Courseiva

SK0-005 · domain

scenario questions

Practise CompTIA Server+ SK0-005 scenario questions practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

414 questions97 easy170 medium147 hard

Focused practice

Practice scenario questions questions

Scored sessions drawing only from this domain — pick a length below.

Start 20-question practice test →

What this domain covers

What to know about scenario questions

scenario questions questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common scenario questions exam traps

  • ▸Answering from memory before reading the full scenario.
  • ▸Missing a constraint such as cost, availability, security, scope or command context.
  • ▸Choosing a broad answer when the question asks for the most specific fix.
  • ▸Ignoring why the wrong options are tempting.

Question index

All scenario questions questions (414)

Click any question to see the full explanation, or start a practice session above.

1

A server administrator notices that a recently installed PCIe network card is not being recognized by the operating system. The server is running Windows Server 2019. The administrator has verified that the card is securely seated and that the slot is enabled in the BIOS. Which of the following should the administrator try FIRST to resolve the issue?

Easy
2

A technician is installing a new server in a rack. The server's rail kit includes both a static rail and a sliding rail option. The server will be frequently accessed for maintenance, and the technician needs to pull it out of the rack to service internal components. Which of the following rail types should the technician use?

Easy
3

An administrator needs to configure a critical web service on a Linux server to automatically restart if it crashes unexpectedly. The server uses systemd. Which of the following best accomplishes this goal?

Medium
4

A server administrator is replacing a failed hot-swap SAS drive in a RAID 5 array. The drive bay is labeled with the failed drive's slot number, and the array is currently degraded. The administrator pulls the drive but realizes the replacement drive is a 4TB SAS drive while the failed unit was 2TB, and the remaining drives in the array are 2TB. The controller supports online capacity expansion but the array is not configured for it. Which of the following should the administrator do?

Hard
5

A server administrator is troubleshooting a Linux server that is experiencing slow disk performance. The administrator runs `iostat -x 1` and sees that the `%util` value for `/dev/sda` is consistently above 98%, while the `await` for write requests is over 500 ms. The server hosts a database that performs many small random writes. Which of the following is the MOST likely cause?

Medium
6

A company runs a critical application on a physical server with four 15,000 RPM SAS drives in a hardware RAID 5 array. Users report that write performance has degraded significantly during peak hours. Performance monitoring shows high disk queue length. The administrator wants to improve write performance without sacrificing redundancy or adding more drives. Which of the following should the administrator implement?

Medium
7

A company is implementing a disaster recovery plan and needs to determine the maximum acceptable amount of data loss measured in time. The business can tolerate losing up to 4 hours of transactions. Which metric should the administrator use to define this requirement?

Medium
8

A technician needs to install a PCIe 4.0 x16 network adapter into a server that has a single physical CPU. The server has three PCIe 4.0 x16 slots: slot 1 is connected directly to the CPU, slots 2 and 3 are connected through the chipset. The adapter requires maximum bandwidth and low latency. Which slot should the technician use?

Medium
9

A server administrator is configuring a Linux server that runs a custom application. The application must start automatically at boot and be restarted if it crashes. The administrator creates a systemd service unit file. After enabling the service, it fails to start, and journalctl shows 'status=203/EXEC'. What is the most likely cause?

Hard
10

A technician is adding a second CPU to a dual-socket 2U server that previously ran with a single processor. After installing the matching CPU and heatsink, the server POSTs but the operating system only reports half of the newly installed memory, and the BIOS memory map shows several DIMM slots as unpopulated. Which of the following is the MOST likely cause?

Medium
11

A server administrator is replacing a failed hot-swap SAS hard drive in a production server that uses a hardware RAID controller. The drive is part of a RAID 5 array. After physically swapping the drive, the administrator notices the drive activity LED is blinking green but the array status still shows 'degraded' in the management software. Which of the following is the MOST likely cause?

Medium
12

A database server running on a Linux VM has started experiencing periodic crashes. The VM is hosted on an ESXi hypervisor. The system logs show entries: 'kernel: Out of memory: Kill process 12345 (mysqld) score 700 or sacrifice child'. The VM has 16GB RAM allocated and no memory overcommitment on the host. The DBA reports that the database workload hasn't increased. Which of the following actions should be taken FIRST to diagnose the issue?

Hard
13

A systems administrator is configuring a new server that will host a mission-critical database. The server has two redundant power supplies. The organization's data center has two separate power circuits, each backed by a different UPS. Which of the following power configurations provides the BEST redundancy?

Medium
14

A Linux server administrator notices that the /var partition is 95% full. To free space quickly, the administrator decides to delete old log files. Which of the following commands should the administrator use to find and delete log files older than 30 days in the /var/log directory?

Medium
15

A server administrator is troubleshooting a Linux server that boots normally but takes over 20 minutes to reach a login prompt, while CPU, memory, and disk utilization remain low after boot. Running systemd-analyze blame shows a single unit consuming 18 minutes. Which of the following commands will BEST identify what that unit is waiting on?

Medium
16

An organization uses a cloud-based backup solution with immutable storage to protect against ransomware. However, after a recent attack, an attacker with stolen administrator credentials was able to delete the backup data. Which of the following BEST explains why the backups were deleted?

Hard
17

A system administrator manages a collection of Linux web servers that store custom application configurations in /etc/app/config. The configuration changes frequently, and the admin needs to implement an automated daily backup solution that captures the directory at 1 AM, compresses it with gzip, and retains the last 5 days of backups on a central NFS-mounted backup volume /mnt/backups. The solution should be simple and use standard tools. Which approach best meets these requirements?

Medium
18

A security administrator at a financial services firm is implementing a defense-in-depth strategy for a new Windows Server 2022 file server that will host sensitive client data. The administrator needs to ensure that data at rest on the server's hard drives is protected in a way that does not require users to enter separate credentials and does not rely on the operating system's file permissions. Which technology should the administrator implement?

Medium
19

A server administrator is troubleshooting a server that is experiencing unexpected shutdowns. The administrator reviews the system logs and finds Event ID 6008 in the Windows System log, indicating an unexpected shutdown. The server has a redundant power supply configuration, and both power supplies are connected to different PDUs. The administrator checks the PDUs and finds no power outages. Which of the following is the MOST likely cause of the unexpected shutdowns?

Medium
20

A server administrator is configuring RAID for a new file server that will store large media files. The server has six 4TB SAS drives and a hardware RAID controller with 1GB cache and battery backup. The administrator needs a RAID level that provides fault tolerance for up to two drive failures and maximizes usable capacity. Which of the following should the administrator choose?

Medium
21

A server administrator is installing a new internal tape drive into a server that will be used for backups. The server has an available parallel SCSI (SPI) interface on the motherboard. The administrator connects the tape drive to the SCSI bus but forgets to install a terminator on the last device. Which of the following is the MOST likely result?

Hard
22

A Linux server administrator notices that a server's root filesystem is running out of space. The administrator runs 'df -h' and sees that / is 100% full, but 'du -sh /*' shows that the total size of all directories is only 20 GB, while the filesystem is 100 GB. Which of the following is the MOST likely cause?

Hard
23

A company's datacenter is in a region prone to flooding. Management requires that a copy of nightly backups be stored where a regional flood cannot destroy both the production data and the backup copy, and that the copy be retrievable within 24 hours. Which strategy BEST meets these requirements?

Medium
24

A research institute stores regulated genomic data on a Windows Server 2022 file server. The IT director wants data at rest encrypted so that a stolen drive cannot be read, but the lab's instrument control software writes directly to the volume and cannot tolerate any interruption during long sequencing runs. The server has a TPM 2.0 module and a separate recovery appliance. Which solution should the administrator implement?

Hard
25

A server administrator is restoring a file server from a full backup taken 7 days ago and incremental backups taken daily. The restoration fails with an error about missing catalog files. What is the most likely cause?

Hard
26

Refer to the exhibit. A disaster recovery test reveals the following timeline for a critical application. The business requires an RTO of 2 hours. Which of the following actions would MOST effectively reduce the RTO to meet the requirement?

Hard
27

A company runs a critical SQL Server database on a physical server with a RAID 10 array. The database is backed up nightly to a local disk and replicated to a remote site every four hours. A ransomware attack encrypts the local database files and the local backup disk, but the remote replication target is unaffected. The administrator needs to restore service with the least data loss. Which recovery approach should the administrator use?

Hard
28

An organization requires a disaster recovery site that can be operational within 24 hours after a disaster declaration, with critical data replicated on a regular basis, but not necessarily real-time. Which type of site should they implement?

Medium
29

A system administrator is configuring a backup schedule for a critical database server that must be available 24/7. The company's recovery point objective (RPO) is 1 hour and recovery time objective (RTO) is 4 hours. The database files change frequently, but the operating system and application binaries rarely change. Which of the following backup strategies would BEST meet these requirements while minimizing storage and backup window impact?

Hard
30

A server administrator is configuring a RAID array on a new server with six 4 TB SAS drives. The server will host a large email archive that requires maximum usable capacity and can tolerate the loss of up to two drives without data loss. Write performance is not critical, but read performance should be adequate. Which RAID level should the administrator choose?

Hard
31

An administrator is configuring a server to use a hardware security module (HSM) for disk encryption key storage. The administrator wants to ensure that if the server is stolen, the encrypted disks cannot be decrypted even if the disks are moved to another system. Which statement best describes why the HSM supports this goal?

Medium
32

A data center technician is installing a new 2U server that will host a virtualized environment. The server supports hot-swappable 2.5-inch NVMe drives in the front bays, but the operating system does not detect any drives after installation. The technician confirms the drives are properly seated and the backplane is connected to the motherboard. Which of the following is the MOST likely cause?

Medium
33

A virtualized server running multiple VMs experiences a sudden performance degradation during peak hours. Storage latency spikes and CPU ready time increases significantly. The hypervisor shows high memory overcommitment but no swapping. Which action would most likely resolve the issue without adding hardware?

Hard
34

You are the lead server administrator for a mid-sized e-commerce company. The web application is hosted on a farm of four Linux servers running Apache, fronted by a hardware load balancer. The load balancer currently uses a round-robin algorithm. Recently, the customer support team has received numerous complaints about slow page load times and occasional timeouts during checkout. You log into the server monitoring console and observe that one of the web servers, web03, has a CPU utilization consistently above 95%, while the other three servers are at around 30-40%. You connect via SSH to web03 and run the 'top' command, identifying a process named 'imagick' consuming 99% CPU. Further investigation reveals that this process is related to image resizing for product thumbnails, and it appears to have entered an infinite loop due to a malformed image file. Meanwhile, the load balancer continues to send requests to all servers equally, including the overloaded web03, causing some requests to time out. You need to restore performance immediately and prevent recurrence. Which of the following actions should you take?

Hard
35

A server administrator is troubleshooting a server that intermittently reboots without warning. The server is running Windows Server 2019 and hosts a critical application. The administrator checks the event logs and finds Event ID 41 (Kernel-Power). Which of the following should the administrator check first?

Medium
36

A company is designing a disaster recovery plan for its primary datacenter. The plan must include a warm site that can take over production within four hours and must verify that the recovery procedures actually work. Which two elements should be included? (Choose two.)

Hard
37

A technician receives an urgent alert that a critical file server at a remote branch office has gone offline and is unreachable over the network. The server is accessible via out-of-band IPMI, which indicates that chassis power is present, but the power LED on the server is blinking amber instead of steady green. The IPMI system event log reports "System board voltage regulator failure" as the last critical event before the failure. Attempts to use the remote KVM show no video output, and Wake-on-LAN commands have no effect. The branch office has no on-site IT personnel; the only staff are general office workers with minimal technical training. The earliest a field technician can travel to the site is 48 hours. The main office has an identically configured spare server and a backup image of the file server's system disk. The branch office staff can follow simple plug-and-play instructions if provided. Which of the following is the BEST immediate course of action to restore the file services with minimal downtime?

Easy
38

A technician is preparing to rack a new server and needs to confirm the cabinet can support its weight and power draw. The server's documentation lists a maximum of 750W and a fully loaded weight of 30 kg. Which of the following should the technician verify FIRST?

Easy
39

A system administrator is notified that a server with a RAID 5 array of four 2TB drives has a single failed drive. The server uses hot-swappable drives and a hardware RAID controller. Which of the following actions should the administrator perform FIRST?

Medium
40

A server administrator is troubleshooting a server that intermittently loses network connectivity. The server is connected to a managed switch, and the administrator notices that the switch port shows a high number of CRC errors. Which of the following is the MOST likely cause?

Medium
41

A company has a primary data center and a warm site 50 miles away. The disaster recovery plan specifies a recovery time objective (RTO) of 4 hours and a recovery point objective (RPO) of 15 minutes. The administrator is reviewing the backup and replication strategy. Which combination best meets these objectives?

Hard
42

A server administrator is investigating a production server that has been performing poorly for several days. Users report slow response times, and the administrator observes that CPU utilization stays near 100% even during off-peak hours. Task Manager shows the System process consuming most of the CPU. The administrator runs a performance counter capture and sees a sustained high rate of deferred procedure calls (DPCs). Which of the following is the MOST likely cause?

Medium
43

An organization stores backup tapes at an offsite facility. The tapes contain sensitive customer data. A security audit revealed that tapes were stolen from the facility. Which combination of measures would have MOST effectively prevented unauthorized data access?

Hard
44

A server administrator is troubleshooting a Linux server that becomes unresponsive during nightly backup jobs. The administrator runs top and observes that the wa (I/O wait) value is consistently above 40%, while user and system CPU usage remain below 10%. The backup job writes to a locally attached RAID 5 array. Which of the following is the MOST likely cause of the high I/O wait?

Hard
45

Refer to the exhibit. A server in a well-maintained data center has triggered upper critical and non-recoverable temperature alerts for CPU1. The server's chassis fans are operating at full speed, and the data center ambient temperature is normal. Which of the following is the FIRST action the administrator should take?

Easy
46

A server in a virtualized environment is experiencing VM performance degradation. The host server has adequate resources. The hypervisor logs show excessive 'ready' time for the CPU. Which of the following is the BEST action to resolve this issue?

Hard
47

A company is drafting a disaster recovery plan for its primary data center. The plan must address both the maximum tolerable data loss and the maximum tolerable downtime for critical systems. Which of the following metrics should the plan explicitly define to meet these requirements? (Choose two.)

Hard
48

A server administrator is troubleshooting a server that is unable to connect to the network. The server's NIC link light is off. The administrator verifies that the switch port is enabled and the cable is connected to both the server and the switch. Which of the following should the administrator check NEXT?

Easy
49

A system administrator is setting up a new server and needs to ensure that the server's time is synchronized with an external time source. Which protocol should be used?

