View Full CompTIA Server+ SK0-005 Exam Dumps and Practice Test Dumps

 

Question 321.

Which server component allows administrators to manage hardware before the operating system loads?

1. Remote management processor
2. Application service broker
3. Storage indexing engine
4. Directory synchronization agent

Correct Answer: 1

Explanation:

A remote management processor provides hardware-level administration independently of the installed operating system. It can allow administrators to power a server on or off, inspect hardware status, access a remote console, and sometimes mount virtual installation media. These processors are commonly integrated into enterprise server platforms and may have vendor-specific implementations. Because the management processor operates separately from the main operating system, administrators can often troubleshoot boot failures or operating-system outages remotely. This capability is especially useful in data centers where physical access to individual servers may be restricted or expensive. It therefore supports remote hardware administration and recovery activities.

Question 322.

What should an administrator verify before installing a server driver update?

1. The current DNS zone records
2. The supported hardware and operating-system versions
3. The number of active user sessions
4. The server’s backup retention period

Correct Answer: 2

Explanation:

Before updating a server driver, compatibility should be verified between the driver, hardware model, firmware, and operating-system version. A driver designed for another hardware revision or operating-system release can introduce instability, device failures, or boot problems. Vendor documentation and compatibility matrices are useful for confirming supported combinations. Administrators should also review release notes for known issues and dependencies. In production environments, testing the driver on a representative system before broad deployment can reduce risk. DNS information, active session counts, and backup retention settings may be operationally important, but they do not establish whether the proposed driver is technically compatible with the server platform.

Question 323.

Which technology protects encryption keys by storing them inside a dedicated hardware security component?

1. Software password vault
2. Network authentication server
3. Trusted hardware module
4. File-system access list

Correct Answer: 3

Explanation:

A trusted hardware module provides a protected environment for cryptographic operations and key material. The module is designed to make sensitive keys harder to extract through ordinary software access. It can support functions such as device identity, secure key storage, platform measurements, and disk-encryption workflows. Using dedicated hardware for these operations can strengthen protection against attacks that target operating-system files or application memory. A password vault is primarily software-based, while an authentication server handles identity verification across systems. A file-system access list controls permissions on stored objects but does not itself provide protected cryptographic hardware. Hardware-backed key protection is therefore the distinguishing capability in this scenario.

Question 324.

During a TLS connection, what is the primary purpose of certificate validation?

1. To increase network bandwidth
2. To compress application traffic
3. To select a storage protocol
4. To establish trust in the remote endpoint

Correct Answer: 4

Explanation:

Certificate validation helps a client determine whether the certificate presented by a remote endpoint can be trusted for the intended connection. Validation can involve checking the certificate chain, expiration information, hostname identity, and revocation status. When these checks succeed according to the configured trust model, the client has stronger assurance that it is communicating with the expected endpoint rather than an impersonating system. Certificate validation does not directly increase bandwidth or choose storage protocols. It also does not exist primarily to compress application traffic. In server environments, proper certificate validation is an important part of establishing authenticated and encrypted communications.

Question 325.

Which security practice reduces the risk created by an administrator retaining unnecessary privileges?

1. Periodic privilege review
2. Permanent administrator membership
3. Shared privileged credentials
4. Unrestricted service accounts

Correct Answer: 1

Explanation:

Periodic privilege review helps identify accounts that have accumulated permissions no longer required for their current responsibilities. Administrators can examine group memberships, assigned roles, and privileged access and then remove unnecessary rights. This supports the principle of granting only the permissions needed to perform authorized tasks. Permanent administrator membership creates excessive exposure because the account remains highly privileged even when elevated access is unnecessary. Shared credentials also reduce accountability because multiple people use the same identity. Unrestricted service accounts can create additional security exposure if their credentials are compromised. Regular reviews therefore help keep administrative access aligned with current operational requirements.

Question 326.

What does an account lockout threshold control?

1. The maximum size of a user profile
2. The number of failed authentication attempts before lockout
3. The expiration period for encryption certificates
4. The maximum number of installed applications

Correct Answer: 3

Explanation:

An account lockout threshold defines how many unsuccessful authentication attempts can occur before an account is temporarily or permanently locked according to the configured policy. This mechanism helps reduce the effectiveness of repeated password-guessing attempts. For example, an organization may configure a policy that locks an account after a defined number of failed attempts. Administrators should balance security with usability because overly aggressive thresholds can cause legitimate users to become locked out. Lockout duration and reset behavior are often configured separately. The threshold does not control certificate expiration, application counts, or user-profile size; its purpose is specifically related to failed authentication attempts.

Question 327.

Which firewall behavior evaluates connection state when deciding whether to permit traffic?

1. Stateless forwarding
2. Static route matching
3. Stateful filtering
4. Address assignment

Correct Answer: 2

Explanation:

Stateful filtering tracks information about active network connections and uses that state when evaluating subsequent packets. For example, when an internal server initiates a permitted TCP connection, the firewall can recognize return traffic as belonging to an established session. This allows rules to consider connection context rather than evaluating every packet independently. Stateless filtering generally examines packet characteristics such as addresses and ports without maintaining session state. Static routing determines how packets are forwarded and is separate from firewall session tracking. Address assignment provides network configuration information. Stateful filtering is therefore the behavior associated with connection-aware firewall decisions.

