CompTIA SK0-005 Practice Test 22
Question 210
A change board is planning a verified response to this server event: TLS audit logs appear out of order after a VM host drifts from the approved NTP source while other systems remain synchronized. For the NTP time sources and clock skew issue, which response elements belong in the approved plan? Select TWO answers.
- Configure redundant trusted time sources and verify host, hypervisor and directory time hierarchy with monitored offset.
- Configure an appropriate witness and quorum voting model with fencing or leader election to avoid simultaneous primaries.
- The server reaches only intended subnets through the correct gateway while segmentation rules remain enforced.
- Disable clock-skew checks instead of correcting time-source configuration.
- Measure time offset, NTP peer reachability, stratum and event timestamps on affected systems.
Explanation
Correct Answer
A:Before rollout, confirm the problem with: Measure time offset, NTP peer reachability, stratum and event timestamps on affected systems. This is the appropriate targeted correction for NTP time sources and clock skew.
E:These observations investigate the exact NTP time sources and clock skew failure rather than unrelated components. The expected technical relationship is: Time synchronization is required for trustworthy logs, certificate validation windows and time-sensitive authentication.
Incorrect Answers
B:A targeted investigation checks: Measure time offset, NTP peer reachability, stratum and event timestamps on affected systems.
C:Incident: TLS audit logs appear out of order after a VM host drifts from the approved NTP source while other systems remain synchronized.
D:This is the unsafe shortcut in the NTP time sources and clock skew scenario, not a justified remediation or diagnostic. Discriminate using: Measure time offset, NTP peer reachability, stratum and event timestamps on affected systems.
Question 211
A server administrator is investigating a server issue involving vlan segmentation and default gateway: A new application server is patched into an access port on the management VLAN instead of the assigned application VLAN. The change must address the documented fault without creating unrelated risk. Which corrective action is most appropriate? Select ONE best answer.
- Disable segmentation and move every server into a flat VLAN to mask address and route errors.
- Assign supported switch VLAN modes and correct interface subnet, mask, gateway and routes; verify permitted inter-VLAN flows.
- Configure nonoverlapping DHCP scopes, appropriate relay or helper settings and correct lease, gateway and DNS options.
- Set authoritative zone records and split-view policy correctly, then validate resolver paths, TTL and cache expiration.
Explanation
Correct Answer
B:Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability.
Incorrect Answers
A:This is the unsafe shortcut in the VLAN segmentation and default gateway scenario, not a justified remediation or diagnostic. Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability.
C:That option would configure nonoverlapping DHCP scopes, appropriate relay or helper settings and correct lease, gateway and DNS options, but it addresses a different concern. Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability.
D:That option would set authoritative zone records and split-view policy correctly, then validate resolver paths, TTL and cache expiration, but it addresses a different concern. Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability.
Question 212
While reviewing the CompTIA Server+ administration incident, a technician learns: A new application server is patched into an access port on the management VLAN instead of the assigned application VLAN. Which principle most directly explains how to address the described issue safely? Select ONE best answer.
- Time synchronization is required for trustworthy logs, certificate validation windows and time-sensitive authentication.
- Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability.
- Allocated virtual resources are not guaranteed physically available under contention; vCPU ready and memory reclaim can harm latency.
- Network boot is a high-trust supply chain; authenticated image provenance and secret protection matter as much as automation speed.
Explanation
Correct Answer
B:Applying it leads to this operational action: Assign supported switch VLAN modes and correct interface subnet, mask, gateway and routes; verify permitted inter-VLAN flows. The acceptance test is: The server reaches only intended subnets through the correct gateway while segmentation rules remain enforced.
Incorrect Answers
A:This statement concerns NTP time sources and clock skew, a different Server+ technical control. It does not directly address the reported VLAN segmentation and default gateway fault or prove its repair. For this incident, the relevant principle is: Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability. A targeted investigation checks: Inspect switch port VLAN/trunk state, ARP tables, interface settings, routing table and path traces. The desired recovery condition is: The server reaches only intended subnets through the correct gateway while segmentation rules remain enforced.
