[2024年01月]更新のSK0-005問題集完全版解答でCompTIA Server+試験学習ガイド
試験問題と解答SK0-005学習ガイド
Comptia SK0-005認定試験は、雇用主によって高く評価されている世界的に認められた認定です。これは、サーバー管理における候補者の専門知識を実証する業界標準認定です。認定はベンダー中立です。つまり、特定のハードウェアやソフトウェアベンダーに結び付けられていません。これにより、さまざまなタイプのサーバーやベンダーを扱うIT専門家にとって理想的な認定となります。
CompTIA SK0-005認定試験は、サーバー管理の経験を持つITプロフェッショナルがスキルと知識を向上させたい場合に最適です。試験は、サーバーテクノロジーの包括的な知識を習得したいサーバー管理の初心者のITプロフェッショナルにも適しています。認定試験はベンダー中立であり、特定のベンダーや技術に限定されていないため、異なるサーバーテクノロジーを扱うITプロフェッショナルにとって優れた選択肢です。
質問 # 120
A server administrator is assigning an internally routable IPv6 unique local address to servers in a datacenter. Which of the following network addresses should the administrator assign to a server?
- A. 10.40.251.33
- B. 2901:4868:4800::8844
- C. 192.168.0.10
- D. fd00:1348:4ef0:1ab9::1fd4
正解：B
質問 # 121
When configuring networking on a VM, which of the following methods would allow multiple VMs to share the same host IP address?
- A. Host only
- B. vSwitch
- C. Bridged
- D. NAT
正解：D
解説：
Explanation
The method that would allow multiple VMs to share the same host IP address is NAT. NAT (Network Address Translation) is a technique that allows multiple devices to use a single public IP address by mapping their private IP addresses to different port numbers. NAT can be used for VM networking to enable multiple VMs on the same host to access the internet or other networks using the host's IP address. NAT can also provide security benefits by hiding the VMs' private IP addresses from external networks.
質問 # 122
Which of the following BEST measures how much downtime an organization can tolerate during an unplanned outage?
- A. MTTR
- B. SLA
- C. BIA
- D. RTO
正解：D
解説：
RTO (Recovery Time Objective) is a metric that measures how much downtime an organization can tolerate during an unplanned outage before it affects its business continuity and reputation. RTO is usually expressed in hours or minutes and is determined by the criticality of the business processes and the impact of the outage on the revenue, customers, and stakeholders. RTO helps to define the recovery strategy and the resources needed to restore the normal operations as quickly as possible. Verified Reference: [RTO vs RPO]
質問 # 123
Which of the following must a server administrator do to ensure data on the SAN is not compromised if it is leaked?
- A. Encrypt the host servers
- B. Encrypt all the network traffic
- C. Encrypt the data at rest
- D. Encrypt the data that is leaving the SAN
正解：C
解説：
The administrator must encrypt the data at rest to ensure data on the SAN is not compromised if it is leaked. Data at rest refers to data that is stored on a device or a medium, such as a hard drive, a flash drive, or a SAN (Storage Area Network). Data at rest can be leaked if the device or the medium is lost, stolen, or accessed by unauthorized parties. Encrypting data at rest means applying an algorithm that transforms the data into an unreadable format that can only be decrypted with a key. Encryption protects data at rest from being exposed or misused by attackers who may obtain the device or the medium.
質問 # 124
An administrator needs to perform bare-metal maintenance on a server in a remote datacenter.
Which of the following should the administrator use to access the server's console?
- A. VNC
- B. RDP
- C. A crash cart
- D. IP KVM
- E. SSH
正解：D
解説：
KVM-over-IP switches are the remote access version of local KVM (keyboard/video/mouse) devices. They allow administrators to control a remote system by sending keyboard and mouse signals over the network and displaying the remote system's video output on the administrator's local machine via a web browser. Administrators can perform almost any function on the remote system as long as it's powered on and connected to the network.
質問 # 125
After installing a new file server, a technician notices the read times for accessing the same file are slower than the read times for other file servers.
