SK0-005 server-administration Practice Test 2 — 15 Questions

Question 1

A company runs a public-facing web server on Windows Server 2022 that hosts several HTTPS sites. The security team requires that all TLS traffic use only TLS 1.3 and that weaker protocols be disabled. An administrator needs to configure the server to meet this requirement. Which of the following should the administrator do?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Disable SSL 3.0, TLS 1.0, and TLS 1.1 in the SCHANNEL registry keys, and enable TLS 1.3.. Enforcing TLS 1.3 on Windows Server 2022 requires modifying the SCHANNEL registry to disable older protocols and enable TLS 1.3. IIS and certificate configurations do not control protocol versions. This approach ensures that only TLS 1.3 is used for all HTTPS connections, satisfying the security requirement.

Answer

Install a new certificate that uses only the TLS 1.3 cipher suites and bind it to the sites.

Answer

Configure IIS to require SSL and set the minimum TLS version to 1.3 in the site bindings.

Answer

Use the netsh http add sslcert command to set the TLS version to 1.3 for all HTTPS listeners.

Question 2

A server administrator is configuring a new Windows Server 2022 file server. The server has a RAID 5 array with three 4 TB SAS drives. The administrator needs to create a volume that provides fault tolerance and can be expanded in the future without taking the server offline. Which of the following should the administrator use?

Accepted Answer

Storage Spaces with a parity volume.. Storage Spaces with a parity volume provides fault tolerance and supports online expansion, allowing the administrator to add capacity without downtime. Disk Management mirrored volumes offer redundancy but cannot be expanded online, and spanned volumes lack fault tolerance. Simple volumes in Storage Spaces also lack redundancy.

Answer

Storage Spaces with a simple volume.

Answer

Disk Management with a spanned volume.

Answer

Disk Management with a mirrored volume.

Question 3

A company has a Windows Server 2022 server that hosts a critical database. The server has four network adapters. The administrator wants to ensure that the server remains accessible even if one network adapter fails, and also wants to aggregate bandwidth for better performance. The network switch supports link aggregation. Which of the following should the administrator implement?

Accepted Answer

Configure NIC teaming in LACP mode with Address Hash load balancing.. The administrator needs both fault tolerance and increased bandwidth. NIC teaming in LACP mode with Address Hash load balancing provides link aggregation and failover, and the switch supports LACP. Other modes either lack bandwidth aggregation or are not suitable for the workload.

Answer

Configure NIC teaming in Switch Independent mode with Dynamic load balancing.

Answer

Configure each network adapter with a separate IP address and enable DNS round-robin.

Answer

Configure NIC teaming in Switch Independent mode with Hyper-V Port load balancing.

Question 4

A company has a Linux server running a critical web application. The server has two network interfaces: eth0 connected to the internal network (192.168.1.0/24) and eth1 connected to a DMZ network (10.0.0.0/24). The web application must be accessible from the internet via the DMZ, but the internal network must not be directly accessible from the DMZ. The administrator needs to configure the server to route traffic between the two networks only for established connections initiated from the internal network. Which of the following should the administrator implement?

Accepted Answer

Enable IP forwarding and configure iptables with a rule to allow only established and related connections from eth0 to eth1.. The server must route traffic between the internal network and the DMZ, but only for connections initiated from the internal network. Enabling IP forwarding is necessary for routing. The iptables rule should allow established and related connections from the internal interface to the DMZ interface, which permits return traffic for internally initiated sessions while blocking new connections from the DMZ. This effectively prevents direct access from the DMZ to the internal network.

Answer

Disable IP forwarding and configure a static route between the two networks.

Answer

Enable IP forwarding and configure a firewall rule to drop all traffic from eth1 to eth0.

Answer

Enable IP forwarding and configure iptables with a rule to allow all traffic between eth0 and eth1.

Question 5

A system administrator is configuring a new server that will host a database application. The application vendor recommends disabling disk write caching to ensure data integrity in case of a power failure. The server has a hardware RAID controller with a battery-backed write cache. Which action should the administrator take to meet the vendor's recommendation while maintaining optimal performance?

Accepted Answer

Enable write caching on the RAID controller and ensure the battery is functional. The battery-backed write cache on the RAID controller is designed to protect cached data during a power loss. Enabling write caching with a functional battery provides both performance and data integrity, satisfying the vendor's recommendation without sacrificing speed. Disabling the cache or using write-through would unnecessarily degrade performance.

