CompTIA SK0-005 Practice Test 23
Question 220
A change board is planning a verified response to this server event: A dual-NIC server has the right static IP but no route to its database subnet because the subnet mask and default gateway are incorrect. For the VLAN segmentation and default gateway issue, which response elements belong in the approved plan? Select TWO answers.
- Inspect switch port VLAN/trunk state, ARP tables, interface settings, routing table and path traces.
- Maintain a software bill of materials and honor relevant distribution, attribution and support-license obligations.
- Disable segmentation and move every server into a flat VLAN to mask address and route errors.
- Assign supported switch VLAN modes and correct interface subnet, mask, gateway and routes; verify permitted inter-VLAN flows.
- Offset falls within the authentication policy threshold and timestamps align across systems.
Explanation
Correct Answer
A:These observations investigate the exact VLAN segmentation and default gateway failure rather than unrelated components. The expected technical relationship is: Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability.
D:Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability. A successful outcome is: The server reaches only intended subnets through the correct gateway while segmentation rules remain enforced.
Incorrect Answers
B:For this incident, the relevant principle is: Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability. This statement concerns Open-source license obligations and audit, a different Server+ technical control.
C:Incident: A dual-NIC server has the right static IP but no route to its database subnet because the subnet mask and default gateway are incorrect.
E:For this incident, the relevant principle is: Layer-two VLAN membership and layer-three routing are distinct requirements; correct IP syntax alone does not guarantee reachability. This statement concerns NTP time sources and clock skew, a different Server+ technical control.
Question 221
A server administrator is investigating a server issue involving file share authorization and inheritance: Users granted read-only SMB share permission unexpectedly can edit files because broad NTFS permissions and inherited groups were not reviewed. The change must address the documented fault without creating unrelated risk. Which corrective action is most appropriate? Select ONE best answer.
- Correct service startup ordering and resource limits, monitor dependency health and validate controlled restarts.
- Grant Everyone full control at each layer to work around an access complaint.
- Align share/export permissions with filesystem ACLs, least-privilege group membership and documented inheritance tests.
- Baseline CPU, memory, IOPS, network and latency against workload SLOs; adjust constrained capacity using measured evidence.
Explanation
Correct Answer
C:A successful outcome is: Authorized readers can read but cannot modify, and only approved writer groups can change files. For this case, Users granted read-only SMB share permission unexpectedly can edit files because broad NTFS permissions and inherited groups were not reviewed.
Incorrect Answers
A:For this incident, the relevant principle is: Effective file access results from intersecting share/export rules, filesystem permissions and identity context. A targeted investigation checks: Use test identities to review effective ACLs, inheritance, export host restrictions and access audit events.
B:This is the unsafe shortcut in the File share authorization and inheritance scenario, not a justified remediation or diagnostic. Incident: Users granted read-only SMB share permission unexpectedly can edit files because broad NTFS permissions and inherited groups were not reviewed.
D:For this incident, the relevant principle is: Effective file access results from intersecting share/export rules, filesystem permissions and identity context.
Question 222
While reviewing the CompTIA Server+ administration incident, a technician learns: Users granted read-only SMB share permission unexpectedly can edit files because broad NTFS permissions and inherited groups were not reviewed. Which principle most directly explains how to address the described issue safely? Select ONE best answer.
- Time synchronization is required for trustworthy logs, certificate validation windows and time-sensitive authentication.
- File-system layout should reflect workload growth and recovery boundaries rather than only installer defaults.
- Reliable administration scripts should be safe to rerun after partial execution rather than multiply state changes.
- Effective file access results from intersecting share/export rules, filesystem permissions and identity context.
Explanation
Correct Answer
D:The acceptance test is: Authorized readers can read but cannot modify, and only approved writer groups can change files.
Incorrect Answers
A:This statement concerns NTP time sources and clock skew, a different Server+ technical control. It does not directly address the reported File share authorization and inheritance fault or prove its repair. For this incident, the relevant principle is: Effective file access results from intersecting share/export rules, filesystem permissions and identity context. A targeted investigation checks: Use test identities to review effective ACLs, inheritance, export host restrictions and access audit events. The desired recovery condition is: Authorized readers can read but cannot modify, and only approved writer groups can change files.
B:This statement concerns Partition and mount strategy for server roles, a different Server+ technical control. It does not directly address the reported File share authorization and inheritance fault or prove its repair. For this incident, the relevant principle is: Effective file access results from intersecting share/export rules, filesystem permissions and identity context. A targeted investigation checks: Use test identities to review effective ACLs, inheritance, export host restrictions and access audit events. The desired recovery condition is: Authorized readers can read but cannot modify, and only approved writer groups can change files.
