SK0-005 Practice Test 24 — 15 Questions

Question 1

A server administrator is troubleshooting a Windows Server 2019 file server that intermittently becomes unreachable on the network for 30-60 seconds at a time. Event Viewer shows repeated Netlogon 5719 errors stating that no domain controller is available, and the network team confirms no switch or router outages. The server has two teamed NICs. Which of the following should the administrator check FIRST to resolve this issue?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Verify the DNS server addresses configured on the server and confirm the domain controller records resolve correctly.. Intermittent Netlogon 5719 errors with confirmed network stability almost always trace back to name resolution or domain-locator configuration. Checking the DNS servers and confirming domain controller SRV records resolve correctly identifies whether the server can find a domain controller at all, which is the fastest path to a definitive diagnosis.

Answer

Replace both network interface cards in the team because intermittent link failures indicate failing hardware.

Answer

Rebuild the Netlogon secure channel by resetting the computer account password with netdom or Test-ComputerSecureChannel.

Answer

Disable the NIC team and configure a single adapter to eliminate teaming as a possible cause.

Question 2

A company runs a critical application on a physical Windows Server 2022 with four 146 GB SAS drives in a RAID 5 array and a single hot-spare. The server has been in production for five years. The IT manager asks you to recommend two proactive measures to reduce the risk of unplanned downtime due to drive failures. (Choose two.)

Accepted Answer

Configure a weekly scheduled consistency check (patrol read) on the RAID controller.. A consistency check (patrol read) proactively scans the RAID array for media errors and corrects them using parity, while SMART monitoring predicts drive failures before they occur. Together, they provide early warning and maintenance that can prevent a drive failure from causing downtime. The other options either increase risk, do not address drive failure, or only help after an outage.

Answer

Schedule a nightly full backup of the server to an external USB drive.

Answer

Convert the RAID 5 array to RAID 0 to improve performance.

Answer

Replace all drives with higher-capacity drives to increase the array size.

Question 3

A technician is installing a new server into a rack and needs to connect the server's out-of-band management port so the server can be powered on and monitored remotely. Which of the following should the technician connect?

Accepted Answer

The iDRAC or iLO dedicated management port to the management network.. Out-of-band management is provided by a dedicated service processor with its own network port, such as iDRAC or iLO. Connecting that port to the management network lets an administrator power cycle the server, view the console, and monitor hardware health even when the operating system is down.

Answer

The serial port to a terminal server.

Answer

The USB port to a KVM switch in the rack.

Answer

The onboard 1 GbE NIC to the production network switch.

Question 4

A server administrator is planning a storage configuration for a new database server that will handle a high volume of random writes. The server has eight 1.2 TB 10K RPM SAS drives and a hardware RAID controller with a 4 GB cache and battery backup. The administrator needs to maximize write performance while ensuring data redundancy. Which RAID level and configuration should the administrator implement?

Accepted Answer

RAID 10 with a stripe size of 256 KB. RAID 10 provides the best random write performance among the options because it uses mirroring and striping without parity overhead. Each write is written to two drives, avoiding the read-modify-write cycle of parity RAID. It also provides redundancy. RAID 5 and RAID 6 incur parity penalties, and RAID 0 lacks redundancy, so RAID 10 is the correct choice for a high-random-write database server.

Answer

RAID 5 with a stripe size of 64 KB

Answer

RAID 0 with a stripe size of 64 KB

Answer

RAID 6 with a stripe size of 128 KB

Question 5

A technician is preparing to install a new server into a rack in a small server room. Which of the following steps should be performed to help ensure proper airflow and thermal management? (Choose two.)

Accepted Answer

Verify that the server's airflow direction matches the rack's existing front-to-back or back-to-front configuration.. Thermal management in a rack depends on maintaining a consistent airflow direction and preserving the separation between cold intake air and hot exhaust air. Matching the server's airflow to the rack's established direction prevents recirculation, and blanking panels close unused rack units so hot air cannot escape to the front and be drawn back into equipment intakes.

Answer

Leave one rack unit of empty space between the new server and adjacent servers to improve cooling.

Answer

Remove the server's top cover to increase passive airflow around internal components.

Answer

Position the server at the top of the rack so its heat rises away from other equipment.

