View Full CompTIA Server+ SK0-005 Exam Dumps and Practice Test Dumps

 

Question 121.

Which server component stores cryptographic keys used for hardware-based security?

1. Trusted Platform Module
2. Remote console adapter
3. Firmware recovery chip
4. Memory parity controller

Correct Answer: 1

Explanation:

A Trusted Platform Module, commonly called a TPM, is a dedicated security component designed to perform cryptographic operations and protect sensitive security information. It can store cryptographic keys and support platform integrity features. Operating systems and security applications may use the TPM for functions such as device encryption, secure authentication, and measured boot processes. A remote console adapter is intended for management access, a firmware recovery chip helps restore firmware, and a memory parity controller deals with memory reliability. TPM functionality is particularly useful when administrators need hardware-assisted protection for sensitive cryptographic operations.

Question 122.

Which certificate request contains information used by a certificate authority to issue a digital certificate?

1. Certificate fingerprint
2. Trust store index
3. Certificate signing request
4. Revocation response

Correct Answer: 3

Explanation:

A Certificate Signing Request, or CSR, is generated when an organization or system requests a digital certificate from a certificate authority. The request normally contains the subject information, the public key, and other certificate-related attributes. The corresponding private key remains under the control of the system generating the request. A certificate fingerprint is a digest used to identify a certificate, a trust store index organizes trusted certificates, and a revocation response provides certificate status information. Administrators should carefully verify the identity information included in a CSR before submitting it to a certificate authority.

Question 123.

Which protocol checks whether a certificate has been revoked without downloading a complete revocation list?

1. Certificate Transfer Protocol
2. Online Certificate Status Protocol
3. Certificate Enrollment Protocol
4. Secure Key Exchange Protocol

Correct Answer: 2

Explanation:

The Online Certificate Status Protocol, or OCSP, allows a client to query a certificate authority or responder about the current status of a certificate. Instead of requiring the client to retrieve an entire certificate revocation list, the client can request status information for a particular certificate. This can reduce the amount of certificate-status data that must be transferred. Certificate Transfer Protocol and Secure Key Exchange Protocol are not standard names for this function. Administrators should also consider availability and privacy implications when deploying certificate-status checking mechanisms.

Question 124.

Which TLS element allows a client to verify the identity of a certificate issuer?

1. Session ticket
2. Cipher preference
3. Connection timeout
4. Certificate chain

Correct Answer: 4

Explanation:

A certificate chain connects an end-entity certificate to one or more intermediate certificates and ultimately to a trusted root certificate authority. During TLS validation, the client examines this chain to determine whether the presented certificate can be trusted. A session ticket supports session resumption, cipher preferences influence cryptographic algorithm selection, and a connection timeout determines how long a connection attempt can remain active. If the chain is incomplete or the issuing authority is not trusted, certificate validation may fail even when the server certificate itself has not expired.

Question 125.

Which security principle limits a user account to only the permissions needed for assigned tasks?

1. Maximum privilege
2. Shared administrative access
3. Minimum necessary access
4. Permanent authorization

Correct Answer: 3

Explanation:

The minimum necessary access principle limits users and services to the permissions required for their legitimate responsibilities. This reduces the potential impact of compromised accounts, accidental changes, and unauthorized activity. Giving every account broad administrative rights increases the number of systems and resources that could be affected if credentials are misused. Shared administrative access can also reduce accountability because multiple people may use the same identity. Permanent authorization may leave unnecessary permissions active for long periods. Server administrators should periodically review privileges and remove access that is no longer required.

Question 126.

Which firewall behavior tracks active connections before permitting related return traffic?

1. Stateless filtering
2. Static packet forwarding
3. Basic frame switching
4. Stateful inspection

Correct Answer: 4

Explanation:

Stateful inspection maintains information about active network connections and uses that information when evaluating subsequent packets. For example, when a client establishes an outbound connection, the firewall can recognize legitimate response traffic associated with that session. Stateless filtering evaluates packets individually without maintaining the same connection state. Static packet forwarding simply directs traffic according to configured forwarding rules, while frame switching operates at the network switching layer. Stateful inspection can provide more context-aware filtering, but administrators must still configure appropriate rules and monitor logs for unexpected traffic patterns.

Question 127.

Which network configuration separates multiple logical networks across the same physical switch?

