Courseiva

CCNA Server Administration Questions

44 questions · Server Administration topic · All types, answers revealed

Practice these questionsExam hubAll questions
1
MCQmedium

An administrator needs to configure a critical web service on a Linux server to automatically restart if it crashes unexpectedly. The server uses systemd. Which of the following best accomplishes this goal?

A.Set the service to run under inetd so it starts on demand
B.Write a cron job to check the service status every minute and start it if stopped
C.Configure the service's systemd unit file with Restart=always
D.Create an init.d script that loops and re-executes the service if it exits
AnswerC

Restart=always tells systemd to restart the service whenever it stops, which is the proper and most reliable way to ensure automatic recovery.

Why this answer

Option C is correct because setting Restart=always in the systemd unit file ensures the service restarts regardless of exit code, which is the proper systemd method. Option A is wrong because a cron job introduces a potential delay and is less reliable than built-in service supervision. Option B is wrong because an init.d script with a loop is an outdated approach and not recommended with systemd.

Option D is wrong because inetd starts services on demand, not for persistent daemons.

Practice this question →
2
MCQeasy

A server administrator receives an alert that a critical server's disk is almost full. Upon investigation, the administrator finds a large log file that has grown significantly. The log file is rotated daily, but today's rotation failed. Which command should the administrator use FIRST to free up space immediately?

A.logrotate -f /etc/logrotate.conf to force log rotation.
B.> /var/log/large.log to truncate the file.
C.rm -rf /var/log/large.log to delete the file.
D.mv /var/log/large.log /backup/ to move the file.
AnswerB

Redirection with > nullifies the file content immediately, freeing disk space while keeping the inode intact so processes can continue writing.

Why this answer

Option A is correct because truncating the file to zero size instantly reclaims disk space without removing the file, which could cause issues if processes still have it open. Option B is wrong because deleting the file will not free space if any process holds an open file handle. Option C is wrong because moving the file has similar issues as deletion.

Option D is wrong because running logrotate might fail if the disk is full or if the rotation script is broken; truncation is quicker and safer under pressure.

Practice this question →
3
MCQmedium

A Linux server administrator notices that the /var partition is 95% full. To free space quickly, the administrator decides to delete old log files. Which of the following commands should the administrator use to find and delete log files older than 30 days in the /var/log directory?

A.rm /var/log/*.log -30
B.ls -l /var/log/*.log | grep "30" | rm
C.grep -R "30 days" /var/log | xargs rm
D.find /var/log -name "*.log" -mtime +30 -exec rm {} \\;
AnswerD

This command correctly identifies and removes log files older than 30 days without exceeding command-line limits.

Why this answer

Option A is correct. The `find` command with `-mtime +30` locates files modified more than 30 days ago, and `-exec rm {} \;` safely deletes each file. Option B is syntactically invalid.

Option C incorrectly pipes `ls` output through `grep` and then to `rm`, which does not accept piped input. Option D searches file contents for the text '30 days' rather than file age.

Practice this question →
4
MCQmedium

A system administrator manages a collection of Linux web servers that store custom application configurations in /etc/app/config. The configuration changes frequently, and the admin needs to implement an automated daily backup solution that captures the directory at 1 AM, compresses it with gzip, and retains the last 5 days of backups on a central NFS-mounted backup volume /mnt/backups. The solution should be simple and use standard tools. Which approach best meets these requirements?

A.Create a cron job that runs `tar -czf /mnt/backups/config-$(date +%Y%m%d).tar.gz /etc/app/config` at 1 AM, and another cron job at 2 AM that runs `find /mnt/backups -name "config-*.tar.gz" -mtime +5 -delete`.
B.Use Windows Server Backup scheduled to back up the Linux server's directory via SMB share.
C.Create a cron job that runs `rsync -avz /etc/app/config /mnt/backups/` at 1 AM, with a separate cron job to delete old rsync snapshots using `find /mnt/backups -type d -mtime +5 -exec rm -rf {} \;`.
D.Write a shell script that uses `zip -r /mnt/backups/config.zip /etc/app/config`, schedule it via cron at 1 AM, and rely on the NFS server's built-in snapshot feature for retention.
AnswerA

This solution correctly creates a compressed, date-stamped archive and removes archives older than 5 days, meeting all specified requirements simply.

Why this answer

Option B is correct because it uses tar with gzip compression and a dated filename to create daily compressed archives, and a separate cron job using find to delete files older than 5 days, fulfilling all requirements simply. Option A uses rsync which does not create a single compressed archive file and the retention method using find on directories is less suitable for daily snapshot rotation. Option C uses zip which does not easily support date-stamped filenames and relies on external NFS snapshots, which is not a self-contained solution.

Option D uses Windows Server Backup on Linux, which is unsupported and inappropriate.

Practice this question →
5
MCQhard

A system administrator is configuring a backup schedule for a critical database server that must be available 24/7. The company's recovery point objective (RPO) is 1 hour and recovery time objective (RTO) is 4 hours. The database files change frequently, but the operating system and application binaries rarely change. Which of the following backup strategies would BEST meet these requirements while minimizing storage and backup window impact?

A.Full backup daily, differential backup every hour
B.Full backup weekly, differential backup every hour
C.Full backup daily, incremental backup every hour
D.Full backup weekly, incremental backup every hour
AnswerC

Daily fulls ensure fast recovery, while small hourly incrementals meet the 1-hour RPO with minimal impact on the backup window and storage.

Why this answer

Option D is correct because daily full backups provide a recent recovery base, and hourly incremental backups are small and fast, meeting the 1-hour RPO with minimal backup window. Restoration applies at most 24 incrementals to the latest full, which fits within the 4-hour RTO. Option A is wrong because weekly full backups with hourly incrementals may require restoring too many incrementals, risking the RTO.

Option B is wrong because hourly differential backups grow in size throughout the day, increasing backup time and storage. Option C is wrong because weekly fulls with hourly differentials cause exponential growth in differential size over the week.