C:This statement concerns Idempotent configuration automation, a different Server+ technical control. It does not directly address the reported File share authorization and inheritance fault or prove its repair. For this incident, the relevant principle is: Effective file access results from intersecting share/export rules, filesystem permissions and identity context. A targeted investigation checks: Use test identities to review effective ACLs, inheritance, export host restrictions and access audit events. The desired recovery condition is: Authorized readers can read but cannot modify, and only approved writer groups can change files.
Question 223
Before a server change is approved, the on-call engineer receives this incident report: Users granted read-only SMB share permission unexpectedly can edit files because broad NTFS permissions and inherited groups were not reviewed. Which evidence would most directly establish the stated root-cause hypothesis? Select ONE best answer.
- Collect resource counters, queue depth, latency percentile, working-set and workload time series.
- Grant Everyone full control at each layer to work around an access complaint.
- Measure time offset, NTP peer reachability, stratum and event timestamps on affected systems.
- Use test identities to review effective ACLs, inheritance, export host restrictions and access audit events.
Explanation
Correct Answer
D:These observations investigate the exact File share authorization and inheritance failure rather than unrelated components. Incident: Users granted read-only SMB share permission unexpectedly can edit files because broad NTFS permissions and inherited groups were not reviewed.
Incorrect Answers
A:For this incident, the relevant principle is: Effective file access results from intersecting share/export rules, filesystem permissions and identity context. This statement concerns Server resource monitoring and capacity planning, a different Server+ technical control.
B:This is the unsafe shortcut in the File share authorization and inheritance scenario, not a justified remediation or diagnostic. Effective file access results from intersecting share/export rules, filesystem permissions and identity context.
C:For this incident, the relevant principle is: Effective file access results from intersecting share/export rules, filesystem permissions and identity context. This statement concerns NTP time sources and clock skew, a different Server+ technical control.
Question 224
After the team implements a targeted remediation for File share authorization and inheritance, the original incident was: Users granted read-only SMB share permission unexpectedly can edit files because broad NTFS permissions and inherited groups were not reviewed. Which acceptance criterion would best demonstrate a durable and safe resolution? Select ONE best answer.
- All required services start in order after reboot and pass application-level health checks.
- Authorized readers can read but cannot modify, and only approved writer groups can change files.
- A fresh node installs the approved version reproducibly without credential disclosure or rogue boot sources.
- Log growth no longer fills system volumes and data mounts have tested capacity thresholds and recovery procedures.
Explanation
Correct Answer
B:Effective file access results from intersecting share/export rules, filesystem permissions and identity context.
Incorrect Answers
A:This statement concerns Service dependency and restart management, a different Server+ technical control. It does not directly address the reported File share authorization and inheritance fault or prove its repair. For this incident, the relevant principle is: Effective file access results from intersecting share/export rules, filesystem permissions and identity context. A targeted investigation checks: Use test identities to review effective ACLs, inheritance, export host restrictions and access audit events. The desired recovery condition is: Authorized readers can read but cannot modify, and only approved writer groups can change files.
C:This statement concerns PXE and unattended installation integrity, a different Server+ technical control. It does not directly address the reported File share authorization and inheritance fault or prove its repair. For this incident, the relevant principle is: Effective file access results from intersecting share/export rules, filesystem permissions and identity context. A targeted investigation checks: Use test identities to review effective ACLs, inheritance, export host restrictions and access audit events. The desired recovery condition is: Authorized readers can read but cannot modify, and only approved writer groups can change files.
D:That option would log growth no longer fills system volumes and data mounts have tested capacity thresholds and recovery procedures, but it addresses a different concern. Effective file access results from intersecting share/export rules, filesystem permissions and identity context.
Question 225
A change board is planning a verified response to this server event: Users granted read-only SMB share permission unexpectedly can edit files because broad NTFS permissions and inherited groups were not reviewed. For the File share authorization and inheritance issue, which response elements belong in the approved plan? Select ONE best answer.
- Compare TCP checks with application-level probe status, backend error rates, warm-up time and active connections.
- Grant Everyone full control at each layer to work around an access complaint.
- Align share/export permissions with filesystem ACLs, least-privilege group membership and documented inheritance tests. Then validate the change by confirming: Authorized readers can read but cannot modify, and only approved writer groups can change files.
