View Full CompTIA Server+ SK0-005 Exam Dumps and Practice Test Dumps

 

Question 301.

Which server component provides a direct interface for managing hardware independently of the operating system?

1. Baseboard management controller
2. Application runtime
3. Filesystem driver
4. Database engine

Correct Answer: 1

Explanation:

A Baseboard Management Controller, or BMC, provides an independent management interface for server hardware. It can monitor conditions such as temperature, fan status, power state, and hardware faults even when the operating system is unavailable. Depending on the platform, administrators may also use the BMC for remote console access, power operations, firmware management, and hardware inventory. Because the BMC operates separately from normal operating-system administration, it is particularly useful during boot failures or system crashes. Administrators should protect BMC interfaces with strong credentials, restricted network access, updated firmware, and appropriate management-plane security controls.

Question 302.

Which firmware interface initializes hardware before transferring control to an operating system?

1. Application loader
2. UEFI firmware
3. Network service
4. Filesystem manager

Correct Answer: 2

Explanation:

UEFI firmware initializes and prepares server hardware before handing control to the operating system’s boot process. It can detect hardware components, apply configured settings, identify available boot devices, and provide firmware-level management functions. UEFI replaced many limitations associated with traditional BIOS implementations and supports modern capabilities such as larger boot disks and structured firmware interfaces. Administrators should keep firmware versions aligned with vendor recommendations because firmware updates can address hardware compatibility, stability, and security issues. Incorrect firmware settings can affect boot order, hardware detection, virtualization features, and other low-level server functions.

Question 303.

Which security component stores cryptographic material within tamper-resistant hardware?

1. Network gateway
2. Certificate cache
3. Trusted Platform Module
4. Application database

Correct Answer: 3

Explanation:

A Trusted Platform Module, or TPM, is a hardware-based security component designed to protect cryptographic material and support platform security functions. A TPM can generate or protect keys and participate in measured-boot or device-attestation mechanisms depending on the platform. Because sensitive operations can occur within dedicated hardware, certain secrets can be protected from straightforward extraction by software. Administrators may encounter TPM functionality in systems using disk encryption, secure authentication, or platform integrity features. Proper TPM management is important when replacing motherboards, reconfiguring encryption, or preparing systems for disposal because protected keys may affect access to encrypted data.

Question 304.

Which certificate field identifies the entity to which the certificate was issued?

1. Signature algorithm
2. Validity period
3. Serial identifier
4. Subject name

Correct Answer: 4

Explanation:

The subject name identifies the entity represented by a digital certificate. Depending on the certificate type, the subject may represent a server, organization, individual, or other identity. Modern TLS certificates commonly rely heavily on the Subject Alternative Name extension when identifying hostnames, but the subject field remains part of the certificate structure. Administrators inspecting certificates should also verify the issuing authority, validity period, signature, key usage, and applicable names. A certificate can be correctly signed yet still be unsuitable for a particular server if the requested hostname is not covered by the certificate’s identity information.

Question 305.

Which certificate request is sent to a certificate authority when requesting a signed certificate?

1. Certificate signing request
2. Private key archive
3. Trust database
4. Revocation record

Correct Answer: 1

Explanation:

A Certificate Signing Request, or CSR, is generated when an administrator requests a certificate from a certificate authority. The CSR contains information about the requested identity and includes a public key associated with a private key generated by the requester. The private key should remain protected and should not be sent to the certificate authority as part of the ordinary CSR process. After validation, the authority can issue a signed certificate corresponding to the public key. Administrators should carefully verify requested names and certificate attributes because an incorrectly generated CSR may require the certificate request process to be repeated.

Question 306.

Which protocol can check whether a digital certificate has been revoked without downloading a complete revocation list?

1. SMTP
2. OCSP
3. SMB
4. NFS

Correct Answer: 2

Explanation:

The Online Certificate Status Protocol, or OCSP, allows a client to query whether a specific digital certificate is considered valid or revoked. Instead of downloading an entire certificate revocation list, the client can request status information for the relevant certificate. OCSP can reduce the amount of revocation information that must be transferred, although availability and implementation depend on the certificate ecosystem. Administrators troubleshooting certificate validation should consider connectivity to the relevant status service, certificate configuration, trust relationships, and expiration. Certificate revocation checking is only one part of certificate validation and does not replace verification of identity and trust.

Question 307.

Which encryption approach protects information while it travels between communicating systems?

