SK0-005 Practice Test 8 — 10 Questions

Question 1

Refer to the exhibit. A server in a well-maintained data center has triggered upper critical and non-recoverable temperature alerts for CPU1. The server's chassis fans are operating at full speed, and the data center ambient temperature is normal. Which of the following is the FIRST action the administrator should take?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Open the chassis and verify that the CPU air baffle/duct is in place.. Correct: Missing or improperly installed air baffles/ducts are a common cause of CPU overheating, especially after maintenance. Option A is wrong because if other components are fine, a liquid cooling failure is less likely and more invasive. Option C is wrong because adding extra fans doesn't address the root cause if airflow path is broken. Option D is wrong because a failed CPU almost never causes overheating; a failing CPU usually causes crashes, not thermal runaway.

Answer

Check for failure of the liquid cooling system for CPU1.

Answer

Replace CPU1 because the high temperature indicates an internal short.

Answer

Install additional high-speed fans to increase static pressure.

Question 2

Refer to the exhibit. An administrator receives reports that a web application is returning HTTP 502 errors. The administrator examines the Nginx error log on the reverse proxy server and sees the following. Which of the following is MOST likely causing the errors?

Accepted Answer

The upstream server at 10.0.1.25:8080 refuses connections.. Option A is correct because the error 'Connection refused' indicates the upstream server (10.0.1.25:8080) is not accepting connections, typically because the backend service is down or the port is closed. Option B is incorrect because if Nginx were not running, no such log entry would be generated. Option C is incorrect because the client's DNS resolution is not involved after Nginx has already attempted to contact the upstream IP. Option D is incorrect because a firewall blocking outbound connections would cause a timeout, not a 'Connection refused' message.

Answer

The Nginx service is not running.

Answer

The firewall on the reverse proxy is blocking port 80.

Answer

The client's DNS cannot resolve example.com.

Question 3

A server administrator is troubleshooting a network connectivity issue on a server that has recently been moved to a different rack. The server can ping its own IP address but cannot ping the default gateway. Which of the following is the MOST likely cause?

Accepted Answer

Faulty Ethernet cable or incorrect patch panel port. Option A is correct because being able to ping self but not gateway suggests a layer 1 or 2 issue like a faulty patch cable. Option B is wrong because DNS would affect name resolution, not ping. Option C is wrong because incorrect subnet mask would affect self-ping or gateway detection. Option D is wrong because duplicate IP would cause intermittent issues or conflict messages.

Answer

Incorrect DNS server configuration

Answer

Incorrect subnet mask

Answer

Duplicate IP address on the network

Question 4

A Linux database server has recently exhibited sluggish response times. An analysis of system performance shows high CPU wait I/O, frequent page swapping, and a low cache hit ratio. The server has 16GB of RAM, and the database itself stores 100GB of active data. Which of the following is the MOST effective long-term solution to improve performance?

Accepted Answer

Increase the physical RAM in the server to at least 64GB.. The server is experiencing memory pressure leading to excessive swapping and low cache utilization. More RAM allows the database to cache a larger portion of active data in memory, reducing I/O wait and improving response times. Option A (Add faster SSDs) may reduce I/O wait but does not address the root cause—memory starvation. Option B (Tune the database query cache) might provide minor relief but is not a substitute for adequate memory. Option D (Increase swap space) would worsen performance by enabling more swapping.

Answer

Tune the database engine's query cache size.

Answer

Configure the server to use a larger swap partition.

Answer

Replace the existing hard drives with faster SSDs.

Question 5

Refer to the exhibit. A server administrator is troubleshooting a DNS resolution issue on a Windows Server 2019. The exhibit shows the output of the command `nslookup` queried against the server's own IP. Based on the output, what is the most likely cause of the resolution failure?

Accepted Answer

The DNS server does not have an A record for server1.contoso.com.. Option D is correct because the NXDOMAIN response indicates the queried name does not exist in the DNS zone. Option A is wrong because forwarding is irrelevant for an authoritative zone. Option B is wrong because reverse lookup zones are for IP-to-name resolution, not name-to-IP. Option C is wrong because root hints are used for recursion, not for authoritative responses.

Answer

The DNS server's root hints are misconfigured.

Answer

The DNS server is not configured to forward queries to an external DNS server.

Answer

The DNS server has an incorrect reverse lookup zone configuration.

Question 6

Refer to the exhibit. A server administrator runs a dmidecode command to check memory configuration and obtains the output shown. The system supports DDR4-2666, but all DIMMs are running at 1866 MT/s. Which action will allow the memory to run at the maximum supported speed?

