View Full CompTIA Server+ SK0-005 Exam Dumps and Practice Test Dumps

 

Question 161.

Which technology allows a server to report hardware health information through a dedicated management interface?

1. IPMI
2. SMBus
3. SATA
4. UEFI

Correct Answer: 1

Explanation:

Intelligent Platform Management Interface (IPMI) provides standardized mechanisms for monitoring and managing server hardware independently of the operating system. It can expose information about temperatures, voltages, fan conditions, power states, and other hardware characteristics. Because IPMI operates through a management controller, administrators can often access these functions even when the operating system is unavailable. This capability is particularly valuable when diagnosing failed or unresponsive servers remotely. IPMI is commonly associated with a Baseboard Management Controller (BMC), which communicates with sensors and management components on the server motherboard.

Question 162.

What is the primary purpose of installing a vendor-approved server driver?

1. Increasing network bandwidth
2. Matching operating-system communication with hardware
3. Expanding physical memory capacity
4. Converting magnetic storage into flash storage

Correct Answer: 2

Explanation:

A hardware driver provides the operating system with the instructions necessary to communicate correctly with a particular device. Server vendors frequently provide validated driver versions because compatibility can depend on the operating-system release, firmware version, and hardware model. Using an appropriate driver can resolve issues such as missing devices, unstable operation, incorrect feature detection, or degraded functionality. Administrators should generally verify compatibility before deploying a driver across production servers. Driver updates are especially important for storage controllers, network adapters, chipsets, and specialized hardware where incorrect versions can cause serious operational problems.

Question 163.

Which firmware practice reduces the risk of running unsupported server components?

1. Disabling firmware notifications
2. Installing every available beta release
3. Maintaining firmware versions against vendor support matrices
4. Replacing operating-system patches with firmware updates

Correct Answer: 3

Explanation:

A vendor support matrix identifies compatible combinations of hardware, firmware, drivers, and operating systems. Maintaining firmware according to this information helps administrators avoid unsupported configurations that may introduce instability or compatibility problems. Firmware should not simply be updated whenever a newer version appears. Instead, administrators should review release notes, compatibility information, known issues, and organizational change procedures before deployment. This approach is especially important for storage controllers, network adapters, RAID components, and system firmware. Proper firmware lifecycle management balances security and reliability improvements with the need to preserve a supported production configuration.

Question 164.

What does a server’s BMC primarily provide to an administrator?

1. Application-level database replication
2. User authentication for web applications
3. File-system compression services
4. Remote hardware monitoring and control

Correct Answer: 4

Explanation:

A Baseboard Management Controller, or BMC, is a dedicated management processor embedded in many server platforms. It can monitor hardware conditions and provide administrative functions independently from the host operating system. Depending on the server model, administrators may use the BMC to inspect sensor readings, control power states, review hardware events, or access a remote console. This makes BMC functionality particularly useful when a server cannot boot normally or when physical access is inconvenient. Vendor implementations may use technologies such as Dell iDRAC, HPE iLO, or Lenovo XClarity Controller, but the underlying purpose remains hardware-level remote management.

Question 165.

Which security mechanism stores cryptographic keys in a dedicated hardware component?

1. Hardware Security Module
2. Dynamic memory cache
3. Network interface buffer
4. Storage controller queue

Correct Answer: 1

Explanation:

A Hardware Security Module (HSM) is a specialized device designed to protect and manage cryptographic keys. Instead of keeping sensitive keys solely within ordinary application memory or general-purpose storage, an HSM can provide controlled cryptographic operations and protected key storage. Organizations may use HSMs for certificate authorities, digital signatures, encryption services, payment systems, or other workloads requiring strong key protection. HSMs can also enforce access controls and audit cryptographic operations. Their use is different from ordinary server encryption software because the HSM introduces dedicated hardware designed specifically to protect cryptographic material.

Question 166.

What is the main purpose of an account lockout threshold?

1. Extending password expiration intervals
2. Increasing administrator privileges
3. Limiting repeated unsuccessful authentication attempts
4. Allowing unlimited login retries

Correct Answer: 3

Explanation:

An account lockout threshold defines how many unsuccessful authentication attempts can occur before an account is temporarily or permanently locked, depending on the configured policy. This control helps reduce the effectiveness of repeated password-guessing attempts. Administrators commonly configure a threshold together with a lockout duration and reset interval. However, an excessively aggressive policy can also create operational problems because legitimate users may accidentally trigger the lockout. Server administrators should therefore balance security requirements with usability and recovery procedures. Account lockout is one layer of authentication protection and should normally complement strong passwords and other access controls.

Question 167.

Which firewall behavior evaluates packet context across an established connection?