1. Encryption in transit
2. Compression at rest
3. Replication at source
4. Indexing during storage

Correct Answer: 1

Explanation:

Encryption in transit protects information while it moves between systems over a communication channel. Technologies such as TLS can encrypt application traffic so that intercepted network data is difficult to interpret without the necessary cryptographic information. Administrators should distinguish encryption in transit from encryption at rest, which protects stored information on disks or other media. Secure transport also depends on correct certificate validation, protocol configuration, key management, and endpoint security. Simply enabling encryption does not guarantee secure communication if weak protocols, invalid certificates, or improperly protected private keys are used.

Question 308.

Which firewall behavior allows return traffic for an established connection automatically?

1. Static forwarding
2. Stateful inspection
3. Address translation
4. Port mirroring

Correct Answer: 2

Explanation:

Stateful inspection tracks the status of network connections and can use that information when evaluating subsequent packets. For example, a firewall may permit legitimate return traffic associated with a connection that was previously allowed, without requiring an independent rule for every response packet. This differs from simple stateless filtering, which evaluates individual packets without maintaining connection state. Administrators should understand how state tables, timeouts, protocols, and asymmetric routing affect stateful operation. Incorrect state handling can cause legitimate sessions to fail or leave unnecessary traffic exposed. Firewall configuration should always be tested against the application’s actual communication pattern.

Question 309.

Which network configuration allows several tagged VLANs to cross one switch connection?

1. Trunk link
2. Access segment
3. Loopback interface
4. Console connection

Correct Answer: 1

Explanation:

A trunk link carries traffic belonging to multiple VLANs across a shared physical connection. VLAN tags identify the logical network associated with each frame so that connected switching devices can preserve segmentation across the infrastructure. Trunking is commonly used between switches and can also connect compatible servers, hypervisors, or network appliances. Administrators should explicitly define which VLANs are permitted on a trunk and avoid allowing unnecessary networks. Incorrect tagging or native-network configuration can result in connectivity problems or unintended network exposure. Documentation of trunk interfaces is especially important in environments containing many interconnected switches.

Question 310.

Which setting defines the largest packet size a network interface should transmit without fragmentation?

1. TTL
2. MTU
3. CIDR
4. MAC

Correct Answer: 2

Explanation:

Maximum Transmission Unit, or MTU, specifies the largest packet size that an interface is configured to transmit at the relevant network layer without fragmentation under normal conditions. Ethernet networks commonly use a standard MTU, while specialized environments may use different values. Incorrect MTU settings can produce connectivity problems, reduced performance, or failures that affect only certain applications or destinations. Administrators troubleshooting MTU-related issues may compare interface settings across communicating systems and network paths. Changes should be made carefully because every part of the communication path may need to support the selected packet size.

Question 311.

Which DNS record provides an alias for another hostname?

1. CNAME record
2. SOA record
3. MX record
4. PTR record

Correct Answer: 1

Explanation:

A Canonical Name, or CNAME, record creates an alias from one hostname to another canonical hostname. This allows administrators to reference a service through a friendly or stable name while the underlying destination can be changed independently. CNAME records are commonly useful when several application names need to reference a managed hostname. Administrators should understand DNS record restrictions when using aliases, particularly where other record types or zone configurations are involved. Changes to CNAME records are subject to DNS caching according to their TTL. Careful naming and documentation help prevent confusing resolution chains.

Question 312.

Which DNS record advertises a service endpoint and its port information?

1. TXT record
2. SRV record
3. A record
4. NS record

Correct Answer: 2

Explanation:

An SRV record provides information about the location of a service, including the target hostname and port associated with that service. Applications that understand SRV records can use them to discover appropriate service endpoints without requiring the destination port to be hard-coded. SRV records can also include priority and weighting information that influences endpoint selection. Administrators should verify that the service name, protocol, target hostname, and port are correctly configured. Incorrect SRV information can prevent clients from locating an otherwise functioning service. DNS troubleshooting should therefore include checking the relevant service records as well as ordinary hostname resolution.

Question 313.

Which server metric indicates how much memory is actively being consumed by workloads?

1. Memory utilization
2. Storage throughput
3. Network jitter
4. Processor frequency

Correct Answer: 1

Explanation:

Memory utilization indicates how much available system memory is being consumed by operating-system processes, applications, caches, and other workloads. Administrators should interpret memory utilization according to the operating system because systems may intentionally use otherwise unused RAM for caching. High utilization does not automatically mean that a server has insufficient memory. More useful indicators can include available memory, paging activity, swap usage, application behavior, and sustained memory pressure. When a server experiences persistent memory shortages, administrators can investigate workload growth, inefficient applications, excessive caching, or the need for additional physical memory.

Question 314.

Which Linux mechanism controls commands a user may execute with elevated privileges?

