cert
cert-1
cert-2

Pass CompTIA SK0-005 Exam in First Attempt Guaranteed!

Get 100% Latest Exam Questions, Accurate & Verified Answers to Pass the Actual Exam!
30 Days Free Updates, Instant Download!

cert-5
cert-6
SK0-005 Exam - Verified By Experts
SK0-005 Premium Bundle
$29.98

SK0-005 Premium Bundle

$79.99
$109.97
  • Premium File 617 Questions & Answers. Last update: Nov 13, 2026
  • Training Course 139 Video Lectures
  • Study Guide 533 Pages
 
$109.97
$79.99
accept 21 downloads in last 7 days
block-screenshots
Purchase CompTIA SK0-005 Exam Training Products Individually
CompTIA SK0-005 Premium File
Premium File 617 Q&A
$76.99$69.99
CompTIA SK0-005 Video Training Course
Training Course 139 Lectures
$21.99 $19.99
CompTIA SK0-005 PDF Study Guide
Study Guide 533 Pages
$21.99 $19.99
CompTIA SK0-005 Practice Test 41

Question 400

A change board is planning a verified response to this server event: An administrator installs a new leaf certificate without intermediates and disables certificate validation on all clients to bypass connection errors. For the TLS certificate chain and secure transport issue, which response elements belong in the approved plan? Select THREE answers.

  1. Restore supported TLS with a valid certificate chain, correct names and trusted issuers; keep client validation enabled.
  2. Revoke retired host credentials, certificates and network access, remove dependent records and close the asset lifecycle.
  3. Disable certificate validation or switch sensitive application traffic to plaintext permanently.
  4. Clients establish mutually appropriate authenticated encrypted connections with verification enabled.
  5. Inspect storage encryption status, backup-media handling, key custody, access logs and tested recovery access.
  6. Inspect certificate SAN, validity dates, intermediates, TLS negotiation and client trust-store errors.

Explanation

Correct Answer

A:

Before rollout, confirm the problem with: Inspect certificate SAN, validity dates, intermediates, TLS negotiation and client trust-store errors. This is the appropriate targeted correction for TLS certificate chain and secure transport.

D:

This evidence tests whether the original TLS certificate chain and secure transport weakness has been corrected under realistic conditions. The remediation is: Restore supported TLS with a valid certificate chain, correct names and trusted issuers; keep client validation enabled.

F:

These observations investigate the exact TLS certificate chain and secure transport failure rather than unrelated components. Use findings to decide whether to: Restore supported TLS with a valid certificate chain, correct names and trusted issuers; keep client validation enabled.

Incorrect Answers

B:

For this incident, the relevant principle is: Encryption in transit needs authenticated peers, valid trust chains and modern protocol settings, not merely an encrypted port. The desired recovery condition is: Clients establish mutually appropriate authenticated encrypted connections with verification enabled.

C:

This is the unsafe shortcut in the TLS certificate chain and secure transport scenario, not a justified remediation or diagnostic. Encryption in transit needs authenticated peers, valid trust chains and modern protocol settings, not merely an encrypted port.

E:

For this incident, the relevant principle is: Encryption in transit needs authenticated peers, valid trust chains and modern protocol settings, not merely an encrypted port. This statement concerns Encryption at rest and key lifecycle, a different Server+ technical control.

Question 401

A server administrator is investigating a server issue involving data classification and retention controls: A storage share contains regulated personal data with no classification or retention policy and is copied to a public test environment. The change must address the documented fault without creating unrelated risk. Which corrective action is most appropriate? Select ONE best answer.

  1. Classify sensitive records and enforce least-necessary access, approved retention and controlled export or redaction.
  2. Copy all production data into unrestricted test shares and retain it forever for convenience.
  3. Enable appropriate data-at-rest encryption with separated, access-controlled key storage, recovery procedures and rotation policy.
  4. Restore supported TLS with a valid certificate chain, correct names and trusted issuers; keep client validation enabled.

Explanation

Correct Answer

A:

Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination. Before rollout, confirm the problem with: Review classification labels, export audit logs, retention settings, access grants and sample records.

Incorrect Answers

B:

This is the unsafe shortcut in the Data classification and retention controls scenario, not a justified remediation or diagnostic. Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination.

C:

That option would enable appropriate data-at-rest encryption with separated, access-controlled key storage, recovery procedures and rotation policy, but it addresses a different concern. Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination.

D:

This statement concerns TLS certificate chain and secure transport, a different Server+ technical control. It does not directly address the reported Data classification and retention controls fault or prove its repair. For this incident, the relevant principle is: Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination. A targeted investigation checks: Review classification labels, export audit logs, retention settings, access grants and sample records. The desired recovery condition is: Only authorized destinations retain the required minimized data for the approved period, with traceable deletion or archival.