Answer

Disable write caching in the operating system disk properties

Answer

Configure the RAID controller to use write-through caching

Answer

Disable the write cache on the RAID controller

Question 6

A company has a single rack-mounted server running Windows Server 2022 that provides DHCP and DNS for a 200-user subnet. Users report that after a power outage, some workstations receive APIPA addresses while others cannot resolve internal hostnames. The server boots successfully, and the DHCP Server and DNS Server services show as Running. Which action should the administrator take FIRST to restore name resolution and address assignment?

Accepted Answer

Verify that the server's static IP address, subnet mask, and default gateway are correctly configured.. After a power event, a server that provides DHCP and DNS may lose its static network configuration, causing clients to fall back to APIPA and fail DNS lookups. Verifying the server's own IP parameters is the quickest way to confirm whether the server can communicate on the network. Once the server has valid addressing, DHCP leases and DNS responses can flow normally.

Answer

Check the DHCP scope for exhausted address leases and extend the scope range.

Answer

Reinstall the DHCP Server role and the DNS Server role.

Answer

Restart the DHCP Server service and the DNS Server service.

Question 7

A system administrator is configuring a new Windows Server 2022 file server. The server has four 4 TB SATA drives. The administrator wants to maximize fault tolerance while maintaining a single volume for user data. Which RAID level should the administrator implement?

Accepted Answer

RAID 5. RAID 5 provides fault tolerance by distributing parity across all drives, allowing the array to survive a single drive failure. It presents a single logical volume and uses the capacity of three out of four drives (12 TB usable). This balances fault tolerance with storage efficiency, making it ideal for a file server needing a single volume and protection against disk failure.

Answer

RAID 0

Answer

RAID 1

Answer

RAID 10

Question 8

A company has a server with a single power supply. The IT manager wants to improve power redundancy without replacing the server. Which of the following should be implemented?

Accepted Answer

Connect the server to a UPS.. Connecting the server to a UPS is the best immediate solution to improve power redundancy. It provides battery backup and power conditioning without requiring hardware changes. Other options either require server modifications or are not feasible with a single power supply. A UPS ensures the server remains operational during short outages and protects against power anomalies.

Answer

Implement a generator for the entire data center.

Answer

Add a second power cord to a different circuit.

Answer

Install a redundant power supply module.

Question 9

A system administrator is configuring a new Windows Server 2022 file server that will host a shared folder for the finance department. The requirement is that only members of the 'Finance' Active Directory group should be able to access the share, and they need full control. The administrator creates the folder and shares it as 'FinanceData'. Which of the following should the administrator do to meet the requirement with the LEAST administrative effort?

Accepted Answer

Assign the 'Finance' group the Full Control share permission and remove the default 'Everyone' share permission. Then, on the NTFS permissions, remove 'Users' and grant 'Finance' Full Control.. The most efficient way to restrict access to only the Finance group is to configure both share and NTFS permissions accordingly. Assigning the Finance group Full Control on both levels and removing default permissions ensures only they can access the share with the required rights. Other options either leave unintended access, grant insufficient permissions, or add unnecessary complexity.

Answer

Leave the default share permissions (Everyone Read) and grant the 'Finance' group Full Control on the NTFS permissions only.

Answer

Disable inheritance on the NTFS permissions, remove all inherited permissions, and grant the 'Finance' group Modify. Then, on the share permissions, grant 'Finance' Change and remove 'Everyone'.

Answer

Create a new local group on the server called 'FinanceLocal', add the domain 'Finance' group to it, and assign Full Control to 'FinanceLocal' on both share and NTFS permissions.

Question 10

A company has a critical file server running Windows Server 2019 with two 1 TB drives configured in a RAID 1 array. The administrator needs to add additional storage without disrupting the existing array or losing data. The server has four empty drive bays. Which of the following should the administrator do to add storage while maintaining fault tolerance?

Accepted Answer

Add two new 1 TB drives and create a new RAID 1 array, then create a new volume and mount it as a folder in the existing volume.. Adding a second RAID 1 array and mounting it as a folder in the existing volume provides additional fault-tolerant storage without altering the original array. This method is non-disruptive and maintains data integrity, making it the best choice for the scenario.