C:This statement concerns Hypervisor resource overcommit and reservations, a different Server+ technical control. It does not directly address the reported VLAN segmentation and default gateway fault or prove its repair. For this incident, the relevant principle is: Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability. A targeted investigation checks: Inspect switch port VLAN/trunk state, ARP tables, interface settings, routing table and path traces. The desired recovery condition is: The server reaches only intended subnets through the correct gateway while segmentation rules remain enforced.
D:This statement concerns PXE and unattended installation integrity, a different Server+ technical control. It does not directly address the reported VLAN segmentation and default gateway fault or prove its repair. For this incident, the relevant principle is: Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability. A targeted investigation checks: Inspect switch port VLAN/trunk state, ARP tables, interface settings, routing table and path traces. The desired recovery condition is: The server reaches only intended subnets through the correct gateway while segmentation rules remain enforced.
Question 213
Before a server change is approved, the on-call engineer receives this incident report: A new application server is patched into an access port on the management VLAN instead of the assigned application VLAN. Which evidence would most directly establish the stated root-cause hypothesis? Select ONE best answer.
- Disable segmentation and move every server into a flat VLAN to mask address and route errors.
- Measure time offset, NTP peer reachability, stratum and event timestamps on affected systems.
- Inspect DHCP discover/offer captures, relay configuration, scope utilization and leased default gateways.
- Inspect switch port VLAN/trunk state, ARP tables, interface settings, routing table and path traces.
Explanation
Correct Answer
D:These observations investigate the exact VLAN segmentation and default gateway failure rather than unrelated components. Incident: A new application server is patched into an access port on the management VLAN instead of the assigned application VLAN.
Incorrect Answers
A:This is the unsafe shortcut in the VLAN segmentation and default gateway scenario, not a justified remediation or diagnostic. Incident: A new application server is patched into an access port on the management VLAN instead of the assigned application VLAN.
B:For this incident, the relevant principle is: Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability. A targeted investigation checks: Inspect switch port VLAN/trunk state, ARP tables, interface settings, routing table and path traces.
C:For this incident, the relevant principle is: Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability.
Question 214
After the team implements a targeted remediation for VLAN segmentation and default gateway, the original incident was: A new application server is patched into an access port on the management VLAN instead of the assigned application VLAN. Which acceptance criterion would best demonstrate a durable and safe resolution? Select ONE best answer.
- The server reaches only intended subnets through the correct gateway while segmentation rules remain enforced.
- Inventory and dependency records match deployed assets and can be used to locate each service during incidents.
- Peak workload runs within latency targets without excessive CPU ready or host memory reclamation.
- Internal and external clients resolve to their intended addresses consistently after cache expiry.
Explanation
Correct Answer
A:Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability.
Incorrect Answers
B:This statement concerns Asset inventory and change records, a different Server+ technical control. It does not directly address the reported VLAN segmentation and default gateway fault or prove its repair. For this incident, the relevant principle is: Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability. A targeted investigation checks: Inspect switch port VLAN/trunk state, ARP tables, interface settings, routing table and path traces. The desired recovery condition is: The server reaches only intended subnets through the correct gateway while segmentation rules remain enforced.
C:This statement concerns Hypervisor resource overcommit and reservations, a different Server+ technical control. It does not directly address the reported VLAN segmentation and default gateway fault or prove its repair.
D:This statement concerns DNS split-horizon and resolver troubleshooting, a different Server+ technical control. It does not directly address the reported VLAN segmentation and default gateway fault or prove its repair. For this incident, the relevant principle is: Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability. A targeted investigation checks: Inspect switch port VLAN/trunk state, ARP tables, interface settings, routing table and path traces. The desired recovery condition is: The server reaches only intended subnets through the correct gateway while segmentation rules remain enforced.
Question 215
A change board is planning a verified response to this server event: A new application server is patched into an access port on the management VLAN instead of the assigned application VLAN. For the VLAN segmentation and default gateway issue, which response elements belong in the approved plan? Select ONE best answer.
- Disable segmentation and move every server into a flat VLAN to mask address and route errors.
- Assign supported switch VLAN modes and correct interface subnet, mask, gateway and routes; verify permitted inter-VLAN flows. Then validate the change by confirming: The server reaches only intended subnets through the correct gateway while segmentation rules remain enforced.
- Collect resource counters, queue depth, latency percentile, working-set and workload time series.