Accepted Answer

Replace the DIMM in slot A1 with a DDR4-2666 registered module.. Correct: The slower 2133 MT/s DIMM in slot A1 limits all modules to its speed. Replacing it with a 2666 MT/s module allows the system to run at the highest common denominator. Option A is wrong because reordering slots won't change the speed limitation. Option C is wrong because XMP is for overclocking desktop memory, not typical on registered server DIMMs. Option D is wrong because clearing CMOS only resets BIOS settings, not memory speed mismatch.

Answer

Enable XMP profile in the BIOS to force all DIMMs to 2666 MT/s.

Answer

Clear the CMOS to reset the memory training data.

Answer

Move the DIMM from A1 to A2 and the DIMM from A2 to A1.

Question 7

To comply with company security policies, a server administrator must disable all unnecessary services on a newly deployed Windows Server 2019. The server will only act as a file server with no web hosting role. Which service should be disabled?

Accepted Answer

World Wide Web Publishing Service. The World Wide Web Publishing Service (W3SVC) is part of IIS and is not required for a file server role. Leaving it running increases the attack surface. Option A (DNS Server) might be used if the server provides name resolution, but it is not mentioned. Option B (DHCP Server) is also not specified as needed. Option D (Server service) is essential for file sharing and should not be disabled.

Answer

DHCP Server service

Answer

Server service

Answer

DNS Server service

Question 8

An organization uses a cloud-based backup solution with immutable storage to protect against ransomware. However, after a recent attack, an attacker with stolen administrator credentials was able to delete the backup data. Which of the following BEST explains why the backups were deleted?

Accepted Answer

The immutable storage policy was not configured correctly or had a retention lock that was not enabled.. True immutable storage prevents any deletion or modification, even by administrators, for a specified retention period. The fact that an admin could delete it indicates the immutability feature was misconfigured or not properly locked. Option B describes encryption at the source, but that would not allow deletion of existing backups. Option C is irrelevant to deletion. Option D: versioning helps but does not prevent deletion if immutability is not configured.

Answer

The backup solution did not support versioning.

Answer

The attacker used ransomware to encrypt the backup data at the source before it was sent.

Answer

The backup data was stored in a different geographic region than production.

Question 9

A system administrator manages a collection of Linux web servers that store custom application configurations in /etc/app/config. The configuration changes frequently, and the admin needs to implement an automated daily backup solution that captures the directory at 1 AM, compresses it with gzip, and retains the last 5 days of backups on a central NFS-mounted backup volume /mnt/backups. The solution should be simple and use standard tools. Which approach best meets these requirements?

Accepted Answer

Create a cron job that runs `tar -czf /mnt/backups/config-$(date +%Y%m%d).tar.gz /etc/app/config` at 1 AM, and another cron job at 2 AM that runs `find /mnt/backups -name "config-*.tar.gz" -mtime +5 -delete`.. It uses tar with gzip compression and a dated filename to create daily compressed archives, and a separate cron job using find to delete files older than 5 days, fulfilling all requirements simply. Option A uses rsync which does not create a single compressed archive file and the retention method using find on directories is less suitable for daily snapshot rotation. Option C uses zip which does not easily support date-stamped filenames and relies on external NFS snapshots, which is not a self-contained solution. Option D uses Windows Server Backup on Linux, which is unsupported and inappropriate.

Answer

Use Windows Server Backup scheduled to back up the Linux server's directory via SMB share.

Answer

Create a cron job that runs `rsync -avz /etc/app/config /mnt/backups/` at 1 AM, with a separate cron job to delete old rsync snapshots using `find /mnt/backups -type d -mtime +5 -exec rm -rf {} \;`.

Answer

Write a shell script that uses `zip -r /mnt/backups/config.zip /etc/app/config`, schedule it via cron at 1 AM, and rely on the NFS server's built-in snapshot feature for retention.

Question 10

A server administrator is responsible for protecting sensitive data. The backup process copies files to a network share daily. Which of the following should the administrator do to BEST ensure the confidentiality of the backup data both during transfer and at rest?

Accepted Answer

Encrypt the backup files before transfer using a tool like GPG, and store them encrypted.. Encrypting the backup files before transfer (Option B) ensures data confidentiality during transit and while stored on the backup server. Option A provides network segmentation but no encryption. Option C encrypts only the transfer, not the data at rest. Option D is a physical security measure and does not encrypt the data.

Answer

Configure the network share with SMB encryption only.

Answer

Use a dedicated NIC for backup traffic on an isolated VLAN.

Answer

Place the backup server in a physically locked cage with restricted access.