Easy
50

A datacenter administrator is reviewing physical security for a new server room. The company wants to ensure that only authorized personnel can access the racks and that any access attempts are logged. The room already has a locked door with a badge reader. Which of the following should the administrator implement to meet the requirements for rack-level security and auditing?

Medium
51

A server administrator is adding a second CPU to a dual-socket server that currently has one CPU installed. The server boots with one CPU but fails to POST after the second CPU is installed. The administrator verifies the CPU is seated correctly and the socket is clean. Which of the following is the most likely cause?

Hard
52

A server administrator receives alerts that a production Linux server is unresponsive. After connecting via out-of-band management, the administrator sees a message indicating a kernel panic. The system was recently updated with a new storage driver. Which of the following should the administrator do FIRST to troubleshoot this issue?

Medium
53

A Linux server running Ubuntu Server 22.04 hosts a PostgreSQL database. The administrator notices that the database performs well in the morning but becomes progressively slower throughout the day, and free memory drops steadily. Running free -h shows that available memory is nearly exhausted, but the swap partition is barely used. Which command should the administrator use to identify the process consuming the most memory?

Hard
54

A server administrator is troubleshooting a performance issue on a VMware vSphere host. The host has multiple VMs, and one VM is experiencing high latency on its virtual disk. The administrator checks the datastore and sees it is a RAID 5 array of 4 SAS drives with 50% utilization. Latency for the VM's virtual disk is reported as 200ms. Which action would most likely improve performance?

Hard
55

A server administrator is troubleshooting a Windows Server 2019 machine whose system event log repeatedly shows unexpected shutdowns with no bugcheck code. The hardware is suspected of causing the reboots. Which of the following should the administrator check to identify a hardware-related cause? (Choose two.)

Medium
56

A small law firm has a single Windows Server 2016 Essentials server that functions as a domain controller and file server. After a sudden power outage over the weekend, the server does not boot normally. Instead, it displays a black screen with the message: 'BOOTMGR is missing. Press Ctrl+Alt+Del to restart.' The IT support specialist arrives on Monday morning to find the server in this state. The firm's operations are at a standstill because all case files and email archives are inaccessible. The specialist has access to the Windows Server 2016 installation media and a recent system state backup stored on an external drive. The server hardware passed POST, and all disks are detected in the BIOS. The specialist needs to restore the server's ability to boot into Windows as quickly as possible, with minimal risk to existing data. Which of the following procedures should the specialist perform FIRST?

Easy
57

A small business runs a Windows Server 2022 domain controller and a member file server. The administrator must ensure that if a server's system disk fails, the server can be rebuilt quickly with its operating system, roles, and settings intact. Backups are currently taken with Windows Server Backup to a dedicated backup volume on the same server. Which change should the administrator make?

Easy
58

A system administrator manages a Windows Server 2019 environment with multiple physical servers. The administrator needs to implement a remote management solution that provides out-of-band access to the servers' console even when the operating system is unresponsive or powered off. The solution must also allow mounting virtual media for OS installation and support remote power cycling. Which TWO of the following should the administrator implement? (Choose two.)

Hard
59

A server administrator is responsible for protecting sensitive data. The backup process copies files to a network share daily. Which of the following should the administrator do to BEST ensure the confidentiality of the backup data both during transfer and at rest?

Medium
60

A server administrator is troubleshooting a server that fails to boot after a firmware update. The server powers on, completes POST, but then displays a message that no bootable device is found. The administrator suspects that the firmware update reset the storage controller configuration. Which of the following should the administrator check? (Choose two.)

Hard
61

A server administrator is tasked with installing a new PCIe expansion card into a rack-mounted server. The server will be used in a data center with limited airflow. Which of the following should the administrator consider to ensure proper installation and cooling? (Choose two.)

Hard
62

A financial services firm requires zero data loss in the event of a primary data center failure. They operate two data centers 50 miles apart connected by a high-bandwidth, low-latency link. Which replication method should they use to meet this requirement?

Medium
63

A database server hosts a critical application that requires a recovery point objective (RPO) of 4 hours. The company wants to minimize the impact on production performance during backups. Which backup strategy should be implemented?

Easy
64

A security team is hardening a fleet of Linux web servers that will be exposed to the internet. They want to reduce the attack surface and limit the impact of a compromised service account. Which two actions BEST support these goals? (Choose two.)

Hard
65

After a thunderstorm, a server in a remote office is reachable via remote console but has no network connectivity. The network switch port shows a steady link light, but the server's NIC shows no link light. Which of the following is the MOST likely cause?

Medium
66

A datacenter administrator is hardening a new Windows Server 2022 host that will run a public-facing web application. The administrator needs to reduce the attack surface at the operating system level. Which two actions should the administrator take? (Choose two.)

Medium
67

A company operates a Windows Server 2019 machine that functions as a domain controller and file server. Over the past week, the server has randomly rebooted several times, often during periods of heavy file access. The administrator reviews the System event log and finds multiple Event ID 41 (Kernel-Power) entries with no preceding critical errors. The server is connected to an uninterruptible power supply (UPS) that reports stable input voltage. The server room temperature sensors indicate normal ambient temperature (22°C / 72°F). The server hardware is three years old and has not had any recent changes. The administrator has already run a full antivirus scan with no threats found. Which of the following should the administrator do NEXT to diagnose the issue?

Hard
68

A technician is diagnosing a server that intermittently reboots under heavy load. The server has dual CPUs, 256GB of RAM, and four 1TB NVMe drives. The technician suspects a hardware issue. Which of the following should the technician check to confirm a power-related problem? (Choose two.)

Hard
69

A healthcare provider is reviewing its disaster recovery strategy. They have two data centers: one primary in City A and a secondary in City B, 200 miles apart. Currently, they perform daily backups that are replicated to City B each night. In the event of a primary site failure, they can fail over to City B, but there is a 4-hour RTO due to manual processes. Their new RTO target is 2 hours, with an RPO of 15 minutes. The IT team is considering various replication technologies. The provider runs a mix of Windows and Linux servers hosting electronic health records (EHR), PACS imaging, and billing applications. Their current backup scheme is a full backup each night, with transaction logs backed up every 6 hours, but these are not immediately shipped offsite. They have experienced power outages in City A, prompting the review. The IT director is concerned about data consistency and quick recovery. The secondary site currently has sufficient hardware to run all critical applications, but data is only updated nightly. The link between data centers has 100 Mbps bandwidth and 10 ms latency, and upgrading it would cost $50,000. The existing staff can script failover procedures. Which solution best meets the new RPO and RTO while staying within budget?

Medium
70

A system administrator configures full backups on Sunday evenings and differential backups on weekdays. On Thursday morning, a disk failure occurs. Which of the following sets of backups is necessary to completely restore the server's data with the fewest number of backup files?

Medium
71

A company performs full backups every Sunday and differential backups daily. After a ransomware attack, they discover that both the production data and all attached backup media were encrypted. They need to ensure data can be recovered in the future. Which of the following is the BEST change to their backup strategy?

Medium
72

A company runs a popular public-facing e-commerce website hosted on a farm of five Windows Server 2019 web servers behind a hardware load balancer. Recently, users have been reporting intermittent '503 Service Unavailable' errors during peak shopping hours. The administrator checks the load balancer and finds that all servers are marked as healthy with low CPU and memory usage. However, when inspecting a sample server, the administrator notices a large number of TCP connections in the TIME_WAIT state, consuming all available ephemeral ports. The application is ASP.NET based and uses IIS. The server configuration is as follows: Windows Server 2019 Standard, 4 vCPUs, 16 GB RAM, default TCP/IP settings. The administrator needs to resolve the connectivity issues without making changes to the application code or altering the network architecture. Which of the following actions should the administrator take to fix the problem PERMANENTLY?

Hard
73

A server administrator is investigating a performance problem on a Windows Server 2019 file server. Users report that large file copies to a data volume take far longer than expected, but small file operations are fine. The administrator opens Performance Monitor and observes that the PhysicalDisk\Avg. Disk sec/Write counter for the array hosting the data volume is consistently between 40 and 60 ms, while the same counter on the OS volume stays under 5 ms. Disk queue length on the data volume remains low. Which of the following is the MOST likely cause?

Medium
74

A server administrator is troubleshooting a Windows Server 2019 server that is experiencing slow performance. The administrator suspects that a specific process is consuming excessive CPU resources. Which of the following tools should the administrator use to identify the process?

Medium
75

A server administrator is installing a new PCIe network adapter into a rack server. The card is a full-height, full-length adapter, but the server chassis only accepts low-profile cards in its riser. Which of the following is the BEST course of action?

Medium
76

A technician is installing a new PCIe 4.0 x16 network adapter into a server that has a PCIe 3.0 x16 slot available. The server's BIOS is configured to auto-negotiate PCIe link speed. After installation, the adapter is detected but operates at reduced throughput. Which of the following is the MOST likely reason?

Hard
77

A company performs annual disaster recovery tests. The last test revealed that the recovery time objective (RTO) was not met because the backup tapes were corrupted. The backup administrator proposes changes to the backup verification process. Which practice is MOST effective to ensure recoverability?

Hard
78

A systems administrator is designing the backup strategy for a Windows Server 2022 file server that holds the company's only copy of active project data. The business requires that a single accidental deletion of a folder be recoverable quickly without a full restore, and that a ransomware event that encrypts the volume still leave a usable copy of the data. Which two actions should the administrator take to meet both requirements? (Choose two.)

Medium
79

A small business relies on a single Dell PowerEdge T340 tower server running Windows Server 2019 as its primary domain controller and file server. The server is situated in a locked, air-conditioned IT closet and is protected by an online surge protector. During a severe thunderstorm last evening, the building experienced a momentary power loss. This morning, the administrator found the server completely powered off. When the power button is pressed, the front panel diagnostic LEDs briefly illuminate, and all internal cooling fans start spinning for about two to three seconds, but then the server abruptly powers down. There are no audible beep codes, and the monitor never receives a video signal. The administrator has already verified the power cable is firmly seated in both the server and the surge protector, swapped the power cable with a known-good one, and tested the surge protector with another device, which powered on normally. No spare parts are immediately available, and server downtime must be kept to a minimum. What should the administrator do FIRST to diagnose and resolve the problem?

Easy
80

A small law firm relies on a single server that hosts a document management system and email. The server is backed up nightly using differential backups to an external USB hard drive that remains connected to the server. One Monday morning, the office manager finds all files encrypted and a ransom note on the screen. The server’s event logs indicate that the encryption began at 2:00 AM on Saturday. The firm’s offsite backup policy rotates two sets of tapes, and the most recent set was taken offsite on Friday evening and is stored in a bank safe deposit box. The USB backup drive, still attached to the server, shows its files also encrypted. The firm does not have a cloud backup service for the server. The office manager wants to restore operations as quickly as possible with minimal data loss and zero risk of reinfection. What is the BEST course of action?

Easy
81

A company is reviewing its disaster recovery plan. The plan currently states that a full backup is performed every Sunday and incremental backups are performed Monday through Saturday. A disaster destroys the primary server on Wednesday at 2:00 PM, after the Wednesday incremental backup has completed. The administrator needs to restore the server to the most recent state possible. Which of the following backup sets should the administrator restore?

Medium
82

A server administrator is deploying a Linux server that must automatically start a custom application after every reboot. The application is a binary located at /opt/myapp/bin/myapp and requires the environment variable APP_HOME=/opt/myapp. The server uses systemd. Which of the following is the most appropriate way to ensure the application starts on boot and can be managed with systemctl?

Medium
83

A datacenter manager must protect a file server's data against a single hard disk failure while maximizing usable capacity. The server has four 4 TB drives and a hardware RAID controller. Which RAID level should be implemented?

Easy
84

A system administrator is configuring a RAID array for a database server that requires high fault tolerance and improved read performance. The array will consist of six 1 TB drives. The administrator wants to maximize usable capacity while being able to survive a single drive failure. Which RAID level should the administrator choose?

Easy
85

A security administrator is configuring disk encryption on a new file server that will store regulated data. The server has a TPM 2.0 chip and runs Windows Server 2022. The administrator wants to ensure that the encryption keys are protected and that the server can boot without requiring a USB key at every restart. Which configuration should the administrator use?

Hard
86

A company runs a critical file server on Windows Server 2022 with a RAID 5 array of four 4-TB SAS drives. During a routine check, the administrator notices that the array is in a degraded state because one drive has failed. While waiting for a replacement drive to arrive, a second drive fails. The administrator needs to restore access to the data as quickly as possible. Which of the following should the administrator do FIRST?

Medium
87

A technician is diagnosing a server that intermittently reboots under heavy load. The server is in a rack with proper airflow, and the operating system logs show no software errors. Which of the following should the technician check as part of the hardware diagnosis? (Choose two.)

Medium
88

A company's backup policy requires that all server backups be written to removable media that can be stored offsite. The backup administrator is configuring a new Windows Server 2022 server and needs to ensure that the backup target appears as a locally attached disk to the backup software. The media must support being rotated daily and must not require the server to be powered off. Which type of storage should the administrator use?

Medium
89

A server administrator is troubleshooting a Linux server that has become unresponsive to SSH and console logins. The server is still powered on, and the fans are running. The administrator wants to check the system logs from a previous boot to determine if a kernel panic occurred. Which command should the administrator use?

Easy
90

A server administrator is installing a PCIe expansion card into a 2U server and notices the card requires supplemental power but the server's power supply lacks a spare PCIe power connector. The server's documentation lists a maximum slot power budget of 75W for the x16 slot. Which of the following is the MOST appropriate action?

Hard
91

A server administrator receives alerts that a server's RAID 5 array has a failed drive. The administrator replaces the failed drive with a new one of the same model and capacity. After the rebuild completes, the administrator notices that the array is still showing as degraded. Which of the following is the MOST likely reason for the array remaining degraded?

Easy
92

A company's file server is running low on disk space. The administrator notices that the volume hosting user home directories is nearly full, with only 10 GB free out of 2 TB. Users report that they cannot save new files. The administrator needs to free up space immediately without deleting any user data. Which of the following should the administrator do FIRST?

Medium
93

A company is implementing a disaster recovery plan for its on-premises data center. The plan must include measures to ensure data integrity and availability during a site-wide power failure. Which two actions should be included in the plan? (Choose two.)

Hard
94

A server administrator is troubleshooting a server whose time drifts several minutes per day, causing Kerberos authentication failures between the server and its domain controller. The server is a domain member with no special role. Which of the following is the MOST appropriate first step to correct the time synchronization problem?

Easy
95

A server administrator is troubleshooting a Linux server that is experiencing performance degradation. The administrator suspects high disk I/O. Which two commands should the administrator use to identify the processes and disks causing the I/O load? (Choose two.)