- Configure redundant trusted time sources and verify host, hypervisor and directory time hierarchy with monitored offset.
Explanation
Correct Answer
C:Before modifying systems, gather: Use test identities to review effective ACLs, inheritance, export host restrictions and access audit events.
Incorrect Answers
A:For this incident, the relevant principle is: Effective file access results from intersecting share/export rules, filesystem permissions and identity context. This statement concerns Load balancer health checking, a different Server+ technical control.
B:This is the unsafe shortcut in the File share authorization and inheritance scenario, not a justified remediation or diagnostic. Discriminate using: Use test identities to review effective ACLs, inheritance, export host restrictions and access audit events.
D:For this incident, the relevant principle is: Effective file access results from intersecting share/export rules, filesystem permissions and identity context. The desired recovery condition is: Authorized readers can read but cannot modify, and only approved writer groups can change files.
Question 226
A server administrator is investigating a server issue involving file share authorization and inheritance: A Linux NFS export unintentionally permits write access from a wider subnet than intended after a filesystem group change. The change must address the documented fault without creating unrelated risk. Which corrective action is most appropriate? Select ONE best answer.
- Grant Everyone full control at each layer to work around an access complaint.
- Use snapshots only as short-lived change rollback points and maintain independently recoverable, application-consistent backups.
- Align share/export permissions with filesystem ACLs, least-privilege group membership and documented inheritance tests.
- Align virtual switch and distributed port-group VLAN, uplink and security settings across hosts; preserve network isolation.
Explanation
Correct Answer
C:A successful outcome is: Authorized readers can read but cannot modify, and only approved writer groups can change files. For this case, A Linux NFS export unintentionally permits write access from a wider subnet than intended after a filesystem group change.
Incorrect Answers
A:This is the unsafe shortcut in the File share authorization and inheritance scenario, not a justified remediation or diagnostic. Incident: A Linux NFS export unintentionally permits write access from a wider subnet than intended after a filesystem group change.
B:For this incident, the relevant principle is: Effective file access results from intersecting share/export rules, filesystem permissions and identity context. This statement concerns VM snapshot use and backup boundaries, a different Server+ technical control.
D:For this incident, the relevant principle is: Effective file access results from intersecting share/export rules, filesystem permissions and identity context. This statement concerns Virtual switch isolation and port group assignment, a different Server+ technical control.
Question 227
While reviewing the CompTIA Server+ administration incident, a technician learns: A Linux NFS export unintentionally permits write access from a wider subnet than intended after a filesystem group change. Which principle most directly explains how to address the described issue safely? Select ONE best answer.
- Virtual network topology must be consistent across hosts, and hypervisor port groups enforce connectivity and isolation.
- Snapshots depend on the underlying datastore and often have performance/space costs; they are not independent backups.
- Time synchronization is required for trustworthy logs, certificate validation windows and time-sensitive authentication.
- Effective file access results from intersecting share/export rules, filesystem permissions and identity context.
Explanation
Correct Answer
D:The acceptance test is: Authorized readers can read but cannot modify, and only approved writer groups can change files. This is the controlling principle for the reported File share authorization and inheritance incident.
Incorrect Answers
A:This statement concerns Virtual switch isolation and port group assignment, a different Server+ technical control. It does not directly address the reported File share authorization and inheritance fault or prove its repair. For this incident, the relevant principle is: Effective file access results from intersecting share/export rules, filesystem permissions and identity context. A targeted investigation checks: Use test identities to review effective ACLs, inheritance, export host restrictions and access audit events. The desired recovery condition is: Authorized readers can read but cannot modify, and only approved writer groups can change files.
B:This statement concerns VM snapshot use and backup boundaries, a different Server+ technical control. It does not directly address the reported File share authorization and inheritance fault or prove its repair. For this incident, the relevant principle is: Effective file access results from intersecting share/export rules, filesystem permissions and identity context. A targeted investigation checks: Use test identities to review effective ACLs, inheritance, export host restrictions and access audit events. The desired recovery condition is: Authorized readers can read but cannot modify, and only approved writer groups can change files.
C:This statement concerns NTP time sources and clock skew, a different Server+ technical control. It does not directly address the reported File share authorization and inheritance fault or prove its repair. For this incident, the relevant principle is: Effective file access results from intersecting share/export rules, filesystem permissions and identity context. A targeted investigation checks: Use test identities to review effective ACLs, inheritance, export host restrictions and access audit events. The desired recovery condition is: Authorized readers can read but cannot modify, and only approved writer groups can change files.
