CompTIA SK0-005 Practice Test 47
Question 460
A change board is planning a verified response to this server event: An application token is committed to a configuration repository and reused across staging and production with unrestricted API scopes. For the Service-account secret rotation and scope issue, which response elements belong in the approved plan? Select TWO answers.
- Reuse one unrotated administrator password for every unattended service.
- Inventory service tokens, access scopes, expiration dates, vault access and code-repository leakage.
- Apply approved sanitization or cryptographic erase methods appropriate to media and classification, then retain evidence.
- Privileged sessions require approved factors and are attributable to an identity, with tested emergency recovery.
- Use narrowly scoped managed identities or service accounts and protect, rotate and revoke their secrets using approved storage.
Explanation
Correct Answer
B:These observations investigate the exact Service-account secret rotation and scope failure rather than unrelated components. Incident: An application token is committed to a configuration repository and reused across staging and production with unrestricted API scopes.
E:Nonhuman identities are privileged principals; service convenience does not justify permanent broad permissions or exposed credentials. This is the appropriate targeted correction for Service-account secret rotation and scope.
Incorrect Answers
A:Discriminate using: Inventory service tokens, access scopes, expiration dates, vault access and code-repository leakage.
C:For this incident, the relevant principle is: Nonhuman identities are privileged principals; service convenience does not justify permanent broad permissions or exposed credentials. It does not directly address the reported Service-account secret rotation and scope fault or prove its repair.
D:For this incident, the relevant principle is: Nonhuman identities are privileged principals; service convenience does not justify permanent broad permissions or exposed credentials. This statement concerns MFA and just-in-time administration, a different Server+ technical control.
Question 461
A server administrator is investigating a server issue involving vulnerability scanning and prioritization: A nightly vulnerability scan flags critical remotely exploitable flaws on an internet-facing service, but the team patches low-impact lab servers first. The change must address the documented fault without creating unrelated risk. Which corrective action is most appropriate? Select ONE best answer.
- Stage vendor-supported security updates, validate application compatibility, keep rollback options and document temporary mitigations.
- Prioritize verified vulnerabilities by exploitability, exposure and business impact; apply supported remediations with evidence.
- Monitor temperature, humidity, water and fire risks with alarms and approved cooling or suppression response plans.
- Ignore exposed critical issues because another unrelated vulnerability has a higher raw count.
Explanation
Correct Answer
B:Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority.
Incorrect Answers
A:This statement concerns Patching with staged rollback, a different Server+ technical control. It does not directly address the reported Vulnerability scanning and prioritization fault or prove its repair. For this incident, the relevant principle is: Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority. A targeted investigation checks: Check asset exposure, affected software versions, exploit availability, scan confidence and compensating controls. The desired recovery condition is: Highest-risk reachable vulnerabilities are remediated or formally mitigated, then rescans confirm closure.
C:That option would monitor temperature, humidity, water and fire risks with alarms and approved cooling or suppression response plans, but it addresses a different concern. Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority.
D:This is the unsafe shortcut in the Vulnerability scanning and prioritization scenario, not a justified remediation or diagnostic. Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority.
Question 462
While reviewing the CompTIA Server+ administration incident, a technician learns: A nightly vulnerability scan flags critical remotely exploitable flaws on an internet-facing service, but the team patches low-impact lab servers first. Which principle most directly explains how to address the described issue safely? Select ONE best answer.
- Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority.
- Recovery is a dependency graph, not a collection of powered-on VMs; failback can require careful data reconciliation.
- Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries.
- Trust in the operating system begins before it starts; firmware and measured boot support protection against boot-level changes.
Explanation
Correct Answer
A:The acceptance test is: Highest-risk reachable vulnerabilities are remediated or formally mitigated, then rescans confirm closure.
Incorrect Answers
B:This statement concerns Site failover dependencies and failback, a different Server+ technical control. It does not directly address the reported Vulnerability scanning and prioritization fault or prove its repair. For this incident, the relevant principle is: Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority. A targeted investigation checks: Check asset exposure, affected software versions, exploit availability, scan confidence and compensating controls. The desired recovery condition is: Highest-risk reachable vulnerabilities are remediated or formally mitigated, then rescans confirm closure.