- Configure redundant trusted time sources and verify host, hypervisor and directory time hierarchy with monitored offset.
Explanation
Correct Answer
B:Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability. The proposed change and outcome assessment work together for VLAN segmentation and default gateway.
Incorrect Answers
A:This is the unsafe shortcut in the VLAN segmentation and default gateway scenario, not a justified remediation or diagnostic. Discriminate using: Inspect switch port VLAN/trunk state, ARP tables, interface settings, routing table and path traces.
C:This statement concerns Server resource monitoring and capacity planning, a different Server+ technical control. It does not directly address the reported VLAN segmentation and default gateway fault or prove its repair. For this incident, the relevant principle is: Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability. A targeted investigation checks: Inspect switch port VLAN/trunk state, ARP tables, interface settings, routing table and path traces. The desired recovery condition is: The server reaches only intended subnets through the correct gateway while segmentation rules remain enforced.
D:That option would configure redundant trusted time sources and verify host, hypervisor and directory time hierarchy with monitored offset, but it addresses a different concern. Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability.
Question 216
A server administrator is investigating a server issue involving vlan segmentation and default gateway: A dual-NIC server has the right static IP but no route to its database subnet because the subnet mask and default gateway are incorrect. The change must address the documented fault without creating unrelated risk. Which corrective action is most appropriate? Select ONE best answer.
- Assign supported switch VLAN modes and correct interface subnet, mask, gateway and routes; verify permitted inter-VLAN flows.
- Restrict PXE and imaging infrastructure to trusted networks and protect signed, versioned images and unattended-install credentials.
- Update authoritative asset, dependency and change records at deployment and verify ownership and configuration links.
- Disable segmentation and move every server into a flat VLAN to mask address and route errors.
Explanation
Correct Answer
A:Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability.
Incorrect Answers
B:This statement concerns PXE and unattended installation integrity, a different Server+ technical control. It does not directly address the reported VLAN segmentation and default gateway fault or prove its repair. For this incident, the relevant principle is: Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability. A targeted investigation checks: Inspect switch port VLAN/trunk state, ARP tables, interface settings, routing table and path traces. The desired recovery condition is: The server reaches only intended subnets through the correct gateway while segmentation rules remain enforced.
C:That option would update authoritative asset, dependency and change records at deployment and verify ownership and configuration links, but it addresses a different concern. Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability.
D:This is the unsafe shortcut in the VLAN segmentation and default gateway scenario, not a justified remediation or diagnostic. Incident: A dual-NIC server has the right static IP but no route to its database subnet because the subnet mask and default gateway are incorrect.
Question 217
While reviewing the CompTIA Server+ administration incident, a technician learns: A dual-NIC server has the right static IP but no route to its database subnet because the subnet mask and default gateway are incorrect. Which principle most directly explains how to address the described issue safely? Select ONE best answer.
- Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability.
- Network boot is a high-trust supply chain; authenticated image provenance and secret protection matter as much as automation speed.
- Accurate inventories and documented changes shorten incident response and support accountable operations.
- Open-source use still carries license conditions, and support subscriptions are separate from copyright permissions.
Explanation
Correct Answer
A:Applying it leads to this operational action: Assign supported switch VLAN modes and correct interface subnet, mask, gateway and routes; verify permitted inter-VLAN flows.
Incorrect Answers
B:This statement concerns PXE and unattended installation integrity, a different Server+ technical control. It does not directly address the reported VLAN segmentation and default gateway fault or prove its repair.
C:This statement concerns Asset inventory and change records, a different Server+ technical control. It does not directly address the reported VLAN segmentation and default gateway fault or prove its repair. For this incident, the relevant principle is: Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability. A targeted investigation checks: Inspect switch port VLAN/trunk state, ARP tables, interface settings, routing table and path traces. The desired recovery condition is: The server reaches only intended subnets through the correct gateway while segmentation rules remain enforced.
D:This statement concerns Open-source license obligations and audit, a different Server+ technical control. It does not directly address the reported VLAN segmentation and default gateway fault or prove its repair. For this incident, the relevant principle is: Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability. A targeted investigation checks: Inspect switch port VLAN/trunk state, ARP tables, interface settings, routing table and path traces. The desired recovery condition is: The server reaches only intended subnets through the correct gateway while segmentation rules remain enforced.