Question 6

A datacenter administrator must implement a backup strategy for a file server that holds 8 TB of active patient imaging data. The organization requires that a complete copy of the data be stored offsite weekly, and that the offsite copy be protected from accidental deletion or alteration for at least 30 days. The administrator has a 10 GbE connection to the remote site. Which of the following should the administrator configure to meet these requirements?

Accepted Answer

Configure a weekly full backup to a remote object storage bucket with a 30-day object lock in compliance mode.. The requirement is for an offsite weekly full copy that cannot be deleted or altered for 30 days. Object storage with a compliance-mode object lock provides WORM immutability that even privileged users cannot bypass until the retention period ends. The 10 GbE link is sufficient for the weekly 8 TB transfer, and the remote bucket satisfies the offsite condition.

Answer

Configure a weekly full backup to a remote iSCSI LUN and enable CHAP authentication on the target.

Answer

Configure a weekly full backup to a remote tape library and store the tapes in a secure offsite vault.

Answer

Configure a weekly full backup to a remote SMB share and enable versioning on the share.

Question 7

A data center administrator is hardening a newly racked Linux server that will host a customer-facing API. The security policy states that only HTTPS (TCP 443) should be reachable from the internet, and no other services should be exposed. The administrator wants the change to survive a reboot and be enforced by the kernel's packet filter. Which of the following should the administrator configure to meet these requirements?

Accepted Answer

Configure nftables with a persistent ruleset that allows established connections and TCP 443, then drops all other inbound traffic.. A kernel-level, persistent packet filter is needed so that only TCP 443 is reachable and the policy survives reboots. nftables is the modern Linux netfilter interface, and a saved ruleset with a default drop and an allow for established connections and TCP 443 meets the requirement. Host-based access files, SELinux alone, and fail2ban do not provide the same default-deny enforcement.

Answer

Add a rule to /etc/hosts.deny that blocks all services except HTTPS.

Answer

Install fail2ban and configure a jail that bans any IP address that connects to a port other than 443.

Answer

Set SELinux to enforcing mode and create a custom policy that only permits the httpd_t domain to bind to port 443.

Question 8

A server administrator is troubleshooting a Windows Server 2019 file server that intermittently becomes unreachable on the network for 30-60 seconds at a time. Event Viewer shows repeated Netlogon 5719 errors stating that no domain controller is available, and the network team confirms no switch or router outages. The server has two teamed NICs. Which of the following should the administrator check FIRST to resolve this issue?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The CMOS battery on the motherboard is depleted.. The symptoms of a clock resetting and CMOS checksum errors point directly to a depleted CMOS battery. This battery maintains the real-time clock and BIOS settings when the server is unplugged. Without it, settings are lost on power-off, causing the observed errors. The other options do not account for the loss of time and configuration data.

Answer

The power supply unit is failing to provide stable voltage.

Answer

The server's RAM modules are faulty and causing POST errors.

Answer

The motherboard's BIOS firmware is corrupted and requires reflashing.

Question 9

A company is implementing a backup strategy for a critical database server. The backup window is limited, and the database must remain available during backups. The administrator needs to ensure that transaction log backups are performed and that the database can be restored to a point in time. Which two actions should the administrator take? (Choose two.)

Accepted Answer

Configure the database to use the full recovery model.. To support point-in-time restore and keep the database online, the administrator must use the full recovery model and schedule transaction log backups. The full recovery model preserves the log until it is backed up, and regular log backups capture changes and truncate the log, enabling restoration to a specific moment.

Answer

Set the database to the simple recovery model to minimize log growth.

Answer

Detach the database during backups to ensure consistency.

Answer

Perform only full backups during the backup window and skip log backups.

Question 10

A system administrator is configuring a backup strategy for a small business. The business requires that backups be stored offsite to protect against physical disasters, and that backup data be encrypted both in transit and at rest. Which of the following backup solutions BEST meets these requirements?

Accepted Answer

Use a cloud backup service that encrypts data with AES-256 before transmission and stores it encrypted in the cloud.. The cloud backup service with AES-256 encryption ensures data is encrypted both before transmission and while stored, satisfying the encryption requirements. It also provides offsite storage inherently, protecting against physical disasters. Other options either lack encryption in transit, do not provide true offsite protection, or rely on manual processes that may not be reliable.

Answer

Perform backups to a tape drive and store tapes in a remote vault, using hardware encryption on the tape drive.