1. sudoers policy
2. Shell prompt
3. Login banner
4. Package cache

Correct Answer: 1

Explanation:

The sudoers policy defines which users or groups may execute commands with elevated privileges through sudo and under what conditions. Administrators can use it to grant specific administrative capabilities without providing unrestricted root access. A carefully designed policy can identify allowed commands, target users, hosts, and other restrictions. Errors in the configuration can either prevent legitimate administration or grant excessive privileges. Administrators should validate syntax before applying major changes and maintain appropriate backups of configuration files. Privileged access should be reviewed periodically to ensure permissions remain aligned with current job responsibilities.

Question 315.

Which service distributes hostnames and IP address information to systems on a network?

1. DNS
2. DHCP
3. SNMP
4. LDAP

Correct Answer: 2

Explanation:

DHCP provides network configuration information to client systems, including addresses and related parameters. DNS performs a different role by resolving names to addresses and other resource information. Although DHCP and DNS frequently operate together, they are separate services. Administrators can configure DHCP scopes, reservations, lease durations, gateways, DNS server addresses, and other options according to network requirements. When a client receives incorrect configuration, administrators should inspect the DHCP scope and options as well as relay behavior if the service is located on another network. Proper address management helps prevent duplicate assignments and exhausted address pools.

Question 316.

Which availability mechanism automatically transfers service operation after a node failure?

1. Load balancing
2. Failover clustering
3. Data compression
4. Log rotation

Correct Answer: 2

Explanation:

Failover clustering allows multiple systems to cooperate so that services can continue operating when one participating node becomes unavailable. Depending on the platform, cluster software can detect failures and move workloads or resources to another suitable node. Successful failover requires appropriate shared or replicated resources, health detection, application support, and correctly configured dependencies. Administrators should test both normal operation and failure scenarios because an untested cluster may not behave as expected during an actual outage. Cluster designs also require careful consideration of quorum, network communication, storage access, and application state to avoid service interruption or inconsistent data.

Question 317.

Which storage feature automatically creates a point-in-time representation of data?

1. Snapshot
2. Defragmentation
3. Formatting
4. Partition expansion

Correct Answer: 1

Explanation:

A storage snapshot captures the state of data at a particular point in time. Snapshots can be useful for short-term recovery, testing, application maintenance, and other operational tasks. Depending on the storage system, a snapshot may use metadata and copy-on-write techniques rather than immediately duplicating every data block. Administrators should not treat snapshots as a complete replacement for independent backups because a snapshot may depend on the same storage infrastructure as the production data. Snapshot retention should also be controlled because large numbers of snapshots can consume storage resources or affect system performance.

Question 318.

Which metric measures the time required for a storage request to complete?

1. Throughput
2. Latency
3. Capacity
4. Deduplication ratio

Correct Answer: 2

Explanation:

Storage latency measures the time required for a storage operation to receive a response. Lower latency generally means that individual read or write requests complete more quickly. Applications such as databases and virtualization platforms can be particularly sensitive to storage latency because many operations may depend on timely I/O responses. Administrators should evaluate latency alongside IOPS, throughput, queue depth, workload type, and cache behavior. High latency can originate from overloaded storage devices, network congestion, controller limitations, excessive queueing, or application-level conditions. Establishing normal performance ranges makes it easier to identify meaningful deviations.

Question 319.

Which process removes sensitive information from storage before equipment is retired?

1. Data sanitization
2. File renaming
3. Directory sorting
4. Volume labeling

Correct Answer: 1

Explanation:

Data sanitization removes or renders sensitive information inaccessible before storage equipment is reused, transferred, or disposed of. The appropriate technique depends on the storage medium, organizational requirements, and sensitivity of the information. Administrators may use approved software-based erasure, cryptographic methods, or physical destruction where appropriate. Simply deleting files or formatting a filesystem may not provide adequate protection because recoverable information can remain on the underlying media. Sanitization procedures should be documented, verified, and aligned with organizational policies. Asset records should also be updated so that retired devices can be tracked through the disposal process.

Question 320.

Which planning document identifies the relationships between applications and the infrastructure they require?

1. Dependency map
2. Employee directory
3. Procurement invoice
4. Warranty schedule

Correct Answer: 1

Explanation:

A dependency map identifies relationships between services, applications, servers, networks, storage resources, and other infrastructure components. Understanding these relationships helps administrators evaluate the potential impact of maintenance, failures, migrations, and configuration changes. For example, an application may depend on a database server, authentication service, DNS infrastructure, and specific storage resources. Without accurate dependency information, troubleshooting can become slower and planned maintenance may unintentionally interrupt related services. Administrators should update dependency documentation when systems change and validate important relationships periodically. Dependency mapping is particularly useful for incident response, capacity planning, disaster recovery, and controlled infrastructure changes.