CompTIA SK0-005 Practice Test 35
Question 340
A change board is planning a verified response to this server event: An unattended patch process creates the same service account repeatedly and fails when rerun after a partial outage. For the Idempotent configuration automation issue, which response elements belong in the approved plan? Select TWO answers.
- Inspect script condition checks, before/after configuration, test reruns and failure logs.
- Always append commands blindly and assume scripts run exactly once.
- Implement desired-state checks and idempotent updates with logs and bounded retries so repeated runs converge.
- Secrets are not exposed, failed commands stop or alert appropriately, and outcomes match verified artifacts.
- Use snapshots only as short-lived change rollback points and maintain independently recoverable, application-consistent backups.
Explanation
Correct Answer
A:The expected technical relationship is: Reliable administration scripts should be safe to rerun after partial execution rather than multiply state changes. Use findings to decide whether to: Implement desired-state checks and idempotent updates with logs and bounded retries so repeated runs converge.
C:Reliable administration scripts should be safe to rerun after partial execution rather than multiply state changes. A successful outcome is: Running the automation twice produces the same intended end state without duplicate objects.
Incorrect Answers
B:Discriminate using: Inspect script condition checks, before/after configuration, test reruns and failure logs.
D:For this incident, the relevant principle is: Reliable administration scripts should be safe to rerun after partial execution rather than multiply state changes. The desired recovery condition is: Running the automation twice produces the same intended end state without duplicate objects.
E:For this incident, the relevant principle is: Reliable administration scripts should be safe to rerun after partial execution rather than multiply state changes. It does not directly address the reported Idempotent configuration automation fault or prove its repair.
Question 341
A server administrator is investigating a server issue involving script secret handling and exit-code validation: An operations script writes a cloud API key into a shared repository and prints it to CI logs on failure. The change must address the documented fault without creating unrelated risk. Which corrective action is most appropriate? Select ONE best answer.
- Run containers with least privileges, limited mounts and capabilities, verified images and supported host hardening.
- Implement desired-state checks and idempotent updates with logs and bounded retries so repeated runs converge.
- Embed production credentials in the script and discard exit codes to keep the pipeline green.
- Use approved secret storage, minimize secret exposure and validate command errors with audit-friendly failure handling.
Explanation
Correct Answer
D:Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion. A successful outcome is: Secrets are not exposed, failed commands stop or alert appropriately, and outcomes match verified artifacts.
Incorrect Answers
A:That option would run containers with least privileges, limited mounts and capabilities, verified images and supported host hardening, but it addresses a different concern. Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion. A targeted investigation checks: Review repository history, CI log access, token scope, subprocess exit status and operation checksums.
B:That option would implement desired-state checks and idempotent updates with logs and bounded retries so repeated runs converge, but it addresses a different concern. Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion.
C:This is the unsafe shortcut in the Script secret handling and exit-code validation scenario, not a justified remediation or diagnostic. Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion.
Question 342
While reviewing the CompTIA Server+ administration incident, a technician learns: An operations script writes a cloud API key into a shared repository and prints it to CI logs on failure. Which principle most directly explains how to address the described issue safely? Select ONE best answer.
- DHCP broadcasts normally need a relay across routed subnets, and leases must match the client network and scope policy.
- Availability must preserve data consistency during partitions; an extra node is not sufficient without quorum and fencing.
- Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion.
- Effective file access results from intersecting share/export rules, filesystem permissions and identity context.
Explanation
Correct Answer
C:The acceptance test is: Secrets are not exposed, failed commands stop or alert appropriately, and outcomes match verified artifacts. This is the controlling principle for the reported Script secret handling and exit-code validation incident.
Incorrect Answers
A:This statement concerns DHCP scope and relay design, a different Server+ technical control. It does not directly address the reported Script secret handling and exit-code validation fault or prove its repair. For this incident, the relevant principle is: Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion. A targeted investigation checks: Review repository history, CI log access, token scope, subprocess exit status and operation checksums. The desired recovery condition is: Secrets are not exposed, failed commands stop or alert appropriately, and outcomes match verified artifacts.
