CompTIA SK0-005 Practice Test 32
Question 310
A change board is planning a verified response to this server event: After live migration, a workload loses connectivity because the destination host's port group VLAN differs from the source. For the Virtual switch isolation and port group assignment issue, which response elements belong in the approved plan? Select TWO answers.
- Baseline CPU, memory, IOPS, network and latency against workload SLOs; adjust constrained capacity using measured evidence.
- Compare source/destination port-group IDs, uplink teaming, VLAN tags and effective firewall policies.
- The VM migrates without guest interruption and maintains its workload performance after placement.
- Connect the VM to a general untagged bridge to avoid reconciling port-group configurations.
- Align virtual switch and distributed port-group VLAN, uplink and security settings across hosts; preserve network isolation.
Explanation
Correct Answer
B:The expected technical relationship is: Virtual network topology must be consistent across hosts, and hypervisor port groups enforce connectivity and isolation.
E:Virtual network topology must be consistent across hosts, and hypervisor port groups enforce connectivity and isolation. This is the appropriate targeted correction for Virtual switch isolation and port group assignment.
Incorrect Answers
A:For this incident, the relevant principle is: Virtual network topology must be consistent across hosts, and hypervisor port groups enforce connectivity and isolation. This statement concerns Server resource monitoring and capacity planning, a different Server+ technical control.
C:For this incident, the relevant principle is: Virtual network topology must be consistent across hosts, and hypervisor port groups enforce connectivity and isolation. This statement concerns Live migration compatibility and resource headroom, a different Server+ technical control.
D:Virtual network topology must be consistent across hosts, and hypervisor port groups enforce connectivity and isolation. Discriminate using: Compare source/destination port-group IDs, uplink teaming, VLAN tags and effective firewall policies.
Question 311
A server administrator is investigating a server issue involving containers and host isolation: A container needs to write to a single application directory but is deployed privileged with the whole host filesystem mounted read-write. The change must address the documented fault without creating unrelated risk. Which corrective action is most appropriate? Select ONE best answer.
- Align virtual switch and distributed port-group VLAN, uplink and security settings across hosts; preserve network isolation.
- Use snapshots only as short-lived change rollback points and maintain independently recoverable, application-consistent backups.
- Use --privileged and mount the host root filesystem to fix a narrow file permission error.
- Run containers with least privileges, limited mounts and capabilities, verified images and supported host hardening.
Explanation
Correct Answer
D:Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization.
Incorrect Answers
A:That option would align virtual switch and distributed port-group VLAN, uplink and security settings across hosts; preserve network isolation, but it addresses a different concern. Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization.
B:That option would use snapshots only as short-lived change rollback points and maintain independently recoverable, application-consistent backups, but it addresses a different concern. Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization.
C:This is the unsafe shortcut in the Containers and host isolation scenario, not a justified remediation or diagnostic. Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization.
Question 312
While reviewing the CompTIA Server+ administration incident, a technician learns: A container needs to write to a single application directory but is deployed privileged with the whole host filesystem mounted read-write. Which principle most directly explains how to address the described issue safely? Select ONE best answer.
- Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization.
- UEFI, GPT and the installed bootloader must match a supported boot path; changing boot mode after installation can prevent startup.
- Allocated virtual resources are not guaranteed physically available under contention; vCPU ready and memory reclaim can harm latency.
- Live migration depends on compatible host features and enough resources on the target, even if the guest OS is unchanged.
Explanation
Correct Answer
A:The acceptance test is: The workload performs its required task without unnecessary host capabilities or filesystem access.
Incorrect Answers
B:This statement concerns UEFI boot and GPT provisioning, a different Server+ technical control. It does not directly address the reported Containers and host isolation fault or prove its repair. For this incident, the relevant principle is: Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization. A targeted investigation checks: Inspect container runtime flags, privileged status, mounted paths, image digest and host patch level. The desired recovery condition is: The workload performs its required task without unnecessary host capabilities or filesystem access.