Which of the following is the first step the technician should take?
- A. Enable link aggregation.
- B. Install faster hard drives.
- C. Add more memory.
- D. Check if the cache is turned on.
正解：D
解説：
Explanation
The cache is a temporary storage area that holds frequently accessed data or instructions for faster retrieval. The cache can improve the read times for accessing files by reducing the need to access the hard drive, which is slower than the cache memory1. Therefore, the first step the technician should take is to check if the cache is turned on for the new file server. If the cache is turned off, the technician should enable it and see if the read times improve. The other options are incorrect because they are not the first steps to take.
Adding more memory, installing faster hard drives, or enabling link aggregation are possible ways to improve the performance of the file server, but they are more costly and time-consuming than checking the cache.
Moreover, they may not address the root cause of the problem if the cache is turned off.
質問 # 126
A company deploys antivirus, anti-malware, and firewalls that can be assumed to be functioning properly. Which of the following is the MOST likely system vulnerability?
- A. Insider threat
- B. Ransomware
- C. Worms
- D. Two-person integrity
- E. Open ports
正解：A
解説：
The company implemented technical controls (antivirus, Anti-malware, and firewalls) and these controls are working properly.
The remaining vulnerability would be insider threat. Internal user threats (careless insider) Users who unknowingly expose the system to outside threats. This is the most common type of insider threat, resulting from mistakes, such as leaving a device exposed or falling victim to a scam. For example, an employee who intends no harm may click on an insecure link, infecting the system with malware.
The biggest security vulnerability in any organization is its own employees. Whether it's the result of intentional malfeasance or an accident, most data breaches can be traced back to a person within the organization that was breached.
For example, employees may abuse their access privileges for personal gain. Or, an employee may click on the wrong link in an email, download the wrong file from an online site, or give the wrong person their user account credentials - allowing attackers easy access to your systems.
質問 # 127
A systems administrator has noticed performance degradation on a company file server, and one of the disks on it has a solid amber light. The administrator logs on to the disk utility and sees the array is rebuilding.
Which of the following should the administrator do NEXT once the rebuild is finished?
- A. Restore the server from a snapshot.
- B. Swap the drive and initialize the disk.
- C. Restore the server from backup.
- D. Swap the drive and initialize the array.
正解：B
質問 # 128
A technician is checking a server rack. Upon entering the room, the technician notices the tans on a particular server in the rack are running at high speeds. This is the only server in the rack that is experiencing this behavior. The ambient temperature in the room appears to be normal. Which of the following is the MOST likely reason why the fans in that server are operating at full speed?
- A. A fan failure has occurred, and the other fans have increased speed to compensate.
- B. The server is In the process of shutting down, so fan speed operations have been defaulted to high.
- C. The server is utilizing more memory than the other servers, so it has increased the fans to compensate.
- D. An incorrect fan size was inserted into the server, and the server has had to Increase the fan speed to compensate.
正解：A
解説：
This is the most likely reason why the fans in that server are operating at full speed while the ambient temperature in the room is normal and the other servers in the rack are not experiencing this behavior. A fan failure is a situation where one or more fans in a server stop working or malfunction due to wear and tear, dust, or other factors. This can cause overheating and performance issues on the server. To prevent this, most servers have a fan redundancy feature that allows the other fans to increase their speed and airflow to compensate for the failed fan and maintain a safe temperature level. The server is not likely to be in the process of shutting down, as this would not cause the fans to run at high speeds. An incorrect fan size is not likely to be inserted into the server, as most fans are standardized and compatible with the server chassis and motherboard. The server is not likely to be utilizing more memory than the other servers, as this would not cause a significant increase in temperature or fan speed. Reference: https://www.howtogeek.com/303282/how-to-manage-your-pcs-fans-for-optimal-airflow-and-cooling/ https://www.howtogeek.com/174288/how-to-tell-if-your-computer-is-overheating-and-what-to-do-about-it/
質問 # 129
Which of the following are measures that should be taken when a data breach occurs? (Select TWO).
