Comptia

SK0-005 Free Practice Questions — Page 17

Question 161

While running a local network security scan, an administrator discovers communication between clients and one of the web servers is happening in cleartext. Company policy requires all communication to be encrypted. Which of the following ports should be closed to stop the cleartext communication?

A. 21
B. 22
C. 443
D. 3389
Show Answer
Correct Answer: A
Explanation:
Port 21 is used by FTP, which sends data in cleartext. Port 22 (SSH) and 443 (HTTPS) are encrypted, while 3389 is commonly used for RDP. For cleartext web traffic specifically, the usual port is HTTP port 80, which is not among the choices; given the options, port 21 is the cleartext port to close.

Question 162

Which of the following should a technician verify FIRST before decommissioning and wiping a file server?

A. The media destruction method
B. The recycling policy
C. Asset management documentation
D. Non-utilization
Show Answer
Correct Answer: D
Explanation:
Verify non-utilization first to ensure no users, applications, or services still depend on the file server. Documentation, recycling, and media-destruction procedures come after confirming it can be safely decommissioned.

Question 163

A server administrator is trying to determine the cause of a slowdown on a database server. Upon investigation, the administrator determines the issue is in the storage subsystem. Which of the following will MOST likely resolve this issue?

A. Increasing IOPS by implementing flash storage
B. Implementing deduplication on the storage
C. Extending capacity by installing a 4TB SATA disk
D. Reformatting the disk as FAT32
Show Answer
Correct Answer: A
Explanation:
Flash storage provides higher IOPS and lower latency than traditional disks, which can reduce storage-related slowdowns for database workloads.

Question 164

Users in an office lost access to a file server following a short power outage. The server administrator noticed the server was powered off. Which of the following should the administrator do to prevent this situation in the future?

A. Connect the server to a KVM
B. Use cable management
C. Connect the server to a redundant network
D. Connect the server to a UPS
Show Answer
Correct Answer: D
Explanation:
A UPS provides temporary battery power during a short outage, keeping the server running instead of allowing it to shut off.

Question 165

Which of the following encryption methodologies would MOST likely be used to ensure encrypted data cannot be retrieved if a device is stolen?

A. End-to-end encryption
B. Encryption in transit
C. Encryption at rest
D. Public key encryption
Show Answer
Correct Answer: C
Explanation:
Encryption at rest protects data stored on a device. If the device is stolen, the data remains encrypted and cannot be accessed without the decryption key. Encryption in transit protects data while it is being transmitted.

Question 166

In which of the following media rotation schemes are daily, weekly, and monthly backup media utilized in a first-in, first-out method?

A. Waterfall
B. Synthetic full
C. Tower of Hanoi
D. Grandfather-father-son
Show Answer
Correct Answer: D
Explanation:
The Grandfather-father-son scheme uses daily (“son”), weekly (“father”), and monthly (“grandfather”) backup sets, rotating media so the oldest set is reused first (FIFO).

Question 167

An administrator notices high traffic on a certain subnet and would like to identify the source of the traffic. Which of the following tools should the administrator utilize?

A. Anti-malware
B. Nbtstat
C. Port scanner
D. Sniffer
Show Answer
Correct Answer: D
Explanation:
A sniffer captures and analyzes network packets, allowing the administrator to identify the devices and traffic associated with the high-volume activity.

Question 168

An administrator needs to increase the size of an existing RAID 6 array that is running out of available space. Which of the following is the BEST way the administrator can perform this task?

A. Replace all the array drives at once and then expand the array.
B. Expand the array by changing the RAID level to 6.
C. Expand the array by changing the RAID level to 10.
D. Replace the array drives one at a time and then expand the array.
Show Answer
Correct Answer: D
Explanation:
Replace each drive with a larger one individually, allowing the RAID 6 array to rebuild fully after each replacement. Once all drives have been upgraded, expand the array to use the additional capacity. Replacing all drives at once risks losing the array and its data.

Question 169

A very old PC is running a critical, proprietary application in MS-DOS. Administrators are concerned about the stability of this computer. Installation media has been lost, and the vendor is out of business. Which of the following would be the BEST course of action to preserve business continuity?

A. Perform scheduled chkdsk tests.
B. Purchase matching hardware and clone the disk.
C. Upgrade the hard disk to SSD.
D. Perform quarterly backups.
Show Answer
Correct Answer: B
Explanation:
Matching hardware and a cloned disk provide a ready replacement that preserves the legacy DOS environment and proprietary application. CHKDSK only detects some disk problems, an SSD upgrade may introduce compatibility issues, and quarterly backups alone may not restore the system quickly enough for business continuity.

Question 170

A server administrator needs to ensure all Window-based servers within a data center have RDP disabled. There are thousands of servers performing various roles. Which of the following is the BEST way to meet this requirement?

A. Run chkconfig --level 345 RDP off.
B. Create a PowerShell script to disable the RDP service.
C. Run chkconfig --list RDP.
D. Create a Bash shell script to disable the Windows Remote Management service.
E. Create a GPO to disable the Windows Remote Management service
Show Answer
Correct Answer: B
Explanation:
RDP is provided by Windows Remote Desktop Services, not Windows Remote Management (WinRM). A PowerShell script can disable the RDP service; option E targets WinRM and would not disable RDP. The chkconfig options are for Linux systems.

$19

Get all 361 questions with detailed answers and explanations

  • Instant download HTML + PDF delivered the moment payment clears.
  • Secure Stripe checkout we never see or store your card details.
  • 7-day refund if files are defective see our refund policy.