2025年最新の実際に出ると確認された 無料CompTIA SK0-005日本語試験問題
SK0-005日本語リアル試験問題解答は無料
質問 # 131
サーバーがメンテナンス中にラックから取り出されたときに、サーバーへのネットワーク接続が失われました。今後このような状況を防ぐために、サーバー管理者は次のうちどれを使用する必要がありますか?
- A. ワイヤレス接続
- B. ケーブル管理
- C. レールキット
- D. 配電ユニット
正解：B
質問 # 132
A server technician installs a new NIC on a server and configures the NIC for IP connectivity. The technician then tests the connection using the ping command. Given the following partial output of the ping and ipconfig commands:
Which of the following caused the issue?
- A. DHCP misconfiguration
- B. Duplicate IP address
- C. Incorrect routing table
- D. Incorrect default gateway
正解：B
解説：
The ping command output shows that the NIC has an IP address of 192.168.1.100 and a default gateway of 192.168.1.1. However, when the technician tries to ping the default gateway, the reply comes from another IP address: 192.168.1.101. This means that there is another device on the network that has the same IP address as the default gateway, and it is responding to the ping request instead of the intended destination.
A duplicate IP address can cause network connectivity problems, such as packet loss, routing errors, or unreachable hosts. To resolve this issue, the technician should either change the IP address of the default gateway or the device that is conflicting with it, or use DHCP to assign IP addresses automatically and avoid conflicts.
The other options are not correct because they do not explain the ping output. An incorrect default gateway would cause no reply or a destination unreachable message, not a reply from a different IP address. A DHCP misconfiguration would cause an invalid or no IP address on the NIC, not a duplicate IP address on the network. An incorrect routing table would cause routing errors or unreachable destinations, not a reply from a different IP address.
Reference:
https://askleo.com/what_is_ping_and_what_does_its_output_tell_me/
https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/ping
質問 # 133
多数のサーバーラックを備えたサーバールームはリモートで管理され、時折オンサイトサポートが行われます。ネットワークの問題をサーバー上でローカルに管理およびトラブルシューティングする場合、最も費用対効果の高いオプションは次のうちどれですか?
- A. KVM
- B. クラッシュ カート
- C. IP KVM
- D. 管理ポート
正解：C
解説：
An IP KVM (keyboard, video, mouse) is a device that allows remote access and control of multiple servers over a network using a web browser or a client software. An IP KVM is a cost-effective option to administer and troubleshoot network problems locally on the servers, as it eliminates the need for physical presence or dedicated hardware for each server. A management port (A) is a network interface that is used for out-of-band management of network devices, such as routers or switches. A management port does not provide local access to servers. A crash cart (B) is a mobile unit that contains a monitor, keyboard, mouse, and other tools for troubleshooting servers in a data center. A crash cart requires physical access to each server and may not be cost-effective for many racks of servers. A KVM (D) is a device that allows switching between multiple servers using a single keyboard, video, and mouse. A KVM does not provide remote access over a network and requires physical connection to each server. References:
https://www.enterprisestorageforum.com/management/best-data-storage-solutions-and-software-2021/
https://www.microsoft.com/en-us/microsoft-365/business-insights-ideas/resources/cloud-storage-vs-on-premises
質問 # 134
サーバー技術者は、レポート サーバーにアクセスできないユーザーに関する問題のトラブルシューティングを行っています。レポート サーバーには静的 IP アドレスがあり、Windows ドメインに接続されています。技術者は、問題を絞り込むための手順を試みます。
- ホスト名を ping しますが、成功しません
- IP アドレスを ping し、成功する
- NIC カードの IP および DNS 設定に問題がないことを確認します
技術者が次に行うべきことは次のうちどれですか?
- A. サーバーのホスト名の DNS A レコードを確認します。
- B. コンピューターを再起動して、セキュリティ更新プログラムをシステムに適用します。
- C. ホスト名と IP アドレスに対して tracert を実行します。
- D. ホストで ipconfig を実行して、IP 構成を確認します。
- E. ホスト NIC カードの DNS 構成をルックアップ用の localhost に更新します。
正解：A
質問 # 135
サーバー管理者が新しいサーバーに OS をインストールしています。会社のポリシーでは、誰もサーバーに直接ログインしてはいけないと規定されています。会社のポリシーを満たすのに最も適したインストール方法は次のうちどれですか?