- A. Disclose the incident.
- B. Restore the data from backup.
- C. Run an antivirus scan.
- D. Disable unnecessary ports.
- E. Move the data to a different location.
- F. Identify the exploited vulnerability.
正解：D、F
解説：
Restoring from backup is unnecessary here as we dont know what exactly the breach affected.
Disclose incident is AFTER all other steps have been taken. The question states WHEN a data breach occurs.
Move the data to another location ... same issue. What data. Breach scope needs to be identified.
Identify the exploited vulnerability -- definitely
Disable ports and running antivirus scan between these two... antivirus should already have been running and this wasn't exactly a virus. So disable unnecessary ports is the only other option that makes any sense. Although this should have been done before this point. What should happen is that you remove the affected systems from the network but do NOT shut them off.
https://www.ftc.gov/business-guidance/resources/data-breach-response-guide-business
質問 # 130
A server administrator needs to replace a 4U rack-mounted device. Which of the following is the BEST way to install the device to ensure proper safety measures?
- A. Lift the device with the help of another administrator.
- B. Lift with the arms while bending the knees.
- C. Use a server lift. Most Voted
- D. Use a rolling cart.
正解：C
解説：
A piece of console furniture called a "crash cart" refers to a mobile server room cart equipped with a secured laptop that is used to provide a direct connection to malfunctioning servers and computers for restoration of crashes. - Not the answer.
4U would require at least 4 admin so not the answer....
Server lifts are used to raise equipment to installation level in a frame (cabinet or rack) or to remove equipment from a frame. Server lifts should only be used on level floors strong enough to support lift and load... Using a lift may be slower than maneuvering by hand; but if worker or equipment safety (usually because of weight) is a factor; using a lift is required.
https://www.idmworks.com/industry-analysis/data-center-server-lift/
質問 # 131
A server administrator purchased a single license key to use for all the new servers that will be imaged this year. Which of the following MOST likely refers to the licensing type that will be used?
- A. Per socket
- B. Open-source
- C. Per concurrent user
- D. Volume
正解：D
解説：
Explanation
This is the most likely licensing type that will be used because volume licensing allows a single license key to be used for multiple installations of a software product. Volume licensing is typically used by organizations that need to deploy software to a large number of devices or users. References:
https://www.microsoft.com/en-us/licensing/licensing-programs/volume-licensing-programs
質問 # 132
The HIDS logs on a server indicate a significant number of unauthorized access attempts via USB devices at startup. Which of the following steps should a server administrator take to BEST secure the server without limiting functionality?
- A. Disable all the USB ports on the server.
- B. Change the boot order on the server and restrict console access.
C Configure the host OS to deny login attempts via USB. - C. Set a BIOS/UEFI password on the server.
正解：B
解説：
Changing the boot order on the server and restricting console access would prevent unauthorized access attempts via USB devices at startup, as the server would not boot from any external media and only authorized users could access the console. Setting a BIOS/UEFI password on the server would also help, but it could be bypassed by resetting the CMOS battery or using a backdoor password. Configuring the host OS to deny login attempts via USB would not prevent booting from a malicious USB device that could compromise the system before the OS loads. Disabling all the USB ports on the server would limit functionality, as some peripherals or devices may need to use them. Reference:
https://www.pcmag.com/how-to/dont-plug-it-in-how-to-prevent-a-usb-attack
https://www.techopedia.com/definition/10362/boot-order
https://www.techopedia.com/definition/10361/console-access
https://www.techopedia.com/definition/102/bios-password
https://www.techopedia.com/definition/10363/cmos-battery
質問 # 133
A technician is attempting to log in to a Linux server as root but cannot remember the administrator password. Which of the following is the LEAST destructive method of resetting the administrator password?
- A. Boot using a Linux live CD and mount the hard disk to /mnt. Change to the /mnt/etc directory. Edit the passwd file found in that directory.
