SK0-005 Practice Test 2 — 10 Questions

Question 1

A small accounting firm has a single server that hosts their client database and financial applications. The server is backed up nightly using a full backup to an external USB hard drive, which is stored on a shelf next to the server. Last month, a fire broke out in the office, completely destroying the server and the backup drive. The company lost all data since their last offsite backup, which was six months old because they occasionally took a copy home. The business owner wants to prevent such a catastrophic data loss in the future but is concerned about cost and complexity. They have a limited IT budget and no dedicated IT staff. The firm operates 9-5 Monday to Friday, and can tolerate up to 24 hours of downtime and up to one day of data loss. After the fire, they had to rebuild their client records from paper files, which took weeks. The owner realizes the importance of an offsite backup routine but cannot afford an expensive cloud service or a second server. The firm's internet connection is a basic DSL line with limited upload bandwidth, making large cloud backups slow. The server has a single internal drive with enough free space to store additional copies. Which of the following backup strategies would best meet the firm’s recovery objectives while minimizing cost and complexity?

Accepted Answer

Continue nightly full backups to an external drive, but have an employee take the drive home every evening.. Option B is correct because it provides a daily offsite backup, limiting data loss to at most 24 hours, which meets the RPO. It requires minimal additional cost (just the external drive) and no complex technology, fitting the firm's budget and lack of IT staff. Option A (cloud backup) would exceed the slow internet connection's capability and likely incur ongoing subscription costs, making it less suitable. Option C (NAS in another room) does not protect against a site-wide disaster like fire, so it fails to provide offsite redundancy. Option D (weekly rotation) would result in an offsite copy that is up to a week old, violating the one-day RPO.

Answer

Buy a second external drive, alternate them, and keep one offsite at the owner’s house, rotating weekly.

Answer

Purchase a network-attached storage device and configure it to receive daily backups; place it in a different room in the building.

Answer

Subscribe to a cloud backup service and perform daily incremental backups over the internet.

Question 2

A regional hospital operates two data centers located 10 miles apart, with synchronous replication of critical patient record systems between them. The replication ensures that any write to the primary storage is immediately mirrored to the secondary site. The hospital also maintains weekly full backups to LTO-8 tapes, which are stored in a fireproof safe at an offsite warehouse 30 miles away. The IT team has not implemented storage snapshots or continuous data protection due to budget constraints. Last week, a ransomware attack encrypted all files on the primary site. The replication process promptly mirrored the encrypted data to the secondary site, rendering both copies inaccessible. The attackers demanded $500,000 in Bitcoin. The hospital's disaster recovery plan specifies an RPO of 1 hour and an RTO of 4 hours. The IT director must now choose a restoration strategy that minimizes data loss and downtime while ensuring a clean, malware-free environment. The backup tapes are confirmed to be unencrypted and free of ransomware. Which of the following actions should the IT director take first?

Accepted Answer

Wipe the secondary data center storage, restore from the latest clean tape backup at the secondary site, and then reverse replication to the primary.. Option C is correct because both the primary and secondary copies are encrypted, so the only clean data source is the offsite tape. Wiping the secondary site, restoring from tape there, and then reversing replication to the primary ensures a malware-free environment and uses the existing replication infrastructure to bring the primary back online quickly, potentially within the 4-hour RTO. Option A is unrealistic since no decryption tool is available for modern ransomware without the key. Option B runs the risk of the primary becoming reinfected if any remnants remain, and it leaves the encrypted secondary uncorrected. Option D is inadvisable as paying the ransom does not guarantee data recovery and funds criminal activity.

Answer

Pay the ransom demand to obtain the decryption key and decrypt both sites.

Answer

Restore the most recent tape backup to the primary site and re-enable replication.

Answer

Fail over to the secondary data center and attempt to decrypt the ransomware using available tools.

Question 3

Which THREE of the following are typically essential elements of a disaster recovery plan (DRP)? (Choose three.)

Accepted Answer

Emergency contact and communication plan. Options A, C, and E are correct. A business impact analysis (A) identifies critical functions and recovery priorities. An emergency contact and communication plan (C) ensures key personnel are reachable. A test and exercise schedule (E) validates the plan's effectiveness. Server hardware specifications (B) are operational details, not a core DRP element. A network topology diagram (D) supports recovery but is not always considered an essential DRP component; it is supplementary.

Answer

Server hardware specifications

Answer

Network topology diagram

Question 4

A server administrator is troubleshooting an issue where a database server's performance degrades every night at 2 AM. Resource monitor shows high disk I/O and CPU usage during that time. There are no scheduled tasks on the server. Which of the following should the administrator investigate FIRST?

Accepted Answer

Scheduled antivirus scans on the server. Option A is correct because centrally managed antivirus software may perform scans at a default time, causing high resource usage. Option B would result in network utilization, not local disk I/O. Option C is possible but typically scheduled and would appear in the task scheduler. Option D contradicts the statement that no scheduled tasks exist.

Answer

Network congestion from backups

Answer

Disk defragmentation tasks

Answer

A cron job misconfiguration

Question 5

A database server with 64 GB of RAM and RAID 5 storage is experiencing intermittent performance degradation. System monitoring shows constant 95% memory utilization, high disk queue length, and frequent page faults. The server is running a critical application that cannot be restarted during business hours. Which action will provide the BEST permanent resolution?

Accepted Answer

Add more physical RAM. High memory utilization combined with frequent page faults indicates a memory bottleneck. Adding physical RAM eliminates the need for paging, permanently resolving the root cause. Increasing or moving the page file only mitigates the symptoms, while replacing RAID 5 with RAID 10 improves disk performance but does not address the underlying memory shortage.