- A. GUI
- B. コア
- C. クローン
- D. 仮想化
正解：B
解説：
A core installation is a type of installation method that is best suited to meet the company policy that states no one is to log in directly to the server. A core installation is a minimal installation option that is available when deploying some editions of Windows Server. A core installation includes most but not all server roles and features, but does not include a graphical user interface (GUI). A core installation can only be managed remotely using command-line tools such as PowerShell or Windows Admin Center, or using graphical tools such as Server Manager or Remote Desktop from another computer. This reduces the attack surface, resource consumption, and maintenance requirements of the server. A GUI installation is a type of installation method that includes a graphical user interface (GUI) and allows local or remote management using graphical tools or command-line tools. A virtualized installation is a type of installation method that involves creating and running one or more virtual machines on a physical host using a hypervisor such as Hyper-V or VMware. A clone installation is a type of installation method that involves creating an exact copy of an existing server's configuration and data on another server using tools such as Sysprep or Clonezilla. References:
https://www.howtogeek.com/67469/the-beginners-guide-to-shell-scripting-the-basics/
https://www.howtogeek.com/443611/how-to-encrypt-your-macs-system-drive-removable-devices-and-individua
https://www.howtogeek.com/199068/how-to-upgrade-your-existing-hard-drive-in-under-an-hour/
質問 # 136
An administrator is working on improving the security of a new domain controller. A report indicates several open ports on the server. Which of the following ports should the administrator disable?
- A. 0
- B. 1
- C. 2
- D. 3
正解：B
解説：
The port that should be disabled on the firewall is port 3389. Port 3389 is used by Remote Desktop Protocol (RDP), which is a protocol that allows remote access and control of a Windows system through a graphical user interface. RDP can pose a security risk if it is not properly configured or secured, as it can expose the system to unauthorized or malicious access from external sources. Therefore, port 3389 should be disabled on the firewall unless it is needed for legitimate purposes.
質問 # 137
新しくインストールされたサーバーにはローカル ユーザーがアクセスできますが、リモート ユーザーは接続できません。次のうち、設定が間違っている可能性が最も高いのはどれですか?
- A. サブネットマスク
- B. VLAN
- C. IP アドレス
- D. デフォルト ゲートウェイ
正解：D
解説：
Explanation
This is the most likely misconfigured setting because the default gateway is the router that connects the local network to other networks. If the default gateway is incorrect, the server will not be able to communicate with remote users or devices outside its own subnet. References:
https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/ipconfig
質問 # 138
ストレージ管理者は、故障したハード ドライブの問題を調査しています。技術者がストレージ アレイ内のドライブを交換しました。ただし、論理ボリュームにはまだ問題があります。ボリュームを復元するために完了する必要がある次の手順を最もよく説明しているものは次のうちどれですか?
- A. ボリュームをフォーマットします
- B. ボリュームを再構築します
- C. ボリュームを交換します
- D. ボリュームを初期化します
正解：B
解説：
The administrator should rebuild the volume to restore it after replacing the failed hard drive. A volume is a logical unit of storage that can span across multiple physical disks. A volume can be configured with different levels of RAID (Redundant Array of Independent Disks) to provide fault tolerance and performance enhancement. When a hard drive in a RAID volume fails, the data on that drive can be reconstructed from the remaining drives using parity or mirroring techniques. However, this process requires a new hard drive to replace the failed one and a rebuild operation to copy the data from the existing drives to the new one.
Rebuilding a volume can take a long time depending on the size and speed of the drives and the RAID level.