Practice this question →
6
PBQmedium

A Windows Server 2019 file server hosts a shared folder named \\FS01\SalesDocs. The share permissions are configured to grant the 'Everyone' group Full Control. The NTFS permissions on the D:\Shares\SalesDocs folder are set as follows: The 'Sales' security group has Allow Read & Execute, List Folder Contents, and Read. The 'Managers' group has Allow Modify. A user, Alice, is a member of the 'Sales' group and also a member of the 'Temporary_Contractors' group. She recently had her account moved from the 'Contractors' OU to the 'Sales' OU. When Alice attempts to access \\FS01\SalesDocs from her Windows 10 workstation, she receives an 'Access Denied' error. Other members of the 'Sales' group can access the folder without issues. The administrator verifies that Alice's group membership includes both 'Sales' and 'Temporary_Contractors'. The effective permissions tool on the folder shows that Alice should have Read access. However, she still cannot access the share. Which of the following is the most likely cause of Alice's access denial and the appropriate next step to resolve it?

A.Alice's user token was not updated after her OU move; she needs to log off and log back on to obtain the new group membership, but the token hadn't expired. The administrator should wait or force logoff.
B.Her workstation's offline files cache is corrupt, causing access denied. The administrator should clear the CSC cache on her machine.
C.The 'Temporary_Contractors' group has an explicit Deny permission on the NTFS security for D:\Shares\SalesDocs, which overrides her Allow permissions. The administrator should remove Alice from that group or modify the Deny entry.
D.The share permissions 'Everyone Full Control' are invalid because 'Everyone' does not include authenticated users from other domains. The administrator should add 'Authenticated Users' with Change permission.
AnswerC

Why this answer

Option A is correct because an explicit Deny permission for Temporary_Contractors would override all Allow permissions, resulting in access denied despite the effective permissions tool showing allowed access (which may not account for Deny in all views). Option B is incorrect because 'Everyone' includes authenticated users, and the share permissions are permissive. Option C suggests a token issue, but effective permissions already reflect her group membership; a token issue would typically result in no access to Sales group resources, conflicting with others' access.

Option D is unlikely without other offline files symptoms.

Practice this question →
7
PBQhard

You are the lead server administrator for a mid-sized e-commerce company. The web application is hosted on a farm of four Linux servers running Apache, fronted by a hardware load balancer. The load balancer currently uses a round-robin algorithm. Recently, the customer support team has received numerous complaints about slow page load times and occasional timeouts during checkout. You log into the server monitoring console and observe that one of the web servers, web03, has a CPU utilization consistently above 95%, while the other three servers are at around 30-40%. You connect via SSH to web03 and run the 'top' command, identifying a process named 'imagick' consuming 99% CPU. Further investigation reveals that this process is related to image resizing for product thumbnails, and it appears to have entered an infinite loop due to a malformed image file. Meanwhile, the load balancer continues to send requests to all servers equally, including the overloaded web03, causing some requests to time out. You need to restore performance immediately and prevent recurrence. Which of the following actions should you take?

A.Kill the 'imagick' process on web03, change the load balancer algorithm to least connections, and clear the malformed image.
B.Reboot all four web servers to clear any stuck processes.
C.Increase RAM on web03 to handle the high CPU process better.
D.Add two more servers to the farm and keep the round-robin algorithm.
AnswerA

Why this answer

Option B is correct because it directly addresses both issues: the runaway process (killing it stops the CPU drain) and the load balancer algorithm (switching to least connections prevents sending traffic to an already overloaded server). Additionally, clearing the malformed image addresses the root cause of the loop. Option A (adding servers) may temporarily hide the problem but does not fix the load distribution or the looping process; the overloaded server would still exist.

Option C (rebooting all servers) is unnecessarily disruptive and does not address the root cause; the malformed image could trigger the loop again after reboot. Option D (increasing RAM) misidentifies the issue as memory-related when it is clearly CPU-bound; more RAM would not stop the infinite loop.

Practice this question →
8
MCQmedium

A system administrator is notified that a server with a RAID 5 array of four 2TB drives has a single failed drive. The server uses hot-swappable drives and a hardware RAID controller. Which of the following actions should the administrator perform FIRST?

A.Replace all four drives with larger capacity drives to expand storage.
B.Reboot the server and enter the RAID controller BIOS to mark the drive as offline.
C.Replace the failed drive and allow the array to rebuild.
D.Perform a full backup of the array before taking any action.
AnswerC

Immediate replacement allows the rebuild process to start, restoring redundancy. Hot-swap capability makes this a quick, non-disruptive first step.

Why this answer

Option A (Replace the failed drive and allow the array to rebuild) is correct because with a hot-spare, the array can rebuild automatically after replacing the failed drive, minimizing data vulnerability. Option B (Perform a full backup) is prudent but not immediate; the array is still functional in degraded mode. Option C (Reboot the server and access the RAID controller BIOS) delays recovery and may cause unnecessary downtime.

Option D (Replace all drives to increase storage) is unnecessary and wasteful.

Practice this question →
9
PBQeasy

A company has an internal web application running on a Windows Server 2019 IIS server. Recently, users have been experiencing intermittent slow responses and occasional '503 Service Unavailable' errors. The server has 32 GB RAM and currently hosts only this application. The application pool is configured to use a private memory limit of 2 GB and a request queue limit of 1000. Performance monitoring reveals that the application pool's private memory gradually increases over several hours until it reaches 2 GB, at which point the pool recycles. The slow responses and errors coincide with the recycling events. The administrator suspects a memory leak in the application code but cannot modify the application immediately. The server must remain available during business hours (8 AM to 8 PM). Which of the following is the best short-term mitigation?

A.Use a script to stop and start the application pool service every hour
B.Increase the physical RAM to 64 GB and raise the private memory limit to 4 GB
C.Configure Performance Monitor alerts to recycle the application pool when memory usage reaches 1.8 GB, and schedule it during low-usage hours
D.Schedule a nightly reboot of the server to clear memory and reset the application pool
AnswerC

Why this answer

Option A is correct because monitoring the memory usage and triggering a graceful recycle before hitting the limit can prevent sudden 503 errors and maintain availability, and it can be scheduled during off-peak times. Option B is wrong because scheduling a reboot requires downtime. Option C is wrong because adding RAM does not fix a memory leak; the pool will still hit its limit and recycle.

Option D is wrong because restarting every hour would cause frequent disruptions and is not user-friendly.

Practice this question →
10
PBQeasy

A small law firm has a single Windows Server 2016 Essentials server that functions as a domain controller and file server. After a sudden power outage over the weekend, the server does not boot normally. Instead, it displays a black screen with the message: 'BOOTMGR is missing. Press Ctrl+Alt+Del to restart.' The IT support specialist arrives on Monday morning to find the server in this state. The firm's operations are at a standstill because all case files and email archives are inaccessible. The specialist has access to the Windows Server 2016 installation media and a recent system state backup stored on an external drive. The server hardware passed POST, and all disks are detected in the BIOS. The specialist needs to restore the server's ability to boot into Windows as quickly as possible, with minimal risk to existing data. Which of the following procedures should the specialist perform FIRST?

