Courseiva

CompTIA Server+ SK0-005 (SK0-005) — Questions 226–300

414 questions total · 6 pages · All types, answers revealed

Take a mock examExam hub
Page 3

Page 4 of 6

Page 5
226
MCQmedium

A server administrator is configuring a new server with four 1TB NVMe drives. The server will host a database that requires high random read/write performance and redundancy. Which of the following RAID levels should the administrator choose?

A.RAID 10
B.RAID 6
C.RAID 5
D.RAID 0
AnswerA

RAID 10 combines mirroring and striping, providing both redundancy and high performance. It can tolerate one drive failure per mirrored pair (up to two drives in a four-drive array, depending on which drives fail). For databases with high random read/write, RAID 10 is often the best choice. It offers excellent write performance because there is no parity calculation. The trade-off is 50% usable capacity, but performance and redundancy are prioritized.

Why this answer

RAID 10 is the best choice because it provides both redundancy and high performance for random read/write workloads. It mirrors data across pairs of drives and stripes across the pairs, eliminating parity overhead. RAID 0 lacks redundancy, RAID 5 has write performance penalties, and RAID 6 has even slower writes.

The database's need for high random I/O and fault tolerance makes RAID 10 ideal.

Exam trap

The trap here is choosing RAID 5 for its balance of capacity and redundancy, but overlooking its write performance penalty for databases.

Full explanation →
227
MCQeasy

A server administrator is troubleshooting a server that is not responding to network requests. The server's link lights are on, and the switch port shows activity. The administrator cannot ping the server by IP address from another subnet, but can ping it from a host on the same subnet. What is the most likely cause?

A.The default gateway is misconfigured on the server.
B.The switch port is configured for the wrong VLAN.
C.A firewall on the server is blocking ICMP from remote subnets.
D.The server's NIC is faulty.
AnswerA

When a server can communicate with hosts on the same subnet but not from other subnets, the default gateway is likely incorrect or missing. The server uses the default gateway to route traffic outside its subnet. If the gateway is wrong, remote pings fail while local pings succeed. Verifying and correcting the gateway address resolves the issue.

Why this answer

The correct answer is that the default gateway is misconfigured on the server. The ability to ping locally but not remotely indicates a routing issue. The server can reach local hosts directly but needs a correct gateway to reach other subnets.

Checking and correcting the default gateway configuration restores connectivity.

Exam trap

The trap here is blaming the firewall or NIC, but the selective failure pattern (local works, remote fails) points directly to a gateway configuration error.

Full explanation →
228
MCQmedium

A server configured with RAID 5 has two failed drives. The array is offline and critical data is inaccessible. The administrator has replacement drives available. What should the administrator do to restore the data and array with minimal data loss?

A.Reconfigure the RAID to RAID 0 using the remaining good drives.
B.Replace both failed drives and initiate a full array rebuild.
C.Replace both failed drives and restore from backup.
D.Replace one failed drive, allow rebuild, then replace the second.
AnswerC

Dual drive failure in RAID 5 results in data loss; restoration from backup is required to recover data, and then the array can be recreated.

Why this answer

Option A is correct. RAID 5 can survive a single drive failure, but with two failed drives, the array is completely broken and cannot be rebuilt. Restoring from backup is the only reliable method to recover the data.

Options B and C incorrectly assume the array can still rebuild, and option D would worsen data integrity.

Full explanation →
229
PBQmedium

A medium-sized company runs an e-commerce platform on a cluster of three physical servers hosting virtual machines. The disaster recovery plan includes daily backups to a remote data center using Veeam Backup & Replication. The company's annual disaster recovery drill is scheduled for next week. During the drill, the IT team plans to simulate a complete site failure by powering off the primary data center. The recovery time objective (RTO) is 4 hours, and the recovery point objective (RPO) is 1 hour. The team successfully restores the VMs at the remote site, but the application experiences significant performance degradation and many transactions fail due to database inconsistency. Investigation reveals that the backup was taken at 2:00 AM, but the failure occurred at 10:00 AM, and the application's database had transactions between 2:00 AM and 10:00 AM that were not captured. What should the IT team do to improve the recovery process?

A.Configure RAID 10 on all database servers to improve disk performance.
B.Upgrade the WAN connection between sites to reduce backup transfer times.
C.Enable log shipping with point-in-time recovery for the database.
D.Adjust the RTO to 8 hours to allow for more comprehensive backups.
AnswerC

Why this answer

The correct answer is B: Implement log shipping with point-in-time recovery for the database. The RPO of 1 hour is not being met because the backup schedule is daily. Option A is wrong because while a faster WAN can reduce backup time, the core issue is the backup frequency, not bandwidth.

Option C is wrong because the issue is not data redundancy but recovery granularity; RAID protects against drive failure but not data loss from missing transactions. Option D is wrong because increasing RTO does not solve the RPO violation; the goal is to reduce data loss, not relax the time target.

Full explanation →
230
MCQmedium

A server administrator is troubleshooting a server that is experiencing slow network performance. The server has a 10 GbE network interface card (NIC) connected to a switch port that is configured for 1 GbE. Which of the following is the MOST likely cause of the slow performance?

A.The network cable is Cat 5e, which cannot support 10 GbE.
B.The server's NIC driver is outdated and does not support 10 GbE.
C.The switch port is configured for 1 GbE, limiting throughput.
D.The NIC is set to half-duplex mode.
AnswerC

The switch port speed determines the maximum link speed. Even though the NIC supports 10 GbE, the connection will operate at 1 GbE, capping throughput at approximately 1 Gbps. This is a common cause of slow network performance when a high-speed NIC is connected to a lower-speed switch port. The administrator should verify the switch port configuration and ensure it matches the NIC's capabilities.

Why this answer

The correct answer is that the switch port is configured for 1 GbE, limiting throughput. When a 10 GbE NIC connects to a 1 GbE switch port, the link speed is negotiated at 1 GbE, capping performance. This is a straightforward configuration mismatch that can be resolved by reconfiguring the switch port to support higher speeds if the hardware allows.

Exam trap

The trap here is blaming the cable or driver when the obvious speed mismatch between the NIC and switch port is the actual bottleneck.

Full explanation →
231
Multi-Selectmedium

A technician is preparing to install a replacement hot-swap SAS drive into a production server's front drive bay. The array is currently healthy and the new drive will be used as a global hot spare. Which of the following steps are required to complete the installation safely? (Choose two.)

Select 2 answers
A.Format the replacement drive with the operating system's native file system before insertion.
B.Power down the entire server and disconnect both power supplies before opening the drive bay.
C.Attach an ESD wrist strap to the chassis and the technician before handling the drive.
D.Confirm the replacement drive matches the existing drives in interface, rotational speed, and capacity so the array can use it.
E.Delete the existing logical drive configuration so the controller can detect the new physical disk.
AnswersC, D

Electrostatic discharge can damage drive electronics even if the failure is not immediate, and field replacements are a common source of latent ESD damage. Bonding the technician to the server chassis with a wrist strap equalizes potential before the drive is touched. Because the drive is being handled during a live service operation, this protective step is required as part of the installation procedure.

Why this answer

Adding a hot spare requires a compatible drive, verified against the array's interface, speed, and capacity, and ESD protection during handling because the electronics are vulnerable even when the server stays online. The hot-swap bay and healthy array mean no power-down or configuration deletion is needed, and the controller handles block-level rebuilds without any file system preparation.

Exam trap

The trap here is overreacting to a live drive insertion by powering down the server or clearing the array, when hot-swap hardware and controller-managed rebuilds are specifically designed to avoid those destructive steps.

Full explanation →
232
MCQeasy

A server administrator is troubleshooting a network connectivity issue on a server that has recently been moved to a different rack. The server can ping its own IP address but cannot ping the default gateway. Which of the following is the MOST likely cause?

A.Faulty Ethernet cable or incorrect patch panel port
B.Incorrect DNS server configuration
C.Incorrect subnet mask
D.Duplicate IP address on the network
AnswerA

A physical connectivity issue at layer 1 can prevent the server from reaching the gateway while still allowing the NIC to respond to its own IP.

Why this answer

Option A is correct because being able to ping self but not gateway suggests a layer 1 or 2 issue like a faulty patch cable. Option B is wrong because DNS would affect name resolution, not ping. Option C is wrong because incorrect subnet mask would affect self-ping or gateway detection.

Option D is wrong because duplicate IP would cause intermittent issues or conflict messages.

Full explanation →
233
MCQmedium

A technician installs additional RAM in a server. After powering on, the server emits a continuous beep code and does not POST. The server documentation indicates this beep code signifies a memory error. Which of the following is the MOST likely cause?

A.The total RAM exceeds the server's maximum supported capacity.
B.The new RAM is not fully seated in the memory slot.
C.The new RAM is ECC and the existing RAM is non-ECC.
D.The server BIOS needs to be updated to support the new RAM type.
AnswerB

A memory error beep with no POST most commonly results from a module not fully latched into its slot, breaking contact with the DIMM socket. Reseating the new RAM until the retention clips click restores proper electrical connection.

Why this answer

A continuous beep code indicating a memory error immediately after installing additional RAM most commonly means the new module is not fully seated in its slot. If the DIMM is not clicked into place, the server cannot detect it properly and halts POST with a memory error beep code. Reseating the module typically resolves the issue.

Exam trap

SK0-005 often tests the most likely physical cause of a post-installation hardware error — candidates overthink and pick capacity, ECC mismatch, or BIOS compatibility when the simplest and most common cause is improper seating.

How to eliminate wrong answers

Option A is wrong because exceeding maximum supported capacity usually results in the server ignoring the excess RAM or posting a capacity warning, not a continuous memory-error beep code immediately after installation. Option C is wrong because mixing ECC and non-ECC RAM is generally not supported and would typically cause the system to fail to recognize the module or post a compatibility error, but the most common cause of a fresh memory error after installation is improper seating. Option D is wrong because a BIOS update is only needed if the RAM type is unrecognized by the current firmware — a less likely cause than a physically unseated module, and it would not produce an immediate continuous beep on first boot after installation.

Full explanation →
234
Multi-Selectmedium

A server administrator is troubleshooting a network connectivity issue where a newly installed server cannot communicate with other devices on the same subnet. The server has a static IP address configured. Other devices on the same switch can communicate. Which TWO of the following could be the cause of the issue? (Select TWO)

Select 2 answers
A.The DNS server address is incorrect.
B.The server's default gateway is incorrectly set.
C.The switch port is configured with port security and has learned a different MAC address.
D.Incorrect subnet mask configured on the server.
E.The DHCP server has exhausted its scope.
AnswersC, D

Port security configured to permit only specific MAC addresses will place the newly installed server's port in an errant or shutdown state when an unexpected MAC is learned, blocking all traffic. This explains why other devices on the same switch communicate normally while the new server cannot.

Why this answer

Option C is correct because if the switch port has port security enabled and has already learned a different MAC address, the switch will place the port in an err-disabled or violation state, blocking the newly installed server's traffic even though other devices on the switch communicate fine. Option D is correct because an incorrect subnet mask on the server can cause it to misjudge which addresses are local, so it may fail to ARP for or directly reach other devices on the same subnet, breaking same-subnet communication. Option A is not the cause because DNS only resolves hostnames to IP addresses and does not affect basic IP connectivity to devices on the same subnet.

Option B is not the cause because the default gateway is only used to reach remote subnets, not devices on the same local subnet. Option E is not the cause because the server uses a static IP address, so DHCP scope exhaustion would not prevent it from communicating.

Exam trap

SK0-005 often tests basic connectivity troubleshooting; candidates may overlook port security or subnet mask errors and incorrectly blame DNS or DHCP, which are not relevant for same-subnet static IP issues.

Full explanation →
235
MCQmedium

A system administrator needs to implement a secure method for remote administrators to manage servers in a data center. The solution must provide encrypted communication, support multi-factor authentication, and allow centralized logging of all administrative sessions. Which solution should be implemented?