- B. Reinstall the OS in overlay mode. Reset the root password from the install GUI screen.
- C. Boot using a Linux live CD and mount the hard disk to /mnt. SCP the /etc directory from a known accessible server to /mnt/etc.
- D. Adjust the GRUB boot parameters to boot into single-user mode. Run passwd from the command prompt.
正解：D
解説：
This is the least destructive method of resetting the administrator password because it does not require modifying any files or reinstalling the OS. It only requires changing the boot parameters temporarily and running a command to change the password. Reference: https://wiki.archlinux.org/title/Reset_lost_root_password#Using_GRUB
質問 # 134
A systems administrator deployed a new web proxy server onto the network. The proxy server has two interfaces: the first is connected to an internal corporate firewall, and the second is connected to an internet-facing firewall. Many users at the company are reporting they are unable to access the Internet since the new proxy was introduced. Analyze the network diagram and the proxy server's host routing table to resolve the Internet connectivity issues.
INSTRUCTIONS
Perform the following steps:
1. Click on the proxy server to display its routing table.
2. Modify the appropriate route entries to resolve the Internet connectivity issue.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.
正解：
解説：
Explanation
Table Description automatically generated
Table Description automatically generated
質問 # 135
A systems administrator is investigating a server with a RAID array that will not boot into the OS.
The administrator notices all the hard drives are reporting to be offline. The administrator checks the RAID controller and verifies the configuration is correct. The administrator then replaces one of the drives with a known-good drive, but it appears to be unavailable as well. Next, the administrator takes a drive out of the server and places it in a spare server, and the drive is available and functional. Which of the following is MOST likely causing the issue?
- A. The drives need to be reseated.
- B. Resources are misallocated.
- C. The kernel is corrupt.
- D. The backplane has failed.
正解：A
質問 # 136
Which of the following testing exercises for disaster recovery is primarily used to discuss incident response strategies for critical systems without affecting production data?
- A. Backup recovery test
- B. Lrverail over
- C. Tabletcp
- D. Hot-site visit audit
正解：C
解説：
Explanation
A tabletop exercise is a type of disaster recovery testing exercise that is primarily used to discuss incident response strategies for critical systems without affecting production data. A tabletop exercise is a discussion-based session where team members meet in an informal, classroom setting to review their roles and responsibilities during an emergency and their responses to a hypothetical scenario. A facilitator guides the participants through the discussion and evaluates the strengths and weaknesses of the preparedness program. A tabletop exercise does not involve any actual deployment of resources or activation of systems12. A backup recovery test (B) is a type of disaster recovery testing exercise that involves restoring data from backup media to verify its integrity and availability. A backup recovery test may affect production data if it is not performed on a separate environment. A live failover is a type of disaster recovery testing exercise that involves switching operations from a primary site to a secondary site in case of a failure or disruption. A live failover may affect production data if it is not performed on a simulated environment. A hot-site visit audit (D) is a type of disaster recovery testing exercise that involves inspecting and evaluating a hot site, which is a backup location that has fully operational equipment and resources to resume business operations in case of a disaster. A hot-site visit audit does not involve any discussion of incident response strategies or simulation of scenarios. References: 1 https://www.ready.gov/testing-exercises 2 https://www.ready.gov/exercises
質問 # 137
A technician has been asked to check on a SAN. Upon arrival, the technician notices the red LED indicator shows a disk has failed. Which of the following should the technician do NEXT, given the disk is hot swappable?
- A. Stop sharing the volume
- B. Replace the disk
- C. Shut down the SAN
- D. Stop all connections to the volume
正解：B
解説：
Explanation
The next thing that the technician should do, given the disk is hot swappable, is to replace the disk. A hot swappable disk is a disk that can be removed and replaced without shutting down the system or affecting its operation. A hot swappable disk is typically used in a storage array that has RAID (Redundant Array of Independent Disks) configuration that provides fault tolerance and redundancy. If a disk fails in a RAID array, it can be replaced by a new disk without interrupting the service or losing any data. The new disk will automatically rebuild itself using the data from the other disks in the array.
