最新 [2023年06月08日]SK0-005試験問題には有効なSK0-005問題集PDF [Q121-Q143]

最新 [2023年06月08日]SK0-005試験問題には有効なSK0-005問題集PDF

SK0-005練習テスト問題解答は更新された213問があります

質問 # 121
A company's IDS has identified outbound traffic from one of the web servers coming over port 389 to an outside address. This server only hosts websites. The company's SOC administrator has asked a technician to harden this server. Which of the following would be the BEST way to complete this request?

A. Move traffic from port 389 to port 443
B. Move traffic from port 389 to port 637
C. Enable port 389 for web traffic
D. Disable port 389 on the server

正解：D

解説：
The best way to complete the request to harden the server is to disable port 389 on the server. Port 389 is the default port used by LDAP (Lightweight Directory Access Protocol), which is a protocol that allows access and modification of directory services over a network. LDAP can be used for authentication, authorization, or information retrieval purposes. However, LDAP does not encrypt its data by default, which can expose sensitive information or credentials to attackers who can intercept or modify the network traffic. Therefore, port 389 should be disabled on a web server that only hosts websites and does not need LDAP functionality. Alternatively, port 636 can be used instead of port 389 to enable LDAPS (LDAP over SSL/TLS), which encrypts the data using SSL/TLS certificates.

質問 # 122
Which of the following open ports should be closed to secure the server properly? (Choose two.)

A. 0
B. 1
C. 2
D. 3
E. 4
F. 5

正解：C、F

解説：
Reference:
https://www.csoonline.com/article/3191531/securing-risky-network-ports.html

質問 # 123
A systems administrator deployed a new web proxy server onto the network. The proxy server has two interfaces: the first is connected to an internal corporate firewall, and the second is connected to an internet-facing firewall. Many users at the company are reporting they are unable to access the Internet since the new proxy was introduced. Analyze the network diagram and the proxy server's host routing table to resolve the Internet connectivity issues.
INSTRUCTIONS
Perform the following steps:
1. Click on the proxy server to display its routing table.
2. Modify the appropriate route entries to resolve the Internet connectivity issue.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

正解：

解説：

質問 # 124
A technician is laying out a filesystem on a new Linux server. Which of the following tools would work BEST to allow the technician to increase a partition's size in the future without reformatting it?

A. fdisk
B. Format
C. DiskPart
D. LVM

正解：D

質問 # 125
A company is building a new datacenter next to a busy parking lot. Which of the following is the BEST strategy to ensure wayward vehicle traffic does not interfere with datacenter operations?

A. Install a mantrap
B. Utilize security guards
C. Install security cameras
D. Install bollards

正解：D

質問 # 126
A technician has several possible solutions to a reported server issue. Which of the following BEST represents how the technician should proceed with troubleshooting?

A. Document the findings, actions, and outcomes throughout the process.
B. Perform a root cause analysis.
C. Make one change at a time and test.
D. Determine whether there is a common element in the symptoms causing multiple problems.

正解：C

解説：
The question states that there are several possible solutions so step #4 - Establish a theory has been done. Next is to test the theory changing one thing at a time and test for resolution.
Identify the problem.
Research.
Establish a theory of probable cause.
Test the theory.
Establish a plan of action.
Implement or escalate.
Verify functionality.
Document the solution.
https://www.techtarget.com/whatis/post/CompTIA-troubleshooting-steps-and-solving-common- computer-problems

質問 # 127
An administrator is adding NAS-based storage to a server. Which of the following strategies will allow users to see BEST performance with this new NAS storage?

A. Connect server to NAS storage using two redundant HBAs.
B. Connect server to NAS storage using two redundant fabric switches.
C. Connect server to NAS storage using two redundant SCSI controllers.
D. Connect server to NAS storage using two teamed 1 Gb NICs.

正解：D

質問 # 128
A server administrator receives a report that Ann, a new user, is unable to save a file to her home directory on a server. The administrator checks Ann's home directory permissions and discovers the following:
dr-xr-xr-- /home/Ann
Which of the following commands should the administrator use to resolve the issue without granting unnecessary permissions?

