This is the free Comptia SK0-005 practice question bank —
190 of 361 total questions, each with a full explanation, free to
read with no signup required. Updated 2026-10-03.
Every answer is verified against official Comptia documentation —
see our methodology.
Question 1
An administrator is receiving reports that users in a remote office are unable to log in to the domain. The network appears to be up between the sites, which are in different states. Which of the following is the most likely cause of the issue?
A. The user accounts are locked out.
B. The NTP on the client side is misconfigured.
C. MFA is not working.
D. The wrong time zone was set in the remote office.
Show Answer
Correct Answer: B
Explanation: Domain authentication commonly relies on Kerberos, which requires client and domain controller clocks to be synchronized within an allowed tolerance. Misconfigured client-side NTP can cause logins to fail. A different time zone alone would not cause this if the system clock is accurate.
Question 2
Which of the following testing exercises for disaster recovery is primarily used to discuss incident response strategies for critical systems without affecting production data?
A. Tabletop
B. Backup recovery test
C. Live failover
D. Hot-site visit audit
Show Answer
Correct Answer: A
Explanation: A tabletop exercise is discussion-based: participants review incident scenarios, roles, and response strategies without changing or affecting production systems or data.
Question 3
An analyst is planning a new point-to-point Ethernet connection between a university campus and a newly acquired space downtown that is about 5mi (8km) away. The analyst would like the fastest possible connection speed. Which of the following would best meet the analyst’s needs?
A. 1000BASE-LX 1Gb single-mode plenum fiber connection
B. 10GBASE-T 10Gb copper plenum Ethernet connection
C. 1000BASE-T 1Gb copper non-plenum Ethernet connection
D. 10GBASE-SR 10Gb multimode plenum fiber connection
Show Answer
Correct Answer: A
Explanation: A is the closest option: single-mode fiber is suited to long-distance links, while the copper and 10GBASE-SR options cannot span 8 km. However, standard 1000BASE-LX is rated for about 5 km, so it is not guaranteed to reach this site. A 10GBASE-LR single-mode link would better meet the stated distance and speed requirements, but it is not listed.
Question 4
A DHCP server was installed on the network and duplicate IP addresses are being assigned. The administrator decides to manually account for IP addresses and remove the DHCP services. However, clients are still being assigned IP addresses. Which of the following would be the best option to resolve this issue?
A. Checking the DHCP server for reservations
B. Checking the lease time of the IP address
C. Checking the DHCP server for unexpired leases
D. Checking and scanning for any rogue DHCP servers within the network
Show Answer
Correct Answer: D
Explanation: If clients are receiving new DHCP assignments after the intended DHCP service has been removed, another DHCP server is likely active. Scan the network for a rogue DHCP server. Existing leases can remain valid, but they do not explain new assignments.
Sources:
https://www.cloudns.net/blog/dhcp-server
Question 5
A new client has a two-drive NAS that shows 878 of capacity with 60% utilization. While troubleshooting an issue for the client, a technician notices the NFS folders are empty. Upon further investigation, the technician discovers the client changed the configuration from RAID 0 to RAID 1. Which of the following is the most likely reason for this issue?
A. Data corruption
B. RAID card damage
C. Media failure
D. Array rebuild
Show Answer
Correct Answer: D
Explanation: Changing a two-drive array from RAID 0 to RAID 1 requires the NAS to reconfigure and rebuild the array. During that process, the NFS folders may be temporarily unavailable or appear empty. This is more likely than hardware damage or media failure.
Question 6
A web server that is being deployed in the perimeter network needs to be shielded from malicious traffic. Which of the following could help identify these threats?
A. Applying OS updates
B. Disabling unused services
C. Implementing HIDS
D. Installing anti-malware
Show Answer
Correct Answer: C
Explanation: A host-based intrusion detection system (HIDS) monitors the server for suspicious activity and can alert administrators to potential threats. OS updates, disabling unused services, and anti-malware are primarily patching, hardening, or malware-protection measures.
Question 7
A technician notices that every time a server is powered on, it turns off after several minutes. After reviewing logs, the technician notices the server registers execution of the shutdown. Which of the following should the technician do to fix this issue?
A. Reset the memory modules.
B. Check for fan failure.
C. Change the VM password.
D. Set credentials for the remote console.
Show Answer
Correct Answer: B
Explanation: A failed cooling fan can cause the server to overheat after running for several minutes, triggering a protective shutdown. Check the fans and cooling system; the other options do not address this symptom.
Question 8
Which of the following is an architectural reinforcement that is used to attempt to conceal the exterior of an organization?
A. Fencing
B. Bollards
C. Camouflage
D. Reflective glass
Show Answer
Correct Answer: C
Explanation: Camouflage is used to conceal or disguise an organization’s exterior. Reflective glass primarily obscures the view into a building, while fencing and bollards are physical barriers.
Question 9
A technician is troubleshooting a database server that has 12 external disk arrays. Multiple disks are in a degraded state. The server is in a remote, colocation facility and has on-site support. The technician notices all of the external storage arrays are degraded, but the internal arrays are functional. Which of the following steps should the technician take next to quickly address this issue?
A. Notify the users of the downtime and reboot the server from the RDP connection.
B. Notify the management team about the issue and travel to the colocation site with spare disks and RAID controllers.
C. Access the server with RDP and start the RAID utility software to rebuild the arrays.
D. Restore the data for the affected disks and notify the users of the estimated recovery time.
Show Answer
Correct Answer: C
Explanation: Use the RAID management utility remotely to inspect the arrays and initiate rebuilds as appropriate. Rebooting is not a targeted fix, and with on-site support available, traveling with replacement hardware is not the quickest next step. Restore data only if the arrays cannot be recovered.
Question 10
Which of the following backup methods can be performed while a server is running, will not interrupt files in use, and can be used to fully restore the server if needed?
A. Snapshot
B. Archive
C. Open file
D. Differential
Show Answer
Correct Answer: A
Explanation: A snapshot captures the server’s state at a point in time while it is running, without interrupting files in use. A full-server snapshot can be used to restore the server.
Sources:
https://help.mailstore.com/en/server/Backup_and_Restore
$19
Get all 361 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.