質問 # 139
データ侵害が発生した場合に取るべき対策は次のうちどれですか? (2 つ選択)。
- A. データを別の場所に移動します。
- B. ウイルス対策スキャンを実行します。
- C. バックアップからデータを復元します。
- D. インシデントを開示します。
- E. 悪用された脆弱性を特定します。
- F. 不要なポートを無効にします。
正解：D、E
解説：
These are two measures that should be taken when a data breach occurs. A data breach is an unauthorized or illegal access to confidential or sensitive data by an internal or external actor. A data breach can result in financial losses, reputational damage, legal liabilities, and regulatory penalties for the affected organization. Disclosing the incident is a measure that involves informing the relevant stakeholders, such as customers, employees, partners, regulators, and law enforcement, about the nature, scope, and impact of the data breach. Disclosing the incident can help to mitigate the negative consequences of the data breach, comply with legal obligations, and restore trust and confidence. Identifying the exploited vulnerability is a measure that involves investigating and analyzing the root cause and source of the data breach. Identifying the exploited vulnerability can help to prevent further data loss, remediate the security gaps, and improve the security posture of the organization. Restoring the data from backup is a measure that involves recovering the lost or corrupted data from a secondary storage device or location. However, this does not address the underlying issue of how the data breach occurred or prevent future breaches. Disabling unnecessary ports is a measure that involves closing or blocking network communication endpoints that are not required for legitimate purposes. However, this does not address how the data breach occurred or what vulnerability was exploited. Running an antivirus scan is a measure that involves detecting and removing malicious software from a system or network. However, this does not address how the data breach occurred or what vulnerability was exploited. Moving the data to a different location is a measure that involves transferring the data to another storage device or location that may be more secure or less accessible. However, this does not address how the data breach occurred or what vulnerability was exploited. Reference: https://www.howtogeek.com/428483/what-is-end-to-end-encryption-and-why-does-it-matter/ https://www.howtogeek.com/202794/what-is-the-difference-between-127.0.0.1-and-0.0.0.0/ https://www.howtogeek.com/443611/how-to-encrypt-your-macs-system-drive-removable-devices-and-individual-files/
質問 # 140
Which of me following BEST describes a disaster recovery site with a target storage array that receives replication traffic and servers that are only powered on In the event of a disaster?
- A. Cold
- B. Hot
- C. Cloud
- D. Warm
正解：D
解説：
A warm site is a type of disaster recovery site that has a target storage array that receives replication traffic and servers that are only powered on in the event of a disaster. A warm site is a compromise between a hot site and a cold site. A warm site has some equipment and data ready, but requires some configuration and restoration before resuming operations. A warm site is usually located in a different geographic area than the primary site and has redundant power, cooling, network, and security systems. A warm site is suitable for organizations that can tolerate some downtime and data loss in case of a disaster. A cloud site is a type of disaster recovery site that uses cloud-based resources and platforms to store backups and restore data and applications after a disaster. A cold site is a type of disaster recovery site that has only basic infrastructure and space available, but requires significant setup and installation before resuming operations. A hot site is a type of disaster recovery site that has all the equipment and data ready to resume operations as soon as possible after a disaster.
References: https://www.techopedia.com/definition/11172/hot-site
https://www.techopedia.com/definition/11173/warm-site
https://www.techopedia.com/definition/11174/cold-site
https://www.techopedia.com/definition/29836/cloud-recovery
質問 # 141
次のアクセス制御方法のうち、ユーザーが実行する必要があるジョブに基づいてユーザーに最小限のアクセスを許可するものとして最も適切に説明できるのはどれですか?
- A. スコープベース
- B. ルールベース
- C. ロールベース
- D. ロケーションベース
正解：C
解説：
Explanation
The access control methodology that can be described best as allowing a user the least access based on the jobs the user needs to perform is role-based access control (RBAC). RBAC is an access control method that assigns permissions to users based on their roles or functions within an organization. RBAC provides fine-grained and manageable access control by defining what actions each role can perform and what resources each role can access. RBAC follows the principle of least privilege, which means that users are only granted the minimum level of access required to perform their tasks. RBAC can reduce security risks, simplify administration, and enforce compliance policies.
質問 # 142
A server administrator wants to check the open ports on a server. Which of the following commands should the administrator use to complete the task?
- A. netstat -a
- B. nslookup
- C. telnet
- D. nbtstat
正解：A
解説：
netstat is a command-line tool that displays network connections, routing tables, interface statistics, and more.
The -a option shows all listening and non-listening sockets on the server. This can help check the open ports on a server and identify any unwanted or malicious connections. References:
https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/netstat
質問 # 143
An administrator has been asked to increase the storage capacity of a stand-alone file server but no further expansion slots are available. Which of the following would be the FASTEST solution to implement with no downtime?