Question 228
Before a server change is approved, the on-call engineer receives this incident report: A Linux NFS export unintentionally permits write access from a wider subnet than intended after a filesystem group change. Which evidence would most directly establish the stated root-cause hypothesis? Select ONE best answer.
- Use test identities to review effective ACLs, inheritance, export host restrictions and access audit events.
- Grant Everyone full control at each layer to work around an access complaint.
- Measure time offset, NTP peer reachability, stratum and event timestamps on affected systems.
- Inspect boot mode, partition-table format, Secure Boot state, boot entries and installation media support.
Explanation
Correct Answer
A:These observations investigate the exact File share authorization and inheritance failure rather than unrelated components. Confirm remediation through: Authorized readers can read but cannot modify, and only approved writer groups can change files.
Incorrect Answers
B:Effective file access results from intersecting share/export rules, filesystem permissions and identity context.
C:For this incident, the relevant principle is: Effective file access results from intersecting share/export rules, filesystem permissions and identity context. It does not directly address the reported File share authorization and inheritance fault or prove its repair.
D:For this incident, the relevant principle is: Effective file access results from intersecting share/export rules, filesystem permissions and identity context. This statement concerns UEFI boot and GPT provisioning, a different Server+ technical control.
Question 229
After the team implements a targeted remediation for File share authorization and inheritance, the original incident was: A Linux NFS export unintentionally permits write access from a wider subnet than intended after a filesystem group change. Which acceptance criterion would best demonstrate a durable and safe resolution? Select ONE best answer.
- The VM retains approved network connectivity through migration without gaining unauthorized subnet reachability.
- All required services start in order after reboot and pass application-level health checks.
- Authorized readers can read but cannot modify, and only approved writer groups can change files.
- Inventory and dependency records match deployed assets and can be used to locate each service during incidents.
Explanation
Correct Answer
C:Effective file access results from intersecting share/export rules, filesystem permissions and identity context.
Incorrect Answers
A:This statement concerns Virtual switch isolation and port group assignment, a different Server+ technical control. It does not directly address the reported File share authorization and inheritance fault or prove its repair.
B:This statement concerns Service dependency and restart management, a different Server+ technical control. It does not directly address the reported File share authorization and inheritance fault or prove its repair. For this incident, the relevant principle is: Effective file access results from intersecting share/export rules, filesystem permissions and identity context. A targeted investigation checks: Use test identities to review effective ACLs, inheritance, export host restrictions and access audit events. The desired recovery condition is: Authorized readers can read but cannot modify, and only approved writer groups can change files.
D:This statement concerns Asset inventory and change records, a different Server+ technical control. It does not directly address the reported File share authorization and inheritance fault or prove its repair. For this incident, the relevant principle is: Effective file access results from intersecting share/export rules, filesystem permissions and identity context. A targeted investigation checks: Use test identities to review effective ACLs, inheritance, export host restrictions and access audit events. The desired recovery condition is: Authorized readers can read but cannot modify, and only approved writer groups can change files.
Question 230
A change board is planning a verified response to this server event: A Linux NFS export unintentionally permits write access from a wider subnet than intended after a filesystem group change. For the File share authorization and inheritance issue, which response elements belong in the approved plan? Select TWO answers.
- All required services start in order after reboot and pass application-level health checks.
- Use test identities to review effective ACLs, inheritance, export host restrictions and access audit events.
- Configure redundant trusted time sources and verify host, hypervisor and directory time hierarchy with monitored offset.
- Grant Everyone full control at each layer to work around an access complaint.
- Align share/export permissions with filesystem ACLs, least-privilege group membership and documented inheritance tests.
Explanation
Correct Answer
B:These observations investigate the exact File share authorization and inheritance failure rather than unrelated components. Incident: A Linux NFS export unintentionally permits write access from a wider subnet than intended after a filesystem group change.
E:A successful outcome is: Authorized readers can read but cannot modify, and only approved writer groups can change files. This is the appropriate targeted correction for File share authorization and inheritance.
Incorrect Answers
A:For this incident, the relevant principle is: Effective file access results from intersecting share/export rules, filesystem permissions and identity context. This statement concerns Service dependency and restart management, a different Server+ technical control.
C:For this incident, the relevant principle is: Effective file access results from intersecting share/export rules, filesystem permissions and identity context.
D:Discriminate using: Use test identities to review effective ACLs, inheritance, export host restrictions and access audit events.
