cert
cert-1
cert-2

Pass CompTIA SK0-005 Exam in First Attempt Guaranteed!

Get 100% Latest Exam Questions, Accurate & Verified Answers to Pass the Actual Exam!
30 Days Free Updates, Instant Download!

cert-5
cert-6
SK0-005 Exam - Verified By Experts
SK0-005 Premium Bundle
$29.98

SK0-005 Premium Bundle

$79.99
$109.97
  • Premium File 617 Questions & Answers. Last update: Nov 13, 2026
  • Training Course 139 Video Lectures
  • Study Guide 533 Pages
 
$109.97
$79.99
accept 21 downloads in last 7 days
block-screenshots
Purchase CompTIA SK0-005 Exam Training Products Individually
CompTIA SK0-005 Premium File
Premium File 617 Q&A
$76.99$69.99
CompTIA SK0-005 Video Training Course
Training Course 139 Lectures
$21.99 $19.99
CompTIA SK0-005 PDF Study Guide
Study Guide 533 Pages
$21.99 $19.99
CompTIA SK0-005 Practice Test 48

Question 470

A change board is planning a verified response to this server event: A fleet owner sees hundreds of CVEs and treats all severity scores equally without checking exposure and compensating controls. For the Vulnerability scanning and prioritization issue, which response elements belong in the approved plan? Select TWO answers.

  1. Prioritize verified vulnerabilities by exploitability, exposure and business impact; apply supported remediations with evidence.
  2. Ignore exposed critical issues because another unrelated vulnerability has a higher raw count.
  3. Revoke retired host credentials, certificates and network access, remove dependent records and close the asset