PK0-005 Practice Question: Basics of IT Infrastructure and IT Project Management
A company is deploying a new web server. Which TWO security measures should the project manager include in the project plan? (Choose two.)
⚠ Common exam trap
Many candidates confuse high-availability or infrastructure components (UPS, load balancer, RAID) with security measures, but the question specifically asks for security measures, not availability or performance features.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Firewall rules
Option D (Firewall rules) is correct because a web server exposed to a network must have firewall rules that restrict inbound traffic to only the required ports (e.g., TCP 80/443) and block unauthorized access, which is a fundamental security control for protecting the server. Option E (TLS certificate) is correct because it enables HTTPS encryption, ensuring data in transit between clients and the web server is protected via TLS, which is essential for securing web communications and preventing eavesdropping or tampering. Option A (UPS) is incorrect because an uninterruptible power supply addresses availability and power continuity, not security. Option B (Load balancer) is incorrect because it primarily provides availability, scalability, and traffic distribution rather than being a security measure. Option C (RAID array) is incorrect because RAID provides disk redundancy and fault tolerance for data availability, not protection against security threats.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
UPS
Why it's wrong here
A UPS provides backup power during outages, addressing availability rather than security. It is tempting because it protects the server, but it prevents no unauthorised access or data exposure, so it is not a security control like encryption or access hardening.
- ✗
Load balancer
Why it's wrong here
A load balancer distributes traffic across servers for availability and performance; it performs no authentication, encryption or filtering. It would be correct for scaling and resilience, but the question asks for security measures such as TLS or a WAF.
- ✗
RAID array
Why it's wrong here
RAID provides disk redundancy and performance, protecting against hardware failure, not attackers. It is tempting as resilience, but it neither authenticates users nor encrypts data, so it does not satisfy the security measures the plan requires.
- ✓
Firewall rules
Why this is correct
Firewall rules restrict inbound and outbound traffic to only the required ports and sources, blocking unauthorised access to the new web server. Including them in the project plan satisfies the security measure requirement for the deployment.
- ✓
TLS certificate
Why this is correct
A TLS certificate encrypts traffic between clients and the web server, preventing interception or tampering of credentials and data in transit. Including it in the project plan satisfies the security measure requirement for the deployment.
Quick reference
RAID Level Comparison
| RAID Level | Min Disks | Fault Tolerance | Read | Write | Usable Capacity |
|---|---|---|---|---|---|
| RAID 0 | 2 | None | Excellent | Excellent | 100% |
| RAID 1 | 2 | 1 disk | Good | Moderate | 50% |
| RAID 5 | 3 | 1 disk | Good | Moderate | 67–94% |
| RAID 6 | 4 | 2 disks | Good | Lower | 50–88% |
| RAID 10 | 4 | 1 disk per mirror | Excellent | Good | 50% |
RAID is not a backup strategy — it protects against disk failure but not against accidental deletion, ransomware, or site-level events.
Go deeper
Related to this question
About these practice questions
One of 954 original PK0-005 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PK0-005 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PK0-005 exam.