Medium
96

A database administrator notices that the primary SQL Server instance has been experiencing severe performance degradation over the past hour. The server is a virtual machine with 8 vCPUs and 64 GB of RAM, and it normally operates with around 40% CPU utilization. Currently, Task Manager shows 100% CPU usage, with the sqlservr.exe process consuming nearly all cycles. The database response times have increased tenfold, and some queries are timing out. There are no scheduled maintenance jobs running, and the transaction log backup completed successfully earlier. The DBA checks active sessions and finds one long-running ad-hoc query from a new reporting tool that was deployed this morning. The query is performing a cross join on two large tables with missing WHERE clauses, causing a Cartesian product. Ending the session will roll back the query and free resources.

Medium
97

An administrator installs a new PCIe NVMe solid-state drive into a server's x8 slot, but the operating system does not detect it. The slot is enabled in BIOS, the drive is on the compatibility list, and it is fully seated. The motherboard manual notes that the slot shares lanes with an onboard SAS controller that is currently enabled. Which of the following should the administrator do to resolve the issue?

Hard
98

A server that uses iSCSI storage has suddenly lost connectivity to all LUNs. The network team confirms no changes have been made. Which of the following is the FIRST step in troubleshooting this issue?

Hard
99

A server administrator is troubleshooting a Linux server that cannot reach any external websites, but internal resources are accessible. The administrator runs 'ip addr' and sees the correct IP address and subnet mask on eth0. Running 'ip route' shows no default route. What is the most likely cause?

Medium
100

After a power outage, a server fails to boot and displays a "Missing operating system" error. The server uses RAID 1 for the OS disk. The administrator verifies both drives are present in the RAID configuration utility but one drive is marked as failed. What should the administrator do FIRST?

Easy
101

A system administrator needs to apply critical security patches to a production web server that cannot be taken offline. The server runs a Linux operating system and hosts a high-availability website. The administrator wants to ensure that if the patches cause a failure, the server can be quickly rolled back to its previous state. Which of the following actions should the administrator take FIRST?

Medium
102

Which THREE of the following are typically essential elements of a disaster recovery plan (DRP)? (Choose three.)

Hard
103

A server in the datacenter fails to power on after a scheduled power maintenance. The facility team confirms that power is being supplied to the rack. The server's front panel LED is not illuminated. Which of the following should the administrator check FIRST?

Easy
104

A junior administrator is tasked with creating a new virtual machine on a Windows Server 2019 Hyper-V host. The VM will run a lightly used internal application and requires 4 GB of RAM, 2 virtual processors, and a 60 GB virtual hard disk. The administrator creates the VM using the default dynamic memory settings and a dynamically expanding VHDX. After a week, users report that the application occasionally becomes very slow. Performance monitoring shows that the VM's memory utilization frequently hits the configured maximum, and disk latency spikes during these times. Which of the following is the MOST likely cause of the performance issue?

Easy
105

A company performs a full backup every Sunday and incremental backups Monday through Saturday. On Wednesday, a database file becomes corrupted. The administrator needs to restore the most recent version of the file prior to corruption. Which backup sets must be restored?

Medium
106

A server has been experiencing random crashes and generating memory-related errors in the system event log. The technician has already run memory diagnostics which show frequent errors on a single DIMM. The server has four DIMMs installed. Which of the following is the BEST next step?

Hard
107

A server administrator is troubleshooting a RAID 5 array that has suddenly become degraded. The array consists of four SAS drives. The administrator runs the RAID controller management utility and sees that one drive has failed. After replacing the failed drive, the rebuild process starts but stalls at 20%. The administrator checks the event log and sees numerous medium errors on another drive. What should the administrator do next?

Hard
108

A technician installs a new 2U server whose chassis is 24 inches deep into a rack with 30-inch posts. After mounting, the technician notices the server's rear fans are recirculating hot exhaust because the rack's rear door is perforated but the server's rear panel sits flush against it. Cable bundles also press against the door. Which of the following is the BEST action to correct the airflow problem?

Hard
109

A server administrator is troubleshooting an issue where a database server's performance degrades every night at 2 AM. Resource monitor shows high disk I/O and CPU usage during that time. There are no scheduled tasks on the server. Which of the following should the administrator investigate FIRST?

Easy
110

A company has a server running Windows Server 2022 with two 10-Gbps network adapters. The server hosts a high-traffic web application that requires maximum throughput and fault tolerance. The network switches support 802.3ad link aggregation. The administrator configures NIC teaming using LACP with Address Hash. After deployment, users report intermittent connectivity issues. Which of the following is the MOST likely cause?

Hard
111

A datacenter administrator is preparing to decommission a rack of servers that stored customer financial records. Company policy requires that data be rendered unrecoverable before the servers leave the facility, and the servers will be resold to a third party. Which action best satisfies the policy?

Medium
112

A technician is disposing of several decommissioned servers that previously stored customer financial records. The drives will leave the building. Which action BEST ensures the data cannot be recovered by anyone who obtains the drives?

Easy
113

A server administrator needs to deploy a new physical server that will run a database requiring high availability and maximum performance. The server has four 1 TB NVMe SSDs. The administrator wants to configure RAID 10 for both redundancy and performance. Which of the following should the administrator do to achieve this?

Medium
114

A server administrator is troubleshooting a physical server that emits a continuous amber health LED and whose operating system logs show correctable memory errors increasing on one DIMM slot. The server is still running production workloads. Which of the following actions should the administrator take? (Choose two.)

Medium
115

A server uses NIC teaming with LACP (802.3ad) for load balancing and failover. After replacing a failed switch with a new switch of the same model, the server loses network connectivity. The switch ports show no activity. Which of the following is the MOST likely cause?

Hard
116

A server administrator is troubleshooting a Windows Server 2019 host that fails to apply a monthly cumulative update. Windows Update returns error 0x800f0922, and the C: volume has 30 GB free while the System Reserved partition has only 12 MB free. Which of the following is the MOST likely cause?

Medium
117

A server administrator is troubleshooting a Windows Server 2019 that periodically loses network connectivity. The server has two teamed network adapters in switch-independent mode. Users report intermittent access to file shares. The administrator runs `Get-NetLbfoTeam` and sees the team status is 'Degraded'. Which of the following is the MOST likely cause?

Hard
118

Several users report sluggish performance from a database server. The server administrator notices that the CPU fans are running at maximum speed and the baseboard management controller (BMC) reports CPU temperatures of 85°C even at idle. The administrator already cleaned dust from the chassis and verified all fans are operational. Which of the following should the administrator do NEXT?

Hard
119

A VMware ESXi host runs six virtual machines, each configured with 8GB of RAM, totaling 48GB allocated. The host physically has 32GB of RAM, and memory overcommitment is enabled. Recently, a critical VM experienced severe performance degradation during peak hours, with the guest OS showing high memory pressure and balloon driver activity, while other VMs showed moderate usage. Which of the following actions will BEST resolve the issue without compromising other VMs?

Hard
120

A server administrator is installing a new 2U rack server that will use four 960GB SATA SSDs in a hardware RAID 10 array for the operating system. The server's RAID controller supports both SATA and SAS drives. After physically installing the drives in the front bays, the administrator powers on the server but the RAID controller does not detect any drives. Which of the following is the MOST likely cause?

Medium
121

A company’s file server runs Windows Server 2022 and hosts a 4 TB volume. Users report that saving large files to a shared folder occasionally fails with an error about insufficient disk space, even though the volume shows 800 GB of free space. Performance Monitor shows high Avg. Disk sec/Transfer and frequent paging. Which action should the administrator take first to resolve the file‑save failures?

Medium
122

A datacenter manager is reviewing physical security controls for a server room. Which two controls are considered preventive measures against unauthorized physical access? (Choose two.)

Medium
123

A server administrator needs to deploy a new physical server that will host a database. The database requires high random read/write performance and redundancy. The server has a RAID controller that supports RAID 0, 1, 5, 6, and 10. The administrator installs four identical SAS SSDs. Which RAID level should the administrator configure to meet the performance and redundancy requirements?

Easy
124

A company is designing a disaster recovery plan for a critical web application. The plan must ensure that the application can be recovered within a 4-hour recovery time objective (RTO) and that no more than 1 hour of data is lost. The application runs on virtual machines backed by a storage area network (SAN). Which two actions best support these objectives? (Choose two.)

Hard
125

A server administrator is configuring a new Windows Server 2022 server that will host a database. The server has four 10 TB SAS drives and a hardware RAID controller. The administrator needs to maximize performance for random reads and writes while providing redundancy. Which RAID level should the administrator implement?

Easy
126

A server administrator is troubleshooting a server that is emitting a continuous beeping sound. The server is powered on but does not display any video. The administrator checks the server's documentation and finds that the beep code indicates a memory error. Which of the following should the administrator do FIRST?

Easy
127

A server administrator is tasked with ensuring that a critical database server remains available in the event of a hardware failure. The solution must provide automatic failover with minimal administrative overhead. Which of the following should be implemented?

Easy
128

A medium-sized company uses a backup strategy that includes a full backup every Sunday at 2:00 AM and differential backups Monday through Saturday at 2:00 AM. The backups are written to a network-attached storage (NAS) device. On Thursday morning, the company experiences a ransomware attack that encrypts all data on the file server, including the NAS. The administrator needs to restore the file server with minimal data loss. The last successful full backup was from the previous Sunday, and differential backups were successful on Monday, Tuesday, and Wednesday. However, Thursday's differential was not completed because the attack occurred before the scheduled time. The administrator attempts to restore using the Sunday full backup and Thursday's differential, but the restore fails because the differential backup on the NAS is also encrypted. Which of the following is the best course of action?

Hard
129

A technician is installing a new server into a rack and needs to ensure the chassis does not tip forward when a heavy component is pulled out on its rails. Which of the following should the technician install FIRST?

Easy
130

A server technician is replacing a failed hot-swappable 2.5-inch SAS drive in a production 2U server while it remains powered on. The drive bay is populated and the array is in a degraded state. Which of the following should the technician do FIRST before physically removing the failed drive?

Medium
131

A server administrator receives alerts that a file server's system volume is nearly full. The administrator runs a disk usage report and finds that a single log directory contains millions of small files consuming most of the free space. Users need the server to remain online while the issue is resolved. Which of the following should the administrator do to reclaim space with the LEAST disruption?

Medium
132

A server administrator is configuring a Windows Server 2022 failover cluster with two nodes. The cluster will host a highly available file server role. The administrator needs to ensure that the file server role can fail over automatically if one node goes down. The cluster has shared storage presented as a single disk. Which of the following should the administrator configure to meet this requirement?

Hard
133

A server administrator is replacing a failed hard drive in a server that uses a hardware RAID controller. The server supports hot-swappable drives. Which of the following should the administrator do FIRST to safely replace the drive?

Easy
134

A server administrator is configuring a new Linux server that will run a critical web application. The administrator needs to ensure that the web service automatically starts if the server reboots and restarts if it crashes. The server uses systemd. Which of the following should the administrator do?

Medium
135

A server administrator is troubleshooting a server that fails to boot after a firmware update. The server powers on, completes POST, but then displays a message indicating no bootable device found. The administrator confirms the RAID controller is detected and the drives are online. What is the most likely cause?

Hard
136

A system administrator is configuring a new server that will run a high-performance database. The server has four 1 TB NVMe drives and a hardware RAID controller that supports RAID 0, 1, 5, 6, 10, and 50. The database workload is write-intensive with random I/O. The administrator needs to maximize performance while providing redundancy against a single drive failure. Which RAID level should the administrator choose?

Hard
137

A server administrator is troubleshooting a Windows Server 2019 host whose local volumes suddenly show as RAW in Disk Management after a storage controller firmware update. The volumes were NTFS and contained production data. Which of the following actions should the administrator take FIRST?

Hard
138

A server administrator is troubleshooting a newly installed 2U server that powers on but does not complete POST. The server emits a repeating beep code and no video output appears. The administrator has already reseated the memory modules and verified that the power supplies are fully seated and the power LEDs are green. Which of the following should the administrator check NEXT?

Medium
139

A server administrator is troubleshooting a Linux server that is experiencing performance issues. The administrator suspects that a specific process is consuming excessive CPU resources. Which two commands can be used to identify the process? (Choose two.)

Hard
140

A rack-mounted server must be installed in a datacenter cabinet that is only 30 inches deep, while the server's rails require a minimum depth of 35 inches for the rear brackets to attach. The server is currently supported only by the front flanges. Which of the following should the technician do?

Easy
141

A server administrator is troubleshooting intermittent network connectivity issues on a server. Users report that connections to the server sometimes time out, and the administrator notices that the server's link LED on the switch occasionally goes dark. The administrator has already replaced the patch cable from the server to the wall jack. Which of the following should the administrator check NEXT? (Choose two.)

Medium
142

A server administrator is troubleshooting a Windows Server 2019 file server that intermittently becomes unreachable on the network for 30-60 seconds at a time. Event Viewer shows repeated Netlogon 5719 errors stating that no domain controller is available, and the network team confirms no switch or router outages. The server has two teamed NICs. Which of the following should the administrator check FIRST to resolve this issue?

Medium
143

A company runs a critical application on a physical Windows Server 2022 with four 146 GB SAS drives in a RAID 5 array and a single hot-spare. The server has been in production for five years. The IT manager asks you to recommend two proactive measures to reduce the risk of unplanned downtime due to drive failures. (Choose two.)

Medium
144

A server administrator receives reports that a production server is shutting down unexpectedly after running for several hours. The server is a 2U rackmount unit located in a data center with proper ambient cooling (20°C/68°F). The server has redundant power supplies connected to separate PDUs and no power anomalies are reported. The administrator checks the operating system event logs and finds a critical log entry: 'The system was shut down due to a thermal event.' However, the CPU temperature logs show that the CPU was at 47°C at the time of shutdown, and the chassis inlet temperature was 23°C. The server's internal fans are running at high speed and are clearly audible. The administrator suspects a thermal issue but is unsure why the CPU is not showing high temperature. The server has a baseboard management controller (BMC) that monitors various sensors. Which of the following components should the administrator investigate FIRST to identify the likely cause of the shutdown?

Medium
145

A technician is installing a new server into a rack and needs to connect the server's out-of-band management port so the server can be powered on and monitored remotely. Which of the following should the technician connect?

Easy
146

A server administrator is troubleshooting a performance issue on a Linux server. The server hosts a database that performs many small random reads and writes. The administrator suspects that disk I/O is the bottleneck. Which command should the administrator use to view real-time disk I/O statistics per device, including utilization and await times?

