CompTIA SK0-005 Practice Test 44
Question 430
A change board is planning a verified response to this server event: A small data closet lacks leak sensors or appropriate fire suppression and places a water pipe above an unprotected UPS. For the Environmental monitoring and suppression issue, which response elements belong in the approved plan? Select TWO answers.
- Enable appropriate data-at-rest encryption with separated, access-controlled key storage, recovery procedures and rotation policy.
- Ignore early cooling and leak alarms because the operating system remains responsive.
- Inspect sensor placement, alert thresholds, cooling redundancy, water paths and fire-system maintenance records.
- Monitor temperature, humidity, water and fire risks with alarms and approved cooling or suppression response plans.
- Every access to sensitive equipment has valid authorization and traceable access records.
Explanation
Correct Answer
C:The expected technical relationship is: Physical environmental hazards can cause correlated service failures and must be detected before hardware shutdown. These observations investigate the exact Environmental monitoring and suppression failure rather than unrelated components.
D:Physical environmental hazards can cause correlated service failures and must be detected before hardware shutdown. Before rollout, confirm the problem with: Inspect sensor placement, alert thresholds, cooling redundancy, water paths and fire-system maintenance records.
Incorrect Answers
A:For this incident, the relevant principle is: Physical environmental hazards can cause correlated service failures and must be detected before hardware shutdown. This statement concerns Encryption at rest and key lifecycle, a different Server+ technical control.
B:Discriminate using: Inspect sensor placement, alert thresholds, cooling redundancy, water paths and fire-system maintenance records.
E:For this incident, the relevant principle is: Physical environmental hazards can cause correlated service failures and must be detected before hardware shutdown. This statement concerns Data center physical access enforcement, a different Server+ technical control.
Question 431
A server administrator is investigating a server issue involving rbac and privileged separation: Developers need to restart an application service but receive domain administrator membership to avoid a narrow permission change. The change must address the documented fault without creating unrelated risk. Which corrective action is most appropriate? Select ONE best answer.
- Require MFA for interactive privileged access and controlled just-in-time or emergency access with accountable auditing.
- Grant narrowly scoped roles and use separate privileged identities with periodic entitlement reviews.
- Use narrowly scoped managed identities or service accounts and protect, rotate and revoke their secrets using approved storage.
- Give every support worker full administrator rights to reduce ticket volume.
Explanation
Correct Answer
B:Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights.
Incorrect Answers
A:This statement concerns MFA and just-in-time administration, a different Server+ technical control. It does not directly address the reported RBAC and privileged separation fault or prove its repair. For this incident, the relevant principle is: Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights. A targeted investigation checks: Review effective access, role inheritance, audit logs and task-specific permission requirements. The desired recovery condition is: The user completes the approved task without access to unrelated management planes or data.
C:That option would use narrowly scoped managed identities or service accounts and protect, rotate and revoke their secrets using approved storage, but it addresses a different concern. Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights.
D:This is the unsafe shortcut in the RBAC and privileged separation scenario, not a justified remediation or diagnostic. Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights.
Question 432
While reviewing the CompTIA Server+ administration incident, a technician learns: Developers need to restart an application service but receive domain administrator membership to avoid a narrow permission change. Which principle most directly explains how to address the described issue safely? Select ONE best answer.
- Data-protection controls should follow sensitivity and approved retention; a technically reachable storage bucket is not automatically an authorized destination.
- Backup resilience requires separation of failure and credential domains; multiple files on one failure domain are not independent copies.
- Successful data transfer alone does not establish recoverability; services need consistent artifacts and configuration state.
- Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights.
Explanation
Correct Answer
D:The acceptance test is: The user completes the approved task without access to unrelated management planes or data.
Incorrect Answers
A:This statement concerns Data classification and retention controls, a different Server+ technical control. It does not directly address the reported RBAC and privileged separation fault or prove its repair. For this incident, the relevant principle is: Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights. A targeted investigation checks: Review effective access, role inheritance, audit logs and task-specific permission requirements. The desired recovery condition is: The user completes the approved task without access to unrelated management planes or data.
B:This statement concerns Immutable and offsite backup strategy, a different Server+ technical control. It does not directly address the reported RBAC and privileged separation fault or prove its repair. For this incident, the relevant principle is: Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights. A targeted investigation checks: Review effective access, role inheritance, audit logs and task-specific permission requirements. The desired recovery condition is: The user completes the approved task without access to unrelated management planes or data.
C:This statement concerns Application-consistent restore and integrity testing, a different Server+ technical control. It does not directly address the reported RBAC and privileged separation fault or prove its repair. For this incident, the relevant principle is: Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights. A targeted investigation checks: Review effective access, role inheritance, audit logs and task-specific permission requirements. The desired recovery condition is: The user completes the approved task without access to unrelated management planes or data.
Question 433
Before a server change is approved, the on-call engineer receives this incident report: Developers need to restart an application service but receive domain administrator membership to avoid a narrow permission change. Which evidence would most directly establish the stated root-cause hypothesis? Select ONE best answer.
