cert
cert-1
cert-2

Pass CompTIA SK0-005 Exam in First Attempt Guaranteed!

Get 100% Latest Exam Questions, Accurate & Verified Answers to Pass the Actual Exam!
30 Days Free Updates, Instant Download!

cert-5
cert-6
SK0-005 Exam - Verified By Experts
SK0-005 Premium Bundle
$29.98

SK0-005 Premium Bundle

$79.99
$109.97
  • Premium File 617 Questions & Answers. Last update: Nov 13, 2026
  • Training Course 139 Video Lectures
  • Study Guide 533 Pages
 
$109.97
$79.99
accept 21 downloads in last 7 days
block-screenshots
Purchase CompTIA SK0-005 Exam Training Products Individually
CompTIA SK0-005 Premium File
Premium File 617 Q&A
$76.99$69.99
CompTIA SK0-005 Video Training Course
Training Course 139 Lectures
$21.99 $19.99
CompTIA SK0-005 PDF Study Guide
Study Guide 533 Pages
$21.99 $19.99
CompTIA SK0-005 Practice Test 40

Question 390

A change board is planning a verified response to this server event: A database host uses full-disk encryption but stores its recovery key on the same unprotected disk image, preventing secure recovery after a theft. For the Encryption at rest and key lifecycle issue, which response elements belong in the approved plan? Select TWO answers.

  1. Rely only on operating-system ACLs while leaving portable backup disks and recovery keys unprotected.
  2. Select recovery architecture to meet quantified RTO and RPO, then validate both during controlled recovery exercises.
  3. Enable appropriate data-at-rest encryption with separated, access-controlled key storage, recovery procedures and rotation policy.
  4. Clients establish mutually appropriate authenticated encrypted connections with verification enabled.
  5. Inspect storage encryption status, backup-media handling, key custody, access logs and tested recovery access.

Explanation

Correct Answer

C:

File permissions do not protect stolen offline media; encryption's value depends on safeguarding keys and recoverability. This is the appropriate targeted correction for Encryption at rest and key lifecycle.

E:

These observations investigate the exact Encryption at rest and key lifecycle failure rather than unrelated components. The expected technical relationship is: File permissions do not protect stolen offline media; encryption's value depends on safeguarding keys and recoverability.

Incorrect Answers

A:

Incident: A database host uses full-disk encryption but stores its recovery key on the same unprotected disk image, preventing secure recovery after a theft.

B:

That option would select recovery architecture to meet quantified RTO and RPO, then validate both during controlled recovery exercises, but it addresses a different concern. File permissions do not protect stolen offline media; encryption's value depends on safeguarding keys and recoverability.

D:

This statement concerns TLS certificate chain and secure transport, a different Server+ technical control. It does not directly address the reported Encryption at rest and key lifecycle fault or prove its repair. For this incident, the relevant principle is: File permissions do not protect stolen offline media; encryption's value depends on safeguarding keys and recoverability.

Question 391

A server administrator is investigating a server issue involving tls certificate chain and secure transport: An internal API falls back to plaintext HTTP because an expired server certificate made clients reject TLS. The change must address the documented fault without creating unrelated risk. Which corrective action is most appropriate? Select ONE best answer.

  1. Disable certificate validation or switch sensitive application traffic to plaintext permanently.
  2. Classify sensitive records and enforce least-necessary access, approved retention and controlled export or redaction.
  3. Enable appropriate data-at-rest encryption with separated, access-controlled key storage, recovery procedures and rotation policy.
  4. Restore supported TLS with a valid certificate chain, correct names and trusted issuers; keep client validation enabled.

Explanation

Correct Answer

D:

Before rollout, confirm the problem with: Inspect certificate SAN, validity dates, intermediates, TLS negotiation and client trust-store errors. For this case, An internal API falls back to plaintext HTTP because an expired server certificate made clients reject TLS.

Incorrect Answers

A:

This is the unsafe shortcut in the TLS certificate chain and secure transport scenario, not a justified remediation or diagnostic. Incident: An internal API falls back to plaintext HTTP because an expired server certificate made clients reject TLS.

B:

For this incident, the relevant principle is: Encryption in transit needs authenticated peers, valid trust chains and modern protocol settings, not merely an encrypted port. A targeted investigation checks: Inspect certificate SAN, validity dates, intermediates, TLS negotiation and client trust-store errors.

C:

For this incident, the relevant principle is: Encryption in transit needs authenticated peers, valid trust chains and modern protocol settings, not merely an encrypted port.