- A. Connect the server to a SAN
- B. Implement FCoE for more storage capacity.
- C. Configure a RAID array.
- D. Replace the current drives with higher-capacity disks.
正解：A
解説：
A SAN (Storage Area Network) is a network of storage devices that can provide shared storage capacity to multiple servers. By connecting the server to a SAN, the administrator can increase the storage capacity of the server without adding any internal disks or expansion cards. This solution can be implemented quickly and without any downtime. Verified Reference: [What is a SAN and how does it differ from NAS?]
質問 # 144
技術者は、5 台の Windows 10 コンピューターで構成される小規模オフィスを設立しています。技術者は、IP アドレスを手動で追加せずに、単純な IP 構成を使用するように求められました。技術者が IP アドレスの割り当てに使用する可能性が最も高いのは次のうちどれですか?
- A. ルーターによって割り当てられます
- B. APIPA
- C. 静的
- D. DHCP
正解：D
解説：
DHCP stands for Dynamic Host Configuration Protocol and it is a network protocol that automatically assigns IP addresses and other network configuration parameters to devices on a network. DHCP can help simplify IP configuration without manually adding any IP addresses. DHCP works by using a DHCP server that maintains a pool of available IP addresses and leases them to devices that request them. The devices can renew or release their IP addresses as needed. References:
https://www.comptia.org/training/resources/exam-objectives/comptia-server-sk0-005-exam-objectives (Objective 2.1)
質問 # 145
Linux サーバーから Windows ワークステーションにログ ファイルを転送するために管理者が使用する必要があるのは、次のうちどれですか?
- A. Telnet
- B. ロボコピー
- C. XCOPY
- D. SCP
正解：D
質問 # 146
次のうち、自動車が建物の出入り口に近づきすぎないようにするために使用される方法はどれですか?
- A. ボラード
- B. 反射ガラス
- C. 警備員
- D. 防犯カメラ
正解：A
質問 # 147
管理者は、バックアップ ジョブが過去 3 回の試行で失敗したというアラートを受け取りました。管理者は、ネットワーク共有上のユーザーのデータをバックアップ中に問題が発生したことを発見しました。ジョブを正常に完了するには、次のアクションのうちどれが最適ですか?
- A. ユーザーのデータをネットワーク共有から移動します
- B. 特定のファイル タイプを除外するようにバックアップ ジョブを変更する
- C. バックアップ ジョブでオープン ファイル バックアップを有効にする
- D. ユーザーのデータをバックアップから除外します
正解：C
解説：
Enabling open file backups allows the backup software to copy files that are currently open or in use by applications. This ensures that even if a file is actively being modified during the backup process, it will still be included in the backup.
Advantages:
Ensures consistency of backed-up data, especially for files that are frequently accessed or modified.
Prevents data loss due to files being skipped during backup.
Reference:
CompTIA Server+ Guide, Chapter 6: Storage, Section 6.3.2 (Backup Types) Microsoft Docs: Volume Shadow Copy Service (VSS)
質問 # 148
管理者は、SSH 経由のルート ログインを無効にする必要があります。このタスクを完了するために編集する必要があるタイルは次のうちどれですか?
- A. /etc.sshs_shd_config
- B. /root.ssh/sshd/config
- C. /etc.ssh/sshd_config
- D. /root/.ssh/ssh_config
正解：C
解説：
Explanation
To disable root login over SSH, the server administrator needs to edit the SSH configuration file located at
/etc/ssh/sshd_config. This file contains various settings for the SSH daemon that runs on the server and accepts incoming SSH connections. The administrator needs to find the line that says PermitRootLogin and change it to no or comment it out with a # symbol. Then, the administrator needs to restart the SSH service for the changes to take effect. References:
https://www.howtogeek.com/828538/how-and-why-to-disable-root-login-over-ssh-on-linux/
質問 # 149
次のうち、送信メールをスキャンしてアカウント番号、機密フレーズ、およびその他の形式の Pll を検出するシステムはどれですか?