B:This statement concerns Cluster quorum and split-brain prevention, a different Server+ technical control. It does not directly address the reported Script secret handling and exit-code validation fault or prove its repair. For this incident, the relevant principle is: Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion. A targeted investigation checks: Review repository history, CI log access, token scope, subprocess exit status and operation checksums. The desired recovery condition is: Secrets are not exposed, failed commands stop or alert appropriately, and outcomes match verified artifacts.
D:This statement concerns File share authorization and inheritance, a different Server+ technical control. It does not directly address the reported Script secret handling and exit-code validation fault or prove its repair. For this incident, the relevant principle is: Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion. A targeted investigation checks: Review repository history, CI log access, token scope, subprocess exit status and operation checksums. The desired recovery condition is: Secrets are not exposed, failed commands stop or alert appropriately, and outcomes match verified artifacts.
Question 343
Before a server change is approved, the on-call engineer receives this incident report: An operations script writes a cloud API key into a shared repository and prints it to CI logs on failure. Which evidence would most directly establish the stated root-cause hypothesis? Select ONE best answer.
- Inspect script condition checks, before/after configuration, test reruns and failure logs.
- Embed production credentials in the script and discard exit codes to keep the pipeline green.
- Review repository history, CI log access, token scope, subprocess exit status and operation checksums.
- Inspect DHCP discover/offer captures, relay configuration, scope utilization and leased default gateways.
Explanation
Correct Answer
C:These observations investigate the exact Script secret handling and exit-code validation failure rather than unrelated components. The expected technical relationship is: Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion.
Incorrect Answers
A:For this incident, the relevant principle is: Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion. A targeted investigation checks: Review repository history, CI log access, token scope, subprocess exit status and operation checksums.
B:Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion. This is the unsafe shortcut in the Script secret handling and exit-code validation scenario, not a justified remediation or diagnostic.
D:For this incident, the relevant principle is: Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion. This statement concerns DHCP scope and relay design, a different Server+ technical control.
Question 344
After the team implements a targeted remediation for Script secret handling and exit-code validation, the original incident was: An operations script writes a cloud API key into a shared repository and prints it to CI logs on failure. Which acceptance criterion would best demonstrate a durable and safe resolution? Select ONE best answer.
- Target latency and throughput hold under representative peak load with monitored headroom.
- The workload performs its required task without unnecessary host capabilities or filesystem access.
- During a planned partition only one side accepts authoritative writes and recovery avoids divergent state.
- Secrets are not exposed, failed commands stop or alert appropriately, and outcomes match verified artifacts.
Explanation
Correct Answer
D:Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion.
Incorrect Answers
A:This statement concerns Server resource monitoring and capacity planning, a different Server+ technical control. It does not directly address the reported Script secret handling and exit-code validation fault or prove its repair. For this incident, the relevant principle is: Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion. A targeted investigation checks: Review repository history, CI log access, token scope, subprocess exit status and operation checksums. The desired recovery condition is: Secrets are not exposed, failed commands stop or alert appropriately, and outcomes match verified artifacts.
B:This statement concerns Containers and host isolation, a different Server+ technical control. It does not directly address the reported Script secret handling and exit-code validation fault or prove its repair. For this incident, the relevant principle is: Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion. A targeted investigation checks: Review repository history, CI log access, token scope, subprocess exit status and operation checksums. The desired recovery condition is: Secrets are not exposed, failed commands stop or alert appropriately, and outcomes match verified artifacts.
C:This statement concerns Cluster quorum and split-brain prevention, a different Server+ technical control. It does not directly address the reported Script secret handling and exit-code validation fault or prove its repair.
Question 345
A change board is planning a verified response to this server event: An operations script writes a cloud API key into a shared repository and prints it to CI logs on failure. For the Script secret handling and exit-code validation issue, which response elements belong in the approved plan? Select ONE best answer.
- Configure nonoverlapping DHCP scopes, appropriate relay or helper settings and correct lease, gateway and DNS options.
- Use approved secret storage, minimize secret exposure and validate command errors with audit-friendly failure handling. Then validate the change by confirming: Secrets are not exposed, failed commands stop or alert appropriately, and outcomes match verified artifacts.
- Embed production credentials in the script and discard exit codes to keep the pipeline green.