C:This statement concerns Hypervisor resource overcommit and reservations, a different Server+ technical control. It does not directly address the reported Containers and host isolation fault or prove its repair. For this incident, the relevant principle is: Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization. A targeted investigation checks: Inspect container runtime flags, privileged status, mounted paths, image digest and host patch level. The desired recovery condition is: The workload performs its required task without unnecessary host capabilities or filesystem access.
D:This statement concerns Live migration compatibility and resource headroom, a different Server+ technical control. It does not directly address the reported Containers and host isolation fault or prove its repair. For this incident, the relevant principle is: Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization. A targeted investigation checks: Inspect container runtime flags, privileged status, mounted paths, image digest and host patch level. The desired recovery condition is: The workload performs its required task without unnecessary host capabilities or filesystem access.
Question 313
Before a server change is approved, the on-call engineer receives this incident report: A container needs to write to a single application directory but is deployed privileged with the whole host filesystem mounted read-write. Which evidence would most directly establish the stated root-cause hypothesis? Select ONE best answer.
- Inspect snapshot tree age/size, delta growth, datastore free space and backup restore-point availability.
- Use --privileged and mount the host root filesystem to fix a narrow file permission error.
- Inspect container runtime flags, privileged status, mounted paths, image digest and host patch level.
- Inspect host CPU utilization and ready time, balloon/swap counters, NUMA placement and VM performance curves.
Explanation
Correct Answer
C:The expected technical relationship is: Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization.
Incorrect Answers
A:For this incident, the relevant principle is: Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization. A targeted investigation checks: Inspect container runtime flags, privileged status, mounted paths, image digest and host patch level.
B:This is the unsafe shortcut in the Containers and host isolation scenario, not a justified remediation or diagnostic. Incident: A container needs to write to a single application directory but is deployed privileged with the whole host filesystem mounted read-write.
D:For this incident, the relevant principle is: Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization.
Question 314
After the team implements a targeted remediation for Containers and host isolation, the original incident was: A container needs to write to a single application directory but is deployed privileged with the whole host filesystem mounted read-write. Which acceptance criterion would best demonstrate a durable and safe resolution? Select ONE best answer.
- The VM migrates without guest interruption and maintains its workload performance after placement.
- The workload performs its required task without unnecessary host capabilities or filesystem access.
- The VM retains approved network connectivity through migration without gaining unauthorized subnet reachability.
- Inventory and dependency records match deployed assets and can be used to locate each service during incidents.
Explanation
Correct Answer
B:Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization.
Incorrect Answers
A:This statement concerns Live migration compatibility and resource headroom, a different Server+ technical control. It does not directly address the reported Containers and host isolation fault or prove its repair.
C:This statement concerns Virtual switch isolation and port group assignment, a different Server+ technical control. It does not directly address the reported Containers and host isolation fault or prove its repair. For this incident, the relevant principle is: Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization. A targeted investigation checks: Inspect container runtime flags, privileged status, mounted paths, image digest and host patch level. The desired recovery condition is: The workload performs its required task without unnecessary host capabilities or filesystem access.
D:This statement concerns Asset inventory and change records, a different Server+ technical control. It does not directly address the reported Containers and host isolation fault or prove its repair. For this incident, the relevant principle is: Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization. A targeted investigation checks: Inspect container runtime flags, privileged status, mounted paths, image digest and host patch level. The desired recovery condition is: The workload performs its required task without unnecessary host capabilities or filesystem access.
Question 315
A change board is planning a verified response to this server event: A container needs to write to a single application directory but is deployed privileged with the whole host filesystem mounted read-write. For the Containers and host isolation issue, which response elements belong in the approved plan? Select ONE best answer.
- Right-size vCPU and RAM allocations using contention telemetry and supportable reservations or resource controls.
- Use --privileged and mount the host root filesystem to fix a narrow file permission error.