1. Stateful inspection
2. Static address filtering
3. Hardware port isolation
4. Interface-level disabling

Correct Answer: 1

Explanation:

Stateful firewall inspection maintains information about active network connections and uses that information when evaluating traffic. For example, after a legitimate connection is established, return traffic can be recognized as belonging to that session rather than being treated as an unrelated packet. This provides more contextual filtering than a system that examines packets independently. Stateful inspection is commonly used in enterprise firewalls because it can track connection states for protocols such as TCP. Administrators still need carefully designed rules because stateful inspection does not automatically determine whether every application or destination should be permitted.

Question 168.

What does a VLAN trunk normally carry between network devices?

1. Traffic from one untagged workstation only
2. Multiple VLANs over a shared link
3. Power signals for server components
4. Storage blocks from a disk array

Correct Answer: 2

Explanation:

A VLAN trunk allows multiple virtual LANs to traverse the same physical network connection. VLAN identification is typically maintained through tagging, allowing switches to distinguish traffic belonging to different logical networks. Trunks are commonly used between switches, between switches and virtualization hosts, and in other environments where several VLANs must share infrastructure. An access port, by contrast, normally serves traffic associated with a single VLAN for an endpoint. Proper trunk configuration is important because incorrect tagging or allowed-VLAN settings can cause connectivity failures or unintended network exposure.

Question 169.

Which IPv6 mechanism can automatically create an address without requiring a DHCPv6 server?

1. Router Advertisements with SLAAC
2. Static IPv4 lease assignment
3. NAT address translation
4. ARP-based discovery

Correct Answer: 1

Explanation:

Stateless Address Autoconfiguration, or SLAAC, allows IPv6 hosts to configure addresses using information supplied through Router Advertisement messages. A router advertises an IPv6 prefix, and the host can construct an address according to the applicable IPv6 configuration rules. This approach does not require a traditional DHCPv6 server simply to assign the address. DHCPv6 can still be used when administrators require additional configuration information or centralized address-management behavior. SLAAC is therefore an important distinction between IPv6 and traditional IPv4 configuration methods, where DHCP is frequently used for automated address assignment.

Question 170.

Which DNS record identifies the mail server responsible for receiving email for a domain?

1. SRV record
2. TXT record
3. MX record
4. CNAME record

Correct Answer: 3

Explanation:

A Mail Exchange, or MX, record specifies which mail servers are responsible for receiving email for a DNS domain. The record includes a mail-server hostname and a preference value that can influence which server should be attempted first when multiple MX records exist. Mail systems query DNS for MX information before attempting delivery. This differs from records such as CNAME, which provides an alias for another hostname, and TXT, which stores textual information commonly used for verification and email-security policies. Correct MX configuration is therefore essential for reliable inbound email delivery.

Question 171.

What is the main function of a cluster heartbeat network?

1. Synchronizing user passwords
2. Detecting node availability
3. Transferring archived backups
4. Serving web content

Correct Answer: 2

Explanation:

A cluster heartbeat mechanism allows nodes to communicate their operational status to one another. By exchanging periodic heartbeat messages, cluster software can determine whether a node remains responsive. If expected heartbeats stop, the cluster may interpret the condition as a node failure and initiate an appropriate failover process. The heartbeat path should be designed carefully because communication failures can sometimes resemble actual node failures. Some environments use redundant communication paths to reduce this risk. Heartbeats are therefore a fundamental part of high-availability cluster monitoring rather than a mechanism intended for ordinary application data transfer.

Question 172.

What does quorum help a cluster determine?

1. Whether enough participating members exist to operate safely
2. Which users may change passwords
3. How much disk space applications require
4. Which DNS server has the shortest hostname

Correct Answer: 1

Explanation:

Quorum is a cluster decision mechanism used to determine whether enough participating members or votes are available for the cluster to continue operating safely. Its purpose is particularly important when communication between nodes is disrupted. Without appropriate quorum protection, separated groups of nodes could independently believe they are authoritative and attempt to provide the same services, potentially causing conflicting operations or data corruption. Cluster implementations use different quorum models depending on their architecture. Administrators should understand the voting structure and failure scenarios before deploying a highly available cluster because quorum behavior directly affects how the cluster responds to node or network failures.

Question 173.

Which load-balancer feature keeps a client associated with the same backend server?

1. Session persistence
2. DNS recursion
3. Packet fragmentation
4. Route redistribution

Correct Answer: 1

Explanation:

Session persistence, sometimes called sticky sessions, keeps subsequent requests from a client directed toward the same backend server for an applicable period. This can be useful for applications that maintain session information locally instead of storing it in a shared session repository. A load balancer may implement persistence using mechanisms such as cookies or source-related information. Although persistence can support applications with stateful session requirements, excessive dependence on it can reduce the flexibility of traffic distribution. Administrators should therefore understand the application’s session architecture before enabling persistence on a production load balancer.

Question 174.

Which container feature limits the resources available to an individual workload?