Question 218
Before a server change is approved, the on-call engineer receives this incident report: A dual-NIC server has the right static IP but no route to its database subnet because the subnet mask and default gateway are incorrect. Which evidence would most directly establish the stated root-cause hypothesis? Select ONE best answer.
- Inspect package SBOM, license texts, modification/distribution history and subscription records.
- Query each resolver directly, inspect answer sections and TTLs, compare private/public zones and client resolver lists.
- Inspect switch port VLAN/trunk state, ARP tables, interface settings, routing table and path traces.
- Disable segmentation and move every server into a flat VLAN to mask address and route errors.
Explanation
Correct Answer
C:These observations investigate the exact VLAN segmentation and default gateway failure rather than unrelated components. Incident: A dual-NIC server has the right static IP but no route to its database subnet because the subnet mask and default gateway are incorrect.
Incorrect Answers
A:For this incident, the relevant principle is: Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability.
B:For this incident, the relevant principle is: Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability. This statement concerns DNS split-horizon and resolver troubleshooting, a different Server+ technical control.
D:Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability.
Question 219
After the team implements a targeted remediation for VLAN segmentation and default gateway, the original incident was: A dual-NIC server has the right static IP but no route to its database subnet because the subnet mask and default gateway are incorrect. Which acceptance criterion would best demonstrate a durable and safe resolution? Select ONE best answer.
- The server reaches only intended subnets through the correct gateway while segmentation rules remain enforced.
- Authorized readers can read but cannot modify, and only approved writer groups can change files.
- Offset falls within the authentication policy threshold and timestamps align across systems.
- A fresh node installs the approved version reproducibly without credential disclosure or rogue boot sources.
Explanation
Correct Answer
A:Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability.
Incorrect Answers
B:This statement concerns File share authorization and inheritance, a different Server+ technical control. It does not directly address the reported VLAN segmentation and default gateway fault or prove its repair. For this incident, the relevant principle is: Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability. A targeted investigation checks: Inspect switch port VLAN/trunk state, ARP tables, interface settings, routing table and path traces. The desired recovery condition is: The server reaches only intended subnets through the correct gateway while segmentation rules remain enforced.
C:This statement concerns NTP time sources and clock skew, a different Server+ technical control. It does not directly address the reported VLAN segmentation and default gateway fault or prove its repair. For this incident, the relevant principle is: Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability. A targeted investigation checks: Inspect switch port VLAN/trunk state, ARP tables, interface settings, routing table and path traces. The desired recovery condition is: The server reaches only intended subnets through the correct gateway while segmentation rules remain enforced.
D:This statement concerns PXE and unattended installation integrity, a different Server+ technical control. It does not directly address the reported VLAN segmentation and default gateway fault or prove its repair. For this incident, the relevant principle is: Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability.
Question 220
A change board is planning a verified response to this server event: A dual-NIC server has the right static IP but no route to its database subnet because the subnet mask and default gateway are incorrect. For the VLAN segmentation and default gateway issue, which response elements belong in the approved plan? Select TWO answers.
- Inspect switch port VLAN/trunk state, ARP tables, interface settings, routing table and path traces.
- Maintain a software bill of materials and honor relevant distribution, attribution and support-license obligations.
- Disable segmentation and move every server into a flat VLAN to mask address and route errors.
- Assign supported switch VLAN modes and correct interface subnet, mask, gateway and routes; verify permitted inter-VLAN flows.
- Offset falls within the authentication policy threshold and timestamps align across systems.
Explanation
Correct Answer
A:These observations investigate the exact VLAN segmentation and default gateway failure rather than unrelated components. The expected technical relationship is: Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability.
D:Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability. A successful outcome is: The server reaches only intended subnets through the correct gateway while segmentation rules remain enforced.
Incorrect Answers
B:For this incident, the relevant principle is: Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability. This statement concerns Open-source license obligations and audit, a different Server+ technical control.
C:Incident: A dual-NIC server has the right static IP but no route to its database subnet because the subnet mask and default gateway are incorrect.
E:For this incident, the relevant principle is: Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability. This statement concerns NTP time sources and clock skew, a different Server+ technical control.