A.Remote Desktop Protocol (RDP) with Network Level Authentication (NLA) and Group Policy
B.VPN with IPsec and RADIUS authentication
C.A jump server (bastion host) with SSH, MFA, and centralized session recording
D.SSH with key-based authentication and session logging via auditd
AnswerC

A jump server acts as a single entry point, enforcing MFA and logging all sessions centrally. It supports SSH for encrypted communication and can record sessions for auditing. This meets all requirements: encryption, MFA, and centralized logging. It also simplifies access management by consolidating connections.

Why this answer

A jump server with SSH, MFA, and centralized session recording provides encrypted access, enforces multi-factor authentication, and logs all administrative sessions in one place. This satisfies all requirements and is a common best practice for secure remote administration. Other options lack centralized session logging or are platform-specific.

Exam trap

The trap here is focusing only on encryption and MFA while overlooking the need for centralized logging of administrative sessions, which a jump server uniquely provides.

Full explanation →
236
MCQmedium

A server administrator is troubleshooting a Linux server that was working normally until a new kernel was installed. After rebooting, the server drops into a GRUB prompt instead of loading the operating system, and the administrator needs to restore normal boot as quickly as possible. Which of the following is the MOST appropriate action?

A.Reinstall the bootloader to the disk's master boot record or EFI system partition.
B.Regenerate the GRUB configuration file and verify the boot entries point to valid kernels.
C.Change the default boot target in systemd to multi-user.target and reboot.
D.Boot a rescue environment and rebuild the initramfs for the installed kernel.
AnswerB

Dropping to a GRUB prompt after a kernel installation commonly means the configuration file was not regenerated or references a kernel that no longer exists. Regenerating the GRUB configuration rebuilds valid menu entries against the kernels actually present, restoring normal boot. Verifying the entries confirms the correct kernel and root device are referenced before rebooting.

Why this answer

A system that stops at the GRUB prompt has a functioning bootloader but no valid menu entry to load, which frequently follows a kernel update that did not regenerate the configuration. Rebuilding the GRUB configuration restores entries tied to the kernels present on disk. Initramfs rebuilds, bootloader reinstalls, and systemd target changes each apply to different stages and would not fix this symptom.

Exam trap

The trap here is confusing the GRUB prompt with an initramfs or bootloader-installation failure, when the prompt itself proves GRUB is loaded and only its configuration is unusable.

Full explanation →
237
MCQeasy

A server administrator is setting up a new Windows Server 2022 server that will host a database. The server has four 10 TB SAS drives. The administrator needs to configure the drives for maximum performance and fault tolerance, allowing the server to continue operating if one drive fails. Which RAID level should the administrator use?

A.RAID 1
B.RAID 5
C.RAID 10
D.RAID 0
AnswerC

RAID 10 combines mirroring and striping, providing both fault tolerance and high performance. It can tolerate one drive failure per mirrored pair, and with four drives, it can survive multiple drive failures as long as they are not in the same mirror. It is ideal for database workloads requiring high random write performance and redundancy.

Why this answer

RAID 10 is the best choice because it offers both fault tolerance and high performance. It stripes data across mirrored pairs, allowing the server to continue operating if one drive fails. For a database server, RAID 10 provides better write performance than RAID 5 and better capacity utilization than RAID 1, making it suitable for the stated requirements.

Exam trap

The trap here is assuming that RAID 5 is always the best balance of performance and fault tolerance, but for write-intensive databases, RAID 10 is superior.

Full explanation →
238
MCQeasy

A system administrator must choose a backup method for a file server where the business requires that only files changed since the last backup are copied, and the backup window is very short. Which backup type should the administrator select?

A.Differential backup
B.Full backup
C.Synthetic full backup
D.Incremental backup
AnswerD

An incremental backup copies only the files that changed since the most recent backup of any type, which directly matches the requirement and keeps each run small. The short backup window is respected because the data set is minimal, though restores require the last full backup plus every incremental in sequence.

Why this answer

The requirement is to copy only files changed since the last backup while keeping the backup window short. An incremental backup captures exactly those changes, so each run is small and fast. Differential and full backups copy progressively more data, and a synthetic full produces a full image rather than a change-only copy.

Exam trap

The trap here is confusing incremental with differential; differential copies everything changed since the last full, not since the last backup of any type.

Full explanation →
239
MCQhard

A server administrator is troubleshooting a Windows Server 2019 host that intermittently drops connections to a database application. The administrator reviews Performance Monitor and notices that the Network Interface\Output Queue Length counter for the production NIC frequently exceeds 2. The NIC is a 1GbE adapter, and the switch port is configured for 1GbE full duplex. Which of the following is the MOST likely cause?

A.An incorrect default gateway on the server
B.A duplex mismatch between the NIC and the switch port
C.A faulty network cable causing packet loss
D.The NIC is saturating its 1GbE link during peak database traffic
AnswerD

Output Queue Length counts packets queued in the network stack waiting for the adapter to transmit. Sustained values above 2 indicate the adapter cannot drain the queue fast enough, which happens when traffic approaches or exceeds the link capacity. On a 1GbE link carrying database traffic, saturation is the most likely cause of intermittent drops.

Why this answer

A sustained Network Interface\Output Queue Length above 2 means the OS send queue is backing up because the adapter cannot transmit fast enough. On a 1GbE link handling database traffic, link saturation is the most plausible explanation. Duplex mismatch, cable faults, and gateway errors produce different symptoms such as errors, link flaps, or routing failures.

Exam trap

The trap here is attributing intermittent network drops to physical layer faults like cables or duplex settings instead of recognizing a queue-length counter as evidence of bandwidth saturation.

Full explanation →
240
MCQmedium

A datacenter administrator is reviewing physical security for a new colocation cage that houses servers containing regulated data. The cage has a locked mesh door, but the administrator must add a control that logs exactly which employee enters and exits, and when, without requiring a guard. Which solution BEST meets these requirements?

A.Install a passive infrared motion sensor inside the cage that triggers an alert whenever movement is detected.
B.Install a biometric fingerprint reader on the cage door that records each authorized entry and exit in an audit log.
C.Replace the mesh door with a solid steel door and issue a mechanical key to each authorized employee.
D.Place a security guard at the cage entrance during all business hours to visually verify and log each person who enters.
AnswerB

A biometric reader authenticates the specific individual and creates a timestamped audit trail of each entry and exit, satisfying both the access-control and logging requirements without a guard. Fingerprints are difficult to share or forge, so the log reliably identifies who entered. This directly meets the stated need for per-person entry/exit records in a colocation cage.

Why this answer

The requirement combines two needs: authenticate each individual and produce a timestamped record of entry and exit without human staffing. A biometric reader authenticates the specific person and writes each event to an audit log, so it satisfies both identity verification and automated logging. Mechanical keys, guards, and motion sensors each fail at least one of those needs in this colocation scenario.

Exam trap

The trap here is assuming that any physical lock on the cage satisfies access control, when the scenario specifically demands identity-based audit logging without a guard.

Full explanation →
241
MCQmedium

A server administrator is troubleshooting a physical server that intermittently powers off without warning. The server is connected to a UPS, and the UPS logs show no recent power events. The administrator suspects a thermal issue. Which of the following should the administrator check FIRST to confirm this suspicion?

A.Check the operating system's event logs for unexpected shutdown entries.
B.Run a memory diagnostic to check for faulty RAM.
C.Review the IPMI/BMC system event log for thermal trip events.
D.Replace the power supplies one at a time to see if the issue persists.
AnswerC

The IPMI/BMC system event log records platform events such as thermal trips, fan failures, and temperature threshold crossings. Since the UPS shows no power issue, checking the BMC log for thermal events is the most direct way to confirm whether overheating is causing the shutdowns. This is a non-intrusive first step that can provide immediate evidence before physically inspecting the server.

Why this answer

The correct answer is to review the IPMI/BMC system event log for thermal trip events. This log captures hardware-level events, including temperature thresholds and fan failures, which are critical for diagnosing thermal shutdowns. Since the UPS shows no power anomalies, thermal causes are more likely, and the BMC log provides direct evidence without requiring physical intervention.

Exam trap

The trap here is assuming that a power-related symptom always indicates a power supply or UPS issue, when in fact thermal shutdowns can mimic power loss.

Full explanation →
242
MCQhard

A server administrator is configuring a RAID array for a database server that requires high fault tolerance and performance. The server has eight 2.5-inch SAS drives and a hardware RAID controller with 1GB cache and battery backup. The administrator needs to maximize usable capacity while tolerating the failure of up to two drives. Which RAID level should be used?

A.RAID 10
B.RAID 5
C.RAID 6
D.RAID 0
AnswerC

RAID 6 uses double parity, allowing it to survive two simultaneous drive failures. It provides a good balance of fault tolerance and usable capacity, though write performance is lower than RAID 10. For a database server, RAID 6 with a battery-backed cache can mitigate write penalties, making it suitable when capacity is prioritized.

Why this answer

RAID 6 is the correct choice because it can tolerate two simultaneous drive failures while providing usable capacity of N-2 drives. With eight drives, that yields six drives' worth of capacity. Although write performance is lower than RAID 10, the battery-backed cache helps, and the requirement prioritizes fault tolerance and capacity over maximum write speed.

Exam trap

The trap here is assuming RAID 10 always tolerates two drive failures, but it only does so if the failures are in different mirrored pairs.

Full explanation →
243
Multi-Selecthard

A server administrator needs to set up out-of-band management for a new server. Which THREE of the following are essential for successful configuration and remote access? (Choose three.)

Select 3 answers
A.A DHCP server configured to provide an IP to the management interface.
B.A dedicated management network interface (e.g., iDRAC, iLO dedicated port).
C.A Baseboard Management Controller (BMC) with proper firmware.
D.An installed operating system on the server.
E.A web browser or SSH client to access the management console.
AnswersB, C, E

A dedicated management interface such as iDRAC or iLO keeps out-of-band traffic physically separate from production data. This isolation lets administrators reach the console even when the host OS or production NICs fail, satisfying the remote-access requirement.

Why this answer

Option B is correct because out-of-band management requires a dedicated management interface such as an iDRAC or iLO dedicated port, which remains accessible independently of the host operating system and provides remote KVM, power control, and console redirection. Option C is correct because the Baseboard Management Controller (BMC) is the hardware component that implements out-of-band management, and it must have proper firmware to support remote access features such as IPMI, Redfish, or vendor-specific web interfaces. Option E is correct because remote administrators need a web browser or SSH client to reach the management console, since BMCs typically expose a web GUI over HTTPS and may also support SSH or serial-over-LAN access.

Option A is not essential because the management interface can be configured with a static IP address, so a DHCP server is not required for successful out-of-band access. Option D is not essential because out-of-band management is designed to work independently of the installed operating system, allowing access even when the OS is down or not yet installed.

Exam trap

SK0-005 often tests whether candidates conflate in-band (OS-dependent) with out-of-band (OS-independent) management — the trap is selecting 'installed OS' or 'DHCP' as essential when static IPs and OS-less operation are the norm.

Full explanation →
244
MCQeasy

A financial services firm requires a disaster recovery solution that provides a Recovery Point Objective (RPO) of near zero and a Recovery Time Objective (RTO) of less than 2 hours. Which of the following site types is MOST appropriate?

A.Cloud-based backup with daily replication
B.Cold site
C.Warm site
D.Hot site
AnswerD

A hot site maintains near real-time synchronization and redundant hardware, allowing rapid failover with minimal data loss and downtime.

Why this answer

Option D is correct because a hot site is fully equipped, with near real-time data replication, enabling the fastest recovery and minimal data loss. A cold site (Option A) has the longest recovery time. A warm site (Option B) has some equipment but data must be restored from backup, increasing RTO and RPO.