A.Connect the external backup drive, boot from the installation media, and perform a full system restore from the backup.
B.Open the server case, reseat the RAM modules and SATA cables, and then attempt to boot again.
C.Boot from the installation media, select 'Repair your computer', and from the Command Prompt run 'bootrec /fixmbr' and 'bootrec /fixboot'.
D.Press F8 during startup to access Advanced Boot Options and select 'Last Known Good Configuration'.
AnswerC

Why this answer

Option C is correct because the 'BOOTMGR is missing' error typically indicates a corrupt master boot record or boot sector. Using bootrec /fixmbr and /fixboot from the installation media repairs the boot files without affecting data. Option A is a full system restore, which risks data loss and is overkill.

Option B is hardware reseating, unnecessary since POST passed. Option D, Last Known Good Configuration, does not fix missing boot manager files.

Practice this question →
11
PBQhard

A company operates a Windows Server 2019 machine that functions as a domain controller and file server. Over the past week, the server has randomly rebooted several times, often during periods of heavy file access. The administrator reviews the System event log and finds multiple Event ID 41 (Kernel-Power) entries with no preceding critical errors. The server is connected to an uninterruptible power supply (UPS) that reports stable input voltage. The server room temperature sensors indicate normal ambient temperature (22°C / 72°F). The server hardware is three years old and has not had any recent changes. The administrator has already run a full antivirus scan with no threats found. Which of the following should the administrator do NEXT to diagnose the issue?

A.Inspect and clean the CPU and chassis fans, and check for dust buildup
B.Update the server's BIOS to the latest version
C.Replace the power supply unit
D.Disable the automatic restart feature in System Properties
AnswerA

Why this answer

Option C is correct because random reboots with Kernel-Power 41 often indicate overheating due to failing fans or dust buildup, even if ambient temperature is normal. Option A is wrong because the power supply is likely not the issue given the UPS stability. Option B is wrong because a BIOS update is unlikely to solve hardware overheating.

Option D is wrong because disabling automatic restart only hides the symptom and does not prevent the reboots.

Practice this question →
12
PBQhard

A company runs a popular public-facing e-commerce website hosted on a farm of five Windows Server 2019 web servers behind a hardware load balancer. Recently, users have been reporting intermittent '503 Service Unavailable' errors during peak shopping hours. The administrator checks the load balancer and finds that all servers are marked as healthy with low CPU and memory usage. However, when inspecting a sample server, the administrator notices a large number of TCP connections in the TIME_WAIT state, consuming all available ephemeral ports. The application is ASP.NET based and uses IIS. The server configuration is as follows: Windows Server 2019 Standard, 4 vCPUs, 16 GB RAM, default TCP/IP settings. The administrator needs to resolve the connectivity issues without making changes to the application code or altering the network architecture. Which of the following actions should the administrator take to fix the problem PERMANENTLY?

A.Add two additional web servers to the farm to distribute the load.
B.Increase the ephemeral port range using netsh, and consider reducing the TIME_WAIT delay via registry settings.
C.Schedule a nightly restart of the IIS application pools.
D.Reduce the maximum number of concurrent connections in the IIS application pool settings.
AnswerB

Why this answer

Option A is correct because ephemeral port exhaustion is the root cause. Increasing the ephemeral port range provides more ports, and reducing TIME_WAIT delay frees them faster. Option B adds servers, which is a temporary workaround and does not prevent port exhaustion on each server.

Option C requires nightly restarts, causing brief outages and not solving the underlying issue. Option D limits concurrent connections but may degrade performance and does not address port exhaustion.

Practice this question →
13
MCQmedium

A system administrator needs to apply critical security patches to a production web server that cannot be taken offline. The server runs a Linux operating system and hosts a high-availability website. The administrator wants to ensure that if the patches cause a failure, the server can be quickly rolled back to its previous state. Which of the following actions should the administrator take FIRST?

A.Back up all user data to a network share.
B.Schedule a maintenance window and notify users of potential downtime.
C.Take a snapshot of the server's virtual machine before applying patches.
D.Apply the patches during off-peak hours without any additional steps.
AnswerC

A snapshot captures the entire VM state, including OS and applications, enabling a fast and complete rollback.

Why this answer

Option B is correct because taking a snapshot provides a point-in-time state of the virtual machine, allowing quick rollback if the patches cause issues. Option A backs up user data but does not capture the system state needed for a full rollback. Option C is a procedural step but not the first technical action to enable recovery.

Option D is reckless and provides no rollback capability.

Practice this question →
14
PBQeasy

A junior system administrator is managing a Linux file server running CentOS 7 with logical volumes managed by LVM. The server hosts home directories for 200 users on the /dev/vg_users/lv_home logical volume, mounted at /home. Yesterday, the administrator created an LVM snapshot named home_snap_20250101 of the home logical volume using `lvcreate -L 5G -s -n home_snap_20250101 /dev/vg_users/lv_home` to prepare for a scheduled maintenance. This morning, during a misoperation, the administrator accidentally ran `rm -rf /home/user123`, permanently deleting user123's home directory and all its contents. The snapshot still exists and contains the pre-deletion state of the entire logical volume. The administrator has root access and needs to restore the /home directory to its state as of the snapshot time to recover the lost data. All users are currently logged out and the server can be briefly taken offline if needed. Which of the following procedures should the administrator follow to restore the home directory data from the snapshot with minimal impact and risk?

A.Delete the current /home logical volume and create a new one from the snapshot, then restore the data using `dd if=/dev/vg_users/home_snap_20250101 of=/dev/vg_users/lv_home`.
B.Create a new logical volume from the snapshot using `lvconvert --splitsnapshot`, mount it, and restore only user123's directory, then update /etc/fstab to use the new volume.
C.Mount the snapshot volume to /mnt/snap, copy the entire contents back to /home using `cp -a /mnt/snap/* /home/`, then unmount the snapshot and remove it.
D.Verify the snapshot is intact, then unmount /home, merge the snapshot back into the original logical volume using `lvconvert --merge vg_users/home_snap_20250101`, which will roll back the /home LV to the snapshot state, then remount /home.
AnswerD

Why this answer

Option B correctly uses the LVM merge feature, which reverts the original logical volume to the snapshot state. This is the intended and efficient method for snapshot recovery, requiring only a temporary unmount. Option A manually copies data, which is time-consuming and may introduce permission issues.

