CompTIA SK0-005 Practice Test 42
Question 410
A change board is planning a verified response to this server event: A logging pipeline captures confidential payloads indefinitely because the security team has not configured filtering and retention. For the Data classification and retention controls issue, which response elements belong in the approved plan? Select TWO answers.
- Copy all production data into unrestricted test shares and retain it forever for convenience.
- Sensitive data on lost media is protected and authorized recovery still works using controlled key escrow.
- Review classification labels, export audit logs, retention settings, access grants and sample records.
- Classify sensitive records and enforce least-necessary access, approved retention and controlled export or redaction.
- Use narrowly scoped managed identities or service accounts and protect, rotate and revoke their secrets using approved storage.
Explanation
Correct Answer
C:These observations investigate the exact Data classification and retention controls failure rather than unrelated components. Use findings to decide whether to: Classify sensitive records and enforce least-necessary access, approved retention and controlled export or redaction.
D:Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination. A successful outcome is: Only authorized destinations retain the required minimized data for the approved period, with traceable deletion or archival.
Incorrect Answers
A:Discriminate using: Review classification labels, export audit logs, retention settings, access grants and sample records.
B:For this incident, the relevant principle is: Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination. This statement concerns Encryption at rest and key lifecycle, a different Server+ technical control.
E:For this incident, the relevant principle is: Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination. The desired recovery condition is: Only authorized destinations retain the required minimized data for the approved period, with traceable deletion or archival.
Question 411
A server administrator is investigating a server issue involving data center physical access enforcement: A technician enters a server room by following another employee through a badge-controlled door without logging the visit. The change must address the documented fault without creating unrelated risk. Which corrective action is most appropriate? Select ONE best answer.
- Prioritize verified vulnerabilities by exploitability, exposure and business impact; apply supported remediations with evidence.
- Monitor temperature, humidity, water and fire risks with alarms and approved cooling or suppression response plans.
- Enforce badges, role-based room or rack access, visitor logging and periodic access-review procedures.
- Assume a building lobby badge is sufficient authorization for every server rack.
Explanation
Correct Answer
C:Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries.
Incorrect Answers
A:This statement concerns Vulnerability scanning and prioritization, a different Server+ technical control. It does not directly address the reported Data center physical access enforcement fault or prove its repair. For this incident, the relevant principle is: Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries. A targeted investigation checks: Review door events, camera footage, approved visitor roster, rack locks and access recertification. The desired recovery condition is: Every access to sensitive equipment has valid authorization and traceable access records.
B:That option would monitor temperature, humidity, water and fire risks with alarms and approved cooling or suppression response plans, but it addresses a different concern. Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries.
D:This is the unsafe shortcut in the Data center physical access enforcement scenario, not a justified remediation or diagnostic. Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries.
Question 412
While reviewing the CompTIA Server+ administration incident, a technician learns: A technician enters a server room by following another employee through a badge-controlled door without logging the visit. Which principle most directly explains how to address the described issue safely? Select ONE best answer.
- Password knowledge alone is weak proof of administrator identity; emergency access needs protected exceptions and traceability.
- A trusted internal network is not equivalent to all traffic being authorized; east-west access needs explicit boundaries.
- Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries.
- Nonhuman identities are privileged principals; service convenience does not justify permanent broad permissions or exposed credentials.
Explanation
Correct Answer
C:The acceptance test is: Every access to sensitive equipment has valid authorization and traceable access records.
Incorrect Answers
A:This statement concerns MFA and just-in-time administration, a different Server+ technical control. It does not directly address the reported Data center physical access enforcement fault or prove its repair. For this incident, the relevant principle is: Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries. A targeted investigation checks: Review door events, camera footage, approved visitor roster, rack locks and access recertification. The desired recovery condition is: Every access to sensitive equipment has valid authorization and traceable access records.
B:This statement concerns Host firewall and east-west filtering, a different Server+ technical control. It does not directly address the reported Data center physical access enforcement fault or prove its repair. For this incident, the relevant principle is: Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries. A targeted investigation checks: Review door events, camera footage, approved visitor roster, rack locks and access recertification. The desired recovery condition is: Every access to sensitive equipment has valid authorization and traceable access records.
D:This statement concerns Service-account secret rotation and scope, a different Server+ technical control. It does not directly address the reported Data center physical access enforcement fault or prove its repair. For this incident, the relevant principle is: Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries. A targeted investigation checks: Review door events, camera footage, approved visitor roster, rack locks and access recertification. The desired recovery condition is: Every access to sensitive equipment has valid authorization and traceable access records.
Question 413
Before a server change is approved, the on-call engineer receives this incident report: A technician enters a server room by following another employee through a badge-controlled door without logging the visit. Which evidence would most directly establish the stated root-cause hypothesis? Select ONE best answer.
- Capture denied flows, review service dependency map, evaluate host firewall rule precedence and test expected ports.
- Review door events, camera footage, approved visitor roster, rack locks and access recertification.
- Assume a building lobby badge is sufficient authorization for every server rack.
