SK0-005 server-administration — 10 Questions

Question 1

A server administrator is tasked with ensuring that a critical database server remains available in the event of a hardware failure. The solution must provide automatic failover with minimal administrative overhead. Which of the following should be implemented?

Accepted Answer

Server clustering. Server clustering provides automatic failover between nodes, ensuring high availability with minimal administrative overhead. RAID 1 offers disk redundancy but not server-level failover. Load balancing distributes traffic but does not automatically redirect if a server fails. Scheduled backups restore data after a failure but do not prevent downtime.

Answer

Load balancing

Answer

Scheduled backups

Answer

RAID 1 mirroring

Question 2

Which TWO of the following are considered best practices for securing a server's remote management access?

Accepted Answer

Use SSH key-based authentication. Using SSH key-based authentication provides strong encryption and eliminates password theft risks. Disabling unused services reduces the attack surface. Enabling default administrative shares increases exposure. Allowing all inbound ICMP can facilitate reconnaissance. Telnet sends data in plaintext and is insecure.

Answer

Enable default administrative shares

Answer

Allow all inbound ICMP

Answer

Use telnet for remote CLI

Question 3

Your organization is migrating a Windows Server 2019 file server with 2 TB of shared data to a new server running Windows Server 2022. The migration must minimize user downtime and ensure file permissions are preserved. Users access files during business hours (8 AM to 6 PM) and the migration must be completed within a four-hour window starting at 10 PM on Saturday. You plan to use DFS Replication (DFSR) for initial data copy and then perform a final synchronization during the cutover. After setting up DFSR between the old and new servers, you realize that the initial replication will take approximately 12 hours due to the large number of files. What should you do to complete the migration within the allowed window?

Accepted Answer

Use robocopy to pre-stage the data from old to new server during off-hours before the cutover, then enable DFSR to replicate only changes made after pre-staging; during the cutover window, do a final DFSR sync. Option C is correct because pre-staging data using robocopy with appropriate flags (copying security and attributes) and then enabling DFSR for the delta changes is a best practice for large migrations. Option A is wrong because simply increasing DFSR bandwidth does not reduce the time needed for initial replication of 2 TB. Option B is wrong because using robocopy alone during the cutover window may not complete within four hours if you need to copy all data; pre-staging is required. Option D is wrong because performing a full backup and restore during the window is too time-consuming for 2 TB.

Answer

Disable DFSR and use robocopy with /MIR /COPYALL during the cutover window to copy all data

Answer

Perform a full backup of the old server and restore to the new server during the cutover window using Windows Backup

Answer

Increase the DFSR staging quota and bandwidth throttling to accelerate initial replication

Question 4

A technician is installing a new server for a department. The server will run a single application that requires high reliability. The operating system should be protected against a single disk failure without sacrificing read performance. Which RAID configuration is MOST appropriate?

Accepted Answer

RAID 1. Option D is correct because RAID 1 mirrors the OS drive, providing fault tolerance and good read performance. Option A (RAID 0) has no redundancy. Option B (RAID 5) requires at least three disks and has write penalty. Option C (RAID 6) requires at least four disks and is overkill for a simple OS mirror.

Answer

RAID 5

Answer

RAID 6

Answer

RAID 0

Question 5

A SQL Server database administrator wants to backup a large database (500 GB) with minimal impact on transaction log growth and recovery time. Which TWO backup strategies should the administrator implement? (Choose two.)

Accepted Answer

Perform weekly full backups. Options A and D are correct. A: A full backup copies the entire database, and is needed as a base. D: Transaction log backups control log growth and allow point-in-time recovery. Option B is wrong because differential backups depend on a recent full backup. Option C is wrong because copy-only backups do not affect the log sequence, but they don't control log growth. Option E is wrong because tail-log backups are taken just before disaster recovery, not regularly.

Answer

Perform a tail-log backup before each full backup

Answer

Perform daily differential backups

Answer

Perform hourly copy-only backups

Question 6

A company operates a Windows Server 2019 machine that functions as a domain controller and file server. Over the past week, the server has randomly rebooted several times, often during periods of heavy file access. The administrator reviews the System event log and finds multiple Event ID 41 (Kernel-Power) entries with no preceding critical errors. The server is connected to an uninterruptible power supply (UPS) that reports stable input voltage. The server room temperature sensors indicate normal ambient temperature (22°C / 72°F). The server hardware is three years old and has not had any recent changes. The administrator has already run a full antivirus scan with no threats found. Which of the following should the administrator do NEXT to diagnose the issue?