Option C creates a new volume unnecessarily, complicating restoration. Option D uses dd, which is risky and not a standard LVM restoration method.

Practice this question →
15
MCQhard

A server has two NICs configured in a team using LACP. The server loses network connectivity when one NIC is physically disconnected, even though both links show as active in the teaming software before the failure. What is the most likely cause of the issue?

A.LACP is not correctly configured on the switch
B.The teaming mode is set to 'Switch Independent' instead of LACP
C.Spanning Tree Protocol is blocking the failover path
D.NIC driver version mismatch between the two adapters
AnswerA

Without the switch-side LACP configuration, the switch treats the links as independent, and removing one may cause the remaining link to be unable to carry traffic, leading to connectivity loss.

Why this answer

For LACP to work properly, the switch must be explicitly configured to bundle the ports into a port channel. If the switch is not configured for LACP, it may not handle the failover correctly, causing a loss of connectivity when one link drops. NIC driver issues or STP are less likely to cause this specific symptom, and setting the team to Switch Independent would not use LACP.

Practice this question →
16
MCQhard

A VMware ESXi host runs six virtual machines, each configured with 8GB of RAM, totaling 48GB allocated. The host physically has 32GB of RAM, and memory overcommitment is enabled. Recently, a critical VM experienced severe performance degradation during peak hours, with the guest OS showing high memory pressure and balloon driver activity, while other VMs showed moderate usage. Which of the following actions will BEST resolve the issue without compromising other VMs?

A.Purchase and install an additional 32GB of physical RAM in the host.
B.Disable the VMware balloon driver on all virtual machines.
C.Configure a memory reservation of 8GB for the critical VM.
D.Reduce the CPU limit on the non-critical VMs during peak hours.
AnswerC

A reservation grants the VM guaranteed access to physical RAM, protecting it from ballooning and hypervisor swapping, thus stabilizing performance.

Why this answer

Option B (Set a memory reservation equal to its configured 8GB on the critical VM) is correct because it guarantees physical RAM for that VM, preventing the balloon driver from reclaiming its memory and reducing hypervisor swapping. Option A (Increase host RAM) would solve it broadly but is not the most immediate, targeted action and may not be feasible. Option C (Disable balloon driver on all VMs) could cause host swapping, degrading all VMs.

Option D (Reduce CPU limits) does not address memory contention.

Practice this question →
17
MCQeasy

A server administrator is tasked with ensuring that a critical database server remains available in the event of a hardware failure. The solution must provide automatic failover with minimal administrative overhead. Which of the following should be implemented?

A.Load balancing
B.Scheduled backups
C.RAID 1 mirroring
D.Server clustering
AnswerD

Server clustering ties multiple servers together to act as a single system; if one node fails, another takes over automatically, providing high availability with minimal administrative effort.

Why this answer

Server clustering provides automatic failover between nodes, ensuring high availability with minimal administrative overhead. RAID 1 offers disk redundancy but not server-level failover. Load balancing distributes traffic but does not automatically redirect if a server fails.

Scheduled backups restore data after a failure but do not prevent downtime.

Practice this question →
18
PBQhard

A corporation's backup strategy currently involves a weekly full backup every Saturday night and daily differential backups Monday through Friday. The company has a 5 TB dataset with a daily change rate of about 10%. The full backup takes 12 hours and runs into Monday morning, impacting production performance. The backup window is from 10 PM to 6 AM. The company requires faster backups that can complete within the window, and they also want an offsite copy of the backups for disaster recovery. The existing backup server has direct-attached disk storage and a tape library. The network bandwidth to the offsite location is limited to 100 Mbps. The administrator is evaluating changes to the backup methodology and infrastructure to meet these requirements. Which of the following solutions best addresses the speed and offsite requirements?

A.Upgrade the tape library to use multiple tape drives for parallel backups and rotate tapes offsite daily
B.Switch to synthetic full backups combined with incremental forever; store backups locally on disk
C.Implement a disk-to-disk-to-cloud solution using changed block tracking for daily incrementals and replication to the cloud
D.Continue weekly fulls but perform daily incremental backups instead of differentials; keep tapes on-site
AnswerC

Why this answer

Option D is correct because it uses changed block tracking to perform incremental backups quickly, stores them on disk (fast), and replicates to cloud, which achieves offsite copy despite limited bandwidth by sending only changed blocks. Option A is wrong because synthetic full backups still require reading all data to synthesize, and offsite copy is not addressed. Option B is wrong because multiple tape drives increase throughput but do not directly reduce the amount of data backed up daily, and offsite tape handling is manual.

Option C is wrong because daily differentials will still grow each day and may exceed the window, and offsite is not specified.

Practice this question →
19
MCQhard

Refer to the exhibit. An administrator receives reports that a web application is returning HTTP 502 errors. The administrator examines the Nginx error log on the reverse proxy server and sees the following. Which of the following is MOST likely causing the errors?

A.The Nginx service is not running.
B.The upstream server at 10.0.1.25:8080 refuses connections.
C.The firewall on the reverse proxy is blocking port 80.
D.The client's DNS cannot resolve example.com.
AnswerB

'Connection refused' directly signals that the upstream server is not listening on that port or is actively rejecting connections.

Why this answer

Option A is correct because the error 'Connection refused' indicates the upstream server (10.0.1.25:8080) is not accepting connections, typically because the backend service is down or the port is closed. Option B is incorrect because if Nginx were not running, no such log entry would be generated. Option C is incorrect because the client's DNS resolution is not involved after Nginx has already attempted to contact the upstream IP.

Option D is incorrect because a firewall blocking outbound connections would cause a timeout, not a 'Connection refused' message.

Practice this question →
20
MCQhard

A company is planning to deploy a new web application on multiple servers behind a load balancer. The application requires consistent session data across all servers for seamless user experience. Which of the following solutions would BEST meet this requirement?

A.Configure each web server to store sessions locally and use sticky sessions on the load balancer.
B.Use round-robin DNS to distribute traffic.
C.Store session data in a shared, high-performance in-memory data store like Redis.
D.Implement database session storage with synchronous replication between servers.
AnswerC

A centralized in-memory data store allows all web servers to access and modify session data quickly, providing seamless user experience and consistent state across the cluster.