- Give every support worker full administrator rights to reduce ticket volume.
- Review backup job logs, quiesce/VSS status, restore checksums, ACLs and test-start results.
- Inventory service tokens, access scopes, expiration dates, vault access and code-repository leakage.
- Review effective access, role inheritance, audit logs and task-specific permission requirements.
Explanation
Correct Answer
D:The expected technical relationship is: Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights.
Incorrect Answers
A:This is the unsafe shortcut in the RBAC and privileged separation scenario, not a justified remediation or diagnostic. Incident: Developers need to restart an application service but receive domain administrator membership to avoid a narrow permission change.
B:For this incident, the relevant principle is: Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights. A targeted investigation checks: Review effective access, role inheritance, audit logs and task-specific permission requirements.
C:For this incident, the relevant principle is: Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights.
Question 434
After the team implements a targeted remediation for RBAC and privileged separation, the original incident was: Developers need to restart an application service but receive domain administrator membership to avoid a narrow permission change. Which acceptance criterion would best demonstrate a durable and safe resolution? Select ONE best answer.
- The user completes the approved task without access to unrelated management planes or data.
- Privileged sessions require approved factors and are attributable to an identity, with tested emergency recovery.
- Only authorized destinations retain the required minimized data for the approved period, with traceable deletion or archival.
- Highest-risk reachable vulnerabilities are remediated or formally mitigated, then rescans confirm closure.
Explanation
Correct Answer
A:Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights.
Incorrect Answers
B:This statement concerns MFA and just-in-time administration, a different Server+ technical control. It does not directly address the reported RBAC and privileged separation fault or prove its repair.
C:This statement concerns Data classification and retention controls, a different Server+ technical control. It does not directly address the reported RBAC and privileged separation fault or prove its repair.
D:This statement concerns Vulnerability scanning and prioritization, a different Server+ technical control. It does not directly address the reported RBAC and privileged separation fault or prove its repair. For this incident, the relevant principle is: Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights. A targeted investigation checks: Review effective access, role inheritance, audit logs and task-specific permission requirements. The desired recovery condition is: The user completes the approved task without access to unrelated management planes or data.
Question 435
A change board is planning a verified response to this server event: Developers need to restart an application service but receive domain administrator membership to avoid a narrow permission change. For the RBAC and privileged separation issue, which response elements belong in the approved plan? Select ONE best answer.
- Record media IDs, encryption status, chosen erasure standard, erase results and chain of custody.
- Give every support worker full administrator rights to reduce ticket volume.
- Grant narrowly scoped roles and use separate privileged identities with periodic entitlement reviews. Then validate the change by confirming: The user completes the approved task without access to unrelated management planes or data.
- Test application-consistent restores including data, logs, permissions and integrity at defined intervals.
Explanation
Correct Answer
C:Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights. The proposed change and outcome assessment work together for RBAC and privileged separation.
Incorrect Answers
A:That option would record media IDs, encryption status, chosen erasure standard, erase results and chain of custody, but it addresses a different concern. Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights.
B:This is the unsafe shortcut in the RBAC and privileged separation scenario, not a justified remediation or diagnostic. Discriminate using: Review effective access, role inheritance, audit logs and task-specific permission requirements.
D:This statement concerns Application-consistent restore and integrity testing, a different Server+ technical control. It does not directly address the reported RBAC and privileged separation fault or prove its repair.
Question 436
A server administrator is investigating a server issue involving rbac and privileged separation: A contractor responsible for database exports is granted unrestricted hypervisor and backup administrator roles. The change must address the documented fault without creating unrelated risk. Which corrective action is most appropriate? Select ONE best answer.
- Revoke retired host credentials, certificates and network access, remove dependent records and close the asset lifecycle.
- Give every support worker full administrator rights to reduce ticket volume.
- Grant narrowly scoped roles and use separate privileged identities with periodic entitlement reviews.
- Enable supported Secure Boot and TPM-backed integrity or key protection with verified recovery procedures.
Explanation
Correct Answer
C:Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights. A successful outcome is: The user completes the approved task without access to unrelated management planes or data.
Incorrect Answers
A:This statement concerns Decommissioning service identities and asset records, a different Server+ technical control. It does not directly address the reported RBAC and privileged separation fault or prove its repair. For this incident, the relevant principle is: Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights. A targeted investigation checks: Review effective access, role inheritance, audit logs and task-specific permission requirements. The desired recovery condition is: The user completes the approved task without access to unrelated management planes or data.
B:This is the unsafe shortcut in the RBAC and privileged separation scenario, not a justified remediation or diagnostic. Incident: A contractor responsible for database exports is granted unrestricted hypervisor and backup administrator roles.
D:That option would enable supported Secure Boot and TPM-backed integrity or key protection with verified recovery procedures, but it addresses a different concern. Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights.
Question 437
While reviewing the CompTIA Server+ administration incident, a technician learns: A contractor responsible for database exports is granted unrestricted hypervisor and backup administrator roles. Which principle most directly explains how to address the described issue safely? Select ONE best answer.
- Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights.