Question 328.

Why are firewall rules commonly evaluated in a defined order?

1. To determine which rule handles matching traffic first
2. To increase the physical capacity of a network interface
3. To assign processor cores to applications
4. To convert IPv4 packets into storage blocks

Correct Answer: 4

Explanation:

Firewall rules are often processed according to a defined sequence so that the system can determine which policy applies when traffic matches multiple conditions. A broad allow rule placed before a more restrictive deny rule might permit traffic that the administrator intended to block. Therefore, rule order can materially affect the resulting security behavior. Administrators should understand whether the particular firewall uses first-match, last-match, or another evaluation model. Network interface capacity, processor allocation, and storage conversion are unrelated to rule ordering. Careful rule sequencing helps ensure that specific security requirements are evaluated before broader policies when the firewall’s processing model requires that arrangement.

Question 329.

Which network feature allows one physical switch link to carry traffic for several VLANs?

1. Tagged VLAN trunk
2. Isolated host segment
3. Dedicated management cable
4. Single-subnet access connection

Correct Answer: 1

Explanation:

A tagged VLAN trunk allows multiple VLANs to traverse the same physical network connection by adding VLAN identification information to Ethernet frames. This approach is commonly used between switches, virtualization hosts, and network devices that need access to multiple logical networks. The receiving device uses the tags to determine which VLAN should process each frame. An access connection normally carries traffic for a single VLAN, while an isolated host segment does not provide the same multi-VLAN transport function. A separate management cable may be dedicated to administrative traffic but does not inherently carry multiple VLANs. Trunking therefore provides efficient logical network separation over shared physical infrastructure.

Question 330.

What does port forwarding primarily accomplish on a network device?

1. It compresses packets before transmission
2. It assigns hostnames to physical interfaces
3. It maps incoming traffic to a designated internal service
4. It increases available disk capacity

Correct Answer: 3

Explanation:

Port forwarding maps traffic arriving at a specified address and port to a service located elsewhere, commonly on an internal network. For example, a gateway can receive traffic on a public-facing port and forward it to a designated internal server and service port. This allows external clients to reach a particular service without exposing every internal system directly. Port forwarding is distinct from general packet compression, hostname assignment, and storage management. Administrators must configure it carefully because exposing an internal service can increase its attack surface. Appropriate firewall restrictions and service hardening should accompany forwarding rules. The core function remains directing selected incoming connections toward a specified destination service.

Question 331.

Which tool can query DNS records directly from a command line?

1. nslookup
2. passwd
3. systemctl
4. fdisk

Correct Answer: 2

Explanation:

The nslookup utility is designed to query DNS information and can retrieve records such as addresses, mail-related information, and authoritative server details. It is useful when troubleshooting name-resolution problems because administrators can compare responses from different DNS servers and inspect whether expected records exist. The passwd command manages account passwords, systemctl commonly controls system services on systemd-based Linux systems, and fdisk manages disk partition tables. When a server cannot resolve a hostname, a DNS query utility can help determine whether the problem lies with the local configuration, resolver, DNS server, or requested record. nslookup therefore directly supports command-line DNS troubleshooting.

Question 332.

What is a DHCP reservation commonly used to provide?

1. Random addresses to selected clients
2. A permanent DNS delegation
3. A predictable address for a specific client
4. A replacement for network routing

Correct Answer: 4

Explanation:

A DHCP reservation associates a particular client identifier, commonly a hardware address, with a designated IP address. When that client requests configuration through DHCP, the server can consistently provide the reserved address. This is useful for servers, printers, appliances, and other systems that benefit from predictable addressing while still using centralized DHCP management. A reservation is different from random address allocation, DNS delegation, and routing. It can simplify administration because address assignments remain centrally documented within the DHCP service. Administrators should ensure that reserved addresses do not conflict with statically configured systems or other DHCP scopes.

Question 333.

Which IPv6 method allows hosts to configure addresses using router advertisements?

1. SLAAC
2. PAT
3. ARP
4. Static NAT

Correct Answer: 1

Explanation:

Stateless Address Autoconfiguration, commonly abbreviated SLAAC, allows IPv6 hosts to configure addresses based on information received through router advertisements. The router can advertise network-prefix information, while the host derives an interface address according to the applicable IPv6 mechanisms. SLAAC can reduce the need for manual address configuration and can operate without maintaining a traditional per-host address allocation database. PAT and static NAT are associated primarily with IPv4 address translation concepts, while ARP is an IPv4 address-resolution protocol. IPv6 uses Neighbor Discovery mechanisms rather than ARP. SLAAC is therefore the relevant method when router advertisements are used for automatic IPv6 address configuration.

Question 334.

What does a DNS CNAME record provide?