Answer

Add two new 1 TB drives and create a new RAID 1 array, then extend the existing volume using Storage Spaces.

Answer

Add two new 1 TB drives and convert the existing RAID 1 array to RAID 5 using the RAID controller's online migration feature.

Answer

Add two new 1 TB drives and use Disk Management to extend the existing volume onto the new drives.

Question 11

A server administrator is troubleshooting a server that randomly reboots. The administrator reviews the system logs and finds Event ID 41 (Kernel-Power) in the Windows System log. The server is not overheating, and the power supply has been replaced. Which of the following should the administrator check NEXT?

Accepted Answer

Run a memory diagnostic to check for faulty RAM.. Event ID 41 indicates an unexpected shutdown or reboot. After ruling out power supply and overheating, the next most likely cause is faulty hardware, particularly RAM. Running a memory diagnostic (such as Windows Memory Diagnostic or MemTest86) can identify bad memory modules. If memory tests pass, then firmware updates or other hardware checks can be pursued.

Answer

Verify that the UPS is functioning correctly and providing stable power.

Answer

Update the server's BIOS/UEFI firmware to the latest version.

Answer

Replace the motherboard.

Question 12

A company has a server running Windows Server 2019 that hosts a critical database. The administrator needs to implement a backup strategy that allows for the fastest recovery in case of a disaster, while minimizing backup windows. Which of the following backup types should the administrator use?

Accepted Answer

Transaction log backup every hour with a weekly full backup. Transaction log backups with a weekly full backup provide the fastest recovery to a specific point in time and minimize the backup window because log backups are small and quick. They also reduce potential data loss. Full backups are time-consuming, differential backups grow daily, and copy backups do not reduce the backup window.

Answer

Full backup every night

Answer

Differential backup every night with a weekly full backup

Answer

Copy backup every night

Question 13

A company is implementing a backup strategy for a Windows Server 2022 file server. The administrator needs to ensure that backups can be used to restore individual files and also to recover from a complete server failure. The backup solution must minimize the time required to restore the operating system and applications. Which two of the following should the administrator implement? (Choose two.)

Accepted Answer

Configure Windows Server Backup to perform a bare metal recovery backup.. The administrator needs both file-level restore and fast full server recovery. Bare metal recovery backups enable complete system restoration, while VSS enables individual file recovery. Together, they meet the requirements. Daily full backups and RAID do not provide the same granularity or speed for system recovery.

Answer

Schedule a full backup every day.

Answer

Use Windows Server Backup to create a system state backup.

Answer

Configure a RAID 5 array for the data volume.

Question 14

A server administrator is troubleshooting a Windows Server 2022 file server that is experiencing slow file transfers. Performance Monitor shows high disk queue length and low disk idle time. The server uses a RAID 5 array of seven 10,000 RPM SAS drives. Which two actions should the administrator take to improve disk performance? (Choose two.)

Accepted Answer

Reconfigure the array from RAID 5 to RAID 10. High disk queue length and low idle time on a RAID 5 array indicate the disk subsystem is saturated. RAID 5 has a write penalty due to parity calculations, so moving to RAID 10 eliminates that overhead and improves write performance. Adding more drives increases spindles and can also help. These two actions directly address the disk bottleneck.

Answer

Enable write caching on the RAID controller if not already enabled

Answer

Increase the stripe size on the RAID 5 array

Answer

Defragment the file server's volumes

Question 15

A server administrator is configuring a new Windows Server 2022 server that will host a highly available file share. The administrator needs to ensure that the file share remains accessible if one of the server's two power supplies fails. The server has redundant power supplies and is connected to two separate UPS devices. Which of the following should the administrator implement to achieve this goal? (Choose two.)

Accepted Answer

Connect each power supply to a separate UPS.. To ensure the file share remains accessible if a power supply fails, the administrator should implement redundant hot-swappable power supplies and connect each to a separate UPS. This provides both component redundancy and power source redundancy. The other options address network or disk redundancy, which are important but not relevant to the specific requirement of surviving a power supply failure.

Answer

Configure a RAID 1 array for the operating system volume.

Answer

Install a second network adapter and configure load balancing.

Answer

Enable NIC teaming on the server.