Cloud-based backup with daily replication (Option C) does not meet near-zero RPO.

Full explanation →
245
MCQhard

A server administrator is configuring a RAID array for a new database server that requires high performance for random writes. The server has eight 1 TB SAS drives and a hardware RAID controller with a battery-backed write cache. The administrator needs to choose a RAID level that provides the best write performance while maintaining redundancy. Which RAID level should the administrator select?

A.RAID 5
B.RAID 10
C.RAID 6
D.RAID 0
AnswerB

RAID 10 combines mirroring and striping, offering excellent random write performance because data is written to multiple mirrors without parity calculations. It also provides redundancy by allowing one drive per mirror to fail. With a battery-backed write cache, performance is further enhanced, making it ideal for database workloads.

Why this answer

RAID 10 provides the best random write performance among the options while maintaining redundancy. It uses mirroring for fault tolerance and striping for performance, avoiding the parity overhead that slows writes in RAID 5 and RAID 6. RAID 0 lacks redundancy, so it does not meet the requirement.

Exam trap

The trap here is focusing only on redundancy or only on performance, overlooking that RAID 10 uniquely satisfies both for random writes.

Full explanation →
246
MCQeasy

Refer to the exhibit. A Windows file server at a branch office lost network connectivity after a scheduled reboot. The administrator logs in via the console and runs `ipconfig /all`, which shows the output in the exhibit. The server should have a static IP of 10.0.0.50. What should the administrator do to restore connectivity?

A.Disable IPv6 on the network adapter.
B.The DHCP server is unreachable; check DHCP server availability.
C.Release and renew the DHCP lease.
D.Set a static IP configuration as intended.
AnswerD

The exhibit shows the adapter configured for DHCP, so it lacks the intended 10.0.0.50 address and cannot communicate. Assigning the static IP, mask, gateway and DNS manually restores the required configuration, resolving the connectivity loss.

Why this answer

The exhibit shows that the server's network adapter is configured to obtain an IP address automatically (DHCP), as indicated by 'DHCP Enabled: Yes' and an APIPA address of 169.254.x.x. Since the server should have a static IP of 10.0.0.50, the administrator must manually configure the static IP address, subnet mask, default gateway, and DNS servers. This will restore connectivity because the server will no longer rely on an unreachable DHCP server and will have the correct network configuration.

Exam trap

The trap here is that candidates might focus on the unreachable DHCP server (Option B) or attempt to release/renew the lease (Option C) because the exhibit shows DHCP enabled, but the key detail is that the server should have a static IP, so the correct action is to set it manually.

How to eliminate wrong answers

Option A is wrong because disabling IPv6 does not address the core issue; the server lacks a valid IPv4 configuration, and IPv6 is not causing the connectivity failure. Option B is wrong because while the DHCP server may be unreachable, the server is not supposed to use DHCP at all; the correct fix is to set a static IP, not to troubleshoot DHCP. Option C is wrong because releasing and renewing a DHCP lease would only attempt to obtain a new DHCP address, but the server requires a static IP, and the DHCP server is likely unreachable anyway.

Full explanation →
247
MCQmedium

A company has a recovery point objective (RPO) of 15 minutes for its database server. The database is 500 GB, and the nightly full backup takes 4 hours. Which backup strategy best meets the RPO while minimizing storage and backup window impact?

A.Perform differential backups every 15 minutes
B.Perform a full backup every 15 minutes
C.Perform transaction log backups every 15 minutes
D.Perform incremental backups every 15 minutes
AnswerC

Transaction log backups capture all changes since the last log backup and can be scheduled every 15 minutes, directly meeting the 15-minute RPO. They are small and fast because they contain only the log records, not the entire database. Combined with a periodic full backup and possibly differential backups, this strategy minimizes storage and backup window impact while allowing point-in-time recovery. It is the standard method for databases requiring low RPO.

Why this answer

The RPO of 15 minutes means no more than 15 minutes of data can be lost. Transaction log backups run every 15 minutes capture all changes since the previous log backup, are small and fast, and support point-in-time recovery. Full backups every 15 minutes are impossible given the 4-hour runtime, while differential and incremental backups are less efficient or less granular for database recovery.

Exam trap

The trap here is assuming that any frequent backup meets the RPO, without considering that only transaction log backups provide the required granularity and efficiency for a database with a tight recovery point objective.

Full explanation →
248
MCQmedium

A server cannot connect to a specific network share. The administrator can successfully ping the server's IP address from the client. Which of the following is MOST likely causing the issue?

A.Incorrect subnet mask
B.Duplicate IP address on the network
C.DNS server is misconfigured
D.Host-based firewall blocking file sharing ports
AnswerD

Correct — Firewalls often allow ICMP but block TCP/UDP ports used by SMB/CIFS, so ping succeeds but share access fails.

Why this answer

Option C is correct because Windows Firewall or an equivalent host-based firewall may block SMB (port 445) or NetBIOS ports, preventing share access even though ICMP is allowed. Option A is wrong because DNS would affect name resolution, not reachability by IP. Option B is wrong because an incorrect subnet mask would generally prevent any communication, including pings.

Option D is wrong because a duplicate IP would cause intermittent connectivity or an IP conflict error, not a consistent inability to access shares while ping works.

Full explanation →
249
MCQeasy

A server technician replaces a failed RAM module with an identical spare. After installation, the server powers on but emits continuous short beeps and does not complete POST. Which of the following is the MOST likely cause?

A.The new RAM module is incompatible with the motherboard.
B.The RAM module is not fully seated in the slot.
C.The CPU has been damaged during the installation.
D.The power supply is providing insufficient voltage.
AnswerB

Continuous short beeps are a classic symptom of a memory issue, and reseating the module is the first troubleshooting step. Even identical modules can be improperly installed.

Why this answer

Continuous short beeps typically indicate a memory error, and the most common cause after a RAM replacement is that the module is not fully seated. Even though the module is known good and compatible, improper installation can prevent POST. Option C is correct because reseating the module will often resolve the issue.

Option A is incorrect because an incompatible module would likely produce a different beep code or no POST at all, but the module is identical and known good. Option B is incorrect because insufficient power would likely prevent the server from powering on at all, not cause RAM beep codes. Option D is incorrect because CPU damage is unlikely from a simple RAM swap and would produce different symptoms.

Full explanation →
250
MCQeasy

A server administrator is troubleshooting a server that fails to boot. The server powers on, completes POST, but then displays a message indicating that no bootable device is found. The administrator confirms that the BIOS/UEFI detects the hard drive. Which of the following should the administrator check FIRST?

A.The integrity of the operating system files.
B.The RAID controller configuration.
C.The physical connections of the hard drive.
D.The boot order in the BIOS/UEFI settings.
AnswerD

If the BIOS detects the hard drive but the server reports no bootable device, the boot order may be incorrect, causing the system to attempt booting from a non-bootable device like a network or optical drive. Checking and correcting the boot order is a quick and non-invasive first step.

Why this answer

When a server detects a hard drive but fails to boot with a no bootable device error, the boot order is the most likely culprit. The system may be trying to boot from a non-bootable device. Checking and adjusting the boot order in BIOS/UEFI is a quick first step.

Exam trap

The trap here is jumping to complex causes like OS corruption or RAID issues when a simple boot order misconfiguration is often the culprit.

Full explanation →
251
MCQeasy

A technician must replace a failed 2.5-inch hot-swap SAS drive in a running production server. The array supports hot swapping and the replacement drive is on site. Which of the following is the FIRST step the technician should take?

A.Remove the failed drive immediately and insert the replacement to begin rebuilding.
B.Shut down the operating system and power off the server before opening the drive bay.
C.Update the RAID controller firmware so the replacement drive is recognized.
D.Identify the failed drive's bay location using the management interface or drive LEDs.
AnswerD

Before pulling any drive, the technician must confirm which physical bay holds the failed member, using the storage management utility or the drive's fault LED. Removing the wrong drive from a healthy array can cause data loss or a second degradation. Accurate identification is the essential first action, after which the hot swap can proceed safely.

Why this answer

Hot swapping still requires positive identification of the failed member before any hardware is touched. The management utility or the fault LED on the carrier confirms the correct bay, preventing removal of a healthy drive. Once identified, the failed drive can be pulled and the replacement inserted while the system remains online and rebuilds.

Exam trap

The trap here is equating hot swap with safe to pull any drive without first confirming the failed member's location.

Full explanation →
252
MCQeasy

A server technician is mounting a 4U server in a standard 19-inch rack. Which of the following safety precautions is MOST important before lifting the server into place?

A.Ensure the server's power supply voltage matches the rack's PDU.
B.Install cable management arms before mounting.
C.Confirm that the rack's weight capacity can support the server.
D.Verify that the rack is properly grounded.
AnswerC

A 4U server is heavy, so verifying the rack's rated load capacity prevents the rails or frame from failing and the unit falling. This addresses the lifting hazard the stem names, ahead of ESD or cable-management concerns.

Why this answer

Before lifting any server into a rack, the technician must verify the rack's weight capacity can support the server's weight, especially for a heavy 4U unit. Exceeding the rack's load rating can cause the rack to tip, collapse, or fail, creating a serious safety hazard for personnel and equipment. This is the primary safety check that must be performed before any physical lifting begins.

Exam trap

The trap here is confusing electrical safety precautions (voltage, grounding) with physical safety precautions (weight capacity), causing candidates to select a technically valid but contextually wrong answer for the pre-lift phase.

How to eliminate wrong answers

Option A is wrong because power supply voltage matching is an electrical compatibility concern addressed during cabling, not a safety precaution before lifting. Option B is wrong because installing cable management arms is a post-mounting convenience step and has no bearing on lifting safety. Option D is wrong because grounding is an electrical safety measure relevant when connecting power, not a prerequisite for the physical act of lifting the server.

Full explanation →
253
MCQhard

A server administrator is troubleshooting a Windows Server 2022 host that presents a RAID 10 array to the operating system as a single 2 TB volume. Users report that write performance to a database on this volume has degraded sharply over the past week, and the array's management utility shows all member drives as online with no rebuild in progress. Which of the following should the administrator check FIRST to identify the cause?

A.The NTFS cluster size of the volume presented to the operating system.
B.The RAID controller's write cache policy and battery/capacitor health status.
C.The number of spare drives assigned to the array.
D.The stripe size configured on the RAID 10 array.
AnswerB

A degraded write cache, whether disabled or backed by a failed battery or capacitor, forces write-through behavior and dramatically reduces write performance on a RAID 10 array. Because the member drives are healthy and no rebuild is occurring, the controller's cache state is the most likely explanation. Checking the policy and cache module health is the fastest way to confirm or rule out this cause.

Why this answer

With all RAID 10 member drives online and no rebuild activity, the sudden write slowdown most likely originates at the controller level. A failed cache battery or capacitor causes the controller to switch from write-back to write-through, which removes the performance benefit of the cache and sharply increases write latency. The cache policy and module health are therefore the first things to verify.

Exam trap

The trap here is chasing array geometry settings like stripe or cluster size when a sudden, recent write slowdown on healthy drives points to a controller cache state change rather than a configuration choice made at build time.

Full explanation →
254
MCQhard

A server running a critical application fails to boot with the error: 'Boot device not found.' The server uses UEFI and a RAID 5 array for the OS. The administrator verifies that all disks are present and powered. Which of the following should the administrator check FIRST?

A.The array configuration in the RAID BIOS
B.The integrity of the OS boot files
C.The boot order in UEFI
D.The RAID controller battery
AnswerA

Correct — The RAID setup utility will show if the array is degraded, offline, or missing, which is the most likely cause of the boot device error.

Why this answer

Option C is correct. With all disks powered and present, the RAID array may be degraded or its configuration lost, leading to the boot device error. Checking the array configuration in the RAID controller's BIOS (or UEFI setup) allows verifying that the array is intact and the boot volume is accessible.