1. VLAN segmentation
2. Cable aggregation
3. Physical loop isolation
4. Broadcast amplification

Correct Answer: 1

Explanation:

VLAN segmentation allows multiple logical networks to operate through the same physical switching infrastructure. Devices assigned to different VLANs are separated into distinct broadcast domains even though they may connect to the same physical switches. VLANs are commonly used to separate server traffic, management traffic, storage communication, or other network categories. Cable aggregation combines links for redundancy or additional capacity, while broadcast amplification and physical loop isolation do not provide the standard logical network separation achieved through VLANs. Proper VLAN design also requires correct switch-port configuration and, where needed, routing between VLANs.

Question 128.

Which Ethernet feature permits frames larger than the standard Ethernet payload size?

1. Packet fragments
2. Extended headers
3. Jumbo frames
4. Oversized broadcasts

Correct Answer: 3

Explanation:

Jumbo frames are Ethernet frames that use a payload larger than the traditional Ethernet maximum transmission unit. They can reduce protocol overhead for workloads that transfer large amounts of data, such as certain storage or backup environments. However, every device along the communication path must support the selected frame size consistently. Packet fragments are smaller pieces created when packets are divided, extended headers add protocol information, and oversized broadcasts are not a standard method for increasing Ethernet frame capacity. Administrators should test jumbo-frame configurations carefully because mismatched MTU settings can cause connectivity problems.

Question 129.

Which DNS record maps an alias name to another canonical hostname?

1. CNAME record
2. SRV record
3. TXT record
4. NS record

Correct Answer: 1

Explanation:

A CNAME, or Canonical Name, record creates an alias from one DNS hostname to another canonical hostname. This allows multiple names to reference the same underlying hostname without maintaining separate address records for each alias. SRV records identify services and their associated hosts and ports, TXT records store text-based information, and NS records identify authoritative name servers for a DNS zone. Administrators should understand how CNAME records interact with other DNS records and avoid creating configurations that introduce unnecessary lookup chains or conflicts.

Question 130.

Which DNS record identifies the server responsible for a specific network service?

1. PTR record
2. SRV record
3. CAA record
4. SOA record

Correct Answer: 2

Explanation:

An SRV record identifies the hostname and port associated with a particular network service. Applications can use SRV information to locate services without relying only on a fixed hostname and port combination. PTR records are primarily used for reverse name resolution, CAA records specify which certificate authorities may issue certificates for a domain, and SOA records contain authoritative zone information. SRV records are commonly useful in environments where applications or directory-related services need a standardized mechanism for discovering service endpoints.

Question 131.

Which server cluster mechanism determines whether enough nodes remain available to continue operating?

1. Replication delay
2. Session persistence
3. Quorum
4. Cache synchronization

Correct Answer: 3

Explanation:

Quorum is a cluster mechanism used to determine whether enough participating nodes or voting resources remain available for the cluster to continue operating safely. It helps prevent split-brain situations in which different groups of nodes independently believe they should control the same resources. Replication delay describes how quickly information reaches another system, session persistence keeps a client associated with a particular service node, and cache synchronization keeps cached information consistent. Proper quorum configuration depends on the cluster architecture and should account for node failures and possible network partitions.

Question 132.

Which high-availability design keeps one server ready to take over when another fails?

1. Parallel workload configuration
2. Independent service configuration
3. Distributed cache configuration
4. Active-passive configuration

Correct Answer: 4

Explanation:

An active-passive configuration uses one active server to provide a service while another server remains ready to assume responsibility if the active system fails. The standby system may receive limited health information or replicated data while waiting for a failover event. This approach can improve service availability because a replacement system is already prepared. Parallel workload configurations may involve multiple active servers, while independent service and distributed cache configurations describe other architectural arrangements. Administrators must verify failover procedures, application dependencies, storage access, and network addressing to ensure the standby system can actually provide the required service.

Question 133.

Which monitoring value represents the amount of time a virtual CPU waits for physical CPU resources?

1. CPU steal time
2. Disk response time
3. Memory residency
4. Network queue depth

Correct Answer: 1

Explanation:

CPU steal time represents processor time that a virtual machine is ready to run but cannot immediately obtain because the underlying physical processor is being used elsewhere. High values can indicate contention for CPU resources on the virtualization host. Disk response time measures storage responsiveness, memory residency concerns how data remains in memory, and network queue depth reflects pending network activity. Monitoring CPU steal time can help administrators identify overloaded virtualization hosts or poorly balanced workloads. Resource allocation should be reviewed when virtual machines consistently experience significant processor contention.

Question 134.

Which storage metric measures the number of input/output operations completed each second?