Question 402

While reviewing the CompTIA Server+ administration incident, a technician learns: A storage share contains regulated personal data with no classification or retention policy and is copied to a public test environment. Which principle most directly explains how to address the described issue safely? Select ONE best answer.

  1. Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights.
  2. Recovery is a dependency graph, not a collection of powered-on VMs; failback can require careful data reconciliation.
  3. Successful data transfer alone does not establish recoverability; services need consistent artifacts and configuration state.
  4. Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination.

Explanation

Correct Answer

D:

Applying it leads to this operational action: Classify sensitive records and enforce least-necessary access, approved retention and controlled export or redaction. Collect evidence first: Review classification labels, export audit logs, retention settings, access grants and sample records.

Incorrect Answers

A:

This statement concerns RBAC and privileged separation, a different Server+ technical control. It does not directly address the reported Data classification and retention controls fault or prove its repair. For this incident, the relevant principle is: Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination. A targeted investigation checks: Review classification labels, export audit logs, retention settings, access grants and sample records. The desired recovery condition is: Only authorized destinations retain the required minimized data for the approved period, with traceable deletion or archival.

B:

This statement concerns Site failover dependencies and failback, a different Server+ technical control. It does not directly address the reported Data classification and retention controls fault or prove its repair. For this incident, the relevant principle is: Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination. A targeted investigation checks: Review classification labels, export audit logs, retention settings, access grants and sample records. The desired recovery condition is: Only authorized destinations retain the required minimized data for the approved period, with traceable deletion or archival.

C:

This statement concerns Application-consistent restore and integrity testing, a different Server+ technical control. It does not directly address the reported Data classification and retention controls fault or prove its repair. For this incident, the relevant principle is: Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination. A targeted investigation checks: Review classification labels, export audit logs, retention settings, access grants and sample records. The desired recovery condition is: Only authorized destinations retain the required minimized data for the approved period, with traceable deletion or archival.

Question 403

Before a server change is approved, the on-call engineer receives this incident report: A storage share contains regulated personal data with no classification or retention policy and is copied to a public test environment. Which evidence would most directly establish the stated root-cause hypothesis? Select ONE best answer.

  1. Review classification labels, export audit logs, retention settings, access grants and sample records.
  2. Inspect storage encryption status, backup-media handling, key custody, access logs and tested recovery access.
  3. Review effective access, role inheritance, audit logs and task-specific permission requirements.
  4. Copy all production data into unrestricted test shares and retain it forever for convenience.

Explanation

Correct Answer

A:

These observations investigate the exact Data classification and retention controls failure rather than unrelated components. The expected technical relationship is: Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination.

Incorrect Answers

B:

For this incident, the relevant principle is: Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination. A targeted investigation checks: Review classification labels, export audit logs, retention settings, access grants and sample records.

C:

For this incident, the relevant principle is: Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination. This statement concerns RBAC and privileged separation, a different Server+ technical control.

D:

This is the unsafe shortcut in the Data classification and retention controls scenario, not a justified remediation or diagnostic. Discriminate using: Review classification labels, export audit logs, retention settings, access grants and sample records.

Question 404

After the team implements a targeted remediation for Data classification and retention controls, the original incident was: A storage share contains regulated personal data with no classification or retention policy and is copied to a public test environment. Which acceptance criterion would best demonstrate a durable and safe resolution? Select ONE best answer.

  1. Clients establish mutually appropriate authenticated encrypted connections with verification enabled.
  2. Users complete critical transactions in the alternate site, and a rehearsed failback restores a consistent primary.
  3. A rehearsal restores end-to-end service within RTO and loses no more than allowed by RPO.
  4. Only authorized destinations retain the required minimized data for the approved period, with traceable deletion or archival.

Explanation

Correct Answer

D:

Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination. The remediation is: Classify sensitive records and enforce least-necessary access, approved retention and controlled export or redaction.

Incorrect Answers

A:

This statement concerns TLS certificate chain and secure transport, a different Server+ technical control. It does not directly address the reported Data classification and retention controls fault or prove its repair.

B:

This statement concerns Site failover dependencies and failback, a different Server+ technical control. It does not directly address the reported Data classification and retention controls fault or prove its repair.

C:

This statement concerns RPO and RTO-driven disaster recovery, a different Server+ technical control. It does not directly address the reported Data classification and retention controls fault or prove its repair. For this incident, the relevant principle is: Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination. A targeted investigation checks: Review classification labels, export audit logs, retention settings, access grants and sample records. The desired recovery condition is: Only authorized destinations retain the required minimized data for the approved period, with traceable deletion or archival.