Why this answer

Option B is correct because a shared in-memory data store like Redis provides low-latency access to session data for all servers, ensuring consistency and high availability. Option A is wrong because round-robin DNS does not handle session persistence. Option C is wrong because sticky sessions tie a user to one server; if that server fails, the session is lost and consistency is not maintained across servers.

Option D is wrong because synchronous database replication adds latency and complexity, making it less suitable for high-performance web applications.

Practice this question →
21
PBQmedium

An administrator is monitoring a server that has a hardware RAID 5 array consisting of four 2 TB disks. The RAID controller's management software reports that one disk has a status of 'Pred Fail' (predictive failure). The array also has a dedicated hot spare disk already installed and set up. The array is still fully functional with no data loss, but the 'Pred Fail' warning indicates the disk is likely to fail soon. The server is a production database server that cannot be taken offline except for scheduled maintenance windows, which are not until the following weekend. The administrator needs to ensure data integrity and avoid any risk of downtime or data loss while waiting for the replacement. Which immediate action should the administrator take?

A.Wait for the disk to completely fail so that the hot spare will automatically rebuild the array
B.Use the RAID management software to initiate a proactive replacement of the pred fail disk with the hot spare
C.Take a full backup immediately and then replace the disk during the next maintenance window
D.Remove the pred fail disk from the array to force the hot spare to rebuild, then re-add the disk later
AnswerB

Why this answer

Option A is correct because replacing the failing disk with the hot spare proactively prevents the array from becoming degraded or failing if another disk fails, ensuring continuous protection. Option B is wrong because waiting risks catastrophic failure if another disk fails before the spare activates. Option C is wrong because a full backup is not a substitute for immediate redundancy restoration.

Option D is wrong because removing the disk from the array manually would degrade it and risk data loss if another disk fails during the rebuild.

Practice this question →
22
MCQhard

A MySQL database server on Linux is experiencing high CPU utilization during peak business hours. Upon investigation, the administrator finds that the query cache hit ratio is below 20%, and the query_cache_size is set to 0. The server has 64 GB of RAM and the database workload is primarily read-heavy. Which of the following actions should the administrator take FIRST to improve performance?

A.Set query_cache_size to an appropriate value, such as 256M, and monitor.
B.Add more RAM to the server.
C.Rebuild all indexes on the database tables.
D.Enable the slow query log to identify inefficient queries.
AnswerA

Enabling and sizing the query cache for a read-heavy workload can dramatically increase cache hits and reduce CPU.

Why this answer

Option D is correct because the query cache is disabled (size 0). Enabling it and setting an appropriate size will increase cache hits and reduce CPU load. Option A adds RAM but does not address the misconfigured cache.

Option B identifies queries but does not directly fix the cache. Option C rebuilds indexes, which may not impact query caching.

Practice this question →
23
MCQmedium

Refer to the exhibit. A server administrator configured iptables rules on a Linux server. Immediately afterward, they are unable to connect to the server via SSH. The output of 'iptables -L INPUT -n' is shown. What is the most likely cause of the connectivity issue?

A.The last DROP rule blocks all traffic, including established SSH sessions.
B.The DROP rule for port 22 appears before the ACCEPT rule, causing all SSH packets to be dropped.
C.The default INPUT policy is set to ACCEPT, allowing all traffic.
D.The ACCEPT rule for port 22 is missing the ESTABLISHED state, preventing return traffic.
AnswerB

Correct. With the DROP preceding the ACCEPT, every SSH packet matches the DROP target first.

Why this answer

iptables processes rules in order. The DROP rule for destination port 22 appears before the ACCEPT rule, so all incoming SSH packets are dropped before the ACCEPT rule can permit new connections.

Practice this question →
24
PBQhard

A company is migrating a legacy line-of-business application from Windows Server 2012 R2 to a new Windows Server 2022 server that is a member of an Active Directory domain. The application runs as a Windows service under a domain service account named CORP\svc_app. The service account has been granted the 'Log on as a service' user right on the old server, and the application is configured to listen on a static TCP port 8443. After installing the application on the new server and configuring it with the same service account and port, the application fails to start. The administrator checks the Windows Event Viewer and sees two errors in the System log: 'The CORP\svc_app service failed to start due to the following error: The service did not start due to a logon failure' and 'The service cannot bind to the designated port 8443'. The administrator has already verified that the service account's password is correct and has not expired, that the account is enabled, that the port 8443 is not being used by another service, and that the Windows Firewall has an inbound rule allowing traffic on port 8443. The application's configuration file correctly points to port 8443. What should the administrator do to resolve the issue?

A.Restart the Windows Server 2022 server to apply any pending policy changes.
B.Grant the 'Log on as a service' user right to the CORP\svc_app account via Local Security Policy or Group Policy.
C.Configure the application to use a dynamic port instead of the static port 8443.
D.Reset the service account password and update the service configuration.
AnswerB

Why this answer

The correct answer is B. The 'Log on as a service' user right is a security policy setting that must be explicitly assigned to a service account on each individual server. Even though the account had this right on the old server, it does not automatically carry over to the new server.

Without this right, the service cannot start, and the 'logon failure' error is a classic symptom. Option A is incorrect because the password was already verified as correct. Option C is incorrect because the application requires a static port (port 8443) and changing to a dynamic port would break client connectivity.

Option D is incorrect because restarting the server does not assign the missing user right and will not resolve the logon failure.

Practice this question →
25
MCQmedium

A server hosts a database that requires nightly backups. The backup strategy uses a full backup every Sunday and differential backups on other days. On Wednesday, the server fails. Which backup sets are required to restore to the most recent state?

A.Last full backup and all differential backups since Sunday
B.Last full backup only
C.Last full backup and the latest differential backup
D.Last full backup and all incremental backups since Sunday
AnswerC

This restores the database to the state at the time of the last differential, which includes all changes since Sunday.

Why this answer

A differential backup contains all changes since the last full backup. Therefore, only the last full backup and the latest differential are needed for a restore. Incremental backups would require all incrementals since the last full, but the scenario uses differential backups.

Practice this question →
26
PBQhard

A medium-sized organization runs several critical virtual machines on a Windows Server 2019 Hyper-V host with 64 GB of RAM and two 12-core processors. One of the VMs, a database server, has been experiencing intermittent performance degradation, specifically during peak hours. The VM is configured with 4 vCPUs and 16 GB of static memory. The host's overall CPU utilization rarely exceeds 40%, and memory usage is around 50%. The administrator logs into the host and checks the VM's CPU usage in Hyper-V Manager, which shows it averaging 65% with occasional spikes to 95%. However, inside the VM, Task Manager shows constant 95-100% CPU usage on all logical processors. No other VMs are reporting performance issues. The administrator needs to determine the root cause and apply a fix that does not involve adding more physical resources or rebooting the production VM during business hours. Which of the following actions should the administrator take?