質問 # 138
A technician is connecting a server's secondary NIC to a separate network. The technician connects the cable to the switch but then does not see any link lights on the NIC. The technician confirms there is nothing wrong on the network or with the physical connection. Which of the following should the technician perform NEXT?
- A. Configure the network on the server
- B. Enable the port on the server
- C. Restart the server
- D. Check the DHCP configuration
正解：B
質問 # 139
A technician retailed a new 4TB hard drive in a Windows server. Which of the following should the technician perform FIRST to provision the new drive?
- A. Configure the drive as a base disk.
- B. Partition the drive using OPT.
- C. Partition the drive using MBR.
- D. Configure the drive as a dynamic disk.
正解：B
解説：
Explanation
GPT (GUID Partition Table) is a partitioning scheme that allows creating partitions on large hard drives (more than 2 TB). It supports up to 128 partitions per drive and uses 64-bit addresses to locate them. MBR (Master Boot Record) is an older partitioning scheme that has limitations on the size and number of partitions (up to 4 primary partitions or 3 primary and 1 extended partition per drive). To provision a new 4 TB drive, the technician should partition it using GPT. Verified References: [GPT], [MBR]
質問 # 140
Users in an office lost access to a file server following a short power outage. The server administrator noticed the server was powered off. Which of the following should the administrator do to prevent this situation in the future?
- A. Connect the server to a redundant network
- B. Connect the server to a KVM
- C. Use cable management
- D. Connect the server to a UPS
正解：D
解説：
Explanation
The administrator should connect the server to a UPS to prevent this situation in the future. A UPS (Uninterruptible Power Supply) is a device that provides backup power to a server or other device in case of a power outage or surge. A UPS typically consists of one or more batteries and an inverter that converts the battery power into AC power that the server can use. A UPS can also protect the server from power fluctuations that can damage its components or cause data corruption. By connecting the server to a UPS, the administrator can ensure that the server will continue to run or shut down gracefully during a power failure.
質問 # 141
Which of the following commands should a systems administrator use to create a batch script to map multiple shares'?
- A. netuse
- B. tracert
- C. netstst
- D. nbtstat
正解：A
解説：
Explanation
The net use command is a Windows command that can be used to create a batch script to map multiple shares.
The net use command can connect or disconnect a computer from a shared resource, such as a network drive or a printer, or display information about computer connections. The syntax of the net use command is:
net use [devicename | *] [\\computername\sharename[\u0003volume] [password | *]]
[/user:[domainname\]username] [/user:[dotted domain name\]username] [/user:[[username@dotted domain name] [/savecred] [/smartcard] [{/delete | /persistent:{yes | no}}] where:
devicename = the drive letter or printer port to assign to the shared resource computername = the name of the computer that provides access to the shared resource sharename = the name of the shared resource password = the password needed to access the shared resource /user = specifies a different username to make the connection /savecred = stores the provided credentials for future use /smartcard = uses a smart card for authentication /delete = cancels a network connection and removes the connection from the list of persistent connections /persistent = controls whether the connection is restored at logon To create a batch script to map multiple shares, you can use the net use command with different drive letters and share names, for example:
net use W: \\computer1\share1 net use X: \\computer2\share2 net use Y: \\computer3\share3 You can also add other options, such as passwords, usernames, or persistence, as needed. To save the batch script, you can use Notepad or any text editor and save the file with a .bat extension12.
References: 1 https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/net-use 2
https://www.watchingthenet.com/create-a-batch-file-to-map-drives-folders.html
質問 # 142
......
CompTIA Server+ Certification Exam無料で更新される100%試験高合格率保証：https://www.jpntest.com/shiken/SK0-005-mondaishu
リアル試験問題と解答でCompTIA SK0-005問題集はここにある：https://drive.google.com/open?id=1VjmcyhJ5Czky6X_EQQvLK5Mf2MoMWqPm