Answer

Replace the RAID 5 array with RAID 10

Answer

Move the page file to a dedicated SSD

Answer

Increase the size of the page file

Question 6

A database server running on a Linux VM has started experiencing periodic crashes. The VM is hosted on an ESXi hypervisor. The system logs show entries: 'kernel: Out of memory: Kill process 12345 (mysqld) score 700 or sacrifice child'. The VM has 16GB RAM allocated and no memory overcommitment on the host. The DBA reports that the database workload hasn't increased. Which of the following actions should be taken FIRST to diagnose the issue?

Accepted Answer

Check the host's memory utilization for ballooning or swapping.. Option C is correct because the OOM killer being invoked in a VM with stable workload suggests possible host-level memory constraints (e.g., ballooning, swapping) affecting the VM. Checking the host's memory utilization helps confirm whether the hypervisor is under memory pressure and causing the VM to think it's out of memory. Options A and D are configuration changes that might alleviate symptoms but don't diagnose root cause. B addresses database tuning, which is not indicated when the system reports OOM.

Answer

Add a memory reservation for the VM in ESXi.

Answer

Analyze the database query cache hit ratio and slow query logs.

Answer

Increase the VM's RAM allocation to 32GB.

Question 7

A server configured with RAID 5 has two failed drives. The array is offline and critical data is inaccessible. The administrator has replacement drives available. What should the administrator do to restore the data and array with minimal data loss?

Accepted Answer

Replace both failed drives and restore from backup.. Option A is correct. RAID 5 can survive a single drive failure, but with two failed drives, the array is completely broken and cannot be rebuilt. Restoring from backup is the only reliable method to recover the data. Options B and C incorrectly assume the array can still rebuild, and option D would worsen data integrity.

Answer

Reconfigure the RAID to RAID 0 using the remaining good drives.

Answer

Replace both failed drives and initiate a full array rebuild.

Answer

Replace one failed drive, allow rebuild, then replace the second.

Question 8

A company has a small virtualized environment with two ESXi 7.0 hosts (HostA and HostB) managed by vCenter Server. They use a shared iSCSI storage array for all VMs. The network consists of a single physical switch that connects the hosts, storage, and management traffic using VLANs. Yesterday, the switch failed and was replaced with an identical model. After restoring the configuration from a backup, all VMs on HostA are working normally, but all VMs on HostB show 'network disconnected' in the vSphere console. The VMs on HostB are still running, but they cannot communicate with any other device on the network. HostB itself is reachable via its management IP and can access the storage array. The administrator has verified that the physical cables are correct and the NICs are up on HostB. The VLAN configuration on the new switch was restored for the ports connecting HostB, but the issue persists. Which of the following actions should the administrator perform FIRST to restore connectivity?

Accepted Answer

Check the VLAN configuration on the switch ports connected to HostB for the VM network uplinks.. Option B is correct. Since all other functions (management, storage) work and only VM traffic is affected, the most likely cause is incorrect VLAN tagging on the switch port carrying the VM traffic uplink. Restoring a switch config may have missed the exact VLAN trunk settings. Checking and correcting the VLAN configuration on the switch ports for HostB's VM network is the first targeted step. Options A and C are nondisruptive but don't address the immediate config issue. Option D involves rebooting the host without diagnosing, which is risky and may not fix the issue.

Answer

Reboot HostB to renegotiate the network configuration.

Answer

Restart the vCenter Server service on the vCenter appliance.

Answer

vMotion all affected VMs from HostB to HostA to confirm they work on HostA.

Question 9

A corporation's backup strategy currently involves a weekly full backup every Saturday night and daily differential backups Monday through Friday. The company has a 5 TB dataset with a daily change rate of about 10%. The full backup takes 12 hours and runs into Monday morning, impacting production performance. The backup window is from 10 PM to 6 AM. The company requires faster backups that can complete within the window, and they also want an offsite copy of the backups for disaster recovery. The existing backup server has direct-attached disk storage and a tape library. The network bandwidth to the offsite location is limited to 100 Mbps. The administrator is evaluating changes to the backup methodology and infrastructure to meet these requirements. Which of the following solutions best addresses the speed and offsite requirements?

Accepted Answer

Implement a disk-to-disk-to-cloud solution using changed block tracking for daily incrementals and replication to the cloud. Option D is correct because it uses changed block tracking to perform incremental backups quickly, stores them on disk (fast), and replicates to cloud, which achieves offsite copy despite limited bandwidth by sending only changed blocks. Option A is wrong because synthetic full backups still require reading all data to synthesize, and offsite copy is not addressed. Option B is wrong because multiple tape drives increase throughput but do not directly reduce the amount of data backed up daily, and offsite tape handling is manual. Option C is wrong because daily differentials will still grow each day and may exceed the window, and offsite is not specified.

Answer

Upgrade the tape library to use multiple tape drives for parallel backups and rotate tapes offsite daily

Answer

Switch to synthetic full backups combined with incremental forever; store backups locally on disk

Answer

Continue weekly fulls but perform daily incremental backups instead of differentials; keep tapes on-site

Question 10

A server configured with dual redundant power supplies unexpectedly shuts down when one power supply fails. Both power supplies are rated for the server's total load and were functioning before the failure. What is the MOST likely reason for the shutdown?

Accepted Answer

Redundant mode was not configured in the server management settings. If redundant mode is not enabled (Option B), the power supplies may operate in combined/load‑sharing mode, and failure of one can overload the other. Hot‑swap capability (A) allows replacement without shutdown but does not prevent an outage if the remaining PSU cannot handle the load. Wattage mismatch (C) is unlikely if both were working, and different vendors (D) do not normally cause shutdown if the PSUs are compatible.

Answer

The power supplies were not hot‑swappable

Answer

The failed power supply had a higher wattage rating than the remaining one

Answer

The power supplies were from different manufacturers