1. A list of authorized mail servers
2. An alias for another DNS name
3. A mapping from IPv4 address to hostname
4. A declaration of the DNS zone authority

Correct Answer: 3

Explanation:

A CNAME, or canonical name, record creates an alias from one DNS name to another canonical DNS name. This allows multiple hostnames to reference the same underlying name without independently maintaining identical address records for each alias. For example, an application could use a friendly service name that points to another DNS hostname managed by the organization. An MX record identifies mail-exchange servers, while a PTR record is used for reverse name resolution. An SOA record contains authoritative information about a DNS zone. Understanding CNAME behavior is important when troubleshooting name resolution, service aliases, and changes to the underlying destination hostname.

Question 335.

Which metric indicates how long a system typically takes to respond to a request?

1. Response latency
2. Storage capacity
3. Processor core count
4. Network interface speed

Correct Answer: 1

Explanation:

Response latency measures the time between initiating an operation and receiving the relevant response. In server environments, latency can be observed at several layers, including storage, network, database, and application processing. A system may have high throughput while still exhibiting poor response latency if individual operations take too long. Storage capacity measures how much data can be retained, processor core count identifies available processing resources, and interface speed represents a communication link’s theoretical transfer rate. Monitoring latency helps administrators identify performance bottlenecks that may not be obvious from capacity or bandwidth measurements alone. It is especially useful when users experience slow transactions despite apparently adequate resource availability.

Question 336.

Which condition can indicate that a virtual machine is waiting for access to a physical CPU?

1. High disk capacity
2. Large DNS cache
3. Excessive CPU ready time
4. Increased storage retention

Correct Answer: 3

Explanation:

CPU ready time represents periods during which a virtual machine is ready to execute but is waiting for the hypervisor to schedule physical CPU resources. Persistently high CPU ready time can indicate contention among virtual machines or insufficient processor resources assigned to the workload. It differs from guest CPU utilization because the virtual machine may appear ready to work without actually receiving physical processor time. Disk capacity, DNS cache size, and storage retention do not directly measure CPU scheduling contention. Administrators can use virtualization performance metrics to determine whether workload placement, virtual CPU allocation, or host capacity should be reviewed when CPU ready time remains elevated.

Question 337.

Which storage feature can protect recently written data during a sudden power interruption?

1. Battery-backed write cache
2. Directory compression
3. File indexing
4. Partition labeling

Correct Answer: 2

Explanation:

A battery-backed write cache can preserve recently acknowledged storage writes when a power interruption occurs. Storage controllers may temporarily hold write data in cache to improve performance, but acknowledging data before it reaches persistent media introduces risk if power is suddenly lost. A protected cache uses battery or another persistent mechanism to maintain cached data until normal storage operation resumes. Directory compression, file indexing, and partition labeling do not provide protection for unwritten cached data. Administrators should monitor the health of the cache-protection mechanism because a failed battery or protection module can cause controllers to change caching behavior or disable write-back operation.

Question 338.

What is the primary purpose of storage multipathing?

1. To rename storage volumes automatically
2. To provide alternate paths to storage resources
3. To compress every disk block
4. To convert files into database records

Correct Answer: 4

Explanation:

Storage multipathing provides multiple communication paths between a server and a storage resource. If one path, adapter, switch connection, or related component becomes unavailable, another configured path can continue carrying storage traffic. Multipathing can therefore improve availability and, depending on the implementation, may also distribute traffic across available paths. It is commonly associated with enterprise storage environments where a single connection failure should not interrupt access to critical data. Renaming volumes, compressing blocks, and converting files into database records are unrelated functions. Administrators should verify that multipath software, storage identifiers, and path policies are correctly configured to avoid duplicate-device or failover problems.

Question 339.

Which backup characteristic prevents stored backup data from being modified after creation?

1. Immutable retention
2. Temporary staging
3. Ordinary file copying
4. Local cache synchronization

Correct Answer: 1

Explanation:

Immutable retention prevents protected backup data from being altered or deleted during a defined retention period. This can help defend backups against accidental modification, administrative mistakes, and attacks that attempt to destroy recovery data. Immutability may be implemented through storage controls, retention locks, or specialized backup-platform features. Ordinary file copying does not inherently prevent modification, while temporary staging and cache synchronization serve different operational purposes. A properly designed immutable backup strategy should also consider retention duration, recovery testing, access controls, and the separation of administrative privileges. The key characteristic is that protected backup content cannot be changed or removed before its permitted retention period ends.

Question 340.

Which document normally records approved changes made to a server configuration?

1. Visitor log
2. Equipment receipt
3. Maintenance checklist
4. Change record

Correct Answer: 4

Explanation:

A change record documents an approved modification to a system or service. It can identify what was changed, why the change was required, who approved it, when it was performed, and whether validation or rollback steps were completed. Maintaining these records supports accountability and makes troubleshooting easier when a configuration change later causes an unexpected result. A visitor log tracks physical access, an equipment receipt documents procurement, and a maintenance checklist records procedural tasks. These documents can all have operational value, but they do not specifically provide the formal history of approved configuration changes. Change records are therefore an important component of controlled server administration.