Hard
147

A rack-mount server must be installed in a cabinet that is only 30 inches deep, while the server's rails are designed for a 36-inch cabinet and allow the chassis to extend beyond the front and rear posts. The server must remain serviceable and the cabinet doors must close. Which of the following should the technician do FIRST?

Easy
148

After installing additional RAM modules in a server, the BIOS displays only a portion of the installed memory. The modules are identical in speed and size but from different manufacturers. Which of the following is the BEST initial troubleshooting step?

Medium
149

A server administrator is planning a storage configuration for a new database server that will handle a high volume of random writes. The server has eight 1.2 TB 10K RPM SAS drives and a hardware RAID controller with a 4 GB cache and battery backup. The administrator needs to maximize write performance while ensuring data redundancy. Which RAID level and configuration should the administrator implement?

Hard
150

A technician is preparing to install a new server into a rack in a small server room. Which of the following steps should be performed to help ensure proper airflow and thermal management? (Choose two.)

Medium
151

A server administrator is troubleshooting a physical server that reports a predictive failure on a drive in a hardware RAID 5 array. The array is still online and functioning. The administrator wants to replace the failing drive while minimizing risk to the data. Which of the following steps should the administrator perform? (Choose two.)

Medium
152

A financial services company runs a single physical server hosting a customer-facing web application. The security team must ensure that if an attacker modifies system binaries, the server can detect the change during a forensic investigation. Which technology should be implemented to meet this requirement?

Medium
153

Refer to the exhibit. During boot, the server displays this error and shuts down. Which of the following is the most likely cause?

Medium
154

A datacenter administrator must implement a backup strategy for a file server that holds 8 TB of active patient imaging data. The organization requires that a complete copy of the data be stored offsite weekly, and that the offsite copy be protected from accidental deletion or alteration for at least 30 days. The administrator has a 10 GbE connection to the remote site. Which of the following should the administrator configure to meet these requirements?

Medium
155

Refer to the exhibit. What is the most likely cause of this error?

Medium
156

A server administrator is replacing a failed hard drive in a RAID 5 array on a production server. The server supports hot-swap drives. Which of the following should the administrator do FIRST to replace the drive?

Easy
157

A server administrator is troubleshooting a Linux server that is experiencing intermittent network connectivity issues. Users report that connections to the server sometimes time out, and the administrator notices that `ifconfig` shows a high number of dropped packets on the `eth0` interface. The switch port is configured for 1 Gbps full duplex. Which of the following is the MOST likely cause?

Hard
158

A technician is troubleshooting a server that fails to boot. The server displays a 'Boot Device Not Found' error. The technician verifies that the hard drives are spinning and appear in the RAID controller's BIOS. What should the technician check next?

Medium
159

A small office has a single physical server running Windows Server 2022 that hosts a file share and a print server. The administrator wants to protect against a hard drive failure that would cause downtime. The server has four drive bays, all currently empty. The administrator needs a solution that provides redundancy and maximizes usable capacity while tolerating one drive failure. Which of the following should the administrator implement?

Easy
160

A data center administrator is hardening a newly racked Linux server that will host a customer-facing API. The security policy states that only HTTPS (TCP 443) should be reachable from the internet, and no other services should be exposed. The administrator wants the change to survive a reboot and be enforced by the kernel's packet filter. Which of the following should the administrator configure to meet these requirements?

Medium
161

A server administrator is troubleshooting a server that intermittently fails to boot and occasionally displays a 'CMOS checksum error' during POST. The server's clock also resets to an old date after each power cycle. The administrator has already verified that the power supply is functioning and that all internal cables are securely connected. Which of the following is the MOST likely cause of these symptoms?

Medium
162

Refer to the exhibit. An administrator is reviewing logs after a server experienced performance issues and unexpected shutdowns. Based on the log entries, which component is MOST likely failing?

Medium
163

A company is implementing a backup strategy for a critical database server. The backup window is limited, and the database must remain available during backups. The administrator needs to ensure that transaction log backups are performed and that the database can be restored to a point in time. Which two actions should the administrator take? (Choose two.)

Medium
164

A system administrator is configuring a backup strategy for a small business. The business requires that backups be stored offsite to protect against physical disasters, and that backup data be encrypted both in transit and at rest. Which of the following backup solutions BEST meets these requirements?

Easy
165

A server administrator runs a Linux server hosting a MariaDB database. Users report that the database is extremely slow. The administrator runs top and sees a load average of 45 on a system with 4 CPU cores, and %iowait is consistently above 80%. Which command should the administrator run next to identify the specific storage device causing the bottleneck?

Medium
166

Refer to the exhibit. An administrator receives reports that a web application is returning HTTP 502 errors. The administrator examines the Nginx error log on the reverse proxy server and sees the following. Which of the following is MOST likely causing the errors?

Hard
167

A server running a critical database application crashes and fails to boot with the error message 'Operating System not found.' The server is equipped with a hardware RAID 5 array consisting of three identical disks. A technician suspects a disk failure. What is the MOST likely cause of this error?

Hard
168

A technician is preparing to install a new 2U rack server into a cabinet that already hosts several running servers. The technician must ensure proper airflow and physical security. Which of the following actions should the technician take? (Choose two.)

Medium
169

A company uses a two-node failover cluster for a critical application. The cluster nodes are located in the same data center, and the quorum configuration uses a file share witness on a separate server in the same data center. During a major power outage, both cluster nodes and the file share witness server lose power. What is the impact on cluster availability?

Hard
170

A hospital's server room has a raised floor and a dedicated UPS circuit. During a scheduled power maintenance window, the facilities team must cut utility power to replace a breaker panel. The UPS must keep the two domain controllers and the electronic medical records (EMR) database server running for at least 20 minutes so they can be gracefully shut down. Which configuration should the administrator verify FIRST to meet this requirement?

Medium
171

A network administrator is configuring a RAID array for a new file server that will store large media files. The server has six 4 TB SAS drives. The administrator needs to maximize storage capacity while providing fault tolerance against a single drive failure. Which RAID level should be implemented?

Medium
172

A technician is troubleshooting a server that powers on but produces no video output and emits a repeating beep code. The server's documentation indicates the pattern corresponds to a memory error. The technician has already reseated the existing DIMMs and verified the slots are clean. Which of the following should the technician do NEXT?

Easy
173

A server administrator notices that a database server is responding slowly to queries. The CPU utilization is at 30%, memory at 40%, and disk latency is normal. Which of the following should the administrator check NEXT?

Easy
174

A company runs a busy web application on a single Windows Server 2022 server with 32 GB RAM, two 8-core CPUs, and a hardware RAID 10 array. Users report intermittent slowdowns, and Performance Monitor shows that the PhysicalDisk\% Idle Time counter for the data volume frequently drops below 10% while the Processor\% Processor Time remains around 40%. The server hosts the web application, its SQL Server 2019 database, and the operating system on the same RAID 10 array. Which of the following is the MOST appropriate next step to improve performance?

Hard
175

A company operates a single data center with 40 physical servers and no secondary site. Management has approved a project to improve disaster recovery posture and wants the ability to restore critical workloads after a total site loss. The budget is limited, and the company already owns a large tape library and an offsite vault contract. Which two components should the administrator include in the solution? (Choose two.)

Medium
176

A datacenter administrator is planning a disaster recovery site for a critical application. The business requires that the application be able to resume within 15 minutes of a primary site failure, but the application can tolerate up to 30 minutes of data loss. Which combination of metrics and site strategy best fits these requirements?

Hard
177

A technician is installing a new 2U rack server in a data center. The server documentation specifies that the rail kit must be mounted in a rack with square-hole mounting holes, but the existing rack cabinet uses round threaded holes. The technician needs the server to slide in and out of the rack for maintenance while remaining securely supported. Which of the following should the technician do?

Medium
178

A security team wants to reduce the impact of a compromised service account that is used by a scheduled backup application on a Windows server. The account currently has domain administrator rights. Which action BEST limits the blast radius while keeping backups functional?

Hard
179

A company is planning to deploy a new web application on multiple servers behind a load balancer. The application requires consistent session data across all servers for seamless user experience. Which of the following solutions would BEST meet this requirement?

Hard
180

A server administrator is installing a new 2U rack server into a datacenter rack. The server has two hot-swap 1100W power supplies. The rack currently has a 30A/208V single-phase PDU that is only 40% loaded. The administrator connects both power supplies to the same PDU. After a few months, one power supply fails, but the server remains operational. Which of the following should the administrator do to improve power redundancy?

Medium
181

A technician is installing a new server with a hardware RAID controller. The server will host a database that requires high write performance and redundancy. The technician configures four SSDs in a RAID 10 array. After installation, the operating system reports the array as 1.2TB, but the technician expected 2.4TB. Which of the following explains the discrepancy?

Hard
182

A medium-sized e-commerce company operates three critical servers: a web front-end, a database server, and a file server. Currently, a full backup of all servers is performed every Sunday starting at 11:00 PM and completes in about 6 hours. Differential backups run each weekday at 11:00 PM, taking roughly 2 hours. On a Wednesday at 10:00 AM, a ransomware attack encrypts all data on all servers. The IT team’s incident response plan requires restoration with an RPO of 4 hours and an RTO of 8 hours. The latest clean backup is Tuesday’s differential, resulting in approximately 10 hours of data loss. Future attacks could occur at any time. Management is willing to spend up to $200 per month to improve the backup strategy but cannot afford new hardware or a dedicated hot site. The team needs a solution that reduces both RPO and RTO within budget while maintaining simplicity for a small IT staff of two. Which of the following backup strategies should be implemented to best meet these requirements?

Hard
183

An administrator is monitoring a server that has a hardware RAID 5 array consisting of four 2 TB disks. The RAID controller's management software reports that one disk has a status of 'Pred Fail' (predictive failure). The array also has a dedicated hot spare disk already installed and set up. The array is still fully functional with no data loss, but the 'Pred Fail' warning indicates the disk is likely to fail soon. The server is a production database server that cannot be taken offline except for scheduled maintenance windows, which are not until the following weekend. The administrator needs to ensure data integrity and avoid any risk of downtime or data loss while waiting for the replacement. Which immediate action should the administrator take?

Medium
184

A datacenter administrator is hardening a newly racked server that will host a public-facing application. The security policy requires that all administrative access to the server use encrypted protocols and that remote interactive logons be limited to the secure shell. Which action best meets these requirements?

Medium
185

A technician is preparing to replace a failed hot-swap SAS drive in a production server. The server has a RAID 1 array for the operating system and a RAID 5 array for data. The failed drive belongs to the RAID 5 array. Which of the following steps should the technician take before physically removing the drive? (Choose two.)

Medium
186

A financial services company must retain backup data for seven years to satisfy regulatory requirements. The data is written once and never modified, and the company wants to minimize cost while ensuring the data cannot be altered or deleted before its retention period expires. Which storage solution best meets these requirements?

Hard
187

A server administrator is installing a new 1U server into a rack that already contains several servers. The rack has a limited number of power outlets, and the administrator needs to connect the server's two redundant power supplies. Which of the following should the administrator do to ensure power redundancy?

Easy
188

A data center team is deploying a new 4U storage server that will hold 24 nearline SAS drives. The server will sit in a rack alongside network switches, and the team wants to minimize vibration-related drive errors. Which of the following installation practices BEST addresses this concern?

Hard
189

A server administrator is troubleshooting a Windows Server that is experiencing slow performance. The administrator runs Performance Monitor and notices that the 'Avg. Disk sec/Transfer' counter is consistently above 25 ms. Which of the following is the MOST likely cause?

Hard
190

A server administrator is diagnosing a Windows Server 2019 server that reboots unexpectedly about once a day. Windows Event Viewer shows Event ID 6008 (unexpected shutdown) and a BugCheck entry with stop code 0x00000050 (PAGE_FAULT_IN_NONPAGED_AREA). The server has 512 GB of RAM and the page file is system-managed. Which tool should the administrator use to analyze the memory dump and identify the faulty driver?

Medium
191

A technician is installing a new server that will host a virtualized environment. The server has 512GB of RAM installed as 16 x 32GB DIMMs. The technician notices that the server reports only 256GB of RAM during POST. Which of the following is the MOST likely cause?

Hard
192

A server administrator is troubleshooting a newly racked server that powers on but does not POST. The server's front-panel status LED shows a steady amber condition, and no video signal is produced. The administrator has already confirmed that both power supplies are connected to working PDUs and that the power button is not faulty. Which of the following should the administrator check NEXT?

Medium
193

A company's primary file server runs Windows Server 2019 with four 1 TB SATA drives in a RAID 5 array controlled by a hardware RAID controller. The server hosts shared project data that is accessed continuously during business hours. The administrator notices that write performance has degraded significantly over the past month, and the RAID controller log shows an increasing number of medium errors on one drive. The administrator needs to replace the failing drive with minimal downtime and without losing data. Which of the following should the administrator do FIRST?

Medium
194

A database server with 64 GB of RAM and RAID 5 storage is experiencing intermittent performance degradation. System monitoring shows constant 95% memory utilization, high disk queue length, and frequent page faults. The server is running a critical application that cannot be restarted during business hours. Which action will provide the BEST permanent resolution?

Hard
195

A server administrator is implementing a backup strategy for a Windows Server 2022 file server. The administrator needs to ensure that backups can be restored quickly and that the backup data is protected against ransomware. Which two actions should the administrator take? (Choose two.)

Medium
196

A technician is replacing a failed hard drive in a hot-swap RAID 5 array. After inserting the new drive, the RAID controller does not automatically rebuild. What should the technician do first?

Hard
197

A medium-size enterprise runs a vSphere 7.0 cluster with two hosts (HostA and HostB) for production VMs. Each host has two 10GbE uplinks (vmnic0 and vmnic1) connected to separate physical switches (SW1 and SW2) for redundancy. A single vSphere standard switch (vSwitch0) uses both uplinks with teaming policy set to 'Route based on originating virtual port ID,' 'Network failure detection: Link status only,' and 'Notify switches: Yes.' Lately, several VMs running on HostA experience intermittent network disconnections lasting 20–30 seconds, while VMs on HostB are unaffected. The administrator checks vCenter events and sees repeated messages: 'Lost uplink redundancy on vSwitch0. vmnic0 is down.' followed seconds later by 'Uplink redundancy restored. vmnic0 is up.' The physical switch SW1's log shows the port for vmnic0 transitions through spanning-tree listening and learning states each time this occurs, taking about 15 seconds. The link is a trunk allowing all necessary VLANs, with no errors or security violations. The network team has already swapped the fiber cable and SFP+ transceiver for vmnic0 without improvement. The VMs affected are those whose virtual ports are pinned to vmnic0 by the load-balancing policy; VMs pinned to vmnic1 never experience disconnections. The administrator has also rebooted HostA and updated the NIC firmware, but the flapping continues. What should the administrator do to permanently resolve the intermittent connectivity?