1. DNS forwarding
2. CPU and memory limits
3. Certificate pinning
4. RAID striping

Correct Answer: 2

Explanation:

Container platforms can apply CPU and memory limits to individual workloads, helping prevent one container from consuming resources needed by other services. Resource controls are particularly important on shared server hosts where multiple containers operate simultaneously. A memory limit can restrict how much RAM a workload may consume, while CPU controls can limit or prioritize processor usage. These settings should be based on observed application requirements rather than arbitrary values. Proper resource management improves workload isolation and predictability, although administrators should also monitor performance to identify workloads that consistently approach their configured limits.

Question 175.

What is a container registry primarily used to store?

1. Network routing tables
2. Boot firmware images
3. Container images
4. User authentication tokens

Correct Answer: 3

Explanation:

A container registry is a repository designed to store and distribute container images. Developers and administrators can push images into a registry and later pull specific versions onto container hosts. Registries may be public or privately operated within an organization. Image repositories commonly support version tags, access controls, and metadata. Secure environments may also use image-signing or scanning mechanisms to help verify that images meet organizational requirements before deployment. A registry differs from a running container because it stores reusable image artifacts, while the container is an instantiated workload created from an image.

Question 176.

Which approach helps detect configuration drift across servers?

1. Comparing systems against an approved configuration baseline
2. Removing all system logs after each reboot
3. Disabling automated configuration checks
4. Allowing unrestricted manual changes

Correct Answer: 1

Explanation:

Configuration drift occurs when servers gradually deviate from an approved or expected configuration. Comparing systems against a known baseline helps administrators identify unauthorized or unintended changes. A baseline may include operating-system settings, installed packages, security controls, service configurations, and other required parameters. Automated configuration-management systems can make this process more consistent by checking or enforcing desired states. Detecting drift early reduces the chance that undocumented changes will cause security weaknesses, compatibility problems, or inconsistent server behavior. Administrators should document approved modifications through the organization’s change-management process.

Question 177.

What is the primary purpose of Infrastructure as Code?

1. Managing infrastructure through repeatable machine-readable definitions
2. Replacing every physical server with a workstation
3. Storing application passwords inside source comments
4. Monitoring keyboard activity on administrators

Correct Answer: 1

Explanation:

Infrastructure as Code, or IaC, represents infrastructure configuration through machine-readable definitions that can be versioned, reviewed, and repeatedly applied. Instead of manually configuring every server or cloud resource, administrators can describe required components and settings in code or declarative configuration files. This approach improves consistency and makes infrastructure changes easier to reproduce. Version control also provides a record of configuration changes. IaC does not mean that every infrastructure component must be virtualized; physical and virtual resources can both be managed through suitable automation systems. Properly designed IaC also supports testing and controlled deployment workflows.

Question 178.

Which metric measures the amount of data a storage system can transfer over time?

1. Throughput
2. Latency
3. Queue depth
4. Seek distance

Correct Answer: 1

Explanation:

Storage throughput represents the amount of data that a storage system can transfer during a given period, commonly expressed in MB/s or GB/s. It is particularly relevant to workloads that process large sequential data streams, such as backups, media processing, and bulk transfers. Throughput differs from latency, which describes the time required for an individual operation or response. IOPS measures the number of input/output operations performed during a period and can be more useful for workloads involving many small requests. Administrators should therefore select storage metrics according to the workload characteristics rather than relying on one measurement alone.

Question 179.

What is a battery-backed write cache designed to protect?

1. Recently acknowledged write data during power interruption
2. Unused network addresses
3. DNS zone-transfer credentials
4. Temporary browser sessions

Correct Answer: 2

Explanation:

Battery-backed or protected write cache helps preserve data that has been acknowledged as written but may still reside in volatile cache memory rather than permanent storage. If power is interrupted, the cache can retain the pending information long enough for the storage system to recover or safely commit it. This technology is commonly associated with RAID controllers and enterprise storage systems. Protected caching can improve write performance while reducing the risk associated with volatile memory. Administrators should still monitor the health of the battery or protection mechanism because degraded cache protection can affect both performance and data-safety behavior.

Question 180.

Which storage-security technique makes previously stored data difficult to recover before equipment disposal?

1. Secure data sanitization
2. File renaming
3. Folder compression
4. Drive-letter reassignment

Correct Answer: 1

Explanation:

Secure data sanitization is the process of removing data from storage media in a manner intended to prevent practical recovery. Simply deleting files, renaming folders, or changing partitions does not necessarily remove the underlying information because remnants may remain on the storage medium. Sanitization methods depend on the type of media and organizational requirements. For some drives, approved cryptographic erasure or dedicated sanitization procedures may be appropriate, while other media may require different treatment. Before disposing of server storage, administrators should follow documented organizational procedures and applicable security requirements to prevent sensitive information from remaining accessible.