- A. IPS
- B. HIDS
- C. シェム
- D. DLP
正解：D
解説：
DLP stands for Data Loss Prevention and it is a system that scans outgoing email for account numbers, sensitive phrases, and other forms of PII (Personally Identifiable Information). DLP can help prevent data breaches, comply with regulations, and protect the privacy of customers and employees. DLP can also block, encrypt, or quarantine emails that contain sensitive data. Reference: https://www.comptia.org/training/resources/exam-objectives/comptia-server-sk0-005-exam-objectives (Objective 3.2)
質問 # 150
データ センターには、VM を使用してデータを失わずに交換する必要がある 4U ラック サーバーがあります。これらのサーバーを交換するために最もよく使用される方法はどれですか。
- A. P2V
- B. VM のクローン作成
- C. 無人スクリプトによる OS インストール
正解：B
解説：
P2V (Physical to Virtual) is a method of converting a physical server into a virtual machine that can run on a hypervisor. This method can be used to replace 4U rack servers with VMs without losing any data, as it preserves the configuration and state of the original server. P2V can also reduce hardware costs, power consumption, and space requirements. Verified References: [What is P2V?]
質問 # 151
ある企業は最近、10 か所あるマルチキャンパス環境に VolP を導入しました。同社は、ファイバー、銅線、無線などの多くのネットワーク テクノロジーを使用しています。そのうち 3 か所の間で電話をかけているユーザーから、声が奇妙に聞こえるとの報告がありました。問題を絞り込むために監視する必要があるのは次のうちどれですか?
- A. ディスク IOPS
- B. RAM 使用率
- C. CPU 使用率
- D. ネットワーク遅延
正解：D
解説：
Network latency is the measure of delay in data transmission over a network. It can affect the quality of voice over IP (VoIP) calls by causing echo, jitter, or distortion. Network latencycan be caused by various factors such as network congestion, distance, routing, or bandwidth. To monitor network latency, you can use tools such as ping, traceroute, or network analyzers.
References: CompTIA Server+ Study Guide, Chapter 6: Networking, page 237.
質問 # 152
システム管理者は、データ ストアに加えられた変更を短期間に毎日バックアップする必要があります。管理者は、データを復元する際の RTO を最大化したいと考えています。このシナリオに最も適したバックアップ方法は次のうちどれですか?
- A. オフサイトバックアップ
- B. 完全バックアップ
- C. 増分バックアップ
- D. 差分バックアップ
正解：C
解説：
Explanation
An incremental backup is a backup method that only backs up the files that have changed since the last backup, whether it was a full or an incremental backup. An incremental backup can save disk space and time, as it only copies the new or modified data. An incremental backup can also improve the RTO (Recovery Time Objective), which is the maximum acceptable time to restore data after a disaster. This is because an incremental backup can restore data faster than a full or a differential backup, as it only needs to apply the latest changes to the previous backup1.
質問 # 153
A server technician installs a new NIC on a server and configures the NIC for IP connectivity. The technician then tests the connection using the ping command. Given the following partial output of the ping and ipconfig commands:
Which of the following caused the issue?
- A. DHCP misconfiguration
- B. Duplicate IP address
- C. Incorrect routing table
- D. Incorrect default gateway
正解：B
解説：
* The ping command output shows that the NIC has an IP address of 192.168.1.100 and a default gateway of 192.168.1.1. However, when the technician tries to ping the default gateway, the reply comes from another IP address: 192.168.1.101. This means that there is another device on the network that has the same IP address as the default gateway, and it is responding to the ping request instead of the intended destination.
* A duplicate IP address can cause network connectivity problems, such as packet loss, routing errors, or unreachable hosts. To resolve this issue, the technician should either change the IP address of the default gateway or the device that is conflicting with it, or use DHCP to assign IP addresses automatically and avoid conflicts.
* The other options are not correct because they do not explain the ping output. An incorrect default gateway would cause no reply or a destination unreachable message, not a reply from a different IP address. A DHCP misconfiguration would cause an invalid or no IP address on the NIC, not a duplicate IP address on the network. An incorrect routing table would cause routing errors or unreachable destinations, not a reply from a different IP address.
References:
* https://askleo.com/what_is_ping_and_what_does_its_output_tell_me/
* https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/ping
質問 # 154
......
試験問題集でSK0-005日本語練習無料最新のCompTIA練習テスト：https://www.jpntest.com/shiken/SK0-005J-mondaishu