- Inspect sensor placement, alert thresholds, cooling redundancy, water paths and fire-system maintenance records.
Explanation
Correct Answer
B:These observations investigate the exact Data center physical access enforcement failure rather than unrelated components. Incident: A technician enters a server room by following another employee through a badge-controlled door without logging the visit.
Incorrect Answers
A:For this incident, the relevant principle is: Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries. A targeted investigation checks: Review door events, camera footage, approved visitor roster, rack locks and access recertification.
C:Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries. This is the unsafe shortcut in the Data center physical access enforcement scenario, not a justified remediation or diagnostic.
D:For this incident, the relevant principle is: Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries.
Question 414
After the team implements a targeted remediation for Data center physical access enforcement, the original incident was: A technician enters a server room by following another employee through a badge-controlled door without logging the visit. Which acceptance criterion would best demonstrate a durable and safe resolution? Select ONE best answer.
- Clients establish mutually appropriate authenticated encrypted connections with verification enabled.
- Automated jobs work with minimum permissions and leaked or expired credentials are no longer usable.
- Highest-risk reachable vulnerabilities are remediated or formally mitigated, then rescans confirm closure.
- Every access to sensitive equipment has valid authorization and traceable access records.
Explanation
Correct Answer
D:Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries.
Incorrect Answers
A:This statement concerns TLS certificate chain and secure transport, a different Server+ technical control. It does not directly address the reported Data center physical access enforcement fault or prove its repair. For this incident, the relevant principle is: Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries. A targeted investigation checks: Review door events, camera footage, approved visitor roster, rack locks and access recertification. The desired recovery condition is: Every access to sensitive equipment has valid authorization and traceable access records.
B:This statement concerns Service-account secret rotation and scope, a different Server+ technical control. It does not directly address the reported Data center physical access enforcement fault or prove its repair.
C:This statement concerns Vulnerability scanning and prioritization, a different Server+ technical control. It does not directly address the reported Data center physical access enforcement fault or prove its repair.
Question 415
A change board is planning a verified response to this server event: A technician enters a server room by following another employee through a badge-controlled door without logging the visit. For the Data center physical access enforcement issue, which response elements belong in the approved plan? Select ONE best answer.
- Enforce badges, role-based room or rack access, visitor logging and periodic access-review procedures. Then validate the change by confirming: Every access to sensitive equipment has valid authorization and traceable access records.
- Implement least-privilege host or microsegmentation policies allowing documented source, destination and service combinations.
- Measure actual restore durations, last consistent recovery points, dependencies and recovery staff availability.
- Assume a building lobby badge is sufficient authorization for every server rack.
Explanation
Correct Answer
A:Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries. The proposed change and outcome assessment work together for Data center physical access enforcement.
Incorrect Answers
B:That option would implement least-privilege host or microsegmentation policies allowing documented source, destination and service combinations, but it addresses a different concern. Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries.
C:That option would measure actual restore durations, last consistent recovery points, dependencies and recovery staff availability, but it addresses a different concern. Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries.
D:This is the unsafe shortcut in the Data center physical access enforcement scenario, not a justified remediation or diagnostic. Incident: A technician enters a server room by following another employee through a badge-controlled door without logging the visit.
Question 416
A server administrator is investigating a server issue involving data center physical access enforcement: A colocation rack is left unlocked and vendor staff can touch network and backup equipment without approved escort or access records. The change must address the documented fault without creating unrelated risk. Which corrective action is most appropriate? Select ONE best answer.
- Assume a building lobby badge is sufficient authorization for every server rack.
- Enforce badges, role-based room or rack access, visitor logging and periodic access-review procedures.
- Classify sensitive records and enforce least-necessary access, approved retention and controlled export or redaction.
- Select recovery architecture to meet quantified RTO and RPO, then validate both during controlled recovery exercises.
Explanation
Correct Answer
B:Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries.
Incorrect Answers
A:This is the unsafe shortcut in the Data center physical access enforcement scenario, not a justified remediation or diagnostic. Incident: A colocation rack is left unlocked and vendor staff can touch network and backup equipment without approved escort or access records.
C:This statement concerns Data classification and retention controls, a different Server+ technical control. It does not directly address the reported Data center physical access enforcement fault or prove its repair. For this incident, the relevant principle is: Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries. A targeted investigation checks: Review door events, camera footage, approved visitor roster, rack locks and access recertification. The desired recovery condition is: Every access to sensitive equipment has valid authorization and traceable access records.
D:That option would select recovery architecture to meet quantified RTO and RPO, then validate both during controlled recovery exercises, but it addresses a different concern. Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries.
Question 417
While reviewing the CompTIA Server+ administration incident, a technician learns: A colocation rack is left unlocked and vendor staff can touch network and backup equipment without approved escort or access records. Which principle most directly explains how to address the described issue safely? Select ONE best answer.
- Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination.
- Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries.
- File deletion and reformatting are not equivalent to verified sanitization of residual media data.
- RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices.
Explanation
Correct Answer
B:The acceptance test is: Every access to sensitive equipment has valid authorization and traceable access records.