Medium
198

A small office has a single physical server running Windows Server 2022 that hosts a file share and a print server. The administrator wants to ensure that if the server's operating system becomes corrupted, the server can be restored quickly to a working state. Which backup type should the administrator use?

Easy
199

A server administrator is installing a new 1U server into a rack. The server's rail kit includes both inner and outer rails. The administrator notices that the inner rails need to be attached to the server chassis before mounting. Which of the following is the correct procedure to install the server into the rack?

Hard
200

A technician is installing a new 2U server into a datacenter rack. The server is equipped with redundant power supplies. According to best practices for power redundancy, how should the technician connect the power supplies?

Easy
201

A datacenter administrator manages a rack of servers that handle nightly batch processing. The company's security policy requires that all server hard drives be sanitized before disposal, and the drives previously contained customer PII. The administrator needs a method that renders the data unrecoverable and also allows the drives to be reused internally for non-sensitive test systems. Which of the following should the administrator use?

Medium
202

A server administrator is troubleshooting a rack server that fails to complete POST. The server emits a series of beep codes, and no video output appears. The administrator has already reseated the memory modules and confirmed they are in the correct slots. Which of the following should the administrator check NEXT?

Easy
203

A server administrator is hardening a newly deployed Linux web server that will be exposed to the internet. The security policy requires minimizing the attack surface and protecting authentication. Which two actions BEST align with that policy? (Choose two.)

Hard
204

A company is migrating a legacy line-of-business application from Windows Server 2012 R2 to a new Windows Server 2022 server that is a member of an Active Directory domain. The application runs as a Windows service under a domain service account named CORP\svc_app. The service account has been granted the 'Log on as a service' user right on the old server, and the application is configured to listen on a static TCP port 8443. After installing the application on the new server and configuring it with the same service account and port, the application fails to start. The administrator checks the Windows Event Viewer and sees two errors in the System log: 'The CORP\svc_app service failed to start due to the following error: The service did not start due to a logon failure' and 'The service cannot bind to the designated port 8443'. The administrator has already verified that the service account's password is correct and has not expired, that the account is enabled, that the port 8443 is not being used by another service, and that the Windows Firewall has an inbound rule allowing traffic on port 8443. The application's configuration file correctly points to port 8443. What should the administrator do to resolve the issue?

Hard
205

A technician needs to add four new 2.5-inch SSDs to a rack server that currently has all eight 2.5-inch front drive bays populated with SAS hard drives. The server's backplane supports hot-swap and the RAID controller supports online capacity expansion. Which of the following is the BEST way to add the SSDs?

Easy
206

A server administrator is troubleshooting a tower server that reports no video output on the local monitor, but the power LED is solid green and the fans spin at normal speed. The administrator connects to the baseboard management controller (BMC) over the network and sees a POST code of 'B4' with a message indicating USB device initialization. A USB flash drive is left in a rear port. Which of the following is the MOST likely cause of the missing video?

Medium
207

A company is hardening a publicly reachable Linux web server that runs an SSH service for administration. The security team wants to reduce the attack surface and enforce stronger authentication. Which two actions BEST accomplish this? (Choose two.)

Hard
208

A company operates a primary datacenter and a cold standby site. The disaster recovery plan states that the standby site must be able to take over within 8 hours, but the current plan requires rebuilding servers from bare metal and restoring data from tape, which takes 3 days. Which change best aligns the standby site with the stated recovery time objective?

Hard
209

A server administrator is configuring a new Linux server that will host a web application. The application requires a persistent storage volume that can be easily expanded without downtime. The server has a single physical disk with 500 GB of free space. The administrator decides to use LVM (Logical Volume Management). Which of the following is the correct sequence of steps to create a new logical volume and mount it?

Medium
210

A company's file server is running low on disk space. The administrator notices that the disk holding the operating system and application logs is nearly full. Which of the following is the BEST immediate step to free up space while maintaining system stability?

Medium
211

A technician is tasked with installing a new PCIe expansion card into a rack-mounted server. The server will be powered off but remains in the rack. Which of the following should the technician do FIRST to prevent electrostatic discharge (ESD) damage?

Easy
212

A small business has a single file server running Windows Server 2019. The server uses two internal SATA drives in a RAID 1 mirror for the operating system and data. The company's backup solution performs a full backup every night to an external USB hard drive, which is stored in the server room. The IT administrator recently noticed that the server's system volume is running low on space and decides to migrate the data to a larger drive. During the migration, the server crashes and will not boot. The administrator attempts to restore from the latest backup but finds that the backup drive is corrupted and cannot be read. The company has no offsite backups. What should the administrator have done to prevent this situation?

Easy
213

A large enterprise uses a centralized backup solution with a backup server running Commvault. Backups are stored on a deduplicated disk array and replicated to a secondary site for disaster recovery. The company's security team detects ransomware activity that has encrypted several file servers. The backup administrator checks the backup repository and finds that the backup data is also encrypted because the backup service account had permissions to modify backup files, and the ransomware propagated to the repository. The last known good backup is from two weeks ago, which is too old for the organization's RPO of 24 hours. The backup administrator is under pressure to restore operations quickly. Which of the following should the administrator implement to prevent this from recurring?

Hard
214

A server administrator is troubleshooting a physical server that randomly crashes once or twice a week. The administrator has already verified that the power supply is functioning correctly and has checked the event logs for critical errors. According to standard troubleshooting methodology, what should the administrator do next?

Medium
215

A server administrator is installing a new SAS SSD into a server that supports hot-swap drives. The server has a hardware RAID controller and the drive bay is accessible from the front. The administrator wants to add the drive to an existing RAID 5 array without bringing the server down. Which of the following should the administrator do?

Hard
216

A small business runs a single physical server that hosts a customer relationship management (CRM) application and its database. The owner wants a backup strategy that allows the server to be restored on different hardware if the original server fails completely. Which backup type should the administrator implement?

Easy
217

A datacenter operator is reviewing physical security for a server room that houses backup tapes and network core switches. The room has a single wooden door with a mechanical lock, and the key is shared among the facilities staff. Which change should the administrator recommend FIRST to improve access control?

Medium
218

Refer to the exhibit. A technician receives an alert from the monitoring system showing the error in the exhibit. The server is still online, but performance has degraded. Which of the following is the MOST likely cause and appropriate action?

Hard
219

A security administrator is configuring a server to meet a requirement that all administrative access must use multifactor authentication and be encrypted in transit. The server runs Windows Server 2022. Which solution should the administrator implement?

Hard
220

A RAID 5 array is degraded due to a failed disk. What is the best practice for recovery?

Hard
221

A server administrator is troubleshooting a Windows Server host that has been randomly losing connectivity to its iSCSI storage for the past week. The host has two dedicated NICs for iSCSI, each connected to a separate switch, and multipath I/O is configured. Event logs show intermittent path failures that recover within seconds. Switch port statistics show no errors, and both storage controllers report healthy. Which of the following should the administrator check FIRST to diagnose the intermittent path loss?

Hard
222

A server administrator is troubleshooting a Linux server that is experiencing intermittent network connectivity issues. Users report that connections to the server occasionally time out, but the server responds to pings most of the time. The administrator suspects a duplex mismatch on the network interface. Which two commands should the administrator use to verify the current speed and duplex settings of the interface? (Choose two.)

Hard
223

A server hosts a database that requires nightly backups. The backup strategy uses a full backup every Sunday and differential backups on other days. On Wednesday, the server fails. Which backup sets are required to restore to the most recent state?

Medium
224

A server administrator is setting up a new Windows Server 2022 file server. The server has two 1 TB NVMe drives. The administrator wants to ensure that if one drive fails, the server can continue to operate without data loss, and also wants to maximize read performance. Which of the following should the administrator implement?

Easy
225

A company stores nightly database backups on a dedicated backup server in the same data center as the production database. The security team wants to ensure that a ransomware infection on the production network cannot encrypt or delete the backup copies. Which control should the administrator implement?

Medium
226

A server administrator is configuring a new server with four 1TB NVMe drives. The server will host a database that requires high random read/write performance and redundancy. Which of the following RAID levels should the administrator choose?

Medium
227

A server administrator is troubleshooting a server that is not responding to network requests. The server's link lights are on, and the switch port shows activity. The administrator cannot ping the server by IP address from another subnet, but can ping it from a host on the same subnet. What is the most likely cause?

Easy
228

A server configured with RAID 5 has two failed drives. The array is offline and critical data is inaccessible. The administrator has replacement drives available. What should the administrator do to restore the data and array with minimal data loss?

Medium
229

A medium-sized company runs an e-commerce platform on a cluster of three physical servers hosting virtual machines. The disaster recovery plan includes daily backups to a remote data center using Veeam Backup & Replication. The company's annual disaster recovery drill is scheduled for next week. During the drill, the IT team plans to simulate a complete site failure by powering off the primary data center. The recovery time objective (RTO) is 4 hours, and the recovery point objective (RPO) is 1 hour. The team successfully restores the VMs at the remote site, but the application experiences significant performance degradation and many transactions fail due to database inconsistency. Investigation reveals that the backup was taken at 2:00 AM, but the failure occurred at 10:00 AM, and the application's database had transactions between 2:00 AM and 10:00 AM that were not captured. What should the IT team do to improve the recovery process?

Medium
230

A server administrator is troubleshooting a server that is experiencing slow network performance. The server has a 10 GbE network interface card (NIC) connected to a switch port that is configured for 1 GbE. Which of the following is the MOST likely cause of the slow performance?

Medium
231

A technician is preparing to install a replacement hot-swap SAS drive into a production server's front drive bay. The array is currently healthy and the new drive will be used as a global hot spare. Which of the following steps are required to complete the installation safely? (Choose two.)

Medium
232

A server administrator is troubleshooting a network connectivity issue on a server that has recently been moved to a different rack. The server can ping its own IP address but cannot ping the default gateway. Which of the following is the MOST likely cause?

Easy
233

A technician installs additional RAM in a server. After powering on, the server emits a continuous beep code and does not POST. The server documentation indicates this beep code signifies a memory error. Which of the following is the MOST likely cause?

Medium
234

A server administrator is troubleshooting a network connectivity issue where a newly installed server cannot communicate with other devices on the same subnet. The server has a static IP address configured. Other devices on the same switch can communicate. Which TWO of the following could be the cause of the issue? (Select TWO)

Medium
235

A system administrator needs to implement a secure method for remote administrators to manage servers in a data center. The solution must provide encrypted communication, support multi-factor authentication, and allow centralized logging of all administrative sessions. Which solution should be implemented?

Medium
236

A server administrator is troubleshooting a Linux server that was working normally until a new kernel was installed. After rebooting, the server drops into a GRUB prompt instead of loading the operating system, and the administrator needs to restore normal boot as quickly as possible. Which of the following is the MOST appropriate action?

Medium
237

A server administrator is setting up a new Windows Server 2022 server that will host a database. The server has four 10 TB SAS drives. The administrator needs to configure the drives for maximum performance and fault tolerance, allowing the server to continue operating if one drive fails. Which RAID level should the administrator use?

Easy
238

A system administrator must choose a backup method for a file server where the business requires that only files changed since the last backup are copied, and the backup window is very short. Which backup type should the administrator select?

Easy
239

A server administrator is troubleshooting a Windows Server 2019 host that intermittently drops connections to a database application. The administrator reviews Performance Monitor and notices that the Network Interface\Output Queue Length counter for the production NIC frequently exceeds 2. The NIC is a 1GbE adapter, and the switch port is configured for 1GbE full duplex. Which of the following is the MOST likely cause?

Hard
240

A datacenter administrator is reviewing physical security for a new colocation cage that houses servers containing regulated data. The cage has a locked mesh door, but the administrator must add a control that logs exactly which employee enters and exits, and when, without requiring a guard. Which solution BEST meets these requirements?

Medium
241

A server administrator is troubleshooting a physical server that intermittently powers off without warning. The server is connected to a UPS, and the UPS logs show no recent power events. The administrator suspects a thermal issue. Which of the following should the administrator check FIRST to confirm this suspicion?

Medium
242

A server administrator is configuring a RAID array for a database server that requires high fault tolerance and performance. The server has eight 2.5-inch SAS drives and a hardware RAID controller with 1GB cache and battery backup. The administrator needs to maximize usable capacity while tolerating the failure of up to two drives. Which RAID level should be used?

Hard
243

A server administrator needs to set up out-of-band management for a new server. Which THREE of the following are essential for successful configuration and remote access? (Choose three.)

Hard
244

A financial services firm requires a disaster recovery solution that provides a Recovery Point Objective (RPO) of near zero and a Recovery Time Objective (RTO) of less than 2 hours. Which of the following site types is MOST appropriate?

Easy
245

A server administrator is configuring a RAID array for a new database server that requires high performance for random writes. The server has eight 1 TB SAS drives and a hardware RAID controller with a battery-backed write cache. The administrator needs to choose a RAID level that provides the best write performance while maintaining redundancy. Which RAID level should the administrator select?

Hard
246

Refer to the exhibit. A Windows file server at a branch office lost network connectivity after a scheduled reboot. The administrator logs in via the console and runs `ipconfig /all`, which shows the output in the exhibit. The server should have a static IP of 10.0.0.50. What should the administrator do to restore connectivity?

Easy
247

A company has a recovery point objective (RPO) of 15 minutes for its database server. The database is 500 GB, and the nightly full backup takes 4 hours. Which backup strategy best meets the RPO while minimizing storage and backup window impact?

Medium
248

A server cannot connect to a specific network share. The administrator can successfully ping the server's IP address from the client. Which of the following is MOST likely causing the issue?

Medium
249

A server technician replaces a failed RAM module with an identical spare. After installation, the server powers on but emits continuous short beeps and does not complete POST. Which of the following is the MOST likely cause?

Easy
250

A server administrator is troubleshooting a server that fails to boot. The server powers on, completes POST, but then displays a message indicating that no bootable device is found. The administrator confirms that the BIOS/UEFI detects the hard drive. Which of the following should the administrator check FIRST?

Easy
251

A technician must replace a failed 2.5-inch hot-swap SAS drive in a running production server. The array supports hot swapping and the replacement drive is on site. Which of the following is the FIRST step the technician should take?

Easy
252

A server technician is mounting a 4U server in a standard 19-inch rack. Which of the following safety precautions is MOST important before lifting the server into place?

Easy
253

A server administrator is troubleshooting a Windows Server 2022 host that presents a RAID 10 array to the operating system as a single 2 TB volume. Users report that write performance to a database on this volume has degraded sharply over the past week, and the array's management utility shows all member drives as online with no rebuild in progress. Which of the following should the administrator check FIRST to identify the cause?