A.Increase the VM's memory from 16 GB to 32 GB to reduce paging and improve performance
B.Increase the VM's vCPU count to 8 to handle the workload and reduce contention
C.Use Performance Monitor on the host to examine 'Hyper-V Hypervisor Virtual Processor' metrics for the VM and compare with in-guest CPU usage to identify scheduling issues
D.Check the host's overall CPU usage in Task Manager and increase the VM's vCPU count if the host has spare capacity
AnswerC

Why this answer

Option C is correct because comparing the host-level guest CPU metrics (which show 65% average) with the in-guest metrics (100%) reveals that the VM is being limited by its vCPU allocation, likely due to co-scheduling or contention with other VMs' vCPUs on the same physical cores. Investigating and adjusting CPU scheduling or reservation settings can alleviate this. Option A is wrong because the host's overall CPU is fine; the issue is within the VM or hypervisor scheduling.

Option B is wrong because increasing vCPUs without diagnosing the bottleneck might worsen contention. Option D is wrong because increasing memory won't resolve a CPU bottleneck.

Practice this question →
27
MCQeasy

A technician is installing a new server for a department. The server will run a single application that requires high reliability. The operating system should be protected against a single disk failure without sacrificing read performance. Which RAID configuration is MOST appropriate?

A.RAID 5
B.RAID 6
C.RAID 1
D.RAID 0
AnswerC

RAID 1 mirrors data across two disks, providing fault tolerance and excellent read performance for the OS.

Why this answer

Option D is correct because RAID 1 mirrors the OS drive, providing fault tolerance and good read performance. Option A (RAID 0) has no redundancy. Option B (RAID 5) requires at least three disks and has write penalty.

Option C (RAID 6) requires at least four disks and is overkill for a simple OS mirror.

Practice this question →
28
MCQmedium

A server administrator notices that a database server is experiencing high CPU usage at specific times of the day. After checking logs, the administrator finds that a report generation task scheduled at those times is causing the issue. The task cannot be rescheduled or optimized further. Which of the following actions should the administrator take to ensure the server remains responsive for other applications during peak usage?

A.Add more virtual CPUs to the server's VM.
B.Configure the task to run at a lower priority.
C.Move the database to a server with faster CPU cores.
D.Configure processor affinity to dedicate a core to the database process.
AnswerB

Setting a lower scheduling priority (e.g., increasing nice value) allows other processes to preempt the CPU when needed, improving overall system responsiveness.

Why this answer

Option D is correct because lowering the priority (nice value) of the task allows other processes to utilize the CPU without being blocked. Option A is wrong because adding vCPUs does not guarantee other processes will get CPU time if the task consumes all available cycles. Option B is wrong because processor affinity only pins a process to a specific CPU core but does not change its scheduling priority.

Option C is wrong because replacing hardware is not immediate and may not solve scheduling contention.

Practice this question →
29
PBQeasy

A junior administrator is managing a Linux server used by a development team. The root filesystem (/) has reached 98% capacity, causing the system to slow down and some applications to fail. The server has an LVM volume group with 20 GB of free space, but the root logical volume is 50 GB with an ext4 filesystem. The administrator needs to free space quickly and safely without rebooting or adding new disks. They log in via SSH and want to identify where the large files are and then take action. There are concerns about accidentally deleting critical system files or logs that might be needed for auditing. The server has the following typical directories: /var (with logs), /home (user files), /opt (application files), /tmp. Which of the following sequences of actions is the most appropriate to resolve the issue?

A.Run 'du -sh /*' to locate large directories, then examine and compress or truncate old log files in /var/log
B.Execute 'rm -rf /tmp/*' to clear temporary files and regain space
C.Use 'find / -type f -size +100M -exec rm {} \;' to delete all files larger than 100MB
D.Extend the root logical volume by 10 GB using 'lvextend' and then resize the filesystem with 'resize2fs'
AnswerA

Why this answer

Option A is correct because it uses 'du -sh /*' to safely identify the largest directories, then targets specific log files in /var/log that can be compressed or moved, freeing space without deleting required files. Option B is wrong because blindly removing all files in /tmp may delete needed temporary files for running applications. Option C is wrong because using 'find' with 'exec rm' is very dangerous and could delete critical files if misused.

Option D is wrong because resizing the filesystem, while possible with LVM, should be considered after attempting to free space safely; also the free space in VG might be needed elsewhere.

Practice this question →
30
MCQhard

A Linux database server has recently exhibited sluggish response times. An analysis of system performance shows high CPU wait I/O, frequent page swapping, and a low cache hit ratio. The server has 16GB of RAM, and the database itself stores 100GB of active data. Which of the following is the MOST effective long-term solution to improve performance?

A.Increase the physical RAM in the server to at least 64GB.
B.Tune the database engine's query cache size.
C.Configure the server to use a larger swap partition.
D.Replace the existing hard drives with faster SSDs.
AnswerA

More RAM reduces swapping and allows caching of a larger working set, directly addressing the high I/O wait and low cache hit ratio.

Why this answer

Option C (Increase physical RAM to 64GB) is correct because the server is experiencing memory pressure leading to excessive swapping and low cache utilization. More RAM allows the database to cache a larger portion of active data in memory, reducing I/O wait and improving response times. Option A (Add faster SSDs) may reduce I/O wait but does not address the root cause—memory starvation.

Option B (Tune the database query cache) might provide minor relief but is not a substitute for adequate memory. Option D (Increase swap space) would worsen performance by enabling more swapping.

Practice this question →
31
PBQmedium

A medium-sized business runs a critical internal application on a single physical server running Windows Server 2019. The application is memory-intensive, often using up to 24 GB out of 32 GB RAM during peak hours. Over the past week, the server has experienced three unexpected reboots, each occurring during peak load. The server is not part of a cluster, and all data is stored on local disks. You have checked the Windows System event log and found Event ID 41 (Kernel-Power) indicating an unexpected shutdown. There are no related critical errors in the Application log. You have also reviewed the server's firmware logs and found multiple corrected memory errors (ECC) over the last month, with an increase in frequency just before each crash. The server is under warranty, and the hardware vendor's diagnostic tools report a failing memory module in DIMM slot A1. The vendor has recommended replacing the faulty DIMM immediately. However, the server is currently processing critical end-of-quarter financial reports that cannot be interrupted for at least 6 hours. Which of the following is the BEST course of action to minimize risk of data loss and downtime until a planned maintenance window?