C:This statement concerns Data center physical access enforcement, a different Server+ technical control. It does not directly address the reported Vulnerability scanning and prioritization fault or prove its repair. For this incident, the relevant principle is: Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority. A targeted investigation checks: Check asset exposure, affected software versions, exploit availability, scan confidence and compensating controls. The desired recovery condition is: Highest-risk reachable vulnerabilities are remediated or formally mitigated, then rescans confirm closure.
D:This statement concerns Secure Boot TPM and hardware root of trust, a different Server+ technical control. It does not directly address the reported Vulnerability scanning and prioritization fault or prove its repair. For this incident, the relevant principle is: Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority. A targeted investigation checks: Check asset exposure, affected software versions, exploit availability, scan confidence and compensating controls. The desired recovery condition is: Highest-risk reachable vulnerabilities are remediated or formally mitigated, then rescans confirm closure.
Question 463
Before a server change is approved, the on-call engineer receives this incident report: A nightly vulnerability scan flags critical remotely exploitable flaws on an internet-facing service, but the team patches low-impact lab servers first. Which evidence would most directly establish the stated root-cause hypothesis? Select ONE best answer.
- Ignore exposed critical issues because another unrelated vulnerability has a higher raw count.
- Inspect advisories, dependency matrix, staging test results, maintenance plan and postpatch scans.
- Check service dependency map, replicated identity/DNS reachability, endpoint changes and data consistency during drill.
- Check asset exposure, affected software versions, exploit availability, scan confidence and compensating controls.
Explanation
Correct Answer
D:The expected technical relationship is: Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority.
Incorrect Answers
A:This is the unsafe shortcut in the Vulnerability scanning and prioritization scenario, not a justified remediation or diagnostic. Incident: A nightly vulnerability scan flags critical remotely exploitable flaws on an internet-facing service, but the team patches low-impact lab servers first.
B:For this incident, the relevant principle is: Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority. A targeted investigation checks: Check asset exposure, affected software versions, exploit availability, scan confidence and compensating controls.
C:For this incident, the relevant principle is: Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority.
Question 464
After the team implements a targeted remediation for Vulnerability scanning and prioritization, the original incident was: A nightly vulnerability scan flags critical remotely exploitable flaws on an internet-facing service, but the team patches low-impact lab servers first. Which acceptance criterion would best demonstrate a durable and safe resolution? Select ONE best answer.
- Only authorized destinations retain the required minimized data for the approved period, with traceable deletion or archival.
- Known authorized boot components load and tampering is detected without losing recovery access.
- Highest-risk reachable vulnerabilities are remediated or formally mitigated, then rescans confirm closure.
- A controlled simulated environmental warning reaches responders in time and temperature stays within equipment range.
Explanation
Correct Answer
C:Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority.
Incorrect Answers
A:This statement concerns Data classification and retention controls, a different Server+ technical control. It does not directly address the reported Vulnerability scanning and prioritization fault or prove its repair. For this incident, the relevant principle is: Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority. A targeted investigation checks: Check asset exposure, affected software versions, exploit availability, scan confidence and compensating controls. The desired recovery condition is: Highest-risk reachable vulnerabilities are remediated or formally mitigated, then rescans confirm closure.
B:This statement concerns Secure Boot TPM and hardware root of trust, a different Server+ technical control. It does not directly address the reported Vulnerability scanning and prioritization fault or prove its repair.
D:This statement concerns Environmental monitoring and suppression, a different Server+ technical control. It does not directly address the reported Vulnerability scanning and prioritization fault or prove its repair. For this incident, the relevant principle is: Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority. A targeted investigation checks: Check asset exposure, affected software versions, exploit availability, scan confidence and compensating controls. The desired recovery condition is: Highest-risk reachable vulnerabilities are remediated or formally mitigated, then rescans confirm closure.
Question 465
A change board is planning a verified response to this server event: A nightly vulnerability scan flags critical remotely exploitable flaws on an internet-facing service, but the team patches low-impact lab servers first. For the Vulnerability scanning and prioritization issue, which response elements belong in the approved plan? Select ONE best answer.
- Include identity, DNS, network, certificates and data-dependency order in failover and failback runbooks; rehearse both directions.