Accepted Answer

Inspect and clean the CPU and chassis fans, and check for dust buildup. Option C is correct because random reboots with Kernel-Power 41 often indicate overheating due to failing fans or dust buildup, even if ambient temperature is normal. Option A is wrong because the power supply is likely not the issue given the UPS stability. Option B is wrong because a BIOS update is unlikely to solve hardware overheating. Option D is wrong because disabling automatic restart only hides the symptom and does not prevent the reboots.

Answer

Update the server's BIOS to the latest version

Answer

Replace the power supply unit

Answer

Disable the automatic restart feature in System Properties

Question 7

A company is migrating a legacy line-of-business application from Windows Server 2012 R2 to a new Windows Server 2022 server that is a member of an Active Directory domain. The application runs as a Windows service under a domain service account named CORP\svc_app. The service account has been granted the 'Log on as a service' user right on the old server, and the application is configured to listen on a static TCP port 8443. After installing the application on the new server and configuring it with the same service account and port, the application fails to start. The administrator checks the Windows Event Viewer and sees two errors in the System log: 'The CORP\svc_app service failed to start due to the following error: The service did not start due to a logon failure' and 'The service cannot bind to the designated port 8443'. The administrator has already verified that the service account's password is correct and has not expired, that the account is enabled, that the port 8443 is not being used by another service, and that the Windows Firewall has an inbound rule allowing traffic on port 8443. The application's configuration file correctly points to port 8443. What should the administrator do to resolve the issue?

Accepted Answer

Grant the 'Log on as a service' user right to the CORP\svc_app account via Local Security Policy or Group Policy.. The correct answer is B. The 'Log on as a service' user right is a security policy setting that must be explicitly assigned to a service account on each individual server. Even though the account had this right on the old server, it does not automatically carry over to the new server. Without this right, the service cannot start, and the 'logon failure' error is a classic symptom. Option A is incorrect because the password was already verified as correct. Option C is incorrect because the application requires a static port (port 8443) and changing to a dynamic port would break client connectivity. Option D is incorrect because restarting the server does not assign the missing user right and will not resolve the logon failure.

Answer

Restart the Windows Server 2022 server to apply any pending policy changes.

Answer

Configure the application to use a dynamic port instead of the static port 8443.

Answer

Reset the service account password and update the service configuration.

Question 8

A system administrator is configuring a backup schedule for a critical database server that must be available 24/7. The company's recovery point objective (RPO) is 1 hour and recovery time objective (RTO) is 4 hours. The database files change frequently, but the operating system and application binaries rarely change. Which of the following backup strategies would BEST meet these requirements while minimizing storage and backup window impact?

Accepted Answer

Full backup daily, incremental backup every hour. Option D is correct because daily full backups provide a recent recovery base, and hourly incremental backups are small and fast, meeting the 1-hour RPO with minimal backup window. Restoration applies at most 24 incrementals to the latest full, which fits within the 4-hour RTO. Option A is wrong because weekly full backups with hourly incrementals may require restoring too many incrementals, risking the RTO. Option B is wrong because hourly differential backups grow in size throughout the day, increasing backup time and storage. Option C is wrong because weekly fulls with hourly differentials cause exponential growth in differential size over the week.

Answer

Full backup daily, differential backup every hour

Answer

Full backup weekly, differential backup every hour

Answer

Full backup weekly, incremental backup every hour

Question 9

Refer to the exhibit. An administrator receives reports that a web application is returning HTTP 502 errors. The administrator examines the Nginx error log on the reverse proxy server and sees the following. Which of the following is MOST likely causing the errors?

Accepted Answer

The upstream server at 10.0.1.25:8080 refuses connections.. Option A is correct because the error 'Connection refused' indicates the upstream server (10.0.1.25:8080) is not accepting connections, typically because the backend service is down or the port is closed. Option B is incorrect because if Nginx were not running, no such log entry would be generated. Option C is incorrect because the client's DNS resolution is not involved after Nginx has already attempted to contact the upstream IP. Option D is incorrect because a firewall blocking outbound connections would cause a timeout, not a 'Connection refused' message.

Answer

The Nginx service is not running.

Answer

The firewall on the reverse proxy is blocking port 80.

Answer

The client's DNS cannot resolve example.com.

Question 10

To comply with company security policies, a server administrator must disable all unnecessary services on a newly deployed Windows Server 2019. The server will only act as a file server with no web hosting role. Which service should be disabled?

Accepted Answer

World Wide Web Publishing Service. Option C is correct because the World Wide Web Publishing Service (W3SVC) is part of IIS and is not required for a file server role. Leaving it running increases the attack surface. Option A (DNS Server) might be used if the server provides name resolution, but it is not mentioned. Option B (DHCP Server) is also not specified as needed. Option D (Server service) is essential for file sharing and should not be disabled.

Answer

DHCP Server service

Answer

Server service

Answer

DNS Server service