A.Use Windows Memory Diagnostic tool to try to isolate the memory region and prevent the application from using it.
B.Continue running the server as is, as ECC memory can correct errors and the server will only crash if errors are uncorrectable; the risk is low.
C.Immediately shut down the server, replace the faulty DIMM, and restart.
D.Inform management of the criticality, request emergency approval for immediate maintenance, and if denied, ensure current backups are verified and monitor the server closely for any signs of degradation until the maintenance window.
AnswerD

Why this answer

Option D is correct because it follows proper change management: informing stakeholders, seeking emergency approval if needed, and mitigating risk by verifying backups and monitoring. Option A is wrong because immediately shutting down would interrupt critical processing and potential data loss, without management approval. Option B is wrong because Windows Memory Diagnostic is a boot-time tool and cannot effectively isolate memory regions to avoid crashes on a running production system.

Option C is wrong because the server has already crashed, indicating uncorrectable errors; continuing without action risks data corruption and further unplanned outages.

Practice this question →
32
PBQhard

Your organization is migrating a Windows Server 2019 file server with 2 TB of shared data to a new server running Windows Server 2022. The migration must minimize user downtime and ensure file permissions are preserved. Users access files during business hours (8 AM to 6 PM) and the migration must be completed within a four-hour window starting at 10 PM on Saturday. You plan to use DFS Replication (DFSR) for initial data copy and then perform a final synchronization during the cutover. After setting up DFSR between the old and new servers, you realize that the initial replication will take approximately 12 hours due to the large number of files. What should you do to complete the migration within the allowed window?

A.Use robocopy to pre-stage the data from old to new server during off-hours before the cutover, then enable DFSR to replicate only changes made after pre-staging; during the cutover window, do a final DFSR sync
B.Disable DFSR and use robocopy with /MIR /COPYALL during the cutover window to copy all data
C.Perform a full backup of the old server and restore to the new server during the cutover window using Windows Backup
D.Increase the DFSR staging quota and bandwidth throttling to accelerate initial replication
AnswerA

Why this answer

Option C is correct because pre-staging data using robocopy with appropriate flags (copying security and attributes) and then enabling DFSR for the delta changes is a best practice for large migrations. Option A is wrong because simply increasing DFSR bandwidth does not reduce the time needed for initial replication of 2 TB. Option B is wrong because using robocopy alone during the cutover window may not complete within four hours if you need to copy all data; pre-staging is required.

Option D is wrong because performing a full backup and restore during the window is too time-consuming for 2 TB.

Practice this question →
33
MCQhard

Refer to the exhibit. A server administrator is troubleshooting a DNS resolution issue on a Windows Server 2019. The exhibit shows the output of the command `nslookup` queried against the server's own IP. Based on the output, what is the most likely cause of the resolution failure?

A.The DNS server does not have an A record for server1.contoso.com.
B.The DNS server's root hints are misconfigured.
C.The DNS server is not configured to forward queries to an external DNS server.
D.The DNS server has an incorrect reverse lookup zone configuration.
AnswerA

The 'Non-existent domain' error directly indicates that the queried A record is missing from the contoso.com zone.

Why this answer

Option D is correct because the NXDOMAIN response indicates the queried name does not exist in the DNS zone. Option A is wrong because forwarding is irrelevant for an authoritative zone. Option B is wrong because reverse lookup zones are for IP-to-name resolution, not name-to-IP.

Option C is wrong because root hints are used for recursion, not for authoritative responses.

Practice this question →
34
MCQmedium

A server administrator configures a scheduled task to back up a database using a command-line tool. The task runs successfully when executed manually, but fails when run via the task scheduler. The log shows 'Error: Access denied.' What is the MOST likely cause?

A.The scheduled task is running under the wrong user account.
B.The database service is stopped.
C.The command-line tool is not installed.
D.The backup destination is full.
AnswerA

When the task runs manually, it uses the current user's security context; the scheduler often uses a system or different user account that may not have the required permissions, causing access denied.

Why this answer

Option C is correct because 'Access denied' usually points to permission issues; the task scheduler may run under a different user account that lacks necessary privileges. Option A is wrong because a full destination would yield a 'disk full' error, not access denied. Option B is wrong because if the tool were not installed, the error would be 'command not found.' Option D is wrong because a stopped database service would produce a connection error, not access denied.

Practice this question →
35
MCQhard

Refer to the exhibit. A server administrator encounters an authentication issue when accessing a web server. The exhibit shows an error from the Domain Controller's event log. What is the most likely cause of the problem?

A.The web server's service account is not configured to support AES encryption types.
B.The DNS service is not resolving the web server's FQDN.
C.The domain controller clock is out of sync with the web server.
D.The service account for the web server has an expired password.
AnswerA

The missing key and the mismatch between requested (AES etype 18) and available etypes directly point to missing AES support on the account.

Why this answer

Option B is correct because the error shows that the requested encryption types (etype 18 is AES) are missing from the account's available etypes, indicating the service account is not configured to support AES. Option A would produce a clock skew error. Option C would result in a password expiration event.

Option D would cause name resolution or host not found errors, not a Kerberos encryption mismatch.

Practice this question →
36
MCQeasy

An administrator needs to remotely manage several Linux servers securely without using passwords. Which of the following is the BEST method?

A.Use Telnet with SSH tunneling.
B.Use VNC with a strong password.
C.Use RDP with certificate-based authentication.
D.Use SSH with key-based authentication.
AnswerD

SSH with key-based authentication is the industry standard for secure, password-less remote administration on Linux servers.

Why this answer

Option C is correct because SSH with key-based authentication provides strong, password-less remote access. Option A is wrong because RDP is primarily used on Windows, not typical for Linux. Option B is wrong because Telnet is insecure, and SSH tunneling does not make Telnet secure.

Option D is wrong because VNC is less secure and not designed for efficient server administration.

Practice this question →
37
MCQeasy

A user attempts to access a shared folder named \\Server\Finance. The share permissions are set to 'Everyone – Full Control'. The NTFS permissions on the folder grant the user 'Read & Execute' but deny 'Write'. What is the user's effective permission when accessing the share over the network?