Hard
254

A server running a critical application fails to boot with the error: 'Boot device not found.' The server uses UEFI and a RAID 5 array for the OS. The administrator verifies that all disks are present and powered. Which of the following should the administrator check FIRST?

Hard
255

A server administrator is upgrading the RAM on a server that supports quad-channel memory architecture. They install four identical 16GB DDR4 ECC modules, but the server only recognizes the memory as operating in single-channel mode. Which of the following is the most likely cause?

Medium
256

A server administrator is configuring a new server that will host a database. The server has four 1 TB SAS drives. The administrator wants to maximize performance while providing fault tolerance that can survive a single drive failure. Which RAID level should be used?

Easy
257

A technician is troubleshooting a server that intermittently reports correctable memory errors on a specific DIMM slot in the management controller log. The server has not crashed, and the operating system is stable. The technician reseats the DIMM and cleans the slot, but the errors continue. Which of the following should the technician do next?

Hard
258

A systems administrator is configuring role-based access for a team of server operators. The operators need to restart services and view logs on production Linux servers, but they must not be able to edit configuration files or install packages. The administrator wants to implement this with the least privilege and avoid sharing the root password. Which of the following should the administrator configure?

Medium
259

A server administrator manages a Linux server running a custom application. The application must start automatically at boot and be restarted if it crashes. The administrator creates a systemd unit file at /etc/systemd/system/myapp.service. After running systemctl daemon-reload and systemctl start myapp, the application runs successfully. However, after a reboot, the application does not start. Which command should the administrator run to resolve this?

Medium
260

Following a firmware update on a server's RAID controller, the server fails to boot and reports "No boot device found." The RAID array status shows healthy in the controller BIOS. Which THREE of the following actions should the administrator take to resolve the issue? (Choose three.)

Hard
261

A technician is installing a new server for a department. The server will run a single application that requires high reliability. The operating system should be protected against a single disk failure without sacrificing read performance. Which RAID configuration is MOST appropriate?

Easy
262

A technician needs to replace a failed hot-swap SAS drive in a running server. The array is configured as RAID 6 with a dedicated hot spare. Which of the following describes the correct procedure?

Easy
263

A server fails to boot with an 'Operating System Not Found' error. The BIOS detects the hard drive. What is the MOST likely cause?

Easy
264

A server administrator is troubleshooting a server that fails to boot after a power outage. The server powers on, but no video is displayed, and the administrator hears a series of beeps. Which of the following should the administrator check FIRST?

Easy
265

A server administrator is tasked with installing a new PCIe SSD into a server that will be used for a high-transaction database. The server has available PCIe 4.0 x16 slots. Which of the following should the administrator consider to maximize performance?

Medium
266

A server administrator is troubleshooting a Windows Server 2022 that is experiencing performance degradation. The server hosts a critical application that uses a large amount of memory. The administrator notices that the server has 64 GB of RAM installed, but the application is only using 32 GB and the system is paging heavily. Which tool should the administrator use to identify the process causing the paging?

Medium
267

A technician is tasked with installing a new 2U server into a rack that currently has two servers. The rack is located in a small server room with limited airflow. The technician notices that the rack does not have a blanking panel installed above the new server. What is the most likely consequence of not installing the blanking panel?

Medium
268

A small business has purchased a new server to function as a file server for 25 employees. The server is equipped with four 1TB SATA hard disk drives and no hardware RAID controller; the operating system supports software RAID. The business owner's primary requirements are data redundancy to protect against a single drive failure and maximum usable storage capacity, while keeping costs low. The IT technician is tasked with configuring the storage. The technician evaluates the following options: RAID 0 striping across all four drives; RAID 1 mirroring using two pairs (drives 1+2 mirrored, drives 3+4 mirrored), providing two separate volumes; RAID 5 with parity across all four drives; and RAID 10 combining mirroring and striping. The technician needs to recommend the configuration that best meets the requirements. Which of the following should the technician implement?

Easy
269

A server administrator is troubleshooting a server that is experiencing slow performance. The administrator suspects a storage bottleneck. Which of the following tools or commands should the administrator use to identify the storage bottleneck? (Choose two.)

Hard
270

An administrator manages a Linux-based server hosting a database that contains regulated customer records. The security policy requires that when the server reaches end of life, all data on its solid-state drives be rendered unrecoverable before the drives leave the building. The server will be repurposed to a non-production test role within the same company rather than destroyed. Which action should the administrator take?

Hard
271

A technician is replacing a failed hard drive in a server that uses a hardware RAID controller. The server is running Windows Server 2019. After physically installing the new drive, which of the following should the technician do to make the drive part of the array?

Easy
272

A technician is monitoring a server with a RAID 5 array that has a hot spare. One of the drives fails. Which of the following actions will occur automatically in this configuration?

Easy
273

A server administrator is configuring a new server with four 10GbE network interfaces. The server will host a high-traffic web application that requires maximum throughput and redundancy. Which of the following configurations should the administrator implement?

Medium
274

A small business runs a single file server that stores contracts and financial records. The owner wants an affordable way to recover individual files that users accidentally delete or overwrite, with the shortest possible recovery time. Which solution BEST fits this requirement?

Easy
275

A server fails to power on after a technician replaced the power supply unit (PSU). The technician notices the server's LEDs are off and no fans are spinning. Which of the following should the technician do FIRST?

Medium
276

A datacenter administrator is designing physical security for a new colocation cage that houses servers containing regulated customer data. The cage has a single door, and the administrator wants to ensure that entry is logged and that two authorized staff members must be present for the door to unlock. Which of the following should the administrator implement to meet these requirements?

Hard
277

A server administrator needs to deploy a new Windows Server 2022 server that will run a critical application. The application requires high availability and automatic failover. The administrator has two identical physical servers and a SAN. Which Windows Server feature should the administrator implement?

Medium
278

A server administrator notices that a database server is experiencing high CPU usage at specific times of the day. After checking logs, the administrator finds that a report generation task scheduled at those times is causing the issue. The task cannot be rescheduled or optimized further. Which of the following actions should the administrator take to ensure the server remains responsive for other applications during peak usage?

Medium
279

A server administrator is troubleshooting a server that is exhibiting symptoms of overheating. The server is in a data center with proper cooling. Which of the following should the administrator check? (Choose two.)

Medium
280

A small business plans to deploy a new on-premises server for a virtualization environment. The server will run a hypervisor hosting four virtual machines: a domain controller, a file server, a web application server, and an SQL database server. The business expects moderate workloads and needs to ensure reliable performance and data protection. The procurement department has proposed the following server configuration: single Intel Xeon E-2300 series CPU (4 cores, 8 threads), 16 GB DDR4 ECC RAM, two 1 TB SATA hard drives configured in RAID 1, a single 1 GbE network interface, and a 500W power supply. The IT manager reviews the proposal and identifies several deficiencies that will not meet the expected workload requirements. Which of the following changes to the server configuration is the MOST important to address first to ensure the VMs can run effectively?

Medium
281

A company has a virtualized server environment with two physical hosts running VMware vSphere. Each host has 2 CPUs, 128GB RAM, and 6x 600GB SAS drives in RAID 10. Recently, host A experienced a power surge that caused it to shut down abruptly. After restarting, the host boots but the RAID controller reports that one of the drives in the RAID 10 array is missing. The administrator has a replacement drive of the same model. What should the administrator do first?

Hard
282

A small business has a limited budget and can tolerate up to 72 hours of downtime in the event of a disaster. Which type of disaster recovery site would be most cost-effective?

Easy
283

A financial services firm requires a disaster recovery site that provides immediate failover with zero data loss. Which type of site should they implement?

Medium
284

A technician is preparing to install a new server that will use a hardware RAID controller. The server will host a database requiring high write performance and redundancy. Which of the following RAID levels should the technician configure to meet these requirements?

Medium
285

A server administrator is troubleshooting a Linux server that is experiencing slow disk performance. The server uses a hardware RAID controller with a write-back cache. The administrator notices that the disk write throughput is significantly lower than expected during peak hours. Which of the following is the MOST likely cause?

Medium
286

A retail company runs its order-processing database on a physical server in a colocation facility. Management has approved a hot site contract for disaster recovery. During a tabletop exercise, the CIO asks the administrator to explain what the hot site contract actually provides on day one of a declared disaster. Which statement is accurate?

Hard
287

A server administrator is setting up a new Windows Server 2022 server that will host a database. The server has four 1 TB NVMe drives. The administrator wants to maximize performance and provide redundancy against a single drive failure. Which RAID level should the administrator implement?

Easy
288

A server administrator is configuring a Linux server to use iSCSI storage. The server has two network interfaces, eth0 and eth1, connected to the same switch. The administrator wants to ensure that iSCSI traffic is isolated from regular network traffic and that the iSCSI initiator uses both interfaces for redundancy and increased throughput. Which of the following should the administrator implement?

Hard
289

A datacenter administrator must protect a rack of dual-power-supply servers against a single PDU failure. The rack currently has two rack PDUs, each fed from a separate upstream branch circuit, and each server has both power supplies connected. The administrator wants to confirm that the configuration meets the intended redundancy level before adding more servers. Which action should the administrator take?

Medium
290

A server administrator is troubleshooting a Linux server that is experiencing intermittent network connectivity issues. Users report that connections to the server sometimes time out, and the administrator notices that the network interface card (NIC) is showing a high number of CRC errors and frame errors. Which of the following is the MOST likely cause?

Hard
291

A server administrator is troubleshooting a Windows Server host that runs a database. Users report slow queries, and Performance Monitor shows sustained disk queue length above 2 with average disk sec/transfer over 25 ms on the data volume, while CPU and memory remain well below capacity. The volume resides on a hardware RAID 5 array of 7200 RPM SATA drives. Which of the following is the MOST likely cause?

Hard
292

A server administrator is troubleshooting a server that is experiencing slow response times. After logging in, the administrator runs the command 'iostat -x 5' on the Linux server and observes that the %util for the sda device is consistently at 100%. Which of the following is the MOST likely cause?

Medium
293

A server administrator is configuring a new Windows Server 2022 failover cluster with two nodes. The cluster will host a highly available file server role. The administrator needs to ensure that the file server role can automatically fail over to the other node if the active node fails. Which of the following should the administrator configure?

Medium
294

A company has a Windows Server 2022 server running Hyper-V. The server hosts a virtual machine (VM) that runs a database. The VM is configured with 16 GB of static memory. Users report that the database performance is slow during peak hours. The administrator notices that the Hyper-V host has 32 GB of RAM and is running three other VMs, each with 8 GB of static memory. The host is experiencing high memory pressure. Which of the following should the administrator implement to improve performance?

Hard
295

A datacenter technician is preparing to install a new 2U server that uses a hardware RAID controller with a battery-backed write cache. The server will run a transactional database. The technician wants to ensure the write cache remains enabled during a power loss. Which of the following should the technician verify FIRST?

Hard
296

A company runs a critical web application on a Windows Server 2022 with IIS. The application uses a SQL Server 2019 database on a separate server. Users report that the application sometimes becomes unresponsive for 30–60 seconds, then recovers. Performance Monitor on the web server shows a spike in ASP.NET Requests Queued and a drop in Requests/Sec during the incidents. The database server shows no performance issues. Which action should the administrator take to resolve the intermittent unresponsiveness?

Hard
297

A Linux server is experiencing random reboots. The administrator checks the system logs and finds multiple entries indicating a machine check exception (MCE). The server is running the latest kernel and all firmware is up to date. Which of the following is the MOST likely cause of the reboots?

Hard
298

A technician is preparing to add a second processor to a dual-socket server that currently has one CPU installed. The server will run a memory-intensive virtualization workload. Which of the following steps are required for the upgrade to function correctly? (Choose two.)

Medium
299

A technician is adding a second CPU to a previously single-socket 2U server. The server boots but the operating system reports only half of the newly installed CPU's memory channels as populated, and total RAM is lower than expected. Which of the following is the MOST likely cause?

Medium
300

An administrator manages a two-node Windows Server 2022 cluster that hosts a critical SQL Server instance. The cluster uses shared storage on a SAN. During a failover test, the administrator observes that the SQL Server role takes several minutes to come online on the surviving node, exceeding the recovery time objective. The application team confirms the database itself starts quickly once the disk resources are available. Which factor should the administrator investigate first?

Hard
301

A server administrator is troubleshooting a Windows Server 2022 that cannot connect to a remote iSCSI target. The server has two network adapters: one for LAN traffic and one dedicated to iSCSI. The administrator verifies that the iSCSI adapter has a valid IP address, can ping the target, and that the iSCSI service is running. However, the iSCSI initiator shows the target as unavailable. Which action should the administrator take next?

Easy
302

A Linux database server has recently exhibited sluggish response times. An analysis of system performance shows high CPU wait I/O, frequent page swapping, and a low cache hit ratio. The server has 16GB of RAM, and the database itself stores 100GB of active data. Which of the following is the MOST effective long-term solution to improve performance?

Hard
303

A medium-sized business runs a critical internal application on a single physical server running Windows Server 2019. The application is memory-intensive, often using up to 24 GB out of 32 GB RAM during peak hours. Over the past week, the server has experienced three unexpected reboots, each occurring during peak load. The server is not part of a cluster, and all data is stored on local disks. You have checked the Windows System event log and found Event ID 41 (Kernel-Power) indicating an unexpected shutdown. There are no related critical errors in the Application log. You have also reviewed the server's firmware logs and found multiple corrected memory errors (ECC) over the last month, with an increase in frequency just before each crash. The server is under warranty, and the hardware vendor's diagnostic tools report a failing memory module in DIMM slot A1. The vendor has recommended replacing the faulty DIMM immediately. However, the server is currently processing critical end-of-quarter financial reports that cannot be interrupted for at least 6 hours. Which of the following is the BEST course of action to minimize risk of data loss and downtime until a planned maintenance window?

Medium
304

A server displays a 'CMOS battery low' error during POST. After the technician replaces the CR2032 battery with a new one, the server still loses date and time settings when disconnected from power. Which of the following should the technician try NEXT?

Medium
305

A server administrator notices that a production file server intermittently loses network connectivity for a few seconds, and users report dropped SMB sessions. The switch port shows no errors, and the server's NIC link LED stays solid. The administrator suspects a duplex mismatch. Which tool should the administrator use to verify the NIC's current speed and duplex settings on a Linux server?

Medium
306

A server administrator is configuring a new server that will host a high-traffic web application. The administrator needs to optimize the server's network performance. Which TWO of the following should be implemented? (Choose two.)

Hard
307

A company's backup policy sends nightly backups to a tape library in the same building as the production servers. A recent fire destroyed the server room, and the tapes were damaged by heat and water. Which change BEST addresses this single point of failure?