Question 392

While reviewing the CompTIA Server+ administration incident, a technician learns: An internal API falls back to plaintext HTTP because an expired server certificate made clients reject TLS. Which principle most directly explains how to address the described issue safely? Select ONE best answer.

  1. Encryption in transit needs authenticated peers, valid trust chains and modern protocol settings, not merely an encrypted port.
  2. Password knowledge alone is weak proof of administrator identity; emergency access needs protected exceptions and traceability.
  3. Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries.
  4. Trust in the operating system begins before it starts; firmware and measured boot support protection against boot-level changes.

Explanation

Correct Answer

A:

This is the controlling principle for the reported TLS certificate chain and secure transport incident. Scenario: An internal API falls back to plaintext HTTP because an expired server certificate made clients reject TLS.

Incorrect Answers

B:

This statement concerns MFA and just-in-time administration, a different Server+ technical control. It does not directly address the reported TLS certificate chain and secure transport fault or prove its repair. For this incident, the relevant principle is: Encryption in transit needs authenticated peers, valid trust chains and modern protocol settings, not merely an encrypted port. A targeted investigation checks: Inspect certificate SAN, validity dates, intermediates, TLS negotiation and client trust-store errors. The desired recovery condition is: Clients establish mutually appropriate authenticated encrypted connections with verification enabled.

C:

This statement concerns Data center physical access enforcement, a different Server+ technical control. It does not directly address the reported TLS certificate chain and secure transport fault or prove its repair. For this incident, the relevant principle is: Encryption in transit needs authenticated peers, valid trust chains and modern protocol settings, not merely an encrypted port. A targeted investigation checks: Inspect certificate SAN, validity dates, intermediates, TLS negotiation and client trust-store errors. The desired recovery condition is: Clients establish mutually appropriate authenticated encrypted connections with verification enabled.

D:

This statement concerns Secure Boot TPM and hardware root of trust, a different Server+ technical control. It does not directly address the reported TLS certificate chain and secure transport fault or prove its repair. For this incident, the relevant principle is: Encryption in transit needs authenticated peers, valid trust chains and modern protocol settings, not merely an encrypted port. A targeted investigation checks: Inspect certificate SAN, validity dates, intermediates, TLS negotiation and client trust-store errors. The desired recovery condition is: Clients establish mutually appropriate authenticated encrypted connections with verification enabled.

Question 393

Before a server change is approved, the on-call engineer receives this incident report: An internal API falls back to plaintext HTTP because an expired server certificate made clients reject TLS. Which evidence would most directly establish the stated root-cause hypothesis? Select ONE best answer.

  1. Review classification labels, export audit logs, retention settings, access grants and sample records.
  2. Inspect Secure Boot signatures, TPM state, PCR or attestation reports and key-recovery readiness.
  3. Inspect certificate SAN, validity dates, intermediates, TLS negotiation and client trust-store errors.
  4. Disable certificate validation or switch sensitive application traffic to plaintext permanently.

Explanation

Correct Answer

C:

These observations investigate the exact TLS certificate chain and secure transport failure rather than unrelated components. Incident: An internal API falls back to plaintext HTTP because an expired server certificate made clients reject TLS.

Incorrect Answers

A:

For this incident, the relevant principle is: Encryption in transit needs authenticated peers, valid trust chains and modern protocol settings, not merely an encrypted port. This statement concerns Data classification and retention controls, a different Server+ technical control.

B:

For this incident, the relevant principle is: Encryption in transit needs authenticated peers, valid trust chains and modern protocol settings, not merely an encrypted port. This statement concerns Secure Boot TPM and hardware root of trust, a different Server+ technical control.

D:

Instead, the supported correction is: Restore supported TLS with a valid certificate chain, correct names and trusted issuers; keep client validation enabled. This is the unsafe shortcut in the TLS certificate chain and secure transport scenario, not a justified remediation or diagnostic.

Question 394

After the team implements a targeted remediation for TLS certificate chain and secure transport, the original incident was: An internal API falls back to plaintext HTTP because an expired server certificate made clients reject TLS. Which acceptance criterion would best demonstrate a durable and safe resolution? Select ONE best answer.

  1. Sensitive data on lost media is protected and authorized recovery still works using controlled key escrow.
  2. Clients establish mutually appropriate authenticated encrypted connections with verification enabled.
  3. Privileged sessions require approved factors and are attributable to an identity, with tested emergency recovery.
  4. Decommissioned media has verifiable sanitization or destruction evidence matching policy.

