Courseiva
easyMultiple Choice

PK0-005 Practice Question: Refer to the exhibit

Exhibit

Refer to the exhibit.

Command: netstat -an | grep :80
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN
tcp 0 0 192.168.1.10:80 192.168.1.5:54321 ESTABLISHED
tcp 0 0 192.168.1.10:80 192.168.1.6:54322 TIME_WAIT

Refer to the exhibit. A project manager is monitoring server performance for a web application deployment. Based on the exhibit, what is the status of the web server?

⚠ Common exam trap

CompTIA often tests the misconception that a 'LISTENING' port alone is insufficient to confirm the server is handling connections, but the presence of 'ESTABLISHED' sessions in the exhibit directly proves active traffic handling, making D correct.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The server is running and handling connections

The exhibit shows the web server is in a 'LISTENING' state on port 80, with established connections (ESTABLISHED) to client IPs. This indicates the server process is running, the TCP handshake completed successfully, and it is actively handling HTTP requests. Option D is correct because a listening socket with established sessions confirms operational status.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    The server has a firewall blocking connections

    Why it's wrong here

    Firewall blocking would manifest as dropped or timed-out connections to specific ports, whereas the exhibit shows the server reachable and returning responses. It is tempting because blocked traffic mimics outage symptoms, but firewall diagnosis is correct only when connectivity tests fail while the service itself remains healthy.

  • ✗

    The server is overloaded

    Why it's wrong here

    Overload would require sustained CPU, memory or queue saturation with degraded response times. The exhibit shows utilisation within normal thresholds, so the server is healthy; overload is tempting whenever utilisation appears elevated, but the metrics do not demonstrate resource exhaustion.

  • ✗

    The server is not running

    Why it's wrong here

    The exhibit shows the web server responding to monitoring checks, so it is running; a stopped service would produce connection refusals or absent metrics rather than the observed values. Not running is tempting when availability looks degraded, but that conclusion requires the service itself to be down, not merely performing poorly.

  • ✓

    The server is running and handling connections

    Why this is correct

    The exhibit shows active TCP connections and steady CPU and memory use, confirming the web server is running and serving requests. This satisfies the stem's requirement to determine live operational status, since established connections prove the service is accepting and handling client traffic rather than being stopped or idle.

Visual reference

Client Server SYN (seq=100) SYN-ACK (seq=200, ack=101) ACK (ack=201) Connection established — data transfer begins

About these practice questions

This PK0-005 question is part of Courseiva's 954-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This PK0-005 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PK0-005 exam.