Option A (RAID battery) is important for write cache but not directly causing 'boot device not found.' Option B (boot order) might be an issue, but after checking that the RAID array is operational; if the array is offline, boot order changes won't help. Option D (OS boot files) should be checked after ensuring the RAID subsystem is functional.

Full explanation →
255
MCQmedium

A server administrator is upgrading the RAM on a server that supports quad-channel memory architecture. They install four identical 16GB DDR4 ECC modules, but the server only recognizes the memory as operating in single-channel mode. Which of the following is the most likely cause?

A.The DIMMs are not installed in the correct slots
B.One of the DIMMs is faulty
C.The DIMMs do not support ECC
D.The DIMMs are not registered (RDIMM)
AnswerA

Quad-channel operation requires the four DIMMs to populate specific slots, typically one per channel. Installing them in the wrong slots leaves channels unpopulated, so the memory controller falls back to single-channel mode despite identical modules.

Why this answer

Quad-channel memory requires the DIMMs to be installed in specific slots that are mapped to different memory channels. If the modules are placed in slots belonging to the same channel (e.g., all in channel A), the system will operate in single-channel mode. The correct slot population order is typically printed on the motherboard or in the server manual, often using color-coded slots to indicate channel grouping.

Therefore, incorrect slot placement is the most likely cause of the single-channel operation.

Exam trap

SK0-005 often tests the misconception that any four identical DIMMs will automatically enable quad-channel mode, ignoring the critical requirement for proper slot population as defined by the motherboard layout.

How to eliminate wrong answers

Option B is wrong because a faulty DIMM would typically cause the system to fail POST, report a memory error, or reduce capacity, not force single-channel mode; the system would still attempt to use remaining modules in their respective channels. Option C is wrong because ECC support is independent of channel architecture; non-ECC DIMMs would not prevent multi-channel operation, though they might not be supported by the server at all. Option D is wrong because registered (RDIMM) vs. unbuffered (UDIMM) is a separate compatibility issue; using the wrong type would usually prevent booting or cause errors, not degrade to single-channel mode.

Full explanation →
256
MCQeasy

A server administrator is configuring a new server that will host a database. The server has four 1 TB SAS drives. The administrator wants to maximize performance while providing fault tolerance that can survive a single drive failure. Which RAID level should be used?

A.RAID 0
B.RAID 10
C.RAID 1
D.RAID 5
AnswerB

RAID 10 combines mirroring and striping, providing both fault tolerance and high performance. It can survive a single drive failure (or more, depending on which drives fail) and offers better write performance than RAID 5, making it ideal for database workloads.

Why this answer

RAID 10 is the best choice because it offers both fault tolerance and improved performance through striping and mirroring. It can tolerate a single drive failure and provides better write performance than RAID 5, which is crucial for database operations.

Exam trap

The trap here is focusing only on fault tolerance and overlooking performance, which is critical for a database server.

Full explanation →
257
MCQhard

A technician is troubleshooting a server that intermittently reports correctable memory errors on a specific DIMM slot in the management controller log. The server has not crashed, and the operating system is stable. The technician reseats the DIMM and cleans the slot, but the errors continue. Which of the following should the technician do next?

A.Disable memory error correction in the BIOS to stop the log entries.
B.Update the server BIOS to the latest version and monitor for 30 days.
C.Replace the DIMM in the affected slot with a known-good module of the same specifications.
D.Move the DIMM to a different slot and leave it there permanently.
AnswerC

Correctable errors that persist after reseating and cleaning point to a failing DIMM or slot. Swapping in a known-good module of the same specifications isolates whether the fault follows the DIMM or stays with the slot. This is the logical next step before replacing the motherboard or making configuration changes, and it directly addresses the likely failing component.

Why this answer

Persistent correctable memory errors after reseating and cleaning indicate a failing DIMM or slot. Replacing the module with a known-good one of the same specifications isolates the fault. Disabling ECC, merely moving the DIMM, or waiting on a BIOS update does not repair the failing hardware and leaves the server at risk of an uncorrectable error.

Exam trap

The trap here is treating correctable memory errors as harmless log noise and choosing a configuration change instead of replacing the suspect hardware.

Full explanation →
258
MCQmedium

A systems administrator is configuring role-based access for a team of server operators. The operators need to restart services and view logs on production Linux servers, but they must not be able to edit configuration files or install packages. The administrator wants to implement this with the least privilege and avoid sharing the root password. Which of the following should the administrator configure?

A.Configure sudoers entries that allow each operator to run specific service management and log-reading commands without a password.
B.Deploy an SSH key pair for each operator and allow direct root login with the key.
C.Set the immutable attribute on configuration files and package directories so operators cannot modify them.
D.Create a shared operator account with a strong password and add it to the wheel group.
AnswerA

Sudoers can grant named users permission to run only specific commands, such as systemctl restart for approved units and journalctl for log viewing, while denying everything else. This follows least privilege, keeps individual accountability, and avoids sharing the root password. It directly matches the requirement that operators restart services and view logs but not edit configuration files or install packages.

Why this answer

Least privilege for this team means granting only the specific commands they need while keeping individual accountability. Sudoers entries that permit named operators to run approved service management and log-reading commands achieve this without sharing root credentials. Shared accounts with full sudo, immutable attributes, and direct root SSH all either over-privilege the operators or fail to provide the required controlled access.

Exam trap

The trap here is equating administrative access with full root or wheel group membership when a scoped sudo policy provides the needed commands with less risk.

Full explanation →
259
MCQmedium

A server administrator manages a Linux server running a custom application. The application must start automatically at boot and be restarted if it crashes. The administrator creates a systemd unit file at /etc/systemd/system/myapp.service. After running systemctl daemon-reload and systemctl start myapp, the application runs successfully. However, after a reboot, the application does not start. Which command should the administrator run to resolve this?

A.systemctl enable myapp
B.systemctl daemon-reload
C.systemctl start myapp
D.systemctl reload myapp
AnswerA

This command creates symlinks for the unit file in the appropriate systemd target directories, ensuring the service starts automatically at boot. Since the service is already running and the unit file is in the correct location, enabling it will make it persistent across reboots, directly addressing the issue described.

Why this answer

To make a systemd service start automatically at boot, the administrator must enable it using systemctl enable. This creates the necessary symbolic links in the systemd target directories. Starting, reloading, or reloading the daemon does not configure the service for automatic startup, so enabling is the correct action.

Exam trap

The trap here is confusing the immediate start of a service with its enablement for automatic startup at boot.

Full explanation →
260
Multi-Selecthard

Following a firmware update on a server's RAID controller, the server fails to boot and reports "No boot device found." The RAID array status shows healthy in the controller BIOS. Which THREE of the following actions should the administrator take to resolve the issue? (Choose three.)

Select 3 answers
A.Roll back the RAID controller firmware
B.Rebuild the RAID array from backup
C.Reset the RAID controller configuration to defaults
D.Verify the boot order in the system BIOS
E.Install the latest drivers for the RAID controller in the OS
AnswersA, C, D

If the new firmware caused the boot issue, rolling back to the previous version can restore functionality.

Why this answer

Options A, B, and E are correct. Rolling back firmware can undo a bad update. Verifying boot order ensures the correct device is first.

Resetting the controller configuration may clear incompatible settings from the update. Rebuilding the array is unnecessary as it is healthy. Installing OS drivers is impossible without a booted OS.

Full explanation →
261
MCQeasy

A technician is installing a new server for a department. The server will run a single application that requires high reliability. The operating system should be protected against a single disk failure without sacrificing read performance. Which RAID configuration is MOST appropriate?

A.RAID 5
B.RAID 6
C.RAID 1
D.RAID 0
AnswerC

RAID 1 mirrors data across two disks, providing fault tolerance and excellent read performance for the OS.

Why this answer

Option D is correct because RAID 1 mirrors the OS drive, providing fault tolerance and good read performance. Option A (RAID 0) has no redundancy. Option B (RAID 5) requires at least three disks and has write penalty.

Option C (RAID 6) requires at least four disks and is overkill for a simple OS mirror.

Full explanation →
262
MCQeasy

A technician needs to replace a failed hot-swap SAS drive in a running server. The array is configured as RAID 6 with a dedicated hot spare. Which of the following describes the correct procedure?

A.Move the hot spare into the failed drive's bay and leave the failed bay empty until a replacement arrives.
B.Replace the drive, then manually initialize the array from the controller BIOS to force a rebuild.
C.Power down the server, replace the drive, then power on and let the controller rebuild automatically.
D.Remove the failed drive, insert the replacement, and allow the controller to rebuild the array onto it.
AnswerD

With a hot-swap backplane, the failed drive can be pulled and the replacement inserted while the server runs. The RAID controller detects the new member and begins rebuilding, using the redundant parity or the hot spare's data as needed, so service continues with no downtime.

Why this answer

Hot-swap drive bays and backplanes allow a failed member to be removed and replaced while the server runs. Once the controller detects the new drive, it rebuilds the array automatically, restoring redundancy without interrupting service. RAID 6 can tolerate two simultaneous failures, and the hot spare adds another layer of protection during the rebuild window.

Exam trap

The trap here is assuming a rebuild requires either a power cycle or a manual controller action, when hot-swap replacement and automatic rebuild are the intended workflow.

Full explanation →
263
MCQeasy

A server fails to boot with an 'Operating System Not Found' error. The BIOS detects the hard drive. What is the MOST likely cause?

A.Failed CPU
B.Incorrect memory timings
C.Overheating
D.Corrupted Master Boot Record
AnswerD

If the MBR is damaged or missing, the BIOS can detect the drive but cannot hand off to the OS bootloader.

Why this answer

Option B is correct because a corrupted Master Boot Record (MBR) can prevent the system from locating the OS loader even when the drive is detected by BIOS. Option A (incorrect memory timings) would typically cause POST failures, not a missing OS message. Option C (failed CPU) would prevent POST entirely.

Option D (overheating) would likely cause shutdowns before OS load.

Full explanation →
264
MCQeasy

A server administrator is troubleshooting a server that fails to boot after a power outage. The server powers on, but no video is displayed, and the administrator hears a series of beeps. Which of the following should the administrator check FIRST?

A.The video card
B.The power supply unit
C.The memory modules
D.The hard drive
AnswerC

Beep codes during POST often indicate memory errors. After a power outage, memory modules can become unseated or damaged due to power surges. The administrator should reseat or replace memory modules and check the motherboard manual for the specific beep code pattern to confirm. This is a common first step for no-video, beeping servers.

Why this answer

Beep codes during POST are a diagnostic tool used by motherboards to indicate hardware failures. Memory errors are a common cause, especially after a power outage that may have caused a surge or physical dislodging. The administrator should consult the motherboard manual for the beep code meaning and then reseat or replace memory modules.

Other components like PSU, video card, or hard drive are less likely to produce beep codes in this scenario.

Exam trap

The trap here is assuming the power supply is at fault because of the power outage, when the beep codes specifically point to a POST hardware error.

Full explanation →
265
MCQmedium

A server administrator is tasked with installing a new PCIe SSD into a server that will be used for a high-transaction database. The server has available PCIe 4.0 x16 slots. Which of the following should the administrator consider to maximize performance?

A.Use a PCIe riser card to install the SSD vertically
B.Configure the slot to run in PCIe 3.0 mode for compatibility
C.Ensure the SSD is installed in a slot with direct CPU lanes rather than chipset lanes
D.Install the SSD in the slot closest to the power supply
AnswerC

PCIe slots connected directly to the CPU provide lower latency and higher bandwidth than those routed through the chipset. For a high-transaction database, minimizing latency is critical. Chipset lanes may share bandwidth with other peripherals, causing contention. Installing the SSD in a CPU-attached slot ensures it gets full PCIe 4.0 x16 bandwidth without competing with other devices.