- Prioritize verified vulnerabilities by exploitability, exposure and business impact; apply supported remediations with evidence. Then validate the change by confirming: Highest-risk reachable vulnerabilities are remediated or formally mitigated, then rescans confirm closure.
- Review backup job logs, quiesce/VSS status, restore checksums, ACLs and test-start results.
- Ignore exposed critical issues because another unrelated vulnerability has a higher raw count.
Explanation
Correct Answer
B:Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority. This avoids the unsafe shortcut: Ignore exposed critical issues because another unrelated vulnerability has a higher raw count.
Incorrect Answers
A:That option would include identity, DNS, network, certificates and data-dependency order in failover and failback runbooks; rehearse both directions, but it addresses a different concern. Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority.
C:That option would review backup job logs, quiesce/VSS status, restore checksums, ACLs and test-start results, but it addresses a different concern. Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority.
D:This is the unsafe shortcut in the Vulnerability scanning and prioritization scenario, not a justified remediation or diagnostic. Discriminate using: Check asset exposure, affected software versions, exploit availability, scan confidence and compensating controls.
Question 466
A server administrator is investigating a server issue involving vulnerability scanning and prioritization: A fleet owner sees hundreds of CVEs and treats all severity scores equally without checking exposure and compensating controls. The change must address the documented fault without creating unrelated risk. Which corrective action is most appropriate? Select ONE best answer.
- Use narrowly scoped managed identities or service accounts and protect, rotate and revoke their secrets using approved storage.
- Ignore exposed critical issues because another unrelated vulnerability has a higher raw count.
- Keep independent, access-isolated and preferably immutable/offsite backup copies with monitored schedules and retention.
- Prioritize verified vulnerabilities by exploitability, exposure and business impact; apply supported remediations with evidence.
Explanation
Correct Answer
D:Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority.
Incorrect Answers
A:That option would use narrowly scoped managed identities or service accounts and protect, rotate and revoke their secrets using approved storage, but it addresses a different concern. Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority.
B:This is the unsafe shortcut in the Vulnerability scanning and prioritization scenario, not a justified remediation or diagnostic. Incident: A fleet owner sees hundreds of CVEs and treats all severity scores equally without checking exposure and compensating controls.
C:That option would keep independent, access-isolated and preferably immutable/offsite backup copies with monitored schedules and retention, but it addresses a different concern. Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority.
Question 467
While reviewing the CompTIA Server+ administration incident, a technician learns: A fleet owner sees hundreds of CVEs and treats all severity scores equally without checking exposure and compensating controls. Which principle most directly explains how to address the described issue safely? Select ONE best answer.
- Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority.
- Backup resilience requires separation of failure and credential domains; multiple files on one failure domain are not independent copies.
- Nonhuman identities are privileged principals; service convenience does not justify permanent broad permissions or exposed credentials.
- Decommissioning includes logical trust and configuration removal, not just powering off and discarding hardware.
Explanation
Correct Answer
A:The acceptance test is: Highest-risk reachable vulnerabilities are remediated or formally mitigated, then rescans confirm closure.
Incorrect Answers
B:This statement concerns Immutable and offsite backup strategy, a different Server+ technical control. It does not directly address the reported Vulnerability scanning and prioritization fault or prove its repair. For this incident, the relevant principle is: Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority. A targeted investigation checks: Check asset exposure, affected software versions, exploit availability, scan confidence and compensating controls. The desired recovery condition is: Highest-risk reachable vulnerabilities are remediated or formally mitigated, then rescans confirm closure.
C:This statement concerns Service-account secret rotation and scope, a different Server+ technical control. It does not directly address the reported Vulnerability scanning and prioritization fault or prove its repair. For this incident, the relevant principle is: Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority. A targeted investigation checks: Check asset exposure, affected software versions, exploit availability, scan confidence and compensating controls. The desired recovery condition is: Highest-risk reachable vulnerabilities are remediated or formally mitigated, then rescans confirm closure.
D:This statement concerns Decommissioning service identities and asset records, a different Server+ technical control. It does not directly address the reported Vulnerability scanning and prioritization fault or prove its repair. For this incident, the relevant principle is: Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority. A targeted investigation checks: Check asset exposure, affected software versions, exploit availability, scan confidence and compensating controls. The desired recovery condition is: Highest-risk reachable vulnerabilities are remediated or formally mitigated, then rescans confirm closure.