- Compare TCP checks with application-level probe status, backend error rates, warm-up time and active connections.
Explanation
Correct Answer
B:Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion. The proposed change and outcome assessment work together for Script secret handling and exit-code validation.
Incorrect Answers
A:That option would configure nonoverlapping DHCP scopes, appropriate relay or helper settings and correct lease, gateway and DNS options, but it addresses a different concern. Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion.
C:This is the unsafe shortcut in the Script secret handling and exit-code validation scenario, not a justified remediation or diagnostic. Discriminate using: Review repository history, CI log access, token scope, subprocess exit status and operation checksums.
D:That option would compare TCP checks with application-level probe status, backend error rates, warm-up time and active connections, but it addresses a different concern. Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion.
Question 346
A server administrator is investigating a server issue involving script secret handling and exit-code validation: An automated restore task ignores nonzero command exit codes and reports success even when half the files fail to copy. The change must address the documented fault without creating unrelated risk. Which corrective action is most appropriate? Select ONE best answer.
- Baseline CPU, memory, IOPS, network and latency against workload SLOs; adjust constrained capacity using measured evidence.
- Use approved secret storage, minimize secret exposure and validate command errors with audit-friendly failure handling.
- Run containers with least privileges, limited mounts and capabilities, verified images and supported host hardening.
- Embed production credentials in the script and discard exit codes to keep the pipeline green.
Explanation
Correct Answer
B:Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion. This is the appropriate targeted correction for Script secret handling and exit-code validation.
Incorrect Answers
A:This statement concerns Server resource monitoring and capacity planning, a different Server+ technical control. It does not directly address the reported Script secret handling and exit-code validation fault or prove its repair. For this incident, the relevant principle is: Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion. A targeted investigation checks: Review repository history, CI log access, token scope, subprocess exit status and operation checksums. The desired recovery condition is: Secrets are not exposed, failed commands stop or alert appropriately, and outcomes match verified artifacts.
C:That option would run containers with least privileges, limited mounts and capabilities, verified images and supported host hardening, but it addresses a different concern. Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion. This statement concerns Containers and host isolation, a different Server+ technical control.
D:This is the unsafe shortcut in the Script secret handling and exit-code validation scenario, not a justified remediation or diagnostic. Incident: An automated restore task ignores nonzero command exit codes and reports success even when half the files fail to copy.
Question 347
While reviewing the CompTIA Server+ administration incident, a technician learns: An automated restore task ignores nonzero command exit codes and reports success even when half the files fail to copy. Which principle most directly explains how to address the described issue safely? Select ONE best answer.
- Capacity planning must identify the bottleneck resource and trend, not confuse free capacity with sufficient throughput.
- Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion.
- Network boot is a high-trust supply chain; authenticated image provenance and secret protection matter as much as automation speed.
- Containers share a host kernel and depend on namespace, capability, filesystem and image security; they are not full hardware virtualization.
Explanation
Correct Answer
B:The acceptance test is: Secrets are not exposed, failed commands stop or alert appropriately, and outcomes match verified artifacts. Applying it leads to this operational action: Use approved secret storage, minimize secret exposure and validate command errors with audit-friendly failure handling.
Incorrect Answers
A:This statement concerns Server resource monitoring and capacity planning, a different Server+ technical control. It does not directly address the reported Script secret handling and exit-code validation fault or prove its repair.
C:This statement concerns PXE and unattended installation integrity, a different Server+ technical control. It does not directly address the reported Script secret handling and exit-code validation fault or prove its repair. For this incident, the relevant principle is: Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion. A targeted investigation checks: Review repository history, CI log access, token scope, subprocess exit status and operation checksums. The desired recovery condition is: Secrets are not exposed, failed commands stop or alert appropriately, and outcomes match verified artifacts.
D:This statement concerns Containers and host isolation, a different Server+ technical control. It does not directly address the reported Script secret handling and exit-code validation fault or prove its repair. For this incident, the relevant principle is: Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion. A targeted investigation checks: Review repository history, CI log access, token scope, subprocess exit status and operation checksums. The desired recovery condition is: Secrets are not exposed, failed commands stop or alert appropriately, and outcomes match verified artifacts.