- Run containers with least privileges, limited mounts and capabilities, verified images and supported host hardening. Then validate the change by confirming: The workload performs its required task without unnecessary host capabilities or filesystem access.
- Inspect switch port VLAN/trunk state, ARP tables, interface settings, routing table and path traces.
Explanation
Correct Answer
C:Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization. The proposed change and outcome assessment work together for Containers and host isolation.
Incorrect Answers
A:This statement concerns Hypervisor resource overcommit and reservations, a different Server+ technical control. It does not directly address the reported Containers and host isolation fault or prove its repair.
B:This is the unsafe shortcut in the Containers and host isolation scenario, not a justified remediation or diagnostic. Discriminate using: Inspect container runtime flags, privileged status, mounted paths, image digest and host patch level.
D:That option would inspect switch port VLAN/trunk state, ARP tables, interface settings, routing table and path traces, but it addresses a different concern. Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization.
Question 316
A server administrator is investigating a server issue involving containers and host isolation: A server team assumes a container image automatically provides kernel-level isolation from a vulnerable shared host. The change must address the documented fault without creating unrelated risk. Which corrective action is most appropriate? Select ONE best answer.
- Use --privileged and mount the host root filesystem to fix a narrow file permission error.
- Align share/export permissions with filesystem ACLs, least-privilege group membership and documented inheritance tests.
- Set authoritative zone records and split-view policy correctly, then validate resolver paths, TTL and cache expiration.
- Run containers with least privileges, limited mounts and capabilities, verified images and supported host hardening.
Explanation
Correct Answer
D:Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization. A successful outcome is: The workload performs its required task without unnecessary host capabilities or filesystem access.
Incorrect Answers
A:This is the unsafe shortcut in the Containers and host isolation scenario, not a justified remediation or diagnostic. Incident: A server team assumes a container image automatically provides kernel-level isolation from a vulnerable shared host.
B:That option would align share/export permissions with filesystem ACLs, least-privilege group membership and documented inheritance tests, but it addresses a different concern. Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization.
C:That option would set authoritative zone records and split-view policy correctly, then validate resolver paths, TTL and cache expiration, but it addresses a different concern. Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization.
Question 317
While reviewing the CompTIA Server+ administration incident, a technician learns: A server team assumes a container image automatically provides kernel-level isolation from a vulnerable shared host. Which principle most directly explains how to address the described issue safely? Select ONE best answer.
- Time synchronization is required for trustworthy logs, certificate validation windows and time-sensitive authentication.
- Effective file access results from intersecting share/export rules, filesystem permissions and identity context.
- DNS answers depend on resolver selection, authoritative records and caching; a ping of one host does not validate all name-resolution paths.
- Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization.
Explanation
Correct Answer
D:The acceptance test is: The workload performs its required task without unnecessary host capabilities or filesystem access. This is the controlling principle for the reported Containers and host isolation incident.
Incorrect Answers
A:This statement concerns NTP time sources and clock skew, a different Server+ technical control. It does not directly address the reported Containers and host isolation fault or prove its repair. For this incident, the relevant principle is: Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization. A targeted investigation checks: Inspect container runtime flags, privileged status, mounted paths, image digest and host patch level. The desired recovery condition is: The workload performs its required task without unnecessary host capabilities or filesystem access.
B:This statement concerns File share authorization and inheritance, a different Server+ technical control. It does not directly address the reported Containers and host isolation fault or prove its repair. For this incident, the relevant principle is: Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization. A targeted investigation checks: Inspect container runtime flags, privileged status, mounted paths, image digest and host patch level. The desired recovery condition is: The workload performs its required task without unnecessary host capabilities or filesystem access.
C:This statement concerns DNS split-horizon and resolver troubleshooting, a different Server+ technical control. It does not directly address the reported Containers and host isolation fault or prove its repair. For this incident, the relevant principle is: Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization. A targeted investigation checks: Inspect container runtime flags, privileged status, mounted paths, image digest and host patch level. The desired recovery condition is: The workload performs its required task without unnecessary host capabilities or filesystem access.