Question 468
Before a server change is approved, the on-call engineer receives this incident report: A fleet owner sees hundreds of CVEs and treats all severity scores equally without checking exposure and compensating controls. Which evidence would most directly establish the stated root-cause hypothesis? Select ONE best answer.
- Ignore exposed critical issues because another unrelated vulnerability has a higher raw count.
- Check asset exposure, affected software versions, exploit availability, scan confidence and compensating controls.
- Review backup job logs, quiesce/VSS status, restore checksums, ACLs and test-start results.
- Inventory host identities, DNS, monitoring, backup schedules, service tokens and firewall exceptions.
Explanation
Correct Answer
B:The expected technical relationship is: Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority.
Incorrect Answers
A:Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority.
C:For this incident, the relevant principle is: Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority.
D:For this incident, the relevant principle is: Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority. This statement concerns Decommissioning service identities and asset records, a different Server+ technical control.
Question 469
After the team implements a targeted remediation for Vulnerability scanning and prioritization, the original incident was: A fleet owner sees hundreds of CVEs and treats all severity scores equally without checking exposure and compensating controls. Which acceptance criterion would best demonstrate a durable and safe resolution? Select ONE best answer.
- Privileged sessions require approved factors and are attributable to an identity, with tested emergency recovery.
- An offline or isolated restore point survives a simulated primary-site or administrator compromise.
- Patches deploy without unacceptable outage and vulnerability scans verify the intended fixed version.
- Highest-risk reachable vulnerabilities are remediated or formally mitigated, then rescans confirm closure.
Explanation
Correct Answer
D:Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority.
Incorrect Answers
A:This statement concerns MFA and just-in-time administration, a different Server+ technical control. It does not directly address the reported Vulnerability scanning and prioritization fault or prove its repair. For this incident, the relevant principle is: Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority. A targeted investigation checks: Check asset exposure, affected software versions, exploit availability, scan confidence and compensating controls. The desired recovery condition is: Highest-risk reachable vulnerabilities are remediated or formally mitigated, then rescans confirm closure.
B:This statement concerns Immutable and offsite backup strategy, a different Server+ technical control. It does not directly address the reported Vulnerability scanning and prioritization fault or prove its repair.
C:This statement concerns Patching with staged rollback, a different Server+ technical control. It does not directly address the reported Vulnerability scanning and prioritization fault or prove its repair. For this incident, the relevant principle is: Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority. A targeted investigation checks: Check asset exposure, affected software versions, exploit availability, scan confidence and compensating controls. The desired recovery condition is: Highest-risk reachable vulnerabilities are remediated or formally mitigated, then rescans confirm closure.
Question 470
A change board is planning a verified response to this server event: A fleet owner sees hundreds of CVEs and treats all severity scores equally without checking exposure and compensating controls. For the Vulnerability scanning and prioritization issue, which response elements belong in the approved plan? Select TWO answers.
- Prioritize verified vulnerabilities by exploitability, exposure and business impact; apply supported remediations with evidence.
- Ignore exposed critical issues because another unrelated vulnerability has a higher raw count.
- Revoke retired host credentials, certificates and network access, remove dependent records and close the asset lifecycle.
- Check asset exposure, affected software versions, exploit availability, scan confidence and compensating controls.
- Patches deploy without unacceptable outage and vulnerability scans verify the intended fixed version.
Explanation
Correct Answer
A:Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority. A successful outcome is: Highest-risk reachable vulnerabilities are remediated or formally mitigated, then rescans confirm closure.
D:The expected technical relationship is: Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority. These observations investigate the exact Vulnerability scanning and prioritization failure rather than unrelated components.
Incorrect Answers
B:Incident: A fleet owner sees hundreds of CVEs and treats all severity scores equally without checking exposure and compensating controls.
C:This statement concerns Decommissioning service identities and asset records, a different Server+ technical control. It does not directly address the reported Vulnerability scanning and prioritization fault or prove its repair.
E:This statement concerns Patching with staged rollback, a different Server+ technical control. It does not directly address the reported Vulnerability scanning and prioritization fault or prove its repair.