Medium
308

A server administrator is troubleshooting a newly installed 4U storage server whose fans run at maximum speed continuously even though inlet temperatures read normal. The chassis uses a passive backplane with eight high-capacity 3.5-inch drives, and the administrator recently replaced three drives with higher-RPM models. Which of the following is the MOST likely cause?

Hard
309

A server administrator is troubleshooting a Windows Server 2019 system that reports a stop error (blue screen) with the code CRITICAL_PROCESS_DIED. The server reboots automatically and then works normally for a few hours before the error recurs. The administrator has already updated all drivers and installed the latest Windows updates. Which action should the administrator take next to gather more detailed diagnostic information about the crashes?

Medium
310

A technician is preparing to add four new hot-swap SAS drives to a running server that uses a hardware RAID controller. Before inserting the drives, which of the following actions should the technician take? (Choose two.)

Medium
311

A server administrator is troubleshooting a server that is unable to connect to the network. The administrator checks the NIC and sees that the link light is off. Which of the following is the FIRST thing the administrator should check?

Easy
312

Your organization is migrating a Windows Server 2019 file server with 2 TB of shared data to a new server running Windows Server 2022. The migration must minimize user downtime and ensure file permissions are preserved. Users access files during business hours (8 AM to 6 PM) and the migration must be completed within a four-hour window starting at 10 PM on Saturday. You plan to use DFS Replication (DFSR) for initial data copy and then perform a final synchronization during the cutover. After setting up DFSR between the old and new servers, you realize that the initial replication will take approximately 12 hours due to the large number of files. What should you do to complete the migration within the allowed window?

Hard
313

A technician is preparing to install a new server into a rack. The server will host a critical application and requires high availability. The technician needs to ensure that the server's power configuration supports redundancy. Which of the following should the technician do? (Choose two.)

Medium
314

A server administrator is troubleshooting a Windows Server 2019 host that runs a line-of-business application. Users report the application is extremely slow during business hours, but performance is normal at night. Performance Monitor shows high 'Avg. Disk sec/Read' on the data volume and a disk queue length consistently above 2. The volume is a single NTFS partition on a RAID 5 array of 7.2K RPM SATA drives. Which of the following is the MOST likely cause of the slow performance?

Hard
315

A server administrator is replacing a failed hard drive in a RAID 1 array on a production server. The server supports hot-swap drives. The administrator removes the failed drive and inserts a new drive of the same model and capacity. Which of the following should the administrator do NEXT to ensure the array is rebuilt correctly?

Medium
316

A server administrator is configuring a new file server that will store sensitive financial documents. The security policy requires that data be encrypted at rest and that the encryption keys be protected by the server's TPM. Which of the following should the administrator implement?

Easy
317

A network administrator needs to configure centralized authentication for network devices. The solution must provide encryption of the entire authentication process, support for multiple protocols, and accounting of user actions. Which protocol should be used?

Hard
318

A technician is installing a used 2U rack server that was pulled from another rack. The server's rail kit is rated for a maximum load of 35 kg, and the chassis weighs 32 kg with no drives installed. Before sliding the chassis onto the rails, which of the following should the technician do FIRST?

Medium
319

A small business runs a single physical server that hosts its accounting application and database. The owner wants a backup approach that allows recovery to any point within the last 14 days without restoring a full backup each time. Which backup type should the administrator implement?

Easy
320

A system administrator notices unusual file encryption activity on a file server. The activity appears to be rapidly spreading to other servers, and ransom notes are appearing. Which of the following should the administrator do FIRST?

Hard
321

A data center technician must install a new 1U server into a rack that already contains several servers drawing significant power. The rack's power distribution unit reports that the current load is near its rated capacity. Which of the following should the technician do first to avoid overloading the circuit?

Medium
322

Refer to the exhibit. A Linux server's local firewall is configured as shown. The administrator is unable to perform backups to a network-attached storage (NAS) device using TCP port 10000. Which firewall rule is causing the issue?

Hard
323

A server administrator is troubleshooting a Windows Server 2019 that randomly reboots. The administrator suspects a hardware issue. Which two actions should the administrator take to gather evidence of the cause? (Choose two.)

Hard
324

A technician is preparing to install a new rack-mount server that will host a database requiring high random read performance. The server's chassis supports up to eight 2.5-inch drive bays, and the technician must choose a drive technology that provides the lowest latency and highest IOPS. Which of the following drive types should the technician select?

Easy
325

A server with dual redundant power supplies shuts down unexpectedly. One power supply has a solid amber LED. What is the most likely cause?

Easy
326

A small business needs a disaster recovery site that can be brought online within 2 hours of a primary site failure. The business can tolerate minimal data loss. Which type of recovery site should they implement?

Easy
327

A technician is tasked with installing a new internal SSD into a server. The server will be used for a database that requires high write endurance. Which of the following SSD types should the technician choose?

Easy
328

A server administrator is configuring a Linux server to automatically mount an NFS share at boot. The server is running Ubuntu 22.04 LTS. The administrator adds the following line to /etc/fstab: 'server:/export /mnt/nfs nfs defaults 0 0'. After rebooting, the mount is not present, and the system logs show an error indicating the mount failed. Which of the following is the most likely cause?

Hard
329

A server administrator is troubleshooting a Windows Server that is experiencing performance degradation. The administrator suspects a memory leak in a custom application. Which of the following tools should the administrator use to monitor the application's memory usage over time?

Medium
330

A small accounting firm runs a single physical server that hosts all of its line-of-business applications. The owner wants a backup strategy that allows the entire server, including the operating system, applications, and data, to be restored to dissimilar hardware after a catastrophic failure. Which backup type should the administrator implement?

Easy
331

A server administrator needs to configure a RAID array for a new file server that will store large media files. The requirement is to maximize available storage capacity while providing redundancy against a single drive failure. The server has four 4 TB SAS drives and a hardware RAID controller. Which RAID level should the administrator choose?

Easy
332

A server administrator is troubleshooting a RAID controller issue on a production server. The server has a hardware RAID 5 array with three drives. The administrator notices that one drive's status LED is solid amber, and the RAID controller management utility reports the array as degraded. The administrator has a replacement drive of the same model and capacity. Which action should the administrator take to restore the array to optimal status?

Medium
333

A security administrator is configuring a Linux server to allow only SSH and HTTPS traffic from a specific management subnet while blocking all other inbound traffic. The server has two network interfaces: eth0 (public) and eth1 (management). Which command should the administrator use to view the current iptables rules with line numbers to identify the rule positions before modifying them?

Hard
334

Refer to the exhibit. A server administrator is troubleshooting a DNS resolution issue on a Windows Server 2019. The exhibit shows the output of the command `nslookup` queried against the server's own IP. Based on the output, what is the most likely cause of the resolution failure?

Hard
335

A server administrator is troubleshooting a server that fails to power on. The administrator presses the power button, but nothing happens: no fans, no lights, no beep codes. The server is connected to a known-good power outlet. Which of the following should the administrator check FIRST?

Easy
336

Refer to the exhibit. A server administrator runs a dmidecode command to check memory configuration and obtains the output shown. The system supports DDR4-2666, but all DIMMs are running at 1866 MT/s. Which action will allow the memory to run at the maximum supported speed?

Hard
337

A server administrator configures a scheduled task to back up a database using a command-line tool. The task runs successfully when executed manually, but fails when run via the task scheduler. The log shows 'Error: Access denied.' What is the MOST likely cause?

Medium
338

Refer to the exhibit. A server administrator encounters an authentication issue when accessing a web server. The exhibit shows an error from the Domain Controller's event log. What is the most likely cause of the problem?

Hard
339

An administrator needs to remotely manage several Linux servers securely without using passwords. Which of the following is the BEST method?

Easy
340

A user attempts to access a shared folder named \\Server\Finance. The share permissions are set to 'Everyone – Full Control'. The NTFS permissions on the folder grant the user 'Read & Execute' but deny 'Write'. What is the user's effective permission when accessing the share over the network?

Easy
341

A web application server is experiencing intermittent 502 Bad Gateway errors during peak usage hours. The server's reverse proxy logs show connections to the backend application server being refused. The application server's resource monitor shows CPU utilization at 95% and memory utilization at 40%. Which of the following actions is MOST likely to resolve the issue?

Hard
342

Which TWO of the following are considered best practices for securing a server's remote management access?

Medium
343

A server has a RAID 5 array with four drives. One drive fails and is replaced. During the rebuild, a second drive reports a media error and the rebuild fails. What should the administrator do FIRST to minimize the risk of permanent data loss?

Hard
344

A server administrator is troubleshooting a production server that boots successfully but intermittently reboots without warning. The IPMI event log shows no thermal or power events, and the OS logs show nothing before each reset. The administrator suspects a hardware fault and wants to capture the most detailed low-level diagnostic information the next time the server hangs or resets. Which of the following should the administrator configure to BEST collect this data?

Medium
345

A server administrator is troubleshooting a server that is unable to boot from its local RAID 1 array. The server POSTs successfully, but after the RAID controller initialization, the message 'No boot device found' is displayed. The administrator verifies that both drives in the array are online and the RAID controller reports the array as optimal. Which of the following is the MOST likely cause?

Medium
346

A company is implementing a disaster recovery strategy for its on-premises VMware vSphere environment. The IT manager wants to ensure that virtual machines can be recovered at a secondary site within 4 hours of a primary site failure. The secondary site has identical hardware but no active VMs. The company has a limited budget and wants to minimize ongoing costs. Which of the following solutions BEST meets these requirements?

Hard
347

A server administrator is troubleshooting a Windows Server 2022 that is experiencing performance issues. The administrator suspects a disk bottleneck. Which of the following Performance Monitor counters should the administrator review to identify the average time that read and write operations take on the physical disk?

Medium
348

A technician is installing a new SSD into a server that supports NVMe drives. The server has an M.2 slot that supports PCIe 3.0 x4 and SATA. The technician installs an M.2 NVMe SSD into the slot, but the server does not detect the drive. Which of the following is the most likely cause?

Hard
349

A small business leases a single rack in a colocation facility. The owner wants a disaster recovery arrangement that provides a pre-configured alternate site with power, cooling, and network but where the company must supply and install its own servers after a disaster. Which type of site best matches this requirement?

Easy
350

A company has a Windows Server 2022 server that runs a critical application. The server has a single power supply. The IT manager wants to ensure that the server can continue to operate during a brief power outage and can shut down gracefully during an extended outage. Which solution should the administrator implement?

Medium
351

A Linux administrator is troubleshooting a production web server that randomly stops accepting connections. The system log shows 'kernel: TCP: request_sock_TCP: Possible SYN flooding on port 443' followed by dropped connections. The server is behind a load balancer and legitimate traffic is high but expected. The administrator suspects the SYN backlog is too small for the current connection rate. Which of the following should the administrator adjust to increase the number of half-open connections the kernel will queue?

Hard
352

A technician is troubleshooting a server that intermittently reboots under heavy load. The server has dual power supplies connected to separate PDUs. The technician notices that one PDU is on a branch circuit that also powers a large air compressor. Which of the following is the most likely cause of the reboots?

Hard
353

A company performs a full backup on Sunday and incremental backups Monday through Saturday. A server fails on Thursday at 10:00 AM. Which sequence correctly restores the data?

Easy
354

A server administrator is troubleshooting a server that is randomly rebooting. The administrator reviews the system logs and finds event ID 41 (Kernel-Power) in the Windows System log. Which of the following is the MOST likely cause?

Medium
355

A Linux server administrator notices that a production server's root filesystem is 100% full. The server is still running but new log entries are failing to write. The administrator runs `df -h` and sees /dev/sda3 at 100% usage, but `du -sh /` reports only 45 GB used on a 100 GB filesystem. Which command should the administrator use to identify the large deleted file that is still held open by a process?

Hard
356

A datacenter technician is troubleshooting a rack-mounted server whose front-panel health LED is solid amber and whose management interface reports a fan failure in bay 3. The server is still running production workloads. Which of the following should the technician do FIRST?

Easy
357

A server configured with a RAID 5 array and a hot spare experiences intermittent crashes under heavy disk I/O. A technician suspects a failing drive. Which of the following should the technician do FIRST?

Medium
358

A server administrator needs to deploy a new server that will host a database requiring high random read/write performance and maximum fault tolerance. The server has eight drive bays. Which RAID level should the administrator choose?

Easy
359

A server administrator is troubleshooting a Windows Server that is experiencing intermittent network disconnections. The server has a single NIC connected to a switch. Users report that access to file shares drops for about 30 seconds several times a day. The administrator reviews the switch logs and sees no port flapping. Which Windows tool should the administrator use to determine if the NIC is repeatedly resetting or if a driver is causing the disconnections?

Hard
360

Users report slow file server performance. The administrator suspects a single process is consuming excessive CPU and wants to analyse its threads and handles. Which tool should be used?

Medium
361

A server administrator needs to remotely manage a Windows Server 2022 Core installation that is located in a secure data center. The administrator's workstation runs Windows 11 and is on the same corporate network. Which of the following tools should the administrator use to manage the server with the GUI-based tools available?

Easy
362

A security team is reviewing physical security controls for a data center that houses several CompTIA Server+ managed servers. The team wants to implement measures that specifically prevent unauthorized personnel from accessing server racks and deter tailgating. (Choose two.)

Medium
363

A mid-sized e-commerce company experienced a ransomware attack that encrypted all on-premises servers and their locally attached backup storage. The attack occurred on a Friday evening; the company was closed over the weekend. By Monday morning, the IT team discovered the encryption and found a ransom note demanding $500,000 in Bitcoin. The company has a disaster recovery plan that calls for restoring from daily tape backups stored offsite. However, the most recent offsite tape was taken home by a backup operator for the weekend and has not been returned. The tape contains full backups from Wednesday. The IT team has clean installation media and application software available. The company's RPO is 24 hours, and RTO is 48 hours. Management wants to minimize data loss and avoid paying the ransom. Based on this scenario, which of the following should the IT team do to recover the business operations?

Hard
364

A company's disaster recovery plan requires that a critical database server be restored at an alternate site within a recovery time objective (RTO) of 4 hours. The database is 2 TB in size, and the company has a 100 Mbps WAN link between the primary and alternate sites. The administrator needs to choose a replication method that meets the RTO without requiring manual intervention at the alternate site. Which solution should the administrator implement?