A. chmod 777 /home/Ann
B. chmod 754 /home/Ann
C. chmod 711 /home/Ann
D. chmod 666 /home/Ann

正解：B

解説：
The administrator should use the command chmod 754 /home/Ann to resolve the issue without granting unnecessary permissions. The chmod command is used to change the permissions of files and directories on a Linux server. The permissions are represented by three numbers, each ranging from 0 to 7, that correspond to the read , write (w), and execute (x) permissions for the owner, group, and others respectively. The numbers are calculated by adding up the values of each permission: r = 4, w = 2, x = 1. For example, 7 means rwx (4 + 2 + 1), 6 means rw- (4 + 2), 5 means r-x (4 + 1), etc. In this case, Ann's home directory has the permissions dr-xr-xr-, which means that only the owner (d) can read and execute (x) the directory, and the group and others can only read and execute (x) but not write (w) to it. This prevents Ann from saving files to her home directory. To fix this issue, the administrator should grant write permission to the owner by using chmod 754 /home/Ann, which means that the owner can read , write (w), and execute (x) the directory, the group can read and execute (x) but not write (w) to it, and others can only read but not write (w) or execute (x) it. This way, Ann can save files to her home directory without giving unnecessary permissions to others.
Reference:
https://linuxize.com/post/what-does-chmod-777-mean/

質問 # 129
A global organization keeps personnel application servers that are local to each country. However, a security audit shows these application servers are accessible from sites in other countries. Which of the following hardening techniques should the organization use to restrict access to only sites that are in the same country?

A. Close the unneeded ports
B. Configure a firewall
C. Install a HIDS
D. Disable unneeded services.

正解：B

解説：
Monitors Network Traffic

質問 # 130
A systems administrator is preparing to install two servers in a single rack. The administrator is concerned that having both servers in one rack will increase the chance of power issues due to the increased load. Which of the following should the administrator implement FIRST to address the issue?

A. An uninterruptible power supply
B. Separate circuits
C. Increased PDU capacity
D. Redundant power supplies

正解：B

解説：
The administrator should implement separate circuits first to address the issue of power issues due to the increased load. Separate circuits are electrical wiring systems that provide independent power sources for different devices or groups of devices. By using separate circuits, the administrator can avoid overloading a single circuit with too many servers and reduce the risk of power outages, surges, or fires. Separate circuits also provide redundancy and fault tolerance, as a failure in one circuit will not affect the other circuit.

質問 # 131
Ann, an administrator, is configuring a two-node cluster that will be deployed. To check the cluster's functionality, she shuts down the active node. Cluster behavior is as expected, and the passive node is now active. Ann powers on the server again and wants to return to the original configuration. Which of the following cluster features will allow Ann to complete this task?

A. Load balancing
B. Heartbeat
C. Redundancy
D. Failback

正解：D

質問 # 132
A company uses a hot-site, disaster-recovery model. Which of the following types of data replication is required?

A. Application consistent
B. Incremental
C. Constant
D. Asynchronous

正解：C

解説：
Constant Replication
The primary system replicates data changed data blocks continually. Constant replication is also referred to as "continuous replication." The replication process occurs in the background, permitting users to access the data without interruption.
Constant replication is different than regular backups, where files must be closed to be duplicated.

質問 # 133
Which of the following load-balancing methods would be BEST described as each connection selecting the next path?

A. Most recently used
B. Least connection
C. Source hashed
D. Round robin

正解：D

質問 # 134
A server administrator is selecting hardware for a new backup server. Disk capacity is the most important requirement for the server. Which of the following drive interface types BEST meets this need?

A. USB
B. SCSI
C. FC
D. SATA

正解：D

質問 # 135
A server administrator needs to keep a copy of an important fileshare that can be used to restore the share as quickly as possible. Which of the following is the BEST solution?