Explanation

Correct Answer

B:

This evidence tests whether the original TLS certificate chain and secure transport weakness has been corrected under realistic conditions. The remediation is: Restore supported TLS with a valid certificate chain, correct names and trusted issuers; keep client validation enabled. The underlying technical reason is: Encryption in transit needs authenticated peers, valid trust chains and modern protocol settings, not merely an encrypted port. Compare against pre-change evidence: Inspect certificate SAN, validity dates, intermediates, TLS negotiation and client trust-store errors.

Incorrect Answers

A:

This statement concerns Encryption at rest and key lifecycle, a different Server+ technical control. It does not directly address the reported TLS certificate chain and secure transport fault or prove its repair. For this incident, the relevant principle is: Encryption in transit needs authenticated peers, valid trust chains and modern protocol settings, not merely an encrypted port. A targeted investigation checks: Inspect certificate SAN, validity dates, intermediates, TLS negotiation and client trust-store errors. The desired recovery condition is: Clients establish mutually appropriate authenticated encrypted connections with verification enabled.

C:

This statement concerns MFA and just-in-time administration, a different Server+ technical control. It does not directly address the reported TLS certificate chain and secure transport fault or prove its repair.

D:

This statement concerns Media sanitization by classification, a different Server+ technical control. It does not directly address the reported TLS certificate chain and secure transport fault or prove its repair. For this incident, the relevant principle is: Encryption in transit needs authenticated peers, valid trust chains and modern protocol settings, not merely an encrypted port. A targeted investigation checks: Inspect certificate SAN, validity dates, intermediates, TLS negotiation and client trust-store errors. The desired recovery condition is: Clients establish mutually appropriate authenticated encrypted connections with verification enabled.

Question 395

A change board is planning a verified response to this server event: An internal API falls back to plaintext HTTP because an expired server certificate made clients reject TLS. For the TLS certificate chain and secure transport issue, which response elements belong in the approved plan? Select ONE best answer.

  1. Disable certificate validation or switch sensitive application traffic to plaintext permanently.
  2. Enable supported Secure Boot and TPM-backed integrity or key protection with verified recovery procedures.
  3. Restore supported TLS with a valid certificate chain, correct names and trusted issuers; keep client validation enabled. Then validate the change by confirming: Clients establish mutually appropriate authenticated encrypted connections with verification enabled.
  4. Inspect sensor placement, alert thresholds, cooling redundancy, water paths and fire-system maintenance records.

Explanation

Correct Answer

C:

Before modifying systems, gather: Inspect certificate SAN, validity dates, intermediates, TLS negotiation and client trust-store errors.

Incorrect Answers

A:

This is the unsafe shortcut in the TLS certificate chain and secure transport scenario, not a justified remediation or diagnostic. Discriminate using: Inspect certificate SAN, validity dates, intermediates, TLS negotiation and client trust-store errors.

B:

For this incident, the relevant principle is: Encryption in transit needs authenticated peers, valid trust chains and modern protocol settings, not merely an encrypted port. It does not directly address the reported TLS certificate chain and secure transport fault or prove its repair.

D:

For this incident, the relevant principle is: Encryption in transit needs authenticated peers, valid trust chains and modern protocol settings, not merely an encrypted port. This statement concerns Environmental monitoring and suppression, a different Server+ technical control.

Question 396

A server administrator is investigating a server issue involving tls certificate chain and secure transport: An administrator installs a new leaf certificate without intermediates and disables certificate validation on all clients to bypass connection errors. The change must address the documented fault without creating unrelated risk. Which corrective action is most appropriate? Select ONE best answer.

  1. Revoke retired host credentials, certificates and network access, remove dependent records and close the asset lifecycle.
  2. Disable certificate validation or switch sensitive application traffic to plaintext permanently.
  3. Restore supported TLS with a valid certificate chain, correct names and trusted issuers; keep client validation enabled.
  4. Monitor temperature, humidity, water and fire risks with alarms and approved cooling or suppression response plans.

Explanation

Correct Answer

C:

Before rollout, confirm the problem with: Inspect certificate SAN, validity dates, intermediates, TLS negotiation and client trust-store errors. For this case, An administrator installs a new leaf certificate without intermediates and disables certificate validation on all clients to bypass connection errors.

Incorrect Answers

A:

For this incident, the relevant principle is: Encryption in transit needs authenticated peers, valid trust chains and modern protocol settings, not merely an encrypted port. This statement concerns Decommissioning service identities and asset records, a different Server+ technical control.