Incorrect Answers
A:This statement concerns Data classification and retention controls, a different Server+ technical control. It does not directly address the reported Data center physical access enforcement fault or prove its repair.
C:This statement concerns Media sanitization by classification, a different Server+ technical control. It does not directly address the reported Data center physical access enforcement fault or prove its repair. For this incident, the relevant principle is: Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries. A targeted investigation checks: Review door events, camera footage, approved visitor roster, rack locks and access recertification. The desired recovery condition is: Every access to sensitive equipment has valid authorization and traceable access records.
D:This statement concerns RPO and RTO-driven disaster recovery, a different Server+ technical control. It does not directly address the reported Data center physical access enforcement fault or prove its repair. For this incident, the relevant principle is: Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries. A targeted investigation checks: Review door events, camera footage, approved visitor roster, rack locks and access recertification. The desired recovery condition is: Every access to sensitive equipment has valid authorization and traceable access records.
Question 418
Before a server change is approved, the on-call engineer receives this incident report: A colocation rack is left unlocked and vendor staff can touch network and backup equipment without approved escort or access records. Which evidence would most directly establish the stated root-cause hypothesis? Select ONE best answer.
- Review door events, camera footage, approved visitor roster, rack locks and access recertification.
- Assume a building lobby badge is sufficient authorization for every server rack.
- Record media IDs, encryption status, chosen erasure standard, erase results and chain of custody.
- Review effective access, role inheritance, audit logs and task-specific permission requirements.
Explanation
Correct Answer
A:These observations investigate the exact Data center physical access enforcement failure rather than unrelated components. Incident: A colocation rack is left unlocked and vendor staff can touch network and backup equipment without approved escort or access records.
Incorrect Answers
B:Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries.
C:For this incident, the relevant principle is: Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries.
D:For this incident, the relevant principle is: Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries. This statement concerns RBAC and privileged separation, a different Server+ technical control.
Question 419
After the team implements a targeted remediation for Data center physical access enforcement, the original incident was: A colocation rack is left unlocked and vendor staff can touch network and backup equipment without approved escort or access records. Which acceptance criterion would best demonstrate a durable and safe resolution? Select ONE best answer.
- Every access to sensitive equipment has valid authorization and traceable access records.
- Patches deploy without unacceptable outage and vulnerability scans verify the intended fixed version.
- A controlled simulated environmental warning reaches responders in time and temperature stays within equipment range.
- Only authorized destinations retain the required minimized data for the approved period, with traceable deletion or archival.
Explanation
Correct Answer
A:Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries. This evidence tests whether the original Data center physical access enforcement weakness has been corrected under realistic conditions.
Incorrect Answers
B:This statement concerns Patching with staged rollback, a different Server+ technical control. It does not directly address the reported Data center physical access enforcement fault or prove its repair. For this incident, the relevant principle is: Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries. A targeted investigation checks: Review door events, camera footage, approved visitor roster, rack locks and access recertification. The desired recovery condition is: Every access to sensitive equipment has valid authorization and traceable access records.
C:This statement concerns Environmental monitoring and suppression, a different Server+ technical control. It does not directly address the reported Data center physical access enforcement fault or prove its repair. For this incident, the relevant principle is: Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries. A targeted investigation checks: Review door events, camera footage, approved visitor roster, rack locks and access recertification. The desired recovery condition is: Every access to sensitive equipment has valid authorization and traceable access records.
D:This statement concerns Data classification and retention controls, a different Server+ technical control. It does not directly address the reported Data center physical access enforcement fault or prove its repair. For this incident, the relevant principle is: Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries.
Question 420
A change board is planning a verified response to this server event: A colocation rack is left unlocked and vendor staff can touch network and backup equipment without approved escort or access records. For the Data center physical access enforcement issue, which response elements belong in the approved plan? Select TWO answers.
- Apply approved sanitization or cryptographic erase methods appropriate to media and classification, then retain evidence.
- A controlled simulated environmental warning reaches responders in time and temperature stays within equipment range.
- Enforce badges, role-based room or rack access, visitor logging and periodic access-review procedures.
- Review door events, camera footage, approved visitor roster, rack locks and access recertification.
- Assume a building lobby badge is sufficient authorization for every server rack.
Explanation
Correct Answer
C:Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries. A successful outcome is: Every access to sensitive equipment has valid authorization and traceable access records.
D:These observations investigate the exact Data center physical access enforcement failure rather than unrelated components. The expected technical relationship is: Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries.
Incorrect Answers
A:That option would apply approved sanitization or cryptographic erase methods appropriate to media and classification, then retain evidence, but it addresses a different concern. Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries.
B:This statement concerns Environmental monitoring and suppression, a different Server+ technical control. It does not directly address the reported Data center physical access enforcement fault or prove its repair.
E:This is the unsafe shortcut in the Data center physical access enforcement scenario, not a justified remediation or diagnostic. Discriminate using: Review door events, camera footage, approved visitor roster, rack locks and access recertification.
