How many Select Two (Multi-Select) Questions questions are on this page?

This page has 9 Select Two (Multi-Select) Questions scenario questions for the SK0-005 exam, each with detailed explanations and wrong-answer analysis.

How should I approach SK0-005 scenario questions?

Read the full scenario before looking at the answer options. Identify the constraint or requirement in the scenario, then eliminate options that are generally true but wrong for this specific case. Scenario questions reward careful reading over pattern matching.

← Back to CompTIA Server+ SK0-005 questions

Scenario-based practice

Select Two (Multi-Select) Questions

Practise CompTIA Server+ SK0-005 practice questions — original exam-style scenarios covering every exam domain, with detailed explanations, wrong-answer analysis, and common exam traps.

Start full practice test Read exam guide

scenario questions

SK0-005

exam code

CompTIA

vendor

Scenario guide

How to approach select two (multi-select) questions

Multi-select questions tell you to 'Choose TWO' or 'Choose THREE'. Getting partial credit is not a thing — you must select all correct answers with no incorrect ones. The stem always states how many to choose, so trust it. These questions require precision, not best-guess elimination.

Quick answer

Select Two (Multi-Select) Questions questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Practice scenarios

Question 1mediummulti select

Full question →

Which TWO of the following are considered best practices for securing a server's remote management access?

A
Use SSH key-based authentication
SSH keys provide a more secure alternative to passwords, using cryptographic keys that are resistant to brute-force attacks.
B
Enable default administrative shares
Why wrong: Default administrative shares (such as ADMIN$) are often targeted by attackers; they should be disabled if not needed.
C
Allow all inbound ICMP
Why wrong: Allowing all ICMP traffic can expose the server to ping floods and help attackers map the network.
D
Disable unused services
Disabling services that are not required reduces the number of potential entry points for attackers.
E
Use telnet for remote CLI
Why wrong: Telnet transmits data, including credentials, in cleartext and is considered insecure; SSH should be used instead.

Full breakdown with real-world context →

Question 2mediummulti select

Full question →

A SQL Server database administrator wants to backup a large database (500 GB) with minimal impact on transaction log growth and recovery time. Which TWO backup strategies should the administrator implement? (Choose two.)

A
Perform a tail-log backup before each full backup
Why wrong: Tail-log backups are used for point-in-time recovery after a failure, not as a regular strategy to manage log growth.
B
Perform weekly full backups
Full backups provide a complete copy of the database and are required as a base for differential and log backups.
C
Perform transaction log backups every 15 minutes
Frequent log backups truncate the transaction log, preventing it from growing too large, and enable point-in-time recovery.
D
Perform daily differential backups
Why wrong: Differential backups reduce time but still require a full backup; they don't control log growth.
E
Perform hourly copy-only backups
Why wrong: Copy-only backups do not truncate the transaction log, so they do not help manage log growth.

Full breakdown with real-world context →

Question 3hardmulti select

Full question →

A server administrator needs to set up out-of-band management for a new server. Which THREE of the following are essential for successful configuration and remote access? (Choose three.)

A
A DHCP server configured to provide an IP to the management interface.
Why wrong: While convenient, DHCP is not essential; a static IP can be assigned manually to the management interface.
B
A dedicated management network interface (e.g., iDRAC, iLO dedicated port).
A dedicated port physically separates management traffic from production data, which is fundamental to true out-of-band operation.
C
A Baseboard Management Controller (BMC) with proper firmware.
The BMC is the core hardware component that monitors and controls the server remotely. Without it, out-of-band management is impossible.
D
An installed operating system on the server.
Why wrong: Out-of-band management functions independently of the server's OS; it can operate even when the server is off or the OS has failed.
E
A web browser or SSH client to access the management console.
To remotely interact with the BMC, an administrator needs a compatible client such as a web browser for GUI or an SSH client for command-line access.

Full breakdown with real-world context →

Question 4mediummulti select

Full question →

A company is creating a disaster recovery plan for its on-premises data center. Which THREE elements are essential to include in the DR plan? (Select THREE.)

A
Contact information for key personnel.
During a disaster, communication is vital; the plan must include up-to-date contact details for the response team, stakeholders, and vendors.
B
RTO and RPO for each critical system.
Recovery Time Objective and Recovery Point Objective define the maximum acceptable downtime and data loss, driving the selection of recovery strategies and prioritization.
C
Detailed instructions for cleaning server hardware.
Why wrong: While physical maintenance is important, it is not a part of disaster recovery planning and does not aid in restoring IT services after a disruption.
D
Step-by-step procedures for performing backups.
Why wrong: Backup schedules and methods are part of the backup policy; the DR plan focuses on recovery procedures that use the backups to restore services.
E
List of failover site addresses and access procedures.
In a disaster, knowing how to physically or logically access the DR site is critical; this list ensures that personnel can get to the hot/warm/cold site and begin recovery.

Full breakdown with real-world context →

Question 5easymulti select

Full question →

During a security incident, a server is suspected to be compromised by malware. The incident response team needs to preserve evidence and minimize impact. Which TWO actions should be taken FIRST? (Select TWO.)

A
Disconnect the server from the network.
Isolating the server from the network stops the attacker's remote access and prevents malware propagation while preserving the system state for investigation.
B
Run an antivirus scan.
Why wrong: Antivirus scans quarantine or delete files, altering the disk state and potentially destroying forensic evidence needed to understand the attack.
C
Reboot the server in safe mode.
Why wrong: Rebooting, even in safe mode, clears memory and may activate malware that has installed boot-time persistence, hindering investigation.
D
Power off the server immediately.
Why wrong: Shutting down the system results in the loss of all volatile data (memory, network state), which is often crucial for forensic analysis.
E
Make a forensic image of the system memory.
Capturing RAM before any other actions preserves active malware, user sessions, and other ephemeral data, which is a critical step in evidence collection.