B:

This is the unsafe shortcut in the TLS certificate chain and secure transport scenario, not a justified remediation or diagnostic. Incident: An administrator installs a new leaf certificate without intermediates and disables certificate validation on all clients to bypass connection errors.

D:

For this incident, the relevant principle is: Encryption in transit needs authenticated peers, valid trust chains and modern protocol settings, not merely an encrypted port.

Question 397

While reviewing the CompTIA Server+ administration incident, a technician learns: An administrator installs a new leaf certificate without intermediates and disables certificate validation on all clients to bypass connection errors. Which principle most directly explains how to address the described issue safely? Select ONE best answer.

  1. Decommissioning includes logical trust and configuration removal, not just powering off and discarding hardware.
  2. Encryption in transit needs authenticated peers, valid trust chains and modern protocol settings, not merely an encrypted port.
  3. Physical environmental hazards can cause correlated service failures and must be detected before hardware shutdown.
  4. Nonhuman identities are privileged principals; service convenience does not justify permanent broad permissions or exposed credentials.

Explanation

Correct Answer

B:

This is the controlling principle for the reported TLS certificate chain and secure transport incident. Scenario: An administrator installs a new leaf certificate without intermediates and disables certificate validation on all clients to bypass connection errors.

Incorrect Answers

A:

This statement concerns Decommissioning service identities and asset records, a different Server+ technical control. It does not directly address the reported TLS certificate chain and secure transport fault or prove its repair. For this incident, the relevant principle is: Encryption in transit needs authenticated peers, valid trust chains and modern protocol settings, not merely an encrypted port. A targeted investigation checks: Inspect certificate SAN, validity dates, intermediates, TLS negotiation and client trust-store errors. The desired recovery condition is: Clients establish mutually appropriate authenticated encrypted connections with verification enabled.

C:

This statement concerns Environmental monitoring and suppression, a different Server+ technical control. It does not directly address the reported TLS certificate chain and secure transport fault or prove its repair. For this incident, the relevant principle is: Encryption in transit needs authenticated peers, valid trust chains and modern protocol settings, not merely an encrypted port. A targeted investigation checks: Inspect certificate SAN, validity dates, intermediates, TLS negotiation and client trust-store errors. The desired recovery condition is: Clients establish mutually appropriate authenticated encrypted connections with verification enabled.

D:

This statement concerns Service-account secret rotation and scope, a different Server+ technical control. It does not directly address the reported TLS certificate chain and secure transport fault or prove its repair. For this incident, the relevant principle is: Encryption in transit needs authenticated peers, valid trust chains and modern protocol settings, not merely an encrypted port. A targeted investigation checks: Inspect certificate SAN, validity dates, intermediates, TLS negotiation and client trust-store errors. The desired recovery condition is: Clients establish mutually appropriate authenticated encrypted connections with verification enabled.

Question 398

Before a server change is approved, the on-call engineer receives this incident report: An administrator installs a new leaf certificate without intermediates and disables certificate validation on all clients to bypass connection errors. Which evidence would most directly establish the stated root-cause hypothesis? Select ONE best answer.

  1. Inspect certificate SAN, validity dates, intermediates, TLS negotiation and client trust-store errors.
  2. Compare listening ports, running services, local accounts and policy deviations against the approved baseline.
  3. Disable certificate validation or switch sensitive application traffic to plaintext permanently.
  4. Inventory service tokens, access scopes, expiration dates, vault access and code-repository leakage.

Explanation

Correct Answer

A:

These observations investigate the exact TLS certificate chain and secure transport failure rather than unrelated components. Incident: An administrator installs a new leaf certificate without intermediates and disables certificate validation on all clients to bypass connection errors.

Incorrect Answers

B:

For this incident, the relevant principle is: Encryption in transit needs authenticated peers, valid trust chains and modern protocol settings, not merely an encrypted port. This statement concerns Disable unused services and secure baseline, a different Server+ technical control.

C:

Instead, the supported correction is: Restore supported TLS with a valid certificate chain, correct names and trusted issuers; keep client validation enabled. Incident: An administrator installs a new leaf certificate without intermediates and disables certificate validation on all clients to bypass connection errors.

D:

For this incident, the relevant principle is: Encryption in transit needs authenticated peers, valid trust chains and modern protocol settings, not merely an encrypted port. This statement concerns Service-account secret rotation and scope, a different Server+ technical control.