Answer

Back up to a local external hard drive that is rotated weekly to a bank safe deposit box, using BitLocker encryption.

Answer

Configure a backup to a network-attached storage (NAS) device located in a different building on the same campus, using SMB signing.

Question 11

A network administrator is configuring a RAID array for a new file server that will store large media files. The server has six 4 TB SAS drives. The administrator needs to maximize storage capacity while providing fault tolerance against a single drive failure. Which RAID level should be implemented?

Accepted Answer

RAID 5. RAID 5 offers the best balance of capacity and fault tolerance for the given requirements. With six 4 TB drives, it provides 20 TB of usable space and can withstand one drive failure. RAID 6 offers more fault tolerance but less capacity, while RAID 0 lacks fault tolerance and RAID 10 sacrifices too much capacity. Therefore, RAID 5 is the correct choice.

Answer

RAID 10

Answer

RAID 0

Answer

RAID 6

Question 12

A company runs a busy web application on a single Windows Server 2022 server with 32 GB RAM, two 8-core CPUs, and a hardware RAID 10 array. Users report intermittent slowdowns, and Performance Monitor shows that the PhysicalDisk\% Idle Time counter for the data volume frequently drops below 10% while the Processor\% Processor Time remains around 40%. The server hosts the web application, its SQL Server 2019 database, and the operating system on the same RAID 10 array. Which of the following is the MOST appropriate next step to improve performance?

Accepted Answer

Move the SQL Server database files and logs to separate dedicated physical disk arrays.. The PhysicalDisk\% Idle Time counter below 10% indicates the disk subsystem is saturated, while processor utilization is moderate. Separating SQL Server data and log files onto dedicated arrays reduces I/O contention and improves overall throughput. Adding RAM or upgrading CPUs does not target the actual bottleneck, and enabling write caching without protection adds risk without guaranteeing a fix.

Answer

Upgrade the CPUs to higher-frequency models to reduce disk queue length.

Answer

Add more RAM to the server to reduce disk paging.

Answer

Enable write caching on the RAID controller without a battery backup unit.

Question 13

A financial services company must retain backup data for seven years to satisfy regulatory requirements. The data is written once and never modified, and the company wants to minimize cost while ensuring the data cannot be altered or deleted before its retention period expires. Which storage solution best meets these requirements?

Accepted Answer

WORM tape or object storage with object lock. Regulatory retention with immutability requires media or services that physically or logically prevent modification and deletion. WORM tape and object storage with object lock provide this capability at low cost for infrequently accessed data. SAN snapshots, RAID arrays, and ordinary versioned file shares all allow deletion or alteration, so they cannot satisfy the requirement.

Answer

A high-performance SAN with daily snapshots

Answer

A RAID 6 array with monthly full backups

Answer

A cloud file share with versioning enabled

Question 14

A security team wants to reduce the impact of a compromised service account that is used by a scheduled backup application on a Windows server. The account currently has domain administrator rights. Which action BEST limits the blast radius while keeping backups functional?

Accepted Answer

Replace the domain administrator account with a dedicated service account granted only the required backup privileges.. Least privilege is the controlling principle: a service account used by a backup application should hold only the rights the application needs and nothing more. Swapping the domain administrator credential for a scoped service account keeps backups operational while ensuring a compromise yields limited, contained privileges instead of domain-wide control.

Answer

Configure a longer, more complex password on the existing domain administrator account.

Answer

Enable BitLocker on the backup server's system volume.

Answer

Move the scheduled backup jobs to run under the local SYSTEM account on each server.

Question 15

A technician is preparing to replace a failed hot-swap SAS drive in a production server. The server has a RAID 1 array for the operating system and a RAID 5 array for data. The failed drive belongs to the RAID 5 array. Which of the following steps should the technician take before physically removing the drive? (Choose two.)

Accepted Answer

Verify the drive's slot location using the storage management utility or drive bay LED.. Before pulling a failed drive from a RAID 5 array, the technician must confirm the correct slot and verify the array's current state. These steps prevent removing a healthy drive and ensure the array can tolerate the replacement. Backups, power-down, and firmware updates are not required immediate pre-removal actions for a hot-swap replacement.

Answer

Back up all data on the RAID 5 array to external media.

Answer

Update the RAID controller firmware before removing the drive.

Answer

Power down the server to prevent electrical damage to the backplane.