Full breakdown with real-world context →

Question 6hardmulti select

Full question →

Which THREE of the following are typically essential elements of a disaster recovery plan (DRP)? (Choose three.)

A
Emergency contact and communication plan
This plan ensures that all stakeholders can be notified and coordinated during a disaster, a core element of DRP.
B
Server hardware specifications
Why wrong: While useful for procurement, hardware specs are not a fundamental component of a DRP; they are operational documentation.
C
Test and exercise schedule
Regular testing is essential to verify that the DRP works and to maintain organizational readiness, making it a key component.
D
Network topology diagram
Why wrong: Network diagrams assist in recovery but are considered supporting documentation, not a mandatory core element of the plan itself.
E
Business impact analysis (BIA)
BIA underpins the entire DRP by determining the criticality of systems and maximum tolerable downtime.

Full breakdown with real-world context →

Question 7mediummulti select

Review the full subnetting walkthrough →

A server administrator is troubleshooting a network connectivity issue where a newly installed server cannot communicate with other devices on the same subnet. The server has a static IP address configured. Other devices on the same switch can communicate. Which TWO of the following could be the cause of the issue? (Select TWO)

A
The DNS server address is incorrect.
Why wrong: Incorrect DNS prevents name resolution but does not stop IP communication between devices using IP addresses.
B
The server's default gateway is incorrectly set.
Why wrong: The default gateway is used for traffic destined to other networks; same-subnet communication does not involve the gateway.
C
The switch port is configured with port security and has learned a different MAC address.
Port security limits allowed MAC addresses; if the port sees the new server's MAC, it may block the frames if the maximum is exceeded or the address is not authorized.
D
Incorrect subnet mask configured on the server.
With a wrong mask, the server might think a local address is remote and send traffic to the default gateway, causing communication failure with local devices.
E
The DHCP server has exhausted its scope.
Why wrong: DHCP exhaustion only affects devices requesting IPs; this server has a static IP, so DHCP is not involved.

Full breakdown with real-world context →

Question 8hardmulti select

Full question →

Following a firmware update on a server's RAID controller, the server fails to boot and reports "No boot device found." The RAID array status shows healthy in the controller BIOS. Which THREE of the following actions should the administrator take to resolve the issue? (Choose three.)

A
Roll back the RAID controller firmware
If the new firmware caused the boot issue, rolling back to the previous version can restore functionality.
B
Rebuild the RAID array from backup
Why wrong: The array is healthy; rebuilding would erase data and is unnecessary when the logical volume is intact.
C
Reset the RAID controller configuration to defaults
Resetting to factory defaults can clear any misconfigurations introduced by the firmware update while preserving the logical drive.
D
Verify the boot order in the system BIOS
The firmware update may have altered the boot priority; ensuring the RAID array is first can resolve a 'no boot device' error.
E
Install the latest drivers for the RAID controller in the OS
Why wrong: Driver installation requires booting into the OS; since the server cannot boot, this step cannot be performed.

Full breakdown with real-world context →

Question 9mediummulti select

Full question →

A server experienced an unexpected power loss. After power is restored, the server boots successfully, but several critical services fail to start automatically. The administrator checks the system logs and finds errors indicating missing LUNs from a SAN. The SAN administrator confirms the SAN is online and the LUNs are assigned to the server's WWNs. The server uses FC HBAs. Which TWO steps should the administrator perform to diagnose the issue?

A
Rescan the SCSI bus on the server.
A rescan will refresh the server's list of visible LUNs and may re-establish connections that were lost during the power cycle.
B
Check the FC switch zoning configuration.
Power loss can sometimes cause switches to revert to saved or incorrect zoning, so verifying that the correct zones are active is a critical diagnostic step.
C
Replace the FC HBAs.
Why wrong: There is no evidence of HBA hardware failure; replacement should only be considered after thoroughly ruling out configuration and connectivity issues.
D
Reboot the SAN controller.
Why wrong: The SAN is confirmed online; rebooting its controllers would cause unnecessary downtime and does not address the server-side discovery issue.
E
Reinstall the multipathing driver.
Why wrong: Multipathing software is unlikely to be the cause of LUNs disappearing entirely after a power event, and reinstallation is an excessive action at this stage.

Full breakdown with real-world context →

These SK0-005 practice questions are part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style SK0-005 questions with detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics.

Select Two (Multi-Select) Questions

How to approach select two (multi-select) questions

Quick answer

Related SK0-005 topic practice pages

server-hardware-installation-management practice questions

server-administration practice questions

security-disaster-recovery practice questions

troubleshooting practice questions

SK0-005 fundamentals practice questions

SK0-005 scenario practice questions

Practice scenarios

Which TWO of the following are considered best practices for securing a server's remote management access?

A SQL Server database administrator wants to backup a large database (500 GB) with minimal impact on transaction log growth and recovery time. Which TWO backup strategies should the administrator implement? (Choose two.)

A server administrator needs to set up out-of-band management for a new server. Which THREE of the following are essential for successful configuration and remote access? (Choose three.)

A company is creating a disaster recovery plan for its on-premises data center. Which THREE elements are essential to include in the DR plan? (Select THREE.)

During a security incident, a server is suspected to be compromised by malware. The incident response team needs to preserve evidence and minimize impact. Which TWO actions should be taken FIRST? (Select TWO.)

Which THREE of the following are typically essential elements of a disaster recovery plan (DRP)? (Choose three.)

Following a firmware update on a server's RAID controller, the server fails to boot and reports "No boot device found." The RAID array status shows healthy in the controller BIOS. Which THREE of the following actions should the administrator take to resolve the issue? (Choose three.)