- Trust in the operating system begins before it starts; firmware and measured boot support protection against boot-level changes.
- Decommissioning includes logical trust and configuration removal, not just powering off and discarding hardware.
- File deletion and reformatting are not equivalent to verified sanitization of residual media data.
Explanation
Correct Answer
A:The acceptance test is: The user completes the approved task without access to unrelated management planes or data. This is the controlling principle for the reported RBAC and privileged separation incident.
Incorrect Answers
B:This statement concerns Secure Boot TPM and hardware root of trust, a different Server+ technical control. It does not directly address the reported RBAC and privileged separation fault or prove its repair. For this incident, the relevant principle is: Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights. A targeted investigation checks: Review effective access, role inheritance, audit logs and task-specific permission requirements. The desired recovery condition is: The user completes the approved task without access to unrelated management planes or data.
C:This statement concerns Decommissioning service identities and asset records, a different Server+ technical control. It does not directly address the reported RBAC and privileged separation fault or prove its repair.
D:This statement concerns Media sanitization by classification, a different Server+ technical control. It does not directly address the reported RBAC and privileged separation fault or prove its repair. For this incident, the relevant principle is: Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights. A targeted investigation checks: Review effective access, role inheritance, audit logs and task-specific permission requirements. The desired recovery condition is: The user completes the approved task without access to unrelated management planes or data.
Question 438
Before a server change is approved, the on-call engineer receives this incident report: A contractor responsible for database exports is granted unrestricted hypervisor and backup administrator roles. Which evidence would most directly establish the stated root-cause hypothesis? Select ONE best answer.
- Inspect certificate SAN, validity dates, intermediates, TLS negotiation and client trust-store errors.
- Give every support worker full administrator rights to reduce ticket volume.
- Review effective access, role inheritance, audit logs and task-specific permission requirements.
- Record media IDs, encryption status, chosen erasure standard, erase results and chain of custody.
Explanation
Correct Answer
C:The expected technical relationship is: Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights. These observations investigate the exact RBAC and privileged separation failure rather than unrelated components.
Incorrect Answers
A:For this incident, the relevant principle is: Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights. This statement concerns TLS certificate chain and secure transport, a different Server+ technical control.
B:Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights.
D:For this incident, the relevant principle is: Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights. This statement concerns Media sanitization by classification, a different Server+ technical control.
Question 439
After the team implements a targeted remediation for RBAC and privileged separation, the original incident was: A contractor responsible for database exports is granted unrestricted hypervisor and backup administrator roles. Which acceptance criterion would best demonstrate a durable and safe resolution? Select ONE best answer.
- A recovered application opens consistent data and passes functional and permission tests at the target restore point.
- Known authorized boot components load and tampering is detected without losing recovery access.
- Automated jobs work with minimum permissions and leaked or expired credentials are no longer usable.
- The user completes the approved task without access to unrelated management planes or data.
Explanation
Correct Answer
D:Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights.
Incorrect Answers
A:This statement concerns Application-consistent restore and integrity testing, a different Server+ technical control. It does not directly address the reported RBAC and privileged separation fault or prove its repair. For this incident, the relevant principle is: Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights. A targeted investigation checks: Review effective access, role inheritance, audit logs and task-specific permission requirements. The desired recovery condition is: The user completes the approved task without access to unrelated management planes or data.
B:This statement concerns Secure Boot TPM and hardware root of trust, a different Server+ technical control. It does not directly address the reported RBAC and privileged separation fault or prove its repair.
C:This statement concerns Service-account secret rotation and scope, a different Server+ technical control. It does not directly address the reported RBAC and privileged separation fault or prove its repair. For this incident, the relevant principle is: Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights. A targeted investigation checks: Review effective access, role inheritance, audit logs and task-specific permission requirements. The desired recovery condition is: The user completes the approved task without access to unrelated management planes or data.
Question 440
A change board is planning a verified response to this server event: A contractor responsible for database exports is granted unrestricted hypervisor and backup administrator roles. For the RBAC and privileged separation issue, which response elements belong in the approved plan? Select TWO answers.
- Give every support worker full administrator rights to reduce ticket volume.
- Grant narrowly scoped roles and use separate privileged identities with periodic entitlement reviews.
- Review effective access, role inheritance, audit logs and task-specific permission requirements.
- Automated jobs work with minimum permissions and leaked or expired credentials are no longer usable.
- Apply approved sanitization or cryptographic erase methods appropriate to media and classification, then retain evidence.
Explanation
Correct Answer
B:Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights.
C:The expected technical relationship is: Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights. Confirm remediation through: The user completes the approved task without access to unrelated management planes or data.
Incorrect Answers
A:Discriminate using: Review effective access, role inheritance, audit logs and task-specific permission requirements.
D:This statement concerns Service-account secret rotation and scope, a different Server+ technical control. It does not directly address the reported RBAC and privileged separation fault or prove its repair.
E:That option would apply approved sanitization or cryptographic erase methods appropriate to media and classification, then retain evidence, but it addresses a different concern. Least privilege limits blast radius by granting only the operations each role needs, not broad administrator rights.