Question 399

After the team implements a targeted remediation for TLS certificate chain and secure transport, the original incident was: An administrator installs a new leaf certificate without intermediates and disables certificate validation on all clients to bypass connection errors. Which acceptance criterion would best demonstrate a durable and safe resolution? Select ONE best answer.

  1. A controlled simulated environmental warning reaches responders in time and temperature stays within equipment range.
  2. A recovered application opens consistent data and passes functional and permission tests at the target restore point.
  3. Only authorized destinations retain the required minimized data for the approved period, with traceable deletion or archival.
  4. Clients establish mutually appropriate authenticated encrypted connections with verification enabled.

Explanation

Correct Answer

D:

This evidence tests whether the original TLS certificate chain and secure transport weakness has been corrected under realistic conditions. The remediation is: Restore supported TLS with a valid certificate chain, correct names and trusted issuers; keep client validation enabled. The underlying technical reason is: Encryption in transit needs authenticated peers, valid trust chains and modern protocol settings, not merely an encrypted port. Compare against pre-change evidence: Inspect certificate SAN, validity dates, intermediates, TLS negotiation and client trust-store errors.

Incorrect Answers

A:

This statement concerns Environmental monitoring and suppression, a different Server+ technical control. It does not directly address the reported TLS certificate chain and secure transport fault or prove its repair.

B:

This statement concerns Application-consistent restore and integrity testing, a different Server+ technical control. It does not directly address the reported TLS certificate chain and secure transport fault or prove its repair. For this incident, the relevant principle is: Encryption in transit needs authenticated peers, valid trust chains and modern protocol settings, not merely an encrypted port. A targeted investigation checks: Inspect certificate SAN, validity dates, intermediates, TLS negotiation and client trust-store errors. The desired recovery condition is: Clients establish mutually appropriate authenticated encrypted connections with verification enabled.

C:

This statement concerns Data classification and retention controls, a different Server+ technical control. It does not directly address the reported TLS certificate chain and secure transport fault or prove its repair. For this incident, the relevant principle is: Encryption in transit needs authenticated peers, valid trust chains and modern protocol settings, not merely an encrypted port. A targeted investigation checks: Inspect certificate SAN, validity dates, intermediates, TLS negotiation and client trust-store errors. The desired recovery condition is: Clients establish mutually appropriate authenticated encrypted connections with verification enabled.

Question 400

A change board is planning a verified response to this server event: An administrator installs a new leaf certificate without intermediates and disables certificate validation on all clients to bypass connection errors. For the TLS certificate chain and secure transport issue, which response elements belong in the approved plan? Select THREE answers.

  1. Restore supported TLS with a valid certificate chain, correct names and trusted issuers; keep client validation enabled.
  2. Revoke retired host credentials, certificates and network access, remove dependent records and close the asset lifecycle.
  3. Disable certificate validation or switch sensitive application traffic to plaintext permanently.
  4. Clients establish mutually appropriate authenticated encrypted connections with verification enabled.
  5. Inspect storage encryption status, backup-media handling, key custody, access logs and tested recovery access.
  6. Inspect certificate SAN, validity dates, intermediates, TLS negotiation and client trust-store errors.

Explanation

Correct Answer

A:

Before rollout, confirm the problem with: Inspect certificate SAN, validity dates, intermediates, TLS negotiation and client trust-store errors. This is the appropriate targeted correction for TLS certificate chain and secure transport.

D:

This evidence tests whether the original TLS certificate chain and secure transport weakness has been corrected under realistic conditions. The remediation is: Restore supported TLS with a valid certificate chain, correct names and trusted issuers; keep client validation enabled.

F:

These observations investigate the exact TLS certificate chain and secure transport failure rather than unrelated components. Use findings to decide whether to: Restore supported TLS with a valid certificate chain, correct names and trusted issuers; keep client validation enabled.

Incorrect Answers

B:

For this incident, the relevant principle is: Encryption in transit needs authenticated peers, valid trust chains and modern protocol settings, not merely an encrypted port. The desired recovery condition is: Clients establish mutually appropriate authenticated encrypted connections with verification enabled.

C:

This is the unsafe shortcut in the TLS certificate chain and secure transport scenario, not a justified remediation or diagnostic. Encryption in transit needs authenticated peers, valid trust chains and modern protocol settings, not merely an encrypted port.

E:

For this incident, the relevant principle is: Encryption in transit needs authenticated peers, valid trust chains and modern protocol settings, not merely an encrypted port. This statement concerns Encryption at rest and key lifecycle, a different Server+ technical control.

CompTIA Server+ Certification Exam (SK0-005) Practice Tests