Why this answer

To maximize performance, the PCIe SSD should be installed in a slot with direct CPU lanes. CPU-attached slots provide dedicated bandwidth and lower latency compared to chipset-attached slots, which may share bandwidth. Physical placement, riser cards, or downgrading to PCIe 3.0 do not improve performance and can introduce bottlenecks or compatibility issues.

Exam trap

The trap here is assuming that any available PCIe slot provides the same performance, when CPU-attached slots are superior for latency-sensitive workloads.

Full explanation →
266
MCQmedium

A server administrator is troubleshooting a Windows Server 2022 that is experiencing performance degradation. The server hosts a critical application that uses a large amount of memory. The administrator notices that the server has 64 GB of RAM installed, but the application is only using 32 GB and the system is paging heavily. Which tool should the administrator use to identify the process causing the paging?

A.Resource Monitor
B.Performance Monitor
C.Event Viewer
D.Task Manager
AnswerA

Resource Monitor provides detailed real-time information about CPU, memory, disk, and network usage, including per-process memory and hard page faults. It can show which processes are causing paging by displaying the number of hard faults per second. This allows the administrator to pinpoint the process responsible for heavy paging and performance degradation.

Why this answer

Resource Monitor provides real-time, per-process details on memory usage and hard page faults, which directly indicate paging activity. By examining the Memory tab and sorting by hard faults, the administrator can identify the process causing excessive paging. Task Manager lacks this granularity, Performance Monitor requires counter setup, and Event Viewer does not show real-time paging data.

Exam trap

The trap here is assuming Performance Monitor is always the best tool for performance analysis, but it is not ideal for immediate, per-process paging identification without prior configuration.

Full explanation →
267
MCQmedium

A technician is tasked with installing a new 2U server into a rack that currently has two servers. The rack is located in a small server room with limited airflow. The technician notices that the rack does not have a blanking panel installed above the new server. What is the most likely consequence of not installing the blanking panel?

A.Hot air recirculation causing overheating of components
B.Increased cooling efficiency due to better air circulation
C.Electromagnetic interference affecting network signals
D.Increased power consumption due to higher fan speeds
AnswerA

In a rack, cold air is drawn from the front and hot air is expelled at the rear. If there are empty spaces, such as above the new server, hot exhaust air can recirculate back to the front intake, especially in a room with limited airflow. This raises the intake temperature, potentially causing components to overheat and leading to thermal throttling or shutdown. Installing blanking panels fills these gaps, preventing recirculation and maintaining proper front-to-back airflow. Thus, this is the most likely consequence.

Why this answer

Blank server rack units allow hot exhaust air to recirculate to the front intake, especially in confined spaces with limited airflow. This raises intake temperatures and can cause overheating. Blanking panels are inexpensive and easy to install; they block these gaps and ensure that cold air from the front is drawn through the servers and exhausted out the back.

This maintains proper cooling and prevents thermal issues. Therefore, the most likely consequence of omitting the blanking panel is hot air recirculation and overheating.

Exam trap

The trap here is assuming that empty rack space improves airflow, when in fact it disrupts the front-to-back cooling path and causes hot air recirculation.

Full explanation →
268
PBQeasy

A small business has purchased a new server to function as a file server for 25 employees. The server is equipped with four 1TB SATA hard disk drives and no hardware RAID controller; the operating system supports software RAID. The business owner's primary requirements are data redundancy to protect against a single drive failure and maximum usable storage capacity, while keeping costs low. The IT technician is tasked with configuring the storage. The technician evaluates the following options: RAID 0 striping across all four drives; RAID 1 mirroring using two pairs (drives 1+2 mirrored, drives 3+4 mirrored), providing two separate volumes; RAID 5 with parity across all four drives; and RAID 10 combining mirroring and striping. The technician needs to recommend the configuration that best meets the requirements. Which of the following should the technician implement?

A.Configure RAID 10 by mirroring two pairs and striping across them, providing 2TB of storage with high performance and redundancy.
B.Configure RAID 5 to stripe data and parity across all four drives, providing 3TB of usable storage with single-drive fault tolerance.
C.Configure RAID 0 to stripe across all four drives for maximum 4TB storage and performance.
D.Configure RAID 1 with two mirrored pairs, providing 2TB of total storage across two volumes, ensuring redundancy.
AnswerB

Why this answer

RAID 5 stripes data and parity across all four drives, providing 3TB of usable storage (4TB raw minus 1TB for parity) and can tolerate a single drive failure. This meets the requirements for data redundancy against a single drive failure and maximum usable storage capacity while keeping costs low, as it uses all four drives efficiently without additional hardware.

Exam trap

SK0-005 often tests the trade-off between usable capacity and redundancy in RAID levels, tricking candidates into choosing RAID 10 for performance when the requirement emphasizes maximum usable storage and cost-effectiveness, or RAID 0 for capacity when redundancy is required.

How to eliminate wrong answers

Option A is wrong because RAID 10 provides only 2TB of usable storage (50% overhead) and requires more drives for the same capacity, which does not maximize usable storage. Option C is wrong because RAID 0 provides no redundancy; a single drive failure results in total data loss. Option D is wrong because RAID 1 with two mirrored pairs provides only 2TB of usable storage and creates two separate volumes, which does not maximize capacity and adds management complexity.

Full explanation →
269
Multi-Selecthard

A server administrator is troubleshooting a server that is experiencing slow performance. The administrator suspects a storage bottleneck. Which of the following tools or commands should the administrator use to identify the storage bottleneck? (Choose two.)

Select 2 answers
A.Performance Monitor (perfmon)
B.traceroute
C.ifconfig
D.netstat
E.iostat
AnswersA, E

Performance Monitor is a Windows tool that can collect and display a wide range of performance counters, including those for physical and logical disks. Counters such as Avg. Disk sec/Transfer and Disk Queue Length can indicate storage bottlenecks. In this scenario, using Performance Monitor to monitor these counters would help identify if the storage subsystem is the bottleneck. It is a standard tool for Windows server troubleshooting.

Why this answer

iostat and Performance Monitor are both capable of providing detailed storage performance metrics. iostat is used on Linux systems to show disk utilization and I/O statistics, while Performance Monitor is used on Windows to track disk counters. Both can help identify if a storage bottleneck exists by showing high disk queue lengths or high average disk response times. Network tools like netstat, traceroute, and ifconfig are not suitable for this task.

Exam trap

The trap here is confusing network troubleshooting tools with storage performance tools, especially since slow performance can have multiple causes.

Full explanation →
270
MCQhard

An administrator manages a Linux-based server hosting a database that contains regulated customer records. The security policy requires that when the server reaches end of life, all data on its solid-state drives be rendered unrecoverable before the drives leave the building. The server will be repurposed to a non-production test role within the same company rather than destroyed. Which action should the administrator take?

A.Run a single-pass overwrite of the entire drive with zeros using dd, then reinstall the operating system.
B.Delete all partitions, create a new partition table, and format the drives with a fresh file system before reuse.
C.Use the drive vendor's secure erase or cryptographic erase utility to reset the drives, then verify the result before reinstalling the operating system for the test role.
D.Encrypt the drives with LUKS using a new key and destroy the old key, keeping the drives encrypted for the test role.
AnswerC

Vendor secure erase commands, including cryptographic erase on self-encrypting drives, invalidate the stored data at the controller level and address over-provisioned and remapped cells that overwrite utilities cannot reach. Verifying the result before reuse confirms the data is gone, and the drives can then safely host the non-production test workload.

Why this answer

Solid-state drives remap logical blocks to physical cells, so overwriting every logical sector does not guarantee that copies in spare or retired cells are gone. A vendor secure erase or cryptographic erase resets the drive's internal encryption key or wipes all cells, including those outside the addressable range, and verification confirms the media is clean before it is reused.

Exam trap

The trap here is assuming that overwriting a solid-state drive works like overwriting a spinning disk, when the flash translation layer hides cells that software writes never touch.

Full explanation →
271
MCQeasy

A technician is replacing a failed hard drive in a server that uses a hardware RAID controller. The server is running Windows Server 2019. After physically installing the new drive, which of the following should the technician do to make the drive part of the array?

A.Assign the drive as a hot spare in the RAID controller BIOS/UEFI.
B.Run the diskpart command to create a new volume.
C.Initialize the disk in Disk Management.
D.Add the drive to the existing array using the RAID controller management utility.
AnswerD

When a drive fails in a hardware RAID array, the replacement drive must be added to the array to initiate a rebuild. This is typically done through the RAID controller's management utility, either in the BIOS/UEFI or via a vendor-specific tool in the OS. The controller will then reconstruct the data onto the new drive. This is the correct and direct method to restore redundancy.

Why this answer

For a hardware RAID array, the replacement drive must be added to the array via the RAID controller's management interface. This triggers the rebuild process, restoring redundancy. Operating system tools like Disk Management or diskpart do not control hardware RAID membership; they operate on logical volumes presented by the controller.

Exam trap

The trap here is assuming that operating system disk management tools can manage hardware RAID arrays, when in fact they only see the logical volumes presented by the RAID controller.

Full explanation →
272
MCQeasy

A technician is monitoring a server with a RAID 5 array that has a hot spare. One of the drives fails. Which of the following actions will occur automatically in this configuration?

A.The server will shut down to protect data
B.The array will continue to operate in degraded mode until manual intervention
C.The data will be mirrored to another server
D.The hot spare will be activated and the array will start rebuilding
AnswerD

With RAID 5 plus a hot spare, the controller detects the failed member and automatically rebuilds parity onto the idle spare drive, restoring redundancy without manual intervention. This satisfies the stem's requirement for an automatic action, unlike configurations lacking a standby disk.

Why this answer

In a RAID 5 array with a hot spare, when a drive fails, the controller automatically activates the hot spare and begins rebuilding the array using parity data from the remaining drives. This restores redundancy without manual intervention, keeping the array operational and protected.

Exam trap

SK0-005 often tests the confusion between hot spare (automatic rebuild) and manual intervention, or between RAID and remote replication.

How to eliminate wrong answers

Option A is wrong because RAID 5 with a hot spare is designed for automatic recovery, not server shutdown. Option B is wrong because a hot spare eliminates the need for manual intervention; the array rebuilds automatically. Option C is wrong because RAID is local disk redundancy, not data mirroring to another server — that would be a remote replication or cluster technology.

Full explanation →
273
MCQmedium

A server administrator is configuring a new server with four 10GbE network interfaces. The server will host a high-traffic web application that requires maximum throughput and redundancy. Which of the following configurations should the administrator implement?

A.Configure all four interfaces in an active-active NIC team using LACP (802.3ad).
B.Enable load balancing using ALB (Adaptive Load Balancing) without switch configuration.
C.Set up NIC teaming in active-passive mode using two interfaces, leaving the other two as standby.
D.Assign each interface to a separate VLAN to distribute traffic across multiple subnets.
AnswerA

Active-active NIC teaming with LACP aggregates all four interfaces into a single logical link, providing both increased throughput and redundancy. If one interface fails, traffic continues on the remaining links. This maximizes bandwidth and ensures high availability. It is the optimal configuration for a high-traffic web application requiring maximum throughput.

Why this answer

LACP (802.3ad) allows multiple network interfaces to be aggregated into a single logical link, providing both increased throughput and redundancy. Active-active mode ensures all interfaces are utilized, maximizing bandwidth. This is ideal for a high-traffic web application.

Other options either do not increase throughput or lack the same level of redundancy and performance.

Exam trap

The trap here is thinking that active-passive teaming increases throughput, when it only provides redundancy.

Full explanation →
274
MCQeasy

A small business runs a single file server that stores contracts and financial records. The owner wants an affordable way to recover individual files that users accidentally delete or overwrite, with the shortest possible recovery time. Which solution BEST fits this requirement?