Question 318
Before a server change is approved, the on-call engineer receives this incident report: A server team assumes a container image automatically provides kernel-level isolation from a vulnerable shared host. Which evidence would most directly establish the stated root-cause hypothesis? Select ONE best answer.
- Inspect container runtime flags, privileged status, mounted paths, image digest and host patch level.
- Inspect host CPU utilization and ready time, balloon/swap counters, NUMA placement and VM performance curves.
- Use --privileged and mount the host root filesystem to fix a narrow file permission error.
- Measure time offset, NTP peer reachability, stratum and event timestamps on affected systems.
Explanation
Correct Answer
A:The expected technical relationship is: Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization. These observations investigate the exact Containers and host isolation failure rather than unrelated components.
Incorrect Answers
B:For this incident, the relevant principle is: Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization. This statement concerns Hypervisor resource overcommit and reservations, a different Server+ technical control.
C:Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization.
D:For this incident, the relevant principle is: Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization. This statement concerns NTP time sources and clock skew, a different Server+ technical control.
Question 319
After the team implements a targeted remediation for Containers and host isolation, the original incident was: A server team assumes a container image automatically provides kernel-level isolation from a vulnerable shared host. Which acceptance criterion would best demonstrate a durable and safe resolution? Select ONE best answer.
- Authorized readers can read but cannot modify, and only approved writer groups can change files.
- Expired snapshots are consolidated safely and a separate tested backup can restore the VM.
- The VM migrates without guest interruption and maintains its workload performance after placement.
- The workload performs its required task without unnecessary host capabilities or filesystem access.
Explanation
Correct Answer
D:Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization.
Incorrect Answers
A:This statement concerns File share authorization and inheritance, a different Server+ technical control. It does not directly address the reported Containers and host isolation fault or prove its repair.
B:This statement concerns VM snapshot use and backup boundaries, a different Server+ technical control. It does not directly address the reported Containers and host isolation fault or prove its repair. For this incident, the relevant principle is: Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization. A targeted investigation checks: Inspect container runtime flags, privileged status, mounted paths, image digest and host patch level. The desired recovery condition is: The workload performs its required task without unnecessary host capabilities or filesystem access.
C:This statement concerns Live migration compatibility and resource headroom, a different Server+ technical control. It does not directly address the reported Containers and host isolation fault or prove its repair. For this incident, the relevant principle is: Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization. A targeted investigation checks: Inspect container runtime flags, privileged status, mounted paths, image digest and host patch level. The desired recovery condition is: The workload performs its required task without unnecessary host capabilities or filesystem access.
Question 320
A change board is planning a verified response to this server event: A server team assumes a container image automatically provides kernel-level isolation from a vulnerable shared host. For the Containers and host isolation issue, which response elements belong in the approved plan? Select TWO answers.
- Expired snapshots are consolidated safely and a separate tested backup can restore the VM.
- Inspect container runtime flags, privileged status, mounted paths, image digest and host patch level.
- Configure redundant trusted time sources and verify host, hypervisor and directory time hierarchy with monitored offset.
- Run containers with least privileges, limited mounts and capabilities, verified images and supported host hardening.
- Use --privileged and mount the host root filesystem to fix a narrow file permission error.
Explanation
Correct Answer
B:The expected technical relationship is: Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization. Confirm remediation through: The workload performs its required task without unnecessary host capabilities or filesystem access.
D:Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization.
Incorrect Answers
A:For this incident, the relevant principle is: Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization. This statement concerns VM snapshot use and backup boundaries, a different Server+ technical control.
C:For this incident, the relevant principle is: Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization. The desired recovery condition is: The workload performs its required task without unnecessary host capabilities or filesystem access.
E:Discriminate using: Inspect container runtime flags, privileged status, mounted paths, image digest and host patch level.
