the operating system and the firmware.

  References:

  https://www.howtogeek.com/school/using-windows-admin-tools-like-a-pro/lesson2/

  https://www.howtogeek.com/howto/40702/how-to-manage-and-use-lvm-logical-volume-management-in-ubuntu/ https://www.howtogeek.com/193669/whats-the-difference-between-gpt-and-mbr-when-partitioning-a-drive/

  https://www.howtogeek.com/56958/htg-explains-how-uefi-will-replace-the-bios/

• Question 304:

  Which of the following can be used to map a network drive to a user profile?

  A. System service

  B. Network service

  C. Login script

  D. Kickstart script

  Correct Answer: C

  A login script is a file that contains commands or instructions that are executed when a user logs into a system or network. A login script can be used to map a network drive to a user profile, which means that the user will have access to a shared folder or resource on another computer or server. A login script can be written in various languages, such as batch, PowerShell, or VBScript, and can be assigned to a user or a group using tools such as Group Policy or Active Directory . A system service (A) is a program that runs in the background and performs tasks that are essential for the operation of the system, such as security, networking, or hardware management. A system service does not map a network drive to a user profile. A network service (B) is a program that provides functionality or resources to other programs or devices over a network, such as file sharing, printing, or web hosting. A network service does not map a network drive to a user profile. A kickstart script (D) is a file that contains configuration settings and commands for automated installation of Linux operating systems. A kickstart script does not map a network drive to a user profile.

  References: https://www.howtogeek.com/118452/how-to-map-network-drives-from-the-command-prompt-in-windows/ https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/logon

• Question 305:

  A technician is deploying a single server to monitor and record me security cameras at a remote site, which of the following architecture types should be used to minimize cost?

  A. Virtual

  B. Blade

  C. Tower

  D. Rack mount

  Correct Answer: C

  A tower server is a type of server architecture that is best suited to minimize cost when deploying a single server to monitor and record the security cameras at a remote site. A tower server is a standalone server that has a similar form factor and design as a desktop computer. It does not require any special mounting equipment or rack space and can be placed on or under a desk or table. A tower server is suitable for small businesses or remote offices that need only one or few servers for basic tasks such as file sharing, print serving, or security monitoring. A tower server is usually cheaper and easier to maintain than other types of servers, but it may have lower performance, scalability, and redundancy features. A virtual server is a type of server architecture that involves creating and running one or more virtual machines on a physical host using a hypervisor such as Hyper-V or VMware. A virtual server can reduce hardware costs and improve flexibility and efficiency, but it requires additional software licenses and management tools. A blade server is a type of server architecture that involves inserting multiple thin servers called blades into a chassis that provides power, cooling, network, and management features. A blade server can improve performance, density, and scalability, but it requires more initial investment and specialized equipment. A rack mount server is a type of server architecture that involves mounting one or more servers into standardized frames called racks that provide power, cooling, network, and security features

• Question 306:

  Which of the following BEST measures now much downtime an organization can tolerate Curing an unplanned outage?

  A. SLA

  B. BIA

  C. RTO

  D. MTTR

  Correct Answer: C

  RTO (Recovery Time Objective) is a measure of how much downtime an organization can tolerate during an unplanned outage. It is the maximum time allowed for restoring normal operations after a disaster. RTO is one of the key metrics for disaster recovery planning and testing. SLA (Service Level Agreement) is a contract that defines the expected level of service and performance between a provider and a customer. BIA (Business Impact Analysis) is a process that identifies and evaluates the potential effects of a disaster on critical business functions and processes. MTTR (Mean Time To Repair) is a measure of how long it takes to fix a failed component or system.

  References: https://parachute.cloud/rto-vs-rpo/ https://www.techopedia.com/definition/13622/service-level-agreement-sla https://www.techopedia.com/definition/1032/business-impact-analysis-bia https://www.techopedia.com/definition/8239/mean-time-to-repair-mttr

• Question 307:

  An administrator needs to disable root login over SSH. Which of the following tiles should be edited to complete this task?