A. Copy the fileshare to an LTO-4 tape drive
B. Create a snapshot of the fileshare
C. Configure a new incremental backup job for the fileshare
D. Create an additional partition and move a copy of the fileshare

正解：B

解説：
The best solution to keep a copy of an important fileshare that can be used to restore the share as quickly as possible is to create a snapshot of the fileshare. A snapshot is a point-in-time copy of a file system or a volume that captures the state and data of the fileshare at a specific moment. A snapshot can be created instantly and with minimal overhead, as it only stores the changes made to the fileshare after the snapshot was taken. A snapshot can be used to restore the fileshare to its previous state in case of data loss or corruption.

質問 # 136
A server administrator is installing a 64-bit OS on a server hardware and receives the following error message: Processor architecture not supported. Which of the following architectures is causing this error?

A. x86
B. Alpha
C. x64
D. ARM
E. SPARC

正解：A

質問 # 137
Network connectivity to a server was lost when it was pulled from the rack during maintenance.
Which of the following should the server administrator use to prevent this situation in the future?

A. Rail kits
B. Cable management
C. A wireless connection
D. A power distribution unit

正解：B

質問 # 138
A technician runs topon a dual-core server and notes the following conditions:
top -- 14:32:27, 364 days, 14 users load average 60.5 12.4 13.6
Which of the following actions should the administrator take?

A. Request that users log off the server
B. Identify the runaway process or processes
C. Schedule a mandatory reboot of the server
D. Wait for the load average to come back down on its own

正解：C

質問 # 139
Which of the following encryption methodologies would MOST likely be used to ensure encrypted data cannot be retrieved if a device is stolen?

A. Encryption at rest
B. Public key encryption
C. End-to-end encryption
D. Encryption in transit

正解：A

質問 # 140
A server administrator has run the netstat -ano command locally on a system. Upon inspection, the administrator notices a listener for port 123 is set up on the server.
Which of the following can the administrator conclude about the server role running on the system?

A. The network time protocol and role are configured on the server.
B. The dynamic host configuration protocol and role are configured on the server.
C. The remote desktop protocol and role are configured on the server.
D. The distribution network service provider and role are configured on the server.

正解：A

質問 # 141
A server administrator is completing an OS installation for a new server. The administrator patches the server with the latest vendor-suggested software, configures DHCP, and verifies all network cables are properly connected in the IDF, but there is no network connectivity. Which of the following is the MOST likely reason for the lack of connectivity?

A. The VLAN Is improperly configured.
B. The HIDS is preventing the connection.
C. The OS version is not compatible with the network switch vendor.
D. The DNS configuration Is invalid.

正解：A

解説：
If the server administrator patches the server with the latest vendor-suggested software, configures DHCP, and verifies all network cables are properly connected in the IDF, but there is no network connectivity, then the most likely reason for the lack of connectivity is that the VLAN is improperly configured. A VLAN (Virtual Local Area Network) is a logical grouping of network devices that share the same broadcast domain and can communicate with each other without routing. If the server is assigned to a different VLAN than the DHCP server or the default gateway, it will not be able to obtain an IP address or reach other network devices. The DNS configuration is not relevant for network connectivity, as DNS only resolves names to IP addresses. The OS version is not likely to be incompatible with the network switch vendor, as most network switches use standard protocols and interfaces. The HIDS (Host-based Intrusion Detection System) is not likely to prevent the connection, as HIDS only monitors and alerts on suspicious activities on the host. Reference: https://www.howtogeek.com/190014/virtualization-basics-understanding-techniques-and-fundamentals/ https://www.howtogeek.com/164981/how-to-use-nslookup-to-check-domain-name-information-in-microsoft-windows/ https://www.howtogeek.com/202794/what-is-an-intrusion-detection-system-ids-and-how-does-it-work/

質問 # 142
A server administrator is testing a disaster recovery plan. The test involves creating a downtime scenario and taking the necessary steps. Which of the following testing methods is the administrator MOST likely performing?