Hard
365

A large financial services company must comply with federal regulations mandating quarterly disaster recovery tests. Their primary data center in New York hosts all trading applications, and a hot site in Chicago is maintained with real-time data replication via synchronous mirroring. During the last DR test, the IT team successfully failed over network and storage within 8 minutes, meeting the 15-minute RTO for connectivity. However, they encountered a major issue: the hot site's firewalls, intrusion detection systems, and application-level access controls were not configured to match the primary environment. The security team had to manually create firewall rules, update IDS signatures, and reconfigure access policies based on documentation, which took over 4 hours. As a result, the total system readiness exceeded 4.5 hours, causing a significant gap in trading operations. The regulatory auditor noted this deficiency and required a corrective action plan. The company must ensure that the next DR test achieves full operational readiness, including security controls, within the 15-minute RTO. The IT budget is already allocated for the current fiscal year, so large capital expenditures are not possible, but the team can leverage existing tools and automation. Which of the following is the BEST approach to address this issue?

Hard
366

A server experienced an unexpected power loss. After power is restored, the server boots successfully, but several critical services fail to start automatically. The administrator checks the system logs and finds errors indicating missing LUNs from a SAN. The SAN administrator confirms the SAN is online and the LUNs are assigned to the server's WWNs. The server uses FC HBAs. Which TWO steps should the administrator perform to diagnose the issue?

Medium
367

Users report that a file server responds to ping by IP address but fails when they browse to it by hostname. The server's IP address has not changed, and other servers on the same subnet resolve correctly. Which of the following should the administrator check FIRST?

Easy
368

Refer to the exhibit. A web server is running on port 80, but users are unable to connect. The administrator has confirmed the web server service is running. The output of iptables -L is shown. What is the most likely reason for the connectivity issue?

Medium
369

A company operates a rack of servers in a shared datacenter. Management wants to ensure that if a malicious actor gains physical access to the rack, they cannot simply remove a hard drive and read the data on another system. Which control BEST addresses this risk?

Medium
370

A server administrator is investigating a Linux file server that periodically becomes unresponsive for several minutes. During an outage, the administrator runs top and iostat and observes that %iowait is extremely high while CPU utilization remains low. Disk latency on the data volume spikes to several seconds. The storage is a hardware RAID 10 array with healthy member disks, and no rebuild or patrol read is active. Which of the following are the MOST likely causes of the observed latency? (Choose two.)

Hard
371

A company stores nightly full backups on an external USB drive that is rotated weekly and kept in a locked cabinet in the same server room. A recent audit found that a fire in the server room would destroy both the production data and the backup drive. The company wants to improve the backup strategy so that a site-wide disaster does not eliminate all copies, while keeping costs low. Which of the following is the BEST change to meet these requirements?

Hard
372

A datacenter technician is asked to physically destroy the storage media from a set of decommissioned servers that held customer records. The company's policy requires that the media be rendered unreadable and that a certificate of destruction be retained. Which action best satisfies this requirement?

Easy
373

A security administrator is hardening a Linux server that hosts a public web application. The server currently allows root login via SSH and uses default SSH port 22. The administrator wants to reduce the attack surface by implementing SSH best practices. Which two actions should the administrator take? (Choose two.)

Hard
374

A company has a Windows Server 2022 server that runs a custom application which writes heavily to a local SSD. The administrator notices that the SSD's wear-leveling indicator shows significant wear after only six months. The server logs show frequent small write operations. Which action should the administrator take to reduce SSD wear while maintaining performance?

Hard
375

A company wants to protect its Microsoft SQL Server database with a backup strategy that provides point-in-time recovery up to every 15 minutes. The database is critical and runs on a dedicated server. Which backup schedule should be implemented?

Easy
376

A server administrator is configuring a new Windows Server 2022 file server. The server will host a share that must be accessible to both Windows and macOS clients. The administrator needs to ensure that file permissions are enforced consistently across both platforms. Which two of the following should the administrator implement? (Choose two.)

Medium
377

A storage administrator is troubleshooting a SAN-attached server that intermittently loses access to its LUNs. The Windows Server event log shows repeated 'Disk' warning events with the message that a device has been surprise-removed, and the host bus adapter logs report link resets. The SAN fabric switches show no errors, and the array reports all ports healthy. Which of the following is the MOST likely cause?

Hard
378

A technician is installing a new 1U server into a rack that has been in production for three years. The server arrives with a rail kit that requires the rails to be attached to the server chassis before mounting. After attaching both rails, the technician notices the server does not slide smoothly and the front of the server is not flush with the other servers in the rack. Which of the following is the MOST likely cause?

Medium
379

A system administrator is setting up a new server rack. The server has redundant power supplies. The administrator wants to ensure that the server remains operational if one power supply fails or if one power source fails. Which of the following should the administrator do?

Easy
380

A company is expanding its data center to support a new four-node database cluster for a critical application requiring 99.999% uptime, meaning only minutes of downtime per year. Each server node has dual 1000W power supplies. The facility provides two independent power feeds from separate utility substations, each backed by its own online double-conversion UPS. There are four 20A/208V PDUs available, two per power feed. The design must ensure that the loss of any single power feed, any single UPS, or any single PDU does not cause any server to lose power or impact the cluster's availability. The servers are located in a single rack, and cabling must follow best practices for manageability and airflow. The IT architect is evaluating different power distribution strategies to meet these fault-tolerance requirements. Which of the following configurations achieves full redundancy with no single point of failure in the power path?

Hard
381

To comply with company security policies, a server administrator must disable all unnecessary services on a newly deployed Windows Server 2019. The server will only act as a file server with no web hosting role. Which service should be disabled?

Easy
382

An administrator is preparing a new rack-mount server that will host a database with heavy random-read workloads. The server has four NVMe U.2 bays and two SATA bays. The administrator wants the highest possible random-read IOPS with the least latency, and the data must remain available if any single drive fails. Which of the following storage configurations should the administrator implement?

Hard
383

A server administrator is troubleshooting a server that unexpectedly rebooted overnight. The administrator reviews the system logs and finds Event ID 6008 in the Windows System log, indicating an unexpected shutdown. There are no corresponding events for a thermal trip or power failure. Which of the following should the administrator check FIRST to determine the cause?

Medium
384

A server administrator is investigating intermittent network disconnects on a production server. The server is connected to a Cisco switch with a single Cat 6a cable. The administrator runs a cable tester and finds that the cable passes all tests. However, users report that connectivity drops for a few seconds multiple times per day. The switch logs show that the port flaps (goes up and down) during these times. Which of the following is the MOST likely cause?

Hard
385

A junior administrator is asked to document the recovery point objective for a critical order-processing system. What does the recovery point objective define?

Easy
386

An organization's disaster recovery plan specifies an RPO of 4 hours. Their current backup schedule performs a full backup at midnight and incremental backups every 2 hours from 8:00 AM to 8:00 PM. A server failure occurs at 3:00 AM, and data created after 8:00 PM the previous day is permanently lost. Which of the following is the MOST likely reason?

Medium
387

A server administrator is troubleshooting a server that has been experiencing random reboots and unexpected shutdowns. The administrator has checked the system logs and found multiple 'Machine Check Exception' (MCE) events and 'Corrected Memory Error' warnings. The server is running mission-critical applications and cannot be taken offline for extended periods. Which of the following should the administrator perform to diagnose and resolve the issue? (Choose two.)

Hard
388

Refer to the exhibit. A server administrator is reviewing security logs after a suspected brute-force attack on the SSH service. The following excerpt from /var/log/secure is displayed. Which security control would have been MOST effective in preventing the successful login?

Hard
389

A server administrator is configuring a Windows Server 2022 as an iSCSI target. The server will provide storage to multiple iSCSI initiators. The administrator wants to ensure that only authorized initiators can access the storage and that data is encrypted in transit. Which of the following should the administrator configure?

Hard
390

A server fails to complete POST and emits a series of beeps: two long, three short. According to the manufacturer's documentation, this beep code indicates a memory error. The server has eight DIMMs installed. Which of the following steps should the technician perform FIRST?

Easy
391

A server's performance degrades significantly during peak usage hours. Monitoring shows high memory utilization and consistently high disk I/O. Which of the following should the technician check FIRST?

Medium
392

An organization wants to test its disaster recovery plan with minimal disruption to business operations and minimal cost. The test should verify the plan's effectiveness by discussing scenarios. Which type of test should they perform?

Easy
393

During a security incident, a server is suspected to be compromised by malware. The incident response team needs to preserve evidence and minimize impact. Which TWO actions should be taken FIRST? (Select TWO.)

Easy
394

An administrator must choose a physical security control for a new server room door that will allow staff to enter quickly during an emergency while still recording who entered and when. Which solution BEST fits?

Medium
395

A server administrator is assembling a new high-performance server using a Supermicro X12 motherboard, two Intel Xeon Gold 5317 processors (LGA 4189 socket), and 16x 32GB DDR4-3200 ECC LRDIMMs for a total of 512GB of memory. The chassis has redundant 1600W power supplies. After assembling all components, the administrator powers on the server. All fans start spinning at full speed, and the front panel LEDs illuminate. However, the server does not POST, there are no beep codes, and no video output is displayed. The motherboard has a two-digit hexadecimal POST code LED display, which shows '00' and does not change. The motherboard manual states that code '00' indicates the CPU is not detected or has failed. The processors are confirmed to be the correct socket type and stepping as required by the motherboard. What should the technician do FIRST?

Medium
396

A server administrator is tasked with replacing a failed power supply in a redundant power configuration. The server has two hot-swappable power supplies. Which of the following should the administrator do FIRST to safely replace the failed unit?

Easy
397

Refer to the exhibit. A Linux server started reporting I/O errors to its local disk. The administrator runs `dmesg` and sees the output shown. Which of the following is the MOST likely cause of the errors?

Hard
398

A company is creating a disaster recovery plan for its on-premises data center. Which THREE elements are essential to include in the DR plan? (Select THREE.)

Medium
399

A server administrator is troubleshooting a server that intermittently loses network connectivity. The administrator suspects a hardware issue. Which two components should the administrator check first? (Choose two.)

Medium
400

A server administrator is troubleshooting a Linux web server that has become unresponsive to SSH and HTTP requests. The administrator connects through the out-of-band management console and finds the system load average extremely high, with a large number of processes in the D state. The administrator suspects an I/O bottleneck. Which of the following commands should the administrator use to identify the processes and devices contributing to the bottleneck? (Choose two.)

Hard
401

A technician is installing a new 2U server into an existing rack. The rack is fully populated with servers that use front-to-back airflow. The new server also uses front-to-back cooling. The technician notices gaps between some servers and several open rack units without equipment. To ensure optimal airflow and prevent potential thermal issues, which of the following actions should the technician take FIRST?

Medium
402

After an unexpected power outage, a server fails to boot and displays an error indicating a degraded RAID array. The server has a RAID 5 configuration with four disks. One disk has failed, but the hot spare did not automatically rebuild. The administrator needs to restore data availability as quickly as possible. Which action should the technician take FIRST?

Medium
403

A server administrator is troubleshooting a Linux server that runs a critical database. Users report that queries have become extremely slow, but the server still responds to pings and SSH sessions. Running top and iostat shows the CPU is mostly idle while disk utilization is pinned near 100 percent with high await times on the data volume. Which of the following is the MOST likely cause?

Hard
404

A technician is installing a new server in a data center. To prevent electrostatic discharge (ESD) damage, which of the following should the technician do FIRST?

Easy
405

A server administrator is configuring a new Windows Server 2022 server that will host a database. The database requires high write performance and low latency. The server has four 800 GB SSDs and a hardware RAID controller with a 2 GB battery-backed write cache. Which RAID level should the administrator choose to meet the performance requirements while providing redundancy?

Medium
406

A server administrator is setting up a new Windows Server 2022 file server that will host sensitive financial documents. The administrator needs to implement file screening to prevent users from saving unauthorized file types. The administrator wants to block files with extensions .exe, .mp3, and .avi. Which two actions should the administrator perform? (Choose two.)

Medium
407

A technician is installing a new PCIe expansion card into a rack-mounted server. The server's chassis has a riser card to accommodate low-profile cards. After installing the card and powering on, the server POSTs but the operating system does not detect the card. The card is known to work in another server. Which of the following should the technician check FIRST?

Hard
408

A server administrator is troubleshooting a server that intermittently loses network connectivity. The server is connected to a switch port that is configured for 802.1X authentication. The administrator checks the switch logs and sees repeated authentication failures for the server's MAC address. The server's operating system logs show no network errors. Which of the following is the MOST likely cause of the connectivity loss?

Easy
409

A server administrator is troubleshooting a Windows Server 2019 file server that occasionally becomes unresponsive for several minutes. Users report that during these times, they cannot access shared folders. The administrator checks Task Manager and sees that disk queue length is consistently high, and the disk active time is near 100%. Which of the following is the MOST likely cause?

Medium
410

An administrator is designing physical security for a new server room that also houses the company's network core. Management wants to prevent an unauthorized visitor from plugging a laptop into an unused wall jack and capturing traffic. Which control BEST addresses this specific threat?

Hard
411

A technician is installing a new rack-mounted server and needs to connect it to the network. The server has two onboard Ethernet ports labeled NIC1 and NIC2. The network team requires redundant connectivity to two different switches. Which of the following should the technician implement?

Easy
412

A company has a small virtualized environment with two ESXi 7.0 hosts (HostA and HostB) managed by vCenter Server. They use a shared iSCSI storage array for all VMs. The network consists of a single physical switch that connects the hosts, storage, and management traffic using VLANs. Yesterday, the switch failed and was replaced with an identical model. After restoring the configuration from a backup, all VMs on HostA are working normally, but all VMs on HostB show 'network disconnected' in the vSphere console. The VMs on HostB are still running, but they cannot communicate with any other device on the network. HostB itself is reachable via its management IP and can access the storage array. The administrator has verified that the physical cables are correct and the NICs are up on HostB. The VLAN configuration on the new switch was restored for the ports connecting HostB, but the issue persists. Which of the following actions should the administrator perform FIRST to restore connectivity?

Hard
413

A server administrator is troubleshooting a Linux server that is experiencing random reboots. The administrator checks the system logs and finds multiple entries indicating a machine check exception (MCE). The administrator suspects a hardware issue. Which of the following should the administrator do to further diagnose the problem? (Choose two.)

Hard
414

A server administrator is troubleshooting a Windows Server 2019 host that exposes an iSCSI LUN as a data volume. The volume is set to mount automatically, but after a reboot the drive letter changes and the backup job that targets E:\ fails. The administrator needs the volume to consistently receive the same drive letter after every restart. Which of the following should the administrator configure?

Medium

Frequently asked questions

What does the scenario questions domain cover on the SK0-005 exam?
scenario questions questions test whether you can apply the concept in context, not just recognise a definition.
How many questions are in this domain?
This page lists all 414 scenario questions questions in the SK0-005 question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
What is the best way to practise this domain?
Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
Can I practise only scenario questions questions?
Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.