  A. /root.ssh/sshd/config

  B. /etc.ssh/sshd_config

  C. /root/.ssh/ssh_config

  D. /etc.sshs_shd_config

  Correct Answer: B

  To disable root login over SSH, the server administrator needs to edit the SSH configuration file located at /etc/ssh/sshd_config. This file contains various settings for the SSH daemon that runs on the server and accepts incoming SSH connections. The administrator needs to find the line that says PermitRootLogin and change it to no or comment it out with a # symbol. Then, the administrator needs to restart the SSH service for the changes to take effect. References: https://www.howtogeek.com/828538/how-and- why-to-disable-root-login-over-ssh-on-linux/

• Question 308:

  Which of the following, if properly configured, would prevent a user from installing an OS on a server? (Choose two)

  A. Administrator password

  B. Group Policy Object

  C. Root password

  D. SELInux

  E. Bootloader password

  F. BIOS/UEFI password

  Correct Answer: EF

  These are two methods that can prevent a user from installing an OS on a server if properly configured. A bootloader password is a password that protects the bootloader from unauthorized access or modification. The bootloader is a program that loads the operating system into memory when the system boots up. If a user does not know the bootloader password, they cannot change the boot order or boot from another device such as a CD-ROM or USB drive that contains an OS installation media. A BIOS/UEFI password is a password that protects the BIOS (Basic Input Output System) or UEFI (Unified Extensible Firmware Interface) from unauthorized access or modification. The BIOS or UEFI is a firmware that initializes and configures the hardware components of the system before loading

• Question 309:

  A company stores extremely sensitive data on an alt-gapped system. Which of the following can Be Implemented to increase security against a potential insider threat?

  A. Two-person Integrity

  B. SSO

  C. SIEM

  D. Faraday cage

  E. MFA

  Correct Answer: A

  Two-person integrity is a security measure that can be implemented to increase security against a potential insider threat on an air-gapped system. An air-gapped system is a system that is isolated from any network connection and can only be accessed physically. An insider threat is a malicious actor who has authorized access to an organization's system or data and uses it for unauthorized or harmful purposes. Two- person integrity is a system of storage and handling that requires the presence of at least two authorized persons, each capable of detecting incorrect or unauthorized security procedures, for accessing certain sensitive data or material. This way, no single person can compromise the security or integrity of the data or material without being noticed by another person. SSO (Single Sign-On) is a feature that allows users to access multiple applications or systems with one set of credentials, but it does not prevent insider threats. SIEM (Security Information and Event Management) is a tool that collects and analyzes log data from various sources to detect and respond to security incidents, but it does not work on air-gapped systems. A Faraday cage is a structure that blocks electromagnetic signals from entering or leaving, but it does not prevent physical access or insider threats. MFA (Multi-Factor Authentication) is a method that requires users to provide two or more pieces of evidence to verify their identity, such as something they know, something they have, or something they are, but it does not prevent insider threats.

  References: https://www.howtogeek.com/169080/air-gap-how-to-isolate-a-computer-to-protect-it-from-hackers/ https://www.howtogeek.com/428483/what-is-end-to-end-encryption-and-why-does-it-matter/ https://www.howtogeek.com/202794/what-is-the-difference-between-127.0.0.1-and-0.0.0.0/

• Question 310:

  A server room with many racks of servers is managed remotely with occasional on-site support. Which of the following would be the MOST cost-effective option to administer and troubleshoot network problems locally on the servers?

  A. Management port

  B. Crash cart

  C. IP KVM

  D. KVM

  Correct Answer: D

  Management port - irrelevant choice.

  Crash cart - if you on-site support occasionally, not worth to have crash cart.

  IP KVM - this connection type use for remote drive access, remote console access, OOB and but more cost.

  KVM - local access, less cost