A.Full Control
B.Write
C.No Access
D.Read & Execute
AnswerD

Correct. The intersection of share (Full Control) and NTFS (Read & Execute) yields Read & Execute.

Why this answer

When share and NTFS permissions combine, the most restrictive of the two applies. Share gives Full Control, NTFS gives Read & Execute, so effective access is Read & Execute.

Practice this question →
38
Multi-Selectmedium

Which TWO of the following are considered best practices for securing a server's remote management access?

Select 2 answers
A.Use SSH key-based authentication
B.Enable default administrative shares
C.Allow all inbound ICMP
D.Disable unused services
E.Use telnet for remote CLI
AnswersA, D

SSH keys provide a more secure alternative to passwords, using cryptographic keys that are resistant to brute-force attacks.

Why this answer

Using SSH key-based authentication provides strong encryption and eliminates password theft risks. Disabling unused services reduces the attack surface. Enabling default administrative shares increases exposure.

Allowing all inbound ICMP can facilitate reconnaissance. Telnet sends data in plaintext and is insecure.

Practice this question →
39
MCQhard

A server has a RAID 5 array with four drives. One drive fails and is replaced. During the rebuild, a second drive reports a media error and the rebuild fails. What should the administrator do FIRST to minimize the risk of permanent data loss?

A.Run a consistency check on the array
B.Replace the drive that reported the media error immediately
C.Back up all critical data before any further rebuilding
D.Restart the RAID controller to reinitialize the rebuild
AnswerC

Data should be safeguarded first; once the backup is complete, troubleshooting can continue with reduced risk.

Why this answer

A media error on another drive during a RAID 5 rebuild indicates that drive may also be failing. If another drive fails completely, the entire array and its data will be lost. Therefore, the immediate priority is to back up critical data before any further rebuild action.

Replacing the drive or restarting the controller could trigger another rebuild, risking complete array loss. A consistency check does not address the urgency.

Practice this question →
40
MCQmedium

Refer to the exhibit. A web server is running on port 80, but users are unable to connect. The administrator has confirmed the web server service is running. The output of iptables -L is shown. What is the most likely reason for the connectivity issue?

A.The server's default gateway is incorrect
B.The firewall is blocking incoming traffic on port 80
C.SELinux is enforcing and blocking port 80
D.The web server is not bound to the correct IP address
AnswerB

The REJECT all rule at the end of the INPUT chain drops any packet not explicitly allowed, including HTTP requests to port 80.

Why this answer

The iptables rules accept only related/established traffic and drop SSH. The catch-all REJECT rule blocks all other incoming connections, including HTTP on port 80, because no explicit ACCEPT rule exists for it.

Practice this question →
41
MCQeasy

A company wants to protect its Microsoft SQL Server database with a backup strategy that provides point-in-time recovery up to every 15 minutes. The database is critical and runs on a dedicated server. Which backup schedule should be implemented?

A.Use storage-level snapshots every 15 minutes on a SAN.
B.Full backup daily, differential backup hourly.
C.Full backup weekly, differential daily, transaction log backups every 15 minutes.
D.Set up database mirroring with automatic failover and full weekly backups.
AnswerC

Combining full, differential, and frequent transaction log backups allows restoration to any point in time down to the last log backup.

Why this answer

Option B (Full backup weekly, differential daily, transaction log backups every 15 minutes) is correct because full and differential backups provide a base, while frequent transaction log backups enable granular point-in-time restore. Option A lacks transaction log backups, so recovery granularity is limited to daily. Option C uses mirroring, which is high availability (not a backup) and does not protect against logical corruption.

Option D uses snapshot technology but snapshots alone are not a backup and may impact performance if taken every 15 minutes.

Practice this question →
42
MCQeasy

To comply with company security policies, a server administrator must disable all unnecessary services on a newly deployed Windows Server 2019. The server will only act as a file server with no web hosting role. Which service should be disabled?

A.World Wide Web Publishing Service
B.DHCP Server service
C.Server service
D.DNS Server service
AnswerA

This is an IIS component; if web hosting is not needed, it should be disabled to reduce the attack surface.

Why this answer

Option C is correct because the World Wide Web Publishing Service (W3SVC) is part of IIS and is not required for a file server role. Leaving it running increases the attack surface. Option A (DNS Server) might be used if the server provides name resolution, but it is not mentioned.

Option B (DHCP Server) is also not specified as needed. Option D (Server service) is essential for file sharing and should not be disabled.

Practice this question →
43
Multi-Selectmedium

A SQL Server database administrator wants to backup a large database (500 GB) with minimal impact on transaction log growth and recovery time. Which TWO backup strategies should the administrator implement? (Choose two.)

Select 2 answers
A.Perform a tail-log backup before each full backup
B.Perform weekly full backups
C.Perform transaction log backups every 15 minutes
D.Perform daily differential backups
E.Perform hourly copy-only backups
AnswersB, C

Full backups provide a complete copy of the database and are required as a base for differential and log backups.

Why this answer

Options A and D are correct. A: A full backup copies the entire database, and is needed as a base. D: Transaction log backups control log growth and allow point-in-time recovery.

Option B is wrong because differential backups depend on a recent full backup. Option C is wrong because copy-only backups do not affect the log sequence, but they don't control log growth. Option E is wrong because tail-log backups are taken just before disaster recovery, not regularly.

Practice this question →
44
MCQhard

Refer to the exhibit. A Linux server is reporting slow I/O on the root filesystem. Which of the following actions should the administrator take to resolve the immediate storage bottleneck?

A.Move non-essential data from / to /backup.
B.Delete log files in /var/log.
C.Resize /dev/sda1 to 30G.
D.Change the RAID level of /dev/sda.
AnswerA

Offloading data to a volume with free space immediately reduces utilization on /, resolving the bottleneck without downtime.

Why this answer

Option B is correct because moving non-essential data from the nearly full root filesystem to /backup (which has ample space) quickly alleviates the space shortage and I/O pressure. Option A is wrong because resizing /dev/sda1 may require downtime and complex partitioning operations; it is not an immediate fix. Option C is wrong because deleting log files may free some space but might also delete valuable diagnostic data and may not be sufficient.

Option D is wrong because changing the RAID level of /dev/sda is a fundamental hardware change that does not address the immediate space issue and could be destructive.

Practice this question →

Ready to test yourself?

Try a timed practice session using only Server Administration questions.

Start 20-question session