A.Enable Volume Shadow Copy Service snapshots on the file server so users can restore previous versions themselves.
B.Replicate the file server to a cloud VM every night and restore files from the cloud copy when needed.
C.Implement a RAID 5 array across three disks so that deleted files can be recovered from parity.
D.Configure a nightly full backup to an external USB drive that is stored in the office safe.
AnswerA

VSS snapshots capture point-in-time copies of volumes on a schedule, and the Previous Versions client lets users restore a deleted or overwritten file in seconds without administrator involvement. It is inexpensive because it uses local storage already present, and it directly targets accidental deletion and overwrite with the shortest recovery time.

Why this answer

The need is fast, low-cost recovery of individual files after accidental deletion or overwrite. Volume Shadow Copy Service keeps scheduled point-in-time snapshots on the server and exposes them through Previous Versions, so a user can restore a file in moments without administrator help. Nightly backups or cloud replication restore only to the last run and take longer, while RAID addresses disk failure rather than logical deletion.

Exam trap

The trap here is confusing RAID fault tolerance with backup, when RAID cannot recover a file that was deliberately or accidentally deleted.

Full explanation →
275
MCQmedium

A server fails to power on after a technician replaced the power supply unit (PSU). The technician notices the server's LEDs are off and no fans are spinning. Which of the following should the technician do FIRST?

A.Replace the PSU with another new unit
B.Replace the motherboard
C.Verify the incoming power is within acceptable voltage range
D.Check that the new PSU is properly seated and all power cables are connected
AnswerD

A brand-new PSU with no LEDs or fan activity usually means it is not receiving mains power or is not fully seated. Reseating the unit and verifying the ATX and CPU power connectors is the cheapest, most likely fix before swapping hardware or escalating.

Why this answer

After replacing a PSU, the most common cause of a no-power condition (no LEDs, no fans) is that the new PSU is not fully seated in its slot or that the ATX/EPS power cables (24-pin main, 8-pin CPU, and any PCIe) are not fully connected. Verifying physical connections is a zero-cost, non-destructive first step that resolves the majority of post-replacement failures before assuming a defective part. Only after confirming proper seating and cabling should the technician move on to more invasive diagnostics.

Exam trap

The trap here is the urge to jump to component replacement (PSU or motherboard) instead of following the standard troubleshooting order — always verify the simplest physical cause (seating and cabling) before swapping parts.

How to eliminate wrong answers

Option A is wrong because replacing the PSU again is premature — the technician has not yet verified that the current PSU is actually defective, and swapping parts without confirming the fault is a waste of time and money. Option B is wrong because replacing the motherboard is a drastic, expensive step that should only be considered after ruling out power delivery issues; a completely dead board with no LEDs is far more likely to be a cabling/seating problem than a failed motherboard. Option C is wrong because while verifying incoming voltage is a valid check, it is not the FIRST step — the technician just physically replaced the PSU, so the most probable fault is in the work just performed (seating/cables), not the wall power that presumably worked before.

Full explanation →
276
MCQhard

A datacenter administrator is designing physical security for a new colocation cage that houses servers containing regulated customer data. The cage has a single door, and the administrator wants to ensure that entry is logged and that two authorized staff members must be present for the door to unlock. Which of the following should the administrator implement to meet these requirements?

A.A cipher lock with a shared PIN and a door position sensor
B.A proximity card reader configured for dual custody with an audit trail
C.A biometric reader with a mantrap and a fail-safe electric strike
D.A mechanical key lock with a keyed access log maintained by the security desk
AnswerB

Dual custody, also called two-person integrity, requires two valid credentials to be presented before the door unlocks, and the reader's audit trail logs each entry event. This directly satisfies the requirement that two authorized staff be present and that access is recorded for the regulated cage.

Why this answer

The two-person rule requires an access control method that will not unlock for a single credential. Dual custody configuration on a card reader requires two valid presentations and produces an audit trail, meeting both the presence and logging requirements. Other options either authenticate only one person, rely on shared secrets, or provide no reliable electronic logging.

Exam trap

The trap here is confusing anti-tailgating controls like mantraps or door sensors with true two-person integrity, which requires two separate valid authentications before the lock releases.

Full explanation →
277
MCQmedium

A server administrator needs to deploy a new Windows Server 2022 server that will run a critical application. The application requires high availability and automatic failover. The administrator has two identical physical servers and a SAN. Which Windows Server feature should the administrator implement?

A.Network Load Balancing (NLB)
B.Storage Spaces Direct
C.Distributed File System Replication (DFSR)
D.Failover Clustering
AnswerD

Failover Clustering allows multiple servers to work together to provide high availability for applications and services. With shared storage like a SAN, it can automatically move resources to another node if a failure occurs. This meets the requirement for high availability and automatic failover.

Why this answer

Failover Clustering is the Windows Server feature designed to provide high availability and automatic failover for applications and services. When combined with shared storage such as a SAN, it allows applications to move between nodes seamlessly if a failure occurs. The other options either provide network load balancing, storage virtualization, or file replication, but not application failover.

Exam trap

The trap here is confusing high availability with load balancing or storage replication; only Failover Clustering provides automatic application failover with shared storage.

Full explanation →
278
MCQmedium

A server administrator notices that a database server is experiencing high CPU usage at specific times of the day. After checking logs, the administrator finds that a report generation task scheduled at those times is causing the issue. The task cannot be rescheduled or optimized further. Which of the following actions should the administrator take to ensure the server remains responsive for other applications during peak usage?

A.Add more virtual CPUs to the server's VM.
B.Configure the task to run at a lower priority.
C.Move the database to a server with faster CPU cores.
D.Configure processor affinity to dedicate a core to the database process.
AnswerB

Lowering the task's CPU priority lets the report generation run without starving other applications of processor time during peak periods. The task still completes, but the scheduler deprioritises it, keeping the server responsive since rescheduling and optimisation are ruled out.

Why this answer

Configuring the report generation task to run at a lower priority ensures that the operating system scheduler gives the database and other applications preferential access to CPU resources during peak times. This keeps the server responsive without changing hardware or rescheduling the task. Lowering priority is a non-disruptive, immediate mitigation that addresses the contention directly.

Exam trap

The trap is thinking that adding hardware (more vCPUs or faster cores) is always the answer; the question specifies the task cannot be rescheduled or optimized, so the intended fix is a scheduling/priority adjustment, not a hardware upgrade.

How to eliminate wrong answers

Option A is wrong because adding vCPUs may not solve the issue if the task is CPU-bound and will simply consume the additional resources, and it may not be possible or cost-effective. Option C is wrong because moving to a server with faster cores is a hardware change that may not be feasible and does not guarantee responsiveness if the task still monopolizes CPU. Option D is wrong because dedicating a core to the database process via affinity would actually restrict the database to fewer cores, potentially hurting its performance, and does not address the report task's CPU consumption.

Full explanation →
279
Multi-Selectmedium

A server administrator is troubleshooting a server that is exhibiting symptoms of overheating. The server is in a data center with proper cooling. Which of the following should the administrator check? (Choose two.)

Select 2 answers
A.Power supply wattage
B.Disk fragmentation
C.Airflow direction and blanking panels
D.CPU utilization
E.Fan speeds and operation
AnswersC, E

Proper airflow ensures cool air is drawn from the front and hot air is expelled from the rear. Missing blanking panels can cause recirculation of hot air, leading to overheating. The administrator should verify that all empty drive bays and PCIe slots have blanking panels and that the server is oriented correctly in the rack.

Why this answer

Overheating in a properly cooled data center often stems from server-specific cooling issues. Fan failures or degraded fan speeds directly reduce airflow, while improper airflow due to missing blanking panels or incorrect rack orientation can cause hot air recirculation. Both are common causes that should be checked.

Other factors like power supply wattage, CPU utilization, and disk fragmentation do not directly cause overheating in a cooled environment.

Exam trap

The trap here is focusing on workload or power components instead of the server's internal cooling mechanisms and airflow management.

Full explanation →
280
PBQmedium

A small business plans to deploy a new on-premises server for a virtualization environment. The server will run a hypervisor hosting four virtual machines: a domain controller, a file server, a web application server, and an SQL database server. The business expects moderate workloads and needs to ensure reliable performance and data protection. The procurement department has proposed the following server configuration: single Intel Xeon E-2300 series CPU (4 cores, 8 threads), 16 GB DDR4 ECC RAM, two 1 TB SATA hard drives configured in RAID 1, a single 1 GbE network interface, and a 500W power supply. The IT manager reviews the proposal and identifies several deficiencies that will not meet the expected workload requirements. Which of the following changes to the server configuration is the MOST important to address first to ensure the VMs can run effectively?

A.Increase the RAM to at least 32 GB to support the four VMs.
B.Replace the SATA hard drives with SSDs and configure RAID 10 for better I/O performance.
C.Add a second 1 GbE network interface and configure NIC teaming for redundancy.
D.Upgrade the CPU to a model with at least 8 cores and 16 threads.
AnswerA

Why this answer

With only 16 GB of RAM, running four VMs (domain controller, file server, web app server, and SQL database server) is not feasible — the hypervisor itself consumes memory, and each VM needs a baseline allocation. SQL Server alone typically requires 8+ GB, and a domain controller plus file/web servers easily consume the rest, so insufficient RAM is the most immediate blocker to running the VMs effectively.

Exam trap

SK0-005 often tests prioritization: candidates may focus on storage or CPU upgrades because they sound more 'performance-oriented,' but the question asks for the MOST important first fix, which is the resource that prevents VMs from running at all — RAM.

How to eliminate wrong answers

Option B is wrong because while SSDs and RAID 10 would improve I/O, the question asks for the MOST important change first; without adequate RAM, the VMs cannot even run, making storage a secondary concern. Option C is wrong because NIC teaming provides redundancy and some throughput improvement, but a single 1 GbE link is generally sufficient for moderate workloads and does not prevent VMs from running. Option D is wrong because while 4 cores/8 threads is modest, it can still host four moderate VMs; RAM exhaustion is a harder limit that causes swapping and VM failures.

Full explanation →
281
PBQhard

A company has a virtualized server environment with two physical hosts running VMware vSphere. Each host has 2 CPUs, 128GB RAM, and 6x 600GB SAS drives in RAID 10. Recently, host A experienced a power surge that caused it to shut down abruptly. After restarting, the host boots but the RAID controller reports that one of the drives in the RAID 10 array is missing. The administrator has a replacement drive of the same model. What should the administrator do first?

A.Use the RAID controller utility to set the new drive as a hot spare and then reboot
B.Replace the missing drive with the new one and allow the RAID controller to automatically rebuild
C.Check the RAID controller logs to determine if the drive is faulty or if it's a connection issue, and then reseat the drive or replace cables before replacing
D.Rebuild the entire RAID array after backing up data from the surviving drives
AnswerC

Why this answer

Before replacing a drive, the administrator should check the RAID controller logs to determine whether the drive is actually faulty or if the issue is a connection problem (loose cable, backplane, or power surge damage). Reseating the drive or replacing cables is non-destructive and may resolve the issue without unnecessary drive replacement. Replacing a drive that is not actually faulty can trigger an unnecessary rebuild and risk array degradation.

Exam trap

The trap is jumping to hardware replacement because the symptom says 'drive missing' — the exam tests whether you verify the root cause (cable, backplane, or transient fault) before replacing a drive, since unnecessary replacement can cause more harm than good.

How to eliminate wrong answers

Option A is wrong because setting the new drive as a hot spare does not address the missing drive and may cause the controller to rebuild onto the hot spare while the original drive is still present or recoverable, wasting a drive and risking data. Option B is wrong because replacing the drive immediately assumes the drive is faulty without verifying — if the issue is a cable or backplane, the new drive will also appear missing and the array remains degraded. Option D is wrong because rebuilding the entire array from scratch destroys data and is a drastic, unnecessary step when the array is still functional in a degraded state.

Full explanation →
282
MCQeasy

A small business has a limited budget and can tolerate up to 72 hours of downtime in the event of a disaster. Which type of disaster recovery site would be most cost-effective?