Question 405

A change board is planning a verified response to this server event: A storage share contains regulated personal data with no classification or retention policy and is copied to a public test environment. For the Data classification and retention controls issue, which response elements belong in the approved plan? Select ONE best answer.

  1. Inventory host identities, DNS, monitoring, backup schedules, service tokens and firewall exceptions.
  2. Copy all production data into unrestricted test shares and retain it forever for convenience.
  3. Classify sensitive records and enforce least-necessary access, approved retention and controlled export or redaction. Then validate the change by confirming: Only authorized destinations retain the required minimized data for the approved period, with traceable deletion or archival.
  4. Grant narrowly scoped roles and use separate privileged identities with periodic entitlement reviews.

Explanation

Correct Answer

C:

Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination. Before modifying systems, gather: Review classification labels, export audit logs, retention settings, access grants and sample records.

Incorrect Answers

A:

This statement concerns Decommissioning service identities and asset records, a different Server+ technical control. It does not directly address the reported Data classification and retention controls fault or prove its repair. For this incident, the relevant principle is: Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination. A targeted investigation checks: Review classification labels, export audit logs, retention settings, access grants and sample records. The desired recovery condition is: Only authorized destinations retain the required minimized data for the approved period, with traceable deletion or archival.

B:

This is the unsafe shortcut in the Data classification and retention controls scenario, not a justified remediation or diagnostic. Incident: A storage share contains regulated personal data with no classification or retention policy and is copied to a public test environment.

D:

That option would grant narrowly scoped roles and use separate privileged identities with periodic entitlement reviews, but it addresses a different concern. Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination.

Question 406

A server administrator is investigating a server issue involving data classification and retention controls: A logging pipeline captures confidential payloads indefinitely because the security team has not configured filtering and retention. The change must address the documented fault without creating unrelated risk. Which corrective action is most appropriate? Select ONE best answer.

  1. Copy all production data into unrestricted test shares and retain it forever for convenience.
  2. Revoke retired host credentials, certificates and network access, remove dependent records and close the asset lifecycle.
  3. Include identity, DNS, network, certificates and data-dependency order in failover and failback runbooks; rehearse both directions.
  4. Classify sensitive records and enforce least-necessary access, approved retention and controlled export or redaction.

Explanation

Correct Answer

D:

Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination.

Incorrect Answers

A:

This is the unsafe shortcut in the Data classification and retention controls scenario, not a justified remediation or diagnostic. Incident: A logging pipeline captures confidential payloads indefinitely because the security team has not configured filtering and retention.

B:

This statement concerns Decommissioning service identities and asset records, a different Server+ technical control. It does not directly address the reported Data classification and retention controls fault or prove its repair. For this incident, the relevant principle is: Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination. A targeted investigation checks: Review classification labels, export audit logs, retention settings, access grants and sample records. The desired recovery condition is: Only authorized destinations retain the required minimized data for the approved period, with traceable deletion or archival.

C:

That option would include identity, DNS, network, certificates and data-dependency order in failover and failback runbooks; rehearse both directions, but it addresses a different concern. Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination.

Question 407

While reviewing the CompTIA Server+ administration incident, a technician learns: A logging pipeline captures confidential payloads indefinitely because the security team has not configured filtering and retention. Which principle most directly explains how to address the described issue safely? Select ONE best answer.

  1. Recovery is a dependency graph, not a collection of powered-on VMs; failback can require careful data reconciliation.
  2. Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination.
  3. Decommissioning includes logical trust and configuration removal, not just powering off and discarding hardware.
  4. Nonhuman identities are privileged principals; service convenience does not justify permanent broad permissions or exposed credentials.

Explanation

Correct Answer

B:

Applying it leads to this operational action: Classify sensitive records and enforce least-necessary access, approved retention and controlled export or redaction. The acceptance test is: Only authorized destinations retain the required minimized data for the approved period, with traceable deletion or archival.

Incorrect Answers

A:

This statement concerns Site failover dependencies and failback, a different Server+ technical control. It does not directly address the reported Data classification and retention controls fault or prove its repair. For this incident, the relevant principle is: Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination. A targeted investigation checks: Review classification labels, export audit logs, retention settings, access grants and sample records. The desired recovery condition is: Only authorized destinations retain the required minimized data for the approved period, with traceable deletion or archival.

C:

This statement concerns Decommissioning service identities and asset records, a different Server+ technical control. It does not directly address the reported Data classification and retention controls fault or prove its repair.