Question 348
Before a server change is approved, the on-call engineer receives this incident report: An automated restore task ignores nonzero command exit codes and reports success even when half the files fail to copy. Which evidence would most directly establish the stated root-cause hypothesis? Select ONE best answer.
- Review repository history, CI log access, token scope, subprocess exit status and operation checksums.
- Use test identities to review effective ACLs, inheritance, export host restrictions and access audit events.
- Trace DHCP/PXE boot source, image hashes and signatures, access ACLs and answer-file permissions.
- Embed production credentials in the script and discard exit codes to keep the pipeline green.
Explanation
Correct Answer
A:These observations investigate the exact Script secret handling and exit-code validation failure rather than unrelated components. Confirm remediation through: Secrets are not exposed, failed commands stop or alert appropriately, and outcomes match verified artifacts.
Incorrect Answers
B:For this incident, the relevant principle is: Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion. This statement concerns File share authorization and inheritance, a different Server+ technical control.
C:For this incident, the relevant principle is: Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion. This statement concerns PXE and unattended installation integrity, a different Server+ technical control.
D:Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion. Discriminate using: Review repository history, CI log access, token scope, subprocess exit status and operation checksums.
Question 349
After the team implements a targeted remediation for Script secret handling and exit-code validation, the original incident was: An automated restore task ignores nonzero command exit codes and reports success even when half the files fail to copy. Which acceptance criterion would best demonstrate a durable and safe resolution? Select ONE best answer.
- The workload performs its required task without unnecessary host capabilities or filesystem access.
- Running the automation twice produces the same intended end state without duplicate objects.
- Secrets are not exposed, failed commands stop or alert appropriately, and outcomes match verified artifacts.
- The server reaches only intended subnets through the correct gateway while segmentation rules remain enforced.
Explanation
Correct Answer
C:Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion.
Incorrect Answers
A:This statement concerns Containers and host isolation, a different Server+ technical control. It does not directly address the reported Script secret handling and exit-code validation fault or prove its repair.
B:This statement concerns Idempotent configuration automation, a different Server+ technical control. It does not directly address the reported Script secret handling and exit-code validation fault or prove its repair. For this incident, the relevant principle is: Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion. A targeted investigation checks: Review repository history, CI log access, token scope, subprocess exit status and operation checksums. The desired recovery condition is: Secrets are not exposed, failed commands stop or alert appropriately, and outcomes match verified artifacts.
D:This statement concerns VLAN segmentation and default gateway, a different Server+ technical control. It does not directly address the reported Script secret handling and exit-code validation fault or prove its repair. For this incident, the relevant principle is: Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion. A targeted investigation checks: Review repository history, CI log access, token scope, subprocess exit status and operation checksums. The desired recovery condition is: Secrets are not exposed, failed commands stop or alert appropriately, and outcomes match verified artifacts.
Question 350
A change board is planning a verified response to this server event: An automated restore task ignores nonzero command exit codes and reports success even when half the files fail to copy. For the Script secret handling and exit-code validation issue, which response elements belong in the approved plan? Select TWO answers.
- Running the automation twice produces the same intended end state without duplicate objects.
- Use approved secret storage, minimize secret exposure and validate command errors with audit-friendly failure handling.
- Restrict PXE and imaging infrastructure to trusted networks and protect signed, versioned images and unattended-install credentials.
- Embed production credentials in the script and discard exit codes to keep the pipeline green.
- Review repository history, CI log access, token scope, subprocess exit status and operation checksums.
Explanation
Correct Answer
B:Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion.
E:These observations investigate the exact Script secret handling and exit-code validation failure rather than unrelated components. Incident: An automated restore task ignores nonzero command exit codes and reports success even when half the files fail to copy.
Incorrect Answers
A:This statement concerns Idempotent configuration automation, a different Server+ technical control. It does not directly address the reported Script secret handling and exit-code validation fault or prove its repair.
C:This statement concerns PXE and unattended installation integrity, a different Server+ technical control. It does not directly address the reported Script secret handling and exit-code validation fault or prove its repair.
D:Automated commands must protect credentials and report failures accurately; output success is not evidence of task completion.