A.Cloud-based DR with pay-as-you-go.
B.Cold site with no pre-configured hardware.
C.Hot site with real-time replication.
D.Warm site with pre-installed hardware but no data.
AnswerA

Cloud DR allows the business to pay only when resources are consumed, eliminating upfront investment and ongoing idle hardware costs, ideal for a limited budget and relaxed RTO.

Why this answer

Option D is correct because a cloud-based DR site with pay-as-you-go model requires no upfront investment in hardware and can be spun up as needed, making it cost-effective for a business with a high downtime tolerance. Option A is wrong because a hot site is the most expensive, with real-time replication. Option B is wrong because a warm site requires pre-installed hardware that incurs ongoing costs, even if data is not up-to-date.

Option C is wrong because a cold site still requires occasional maintenance and may have hidden costs; modern cloud DR can be cheaper and more flexible.

Full explanation →
283
MCQmedium

A financial services firm requires a disaster recovery site that provides immediate failover with zero data loss. Which type of site should they implement?

A.A warm site with asynchronous replication.
B.A cloud-based site with daily snapshots.
C.A cold site with tape restoration.
D.A hot site with synchronous replication.
AnswerD

Synchronous replication ensures data is mirrored in real-time, enabling immediate failover with no data loss.

Why this answer

Option A is correct because a hot site with synchronous replication ensures that data is written to both primary and secondary sites simultaneously, providing zero RPO and immediate failover. Option B (warm site) requires some time to bring systems online, leading to downtime and potential data loss. Option C (cold site) involves significant setup time and last-known-good backup restoration.

Option D (cloud with daily snapshots) introduces an RPO of up to 24 hours, not zero data loss.

Full explanation →
284
MCQmedium

A technician is preparing to install a new server that will use a hardware RAID controller. The server will host a database requiring high write performance and redundancy. Which of the following RAID levels should the technician configure to meet these requirements?

A.RAID 1
B.RAID 0
C.RAID 5
D.RAID 10
AnswerD

RAID 10 combines mirroring and striping, offering both redundancy and high performance for both reads and writes. It is ideal for write-intensive database workloads because data is striped across mirrored pairs, reducing parity overhead. This meets the requirements for high write performance and redundancy.

Why this answer

RAID 10 provides the best combination of high write performance and redundancy for a database. It stripes data across mirrored pairs, eliminating parity calculations that slow writes in RAID 5. While RAID 1 offers redundancy, its write performance is lower.

RAID 0 lacks redundancy, and RAID 5 has write penalties. Thus, RAID 10 is the appropriate choice.

Exam trap

The trap here is choosing RAID 5 for its balance of performance and redundancy, but it has significant write penalties that RAID 10 avoids.

Full explanation →
285
MCQmedium

A server administrator is troubleshooting a Linux server that is experiencing slow disk performance. The server uses a hardware RAID controller with a write-back cache. The administrator notices that the disk write throughput is significantly lower than expected during peak hours. Which of the following is the MOST likely cause?

A.The RAID controller's battery backup unit (BBU) has failed, causing the controller to switch to write-through mode.
B.The RAID array is rebuilding, consuming disk I/O resources.
C.The server's power supply is insufficient, causing the disks to spin down intermittently.
D.The file system is fragmented, causing excessive seek times.
AnswerA

A failed BBU forces the RAID controller to disable write-back caching and default to write-through mode to prevent data loss during a power failure. This dramatically reduces write performance because each write must be committed to disk before completion. The scenario describes a sudden drop in write throughput, which is consistent with this behavior.

Why this answer

A failed battery backup unit on a RAID controller forces the controller to disable write-back caching, switching to write-through mode. This ensures data integrity but severely impacts write performance because each write must be written directly to disk. The scenario's symptom of low write throughput during peak hours aligns with this behavior.

Other options like fragmentation or rebuild would not specifically target write performance or would present additional symptoms.

Exam trap

The trap here is assuming that any performance degradation is due to disk fragmentation or rebuild, overlooking the specific impact of a failed BBU on write caching.

Full explanation →
286
MCQhard

A retail company runs its order-processing database on a physical server in a colocation facility. Management has approved a hot site contract for disaster recovery. During a tabletop exercise, the CIO asks the administrator to explain what the hot site contract actually provides on day one of a declared disaster. Which statement is accurate?

A.The hot site is a reserved space with power and cooling only, and the company must ship in servers and storage before recovery can begin.
B.The hot site becomes the permanent production data center after a disaster, and the original facility is decommissioned.
C.The hot site guarantees zero data loss because the provider continuously replicates the production database to the alternate facility.
D.The hot site provides pre-installed hardware, power, and network connectivity, but the company must still restore its own data and configure the operating systems.
AnswerD

A hot site is a fully equipped alternate facility with servers, storage, environmental controls, and network links already in place and ready to accept workloads. What it does not inherently contain is the organization's current production data or its specific OS and application configuration. The recovery team must still restore the latest backups and apply configuration, which is why a hot site shortens recovery time but does not eliminate the need for tested restore procedures.

Why this answer

Hot, warm, and cold sites differ in how much infrastructure is pre-provisioned. A hot site includes hardware, power, cooling, and network connectivity ready to run workloads, so recovery time is measured in hours, but the organization's data, operating systems, and application configuration remain its own responsibility to restore. Understanding that boundary is essential for setting realistic recovery time objectives and for budgeting replication and restore tooling separately.

Exam trap

The trap here is conflating a hot site's ready infrastructure with automatic data replication, when replication is a separate service the organization must design and contract.

Full explanation →
287
MCQeasy

A server administrator is setting up a new Windows Server 2022 server that will host a database. The server has four 1 TB NVMe drives. The administrator wants to maximize performance and provide redundancy against a single drive failure. Which RAID level should the administrator implement?

A.RAID 5
B.RAID 0
C.RAID 10
D.RAID 6
AnswerC

RAID 10 combines mirroring and striping, providing both redundancy and high performance for both reads and writes. With four drives, it can tolerate a single drive failure (and potentially more, depending on which drives fail) while maintaining fast access. This is ideal for database workloads requiring speed and fault tolerance.

Why this answer

RAID 10 offers the best combination of performance and redundancy for a database server. It mirrors data across pairs of drives and stripes across those pairs, delivering fast reads and writes while tolerating drive failures. RAID 0 lacks redundancy, RAID 5 has write penalties, and RAID 6 adds further parity overhead, making RAID 10 the optimal choice.

Exam trap

The trap here is assuming that RAID 5 or RAID 6, which offer redundancy, also provide top performance; in reality, parity calculations slow writes significantly.

Full explanation →
288
MCQhard

A server administrator is configuring a Linux server to use iSCSI storage. The server has two network interfaces, eth0 and eth1, connected to the same switch. The administrator wants to ensure that iSCSI traffic is isolated from regular network traffic and that the iSCSI initiator uses both interfaces for redundancy and increased throughput. Which of the following should the administrator implement?

A.Configure VLAN tagging on eth0 and eth1 for iSCSI traffic and use multipathing with both interfaces.
B.Configure link aggregation (bonding) on eth0 and eth1 and assign the iSCSI traffic to the bond interface.
C.Create a bridge interface between eth0 and eth1 and assign the iSCSI traffic to the bridge.
D.Enable jumbo frames on eth0 and eth1 and configure a single iSCSI session over eth0.
AnswerA

VLAN tagging isolates iSCSI traffic on a separate VLAN, preventing interference from regular network traffic. Using multipathing with both interfaces provides redundancy and can increase throughput by utilizing multiple paths to the storage. This combination meets both requirements: isolation and multipath I/O.

Why this answer

To isolate iSCSI traffic and provide redundancy and throughput, the administrator should use VLAN tagging to separate iSCSI traffic on its own VLAN, and configure multipathing with both network interfaces. This allows the iSCSI initiator to use multiple paths, improving performance and fault tolerance, while keeping storage traffic separate from regular network traffic.

Exam trap

The trap here is confusing link aggregation with multipathing; bonding interfaces does not provide the same benefits for iSCSI as true multipathing and does not isolate traffic.

Full explanation →
289
MCQmedium

A datacenter administrator must protect a rack of dual-power-supply servers against a single PDU failure. The rack currently has two rack PDUs, each fed from a separate upstream branch circuit, and each server has both power supplies connected. The administrator wants to confirm that the configuration meets the intended redundancy level before adding more servers. Which action should the administrator take?

A.Connect only one power supply from each server and label the unused supply as reserved for future capacity, because dual-corded servers do not need both supplies connected.
B.Connect both power supplies from each server to the same PDU so that the load is balanced across one device, and rely on the second PDU as a cold spare.
C.Connect one power supply from each server to PDU A and the other power supply to PDU B, then verify that each PDU is fed from a different upstream branch circuit.
D.Connect one power supply from each server to PDU A and the other to PDU B, but leave both PDUs connected to the same upstream branch circuit to simplify cabling.
AnswerC

This is correct because dual-corded servers achieve true redundancy only when the two power supplies are split across independent PDUs and those PDUs are fed from separate upstream circuits. If both PDUs eventually trace to the same breaker or UPS, a single upstream failure can still take down both power feeds.

Why this answer

True rack-level power redundancy requires two independent paths from the server to the upstream power source. Each dual-corded server should have one supply on each PDU, and those PDUs must be fed from separate branch circuits. Otherwise a single breaker or feed failure can still interrupt both power supplies and cause an outage.

Exam trap

The trap here is assuming that connecting two power cords to two PDUs is enough, without checking whether both PDUs share the same upstream circuit.

Full explanation →
290
MCQhard

A server administrator is troubleshooting a Linux server that is experiencing intermittent network connectivity issues. Users report that connections to the server sometimes time out, and the administrator notices that the network interface card (NIC) is showing a high number of CRC errors and frame errors. Which of the following is the MOST likely cause?

A.An incorrect IP address configuration on the server.
B.The network switch port is configured for the wrong VLAN.
C.A duplex mismatch between the server NIC and the switch port.
D.A faulty or improperly terminated network cable.
AnswerD

CRC errors and frame errors typically indicate physical layer problems, such as a damaged cable, poor termination, or electromagnetic interference. These errors occur when frames are corrupted in transit, leading to retransmissions and timeouts. The most likely cause is a cabling issue, and replacing or re-terminating the cable should resolve the problem.

Why this answer

CRC and frame errors are indicators of physical layer issues, most commonly faulty cabling or connectors. The administrator should inspect and replace the network cable, and verify that the connectors are properly terminated. This should eliminate the errors and restore stable connectivity.

Exam trap

The trap here is attributing network errors to logical misconfigurations like IP or VLAN, when the specific error types point to physical layer problems.

Full explanation →
291
MCQhard

A server administrator is troubleshooting a Windows Server host that runs a database. Users report slow queries, and Performance Monitor shows sustained disk queue length above 2 with average disk sec/transfer over 25 ms on the data volume, while CPU and memory remain well below capacity. The volume resides on a hardware RAID 5 array of 7200 RPM SATA drives. Which of the following is the MOST likely cause?

A.CPU throttling due to thermal limits on the database server
B.Insufficient IOPS and write penalty from the RAID 5 array of slow SATA drives
C.Memory leak in the database process causing excessive paging
D.Network congestion between the database server and its clients
AnswerB

Sustained disk queue length above 2 with transfer latency over 25 ms indicates the storage subsystem cannot keep up with demand. A RAID 5 array of 7200 RPM SATA drives has limited random IOPS and incurs a read-modify-write penalty for small writes, which matches database workload patterns. CPU and memory being idle confirms the bottleneck is storage.

Why this answer

The measured latency and queue depth on the data volume, combined with idle CPU and memory, isolate the bottleneck to storage. A RAID 5 array built on 7200 RPM SATA drives delivers modest random IOPS and penalizes small writes with read-modify-write operations, which is exactly the pattern a database generates. Upgrading to SSDs or a RAID 10 layout addresses the root cause.