D:

This statement concerns Service-account secret rotation and scope, a different Server+ technical control. It does not directly address the reported Data classification and retention controls fault or prove its repair. For this incident, the relevant principle is: Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination. A targeted investigation checks: Review classification labels, export audit logs, retention settings, access grants and sample records. The desired recovery condition is: Only authorized destinations retain the required minimized data for the approved period, with traceable deletion or archival.

Question 408

Before a server change is approved, the on-call engineer receives this incident report: A logging pipeline captures confidential payloads indefinitely because the security team has not configured filtering and retention. Which evidence would most directly establish the stated root-cause hypothesis? Select ONE best answer.

  1. Review door events, camera footage, approved visitor roster, rack locks and access recertification.
  2. Review classification labels, export audit logs, retention settings, access grants and sample records.
  3. Copy all production data into unrestricted test shares and retain it forever for convenience.
  4. Inventory service tokens, access scopes, expiration dates, vault access and code-repository leakage.

Explanation

Correct Answer

B:

These observations investigate the exact Data classification and retention controls failure rather than unrelated components. Incident: A logging pipeline captures confidential payloads indefinitely because the security team has not configured filtering and retention.

Incorrect Answers

A:

For this incident, the relevant principle is: Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination.

C:

Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination.

D:

For this incident, the relevant principle is: Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination. This statement concerns Service-account secret rotation and scope, a different Server+ technical control.

Question 409

After the team implements a targeted remediation for Data classification and retention controls, the original incident was: A logging pipeline captures confidential payloads indefinitely because the security team has not configured filtering and retention. Which acceptance criterion would best demonstrate a durable and safe resolution? Select ONE best answer.

  1. The user completes the approved task without access to unrelated management planes or data.
  2. Sensitive data on lost media is protected and authorized recovery still works using controlled key escrow.
  3. Retired assets cannot authenticate or receive traffic and records accurately show the disposition.
  4. Only authorized destinations retain the required minimized data for the approved period, with traceable deletion or archival.

Explanation

Correct Answer

D:

Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination.

Incorrect Answers

A:

This statement concerns RBAC and privileged separation, a different Server+ technical control. It does not directly address the reported Data classification and retention controls fault or prove its repair. For this incident, the relevant principle is: Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination. A targeted investigation checks: Review classification labels, export audit logs, retention settings, access grants and sample records. The desired recovery condition is: Only authorized destinations retain the required minimized data for the approved period, with traceable deletion or archival.

B:

This statement concerns Encryption at rest and key lifecycle, a different Server+ technical control. It does not directly address the reported Data classification and retention controls fault or prove its repair. For this incident, the relevant principle is: Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination. A targeted investigation checks: Review classification labels, export audit logs, retention settings, access grants and sample records. The desired recovery condition is: Only authorized destinations retain the required minimized data for the approved period, with traceable deletion or archival.

C:

This statement concerns Decommissioning service identities and asset records, a different Server+ technical control. It does not directly address the reported Data classification and retention controls fault or prove its repair. For this incident, the relevant principle is: Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination.

Question 410

A change board is planning a verified response to this server event: A logging pipeline captures confidential payloads indefinitely because the security team has not configured filtering and retention. For the Data classification and retention controls issue, which response elements belong in the approved plan? Select TWO answers.

  1. Copy all production data into unrestricted test shares and retain it forever for convenience.
  2. Sensitive data on lost media is protected and authorized recovery still works using controlled key escrow.
  3. Review classification labels, export audit logs, retention settings, access grants and sample records.
  4. Classify sensitive records and enforce least-necessary access, approved retention and controlled export or redaction.
  5. Use narrowly scoped managed identities or service accounts and protect, rotate and revoke their secrets using approved storage.

Explanation

Correct Answer

C:

These observations investigate the exact Data classification and retention controls failure rather than unrelated components. Use findings to decide whether to: Classify sensitive records and enforce least-necessary access, approved retention and controlled export or redaction.

D:

Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination. A successful outcome is: Only authorized destinations retain the required minimized data for the approved period, with traceable deletion or archival.

Incorrect Answers

A:

Discriminate using: Review classification labels, export audit logs, retention settings, access grants and sample records.

B:

For this incident, the relevant principle is: Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination. This statement concerns Encryption at rest and key lifecycle, a different Server+ technical control.

E:

For this incident, the relevant principle is: Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination. The desired recovery condition is: Only authorized destinations retain the required minimized data for the approved period, with traceable deletion or archival.

CompTIA Server+ Certification Exam (SK0-005) Practice Tests