1. Storage capacity
2. Transfer distance
3. Sector density
4. IOPS

Correct Answer: 4

Explanation:

IOPS stands for input/output operations per second and measures how many storage operations a system can process within a given second. It is an important performance metric for workloads that perform many small reads and writes, such as databases or virtualization environments. Storage capacity describes how much data can be stored, transfer distance is not a standard storage performance measurement, and sector density describes how information is arranged on storage media. IOPS should be evaluated alongside throughput, response time, queue depth, and workload characteristics because a high IOPS value alone does not describe every aspect of storage performance.

Question 135.

Which caching method confirms that data is written to persistent storage before reporting completion?

1. Delayed write caching
2. Write-through caching
3. Read-ahead caching
4. Predictive cache loading

Correct Answer: 2

Explanation:

Write-through caching sends modified data to persistent storage before the write operation is reported as completed. This approach can provide stronger data consistency because the system does not rely solely on volatile cache contents for confirmed writes. Delayed write caching may acknowledge writes before they reach persistent storage, while read-ahead caching attempts to predict future reads rather than handling write confirmation. Predictive cache loading is not the standard term for this behavior. Administrators should select cache policies according to application performance requirements, hardware protection mechanisms, and acceptable data-loss risk.

Question 136.

Which SAN security feature restricts a server’s access to specific storage logical units?

1. LUN masking
2. Fabric broadcasting
3. Path advertisement
4. Port discovery

Correct Answer: 1

Explanation:

LUN masking restricts which logical units, or LUNs, are visible to a particular server or initiator. This prevents a host from seeing storage resources that it is not authorized or configured to use. In SAN environments, LUN masking is often combined with other access-control mechanisms to provide controlled storage presentation. Fabric broadcasting and port discovery do not provide equivalent logical-unit authorization, while path advertisement concerns how storage connectivity information is presented. Incorrect masking can cause applications to lose access to required storage or expose storage to unintended hosts.

Question 137.

Which backup strategy keeps copies that cannot be modified during their protected retention period?

1. Temporary backup
2. Rolling backup
3. Immutable backup
4. Working backup

Correct Answer: 3

Explanation:

An immutable backup is protected against modification or deletion during its defined retention period. This characteristic can help defend backup data against accidental changes, unauthorized deletion, and certain ransomware scenarios. Temporary backups are generally created for short-term purposes, while rolling and working backups describe operational approaches rather than guaranteed immutability. Administrators should configure retention periods carefully and verify that backup copies can actually be restored. Immutability is most effective when combined with appropriate access controls, monitoring, backup verification, and multiple recovery locations.

Question 138.

Which maintenance document provides step-by-step instructions for handling a recurring server task?

1. Runbook
2. Asset ledger
3. Procurement record
4. License register

Correct Answer: 1

Explanation:

A runbook contains documented procedures for performing specific operational tasks. Server administrators can use runbooks for activities such as restarting services, responding to common alerts, replacing hardware, or carrying out standardized maintenance procedures. Asset ledgers track equipment and ownership information, procurement records document purchasing activities, and license registers track software licensing details. A well-maintained runbook helps technicians perform recurring tasks consistently and reduces dependence on individual memory. It should be reviewed whenever system architecture, commands, security requirements, or operational procedures change.

Question 139.

Which maintenance practice schedules disruptive server work during an approved period?

1. Incident freeze
2. Maintenance window
3. Resource pause
4. Deployment blackout

Correct Answer: 2

Explanation:

A maintenance window is an approved period during which administrators can perform planned work that may affect system availability. Organizations commonly schedule firmware upgrades, hardware replacements, operating-system maintenance, or other disruptive activities within these windows. The goal is to reduce unexpected business impact by coordinating the timing of planned changes. An incident freeze may restrict changes during sensitive periods, while resource pause and deployment blackout are not equivalent general terms. Administrators should communicate the maintenance window, confirm backups and rollback procedures, and verify system health after the work is completed.

Question 140.

Which planning activity estimates future server resources based on expected workload growth?

1. Incident classification
2. Asset reconciliation
3. Configuration auditing
4. Capacity planning

Correct Answer: 4

Explanation:

Capacity planning evaluates current resource consumption and estimates future requirements based on expected workload growth. Administrators may examine processor usage, memory consumption, storage growth, network utilization, and application demand to determine when additional resources will be needed. Incident classification categorizes service problems, asset reconciliation compares equipment records with actual inventory, and configuration auditing checks system settings against expected standards. Effective capacity planning helps organizations avoid both resource shortages and unnecessary overprovisioning. It should be based on measured trends and realistic growth expectations rather than relying solely on short-term usage spikes.