Exam trap

The trap here is attributing slow database queries to the application, CPU, or network when the disk counters already show the storage subsystem is the constrained resource.

Full explanation →
292
MCQmedium

A server administrator is troubleshooting a server that is experiencing slow response times. After logging in, the administrator runs the command 'iostat -x 5' on the Linux server and observes that the %util for the sda device is consistently at 100%. Which of the following is the MOST likely cause?

A.The CPU is overwhelmed and cannot process I/O requests fast enough.
B.The network interface card is dropping packets, causing retransmissions.
C.The server's memory is insufficient, causing excessive swapping to disk.
D.The disk is experiencing a high number of read/write operations, causing a bottleneck.
AnswerD

A %util of 100% indicates that the disk is fully utilized and cannot keep up with the I/O requests. This saturation leads to queuing and slow response times. The most likely cause is that the disk is the bottleneck due to excessive I/O demand, requiring investigation into which processes are generating the load.

Why this answer

A %util of 100% on a disk device means the disk is continuously busy servicing I/O requests, indicating a disk bottleneck. The most likely cause is that the disk cannot handle the current I/O load, whether from a specific process or overall system activity. Further investigation with tools like iotop can identify the culprit.

Exam trap

The trap here is misinterpreting %util as a CPU metric or attributing it to network issues, when it specifically measures disk utilization.

Full explanation →
293
MCQmedium

A server administrator is configuring a new Windows Server 2022 failover cluster with two nodes. The cluster will host a highly available file server role. The administrator needs to ensure that the file server role can automatically fail over to the other node if the active node fails. Which of the following should the administrator configure?

A.Highly available file server role in Failover Cluster Manager
B.Cluster Shared Volume (CSV)
C.File Server role with a file share witness
D.Distributed File System Replication (DFSR)
AnswerA

Configuring a highly available file server role in Failover Cluster Manager creates a clustered file server instance that can fail over between nodes. This role includes the necessary resources, such as IP address, network name, and shared storage, and enables automatic failover based on cluster policies. This is the correct method to provide high availability for a file server role.

Why this answer

The correct answer is to configure a highly available file server role in Failover Cluster Manager. This creates a clustered role that includes all necessary resources and enables automatic failover between cluster nodes. Other options like CSV, file share witness, or DFSR serve different purposes and do not directly provide automatic failover for a file server role.

Exam trap

The trap here is confusing data replication or quorum configuration with the actual high-availability role configuration that enables failover.

Full explanation →
294
MCQhard

A company has a Windows Server 2022 server running Hyper-V. The server hosts a virtual machine (VM) that runs a database. The VM is configured with 16 GB of static memory. Users report that the database performance is slow during peak hours. The administrator notices that the Hyper-V host has 32 GB of RAM and is running three other VMs, each with 8 GB of static memory. The host is experiencing high memory pressure. Which of the following should the administrator implement to improve performance?

A.Enable Hyper-V Replica for the database VM.
B.Configure a virtual NUMA topology for the database VM.
C.Enable Dynamic Memory on the database VM.
D.Add more physical RAM to the host.
AnswerD

The host has 32 GB of RAM, and the total static memory assigned to VMs is 16 GB + 3*8 GB = 40 GB, which exceeds physical RAM. This overallocation causes high memory pressure. Adding more RAM would provide sufficient memory for all VMs, improving performance.

Why this answer

The host is overallocated: 16 GB + 3*8 GB = 40 GB of static memory assigned, but only 32 GB physical. This causes high memory pressure and slow performance. Adding more physical RAM is the direct solution to eliminate the shortage.

Exam trap

The trap here is focusing on VM-level memory optimizations instead of addressing the host's physical memory shortage.

Full explanation →
295
MCQhard

A datacenter technician is preparing to install a new 2U server that uses a hardware RAID controller with a battery-backed write cache. The server will run a transactional database. The technician wants to ensure the write cache remains enabled during a power loss. Which of the following should the technician verify FIRST?

A.That the RAID controller's battery or supercapacitor is installed, charged, and reported healthy in the controller management utility.
B.That the server's redundant power supplies are connected to two separate PDUs on different utility feeds.
C.That the database is configured with a RAID 10 volume rather than RAID 5 to reduce write amplification.
D.That the operating system write cache is disabled at the volume level to prevent double caching.
AnswerA

A battery-backed or supercapacitor-backed write cache only stays enabled when the cache protection module is present and healthy. If the battery is missing, discharged, or failed, the controller switches to write-through mode to protect data, which severely degrades database write performance. Verifying the cache protection module first confirms the cache can be safely used.

Why this answer

Hardware RAID controllers with battery-backed or supercapacitor-backed write cache enable write-back mode only while cache protection is healthy. If the protection module is missing, charging, or failed, the controller defaults to write-through, which protects data but slows database writes. Confirming the cache protection module is installed and healthy is the first step before expecting write-back performance.

Exam trap

The trap here is focusing on power feed redundancy or RAID level while overlooking that the controller itself will disable write-back caching whenever cache protection is unhealthy.

Full explanation →
296
MCQhard

A company runs a critical web application on a Windows Server 2022 with IIS. The application uses a SQL Server 2019 database on a separate server. Users report that the application sometimes becomes unresponsive for 30–60 seconds, then recovers. Performance Monitor on the web server shows a spike in ASP.NET Requests Queued and a drop in Requests/Sec during the incidents. The database server shows no performance issues. Which action should the administrator take to resolve the intermittent unresponsiveness?

A.Analyze and optimize the application code to eliminate blocking calls and improve asynchronous processing.
B.Configure the application pool to use a dedicated identity with higher privileges.
C.Enable Web Garden mode by setting the maximum worker processes to 4.
D.Increase the ASP.NET request queue limit in the application pool settings.
AnswerA

The queued requests and drop in throughput indicate that the application is not processing requests efficiently, often due to blocking operations such as synchronous database calls or long‑running tasks. Optimizing code to use asynchronous patterns and reducing blocking calls frees up threads to handle more requests, directly resolving the intermittent unresponsiveness.

Why this answer

Intermittent unresponsiveness with spikes in ASP.NET Requests Queued and reduced Requests/Sec typically indicates thread pool starvation caused by blocking operations in the application. Optimizing code to use asynchronous calls and eliminating blocking I/O allows the thread pool to handle more concurrent requests, resolving the queuing and restoring responsiveness. Other options do not address the root cause.

Exam trap

The trap here is assuming that increasing queue limits or adding worker processes will solve performance issues, when the real problem is inefficient application code causing thread pool starvation.

Full explanation →
297
MCQhard

A Linux server is experiencing random reboots. The administrator checks the system logs and finds multiple entries indicating a machine check exception (MCE). The server is running the latest kernel and all firmware is up to date. Which of the following is the MOST likely cause of the reboots?

A.Overheating due to failed cooling fans.
B.A faulty power supply unit.
C.Incorrect kernel parameters for memory management.
D.Failing CPU or memory hardware.
AnswerD

Machine check exceptions (MCEs) are hardware errors reported by the CPU, often caused by faulty memory, CPU, or motherboard components. Random reboots with MCE entries in logs strongly indicate a hardware failure. Up-to-date firmware and kernel do not fix physical hardware degradation, so replacing or testing components is necessary.

Why this answer

Machine check exceptions are hardware-level errors reported by the CPU, most commonly due to failing RAM or CPU. Random reboots with MCE logs indicate a hardware fault that firmware updates cannot resolve. The correct course is to run hardware diagnostics and replace the faulty component.

Exam trap

The trap here is attributing MCEs to software or power issues, when they are definitive hardware error reports from the CPU.

Full explanation →
298
Multi-Selectmedium

A technician is preparing to add a second processor to a dual-socket server that currently has one CPU installed. The server will run a memory-intensive virtualization workload. Which of the following steps are required for the upgrade to function correctly? (Choose two.)

Select 2 answers
A.Move all existing DIMMs to the slots belonging to the second processor to balance the load.
B.Reinstall the operating system so it can detect the additional processor sockets.
C.Populate the memory slots associated with the new processor according to the server's population rules.
D.Verify that both processors are the same model, stepping, and TDP as supported by the server's firmware.
E.Disable hyper-threading in firmware so the second processor's cores are recognized.
AnswersC, D

Each processor has its own integrated memory controller and directly attached DIMM slots. If the slots for the second CPU are left empty or populated in the wrong order, the system may fail to boot or lose memory capacity and interleaving benefits, so the population rules must be followed.

Why this answer

Adding a second physical processor requires a matched CPU that the firmware supports, and it requires memory to be installed in the DIMM slots wired to that processor's integrated memory controller. Without matched CPUs the system may not POST, and without populated local memory the new socket cannot operate correctly.

Exam trap

The trap here is treating the CPU as a drop-in part and overlooking that each socket owns its own memory channels that must be populated.

Full explanation →
299
MCQmedium

A technician is adding a second CPU to a previously single-socket 2U server. The server boots but the operating system reports only half of the newly installed CPU's memory channels as populated, and total RAM is lower than expected. Which of the following is the MOST likely cause?

A.The system BIOS requires a firmware downgrade to recognize the second CPU's memory controller.
B.The second CPU's integrated memory controller failed and must be replaced under warranty.
C.The DIMMs for the second CPU were not populated according to the memory population guidelines for that socket.
D.The second CPU was installed in the wrong socket orientation and is running at reduced capacity.
AnswerC

Each CPU owns its own memory controller and DIMM slots. If the second socket's DIMMs are not installed in the slots and order the platform's population rules require, the system disables the unpopulated channels, so the OS sees fewer channels and less total RAM. Following the vendor population table per socket resolves the shortfall.

Why this answer

A second physical CPU brings its own memory controller and DIMM slots, and those slots must be filled following the platform's population rules. When slots are left unpopulated in the required order, the corresponding channels are disabled and the OS reports less memory and fewer channels than installed. Verifying the vendor population table for the second socket restores full capacity.

Exam trap

The trap here is assuming a working CPU automatically enables all its memory channels regardless of how the DIMMs are seated.

Full explanation →
300
MCQhard

An administrator manages a two-node Windows Server 2022 cluster that hosts a critical SQL Server instance. The cluster uses shared storage on a SAN. During a failover test, the administrator observes that the SQL Server role takes several minutes to come online on the surviving node, exceeding the recovery time objective. The application team confirms the database itself starts quickly once the disk resources are available. Which factor should the administrator investigate first?

A.The size of the SQL Server transaction log file on the shared volume.
B.The number of processor cores assigned to the virtual machine hosting the SQL Server instance.
C.The cluster quorum configuration and whether a file share witness is reachable.
D.The time required for the SAN to revoke and re-present disk ownership to the surviving node, including any persistent reservation cleanup.
AnswerD

In a shared-storage cluster, disk resources must be released by the failed node and claimed by the surviving node before the application can start. That process involves SCSI-3 persistent reservations, path revalidation, and sometimes storage array failover behavior. When the database itself starts quickly, the delay almost certainly sits in this storage ownership transition, making it the first place to measure and tune.

Why this answer

When a clustered role fails over, the surviving node must first acquire the shared disk resources, which involves releasing and re-establishing SCSI-3 persistent reservations and revalidating paths to the storage array. Only after those resources are online can dependent resources such as the SQL Server instance start. If the application starts quickly once disks are present, the recovery time objective miss originates in the storage handoff, so that interval should be measured before tuning anything else.

Exam trap

The trap here is focusing on database or server tuning when the evidence shows the delay occurs before the application resource can start, in the shared storage ownership transition.

Full explanation →
Page 3

Page 4 of 6

Page 5

All pages

123456

Practice SK0-005 by domain

Target a specific domain to shore up weak areas.

server-administrationserver-hardware-installation-managementsecurity-disaster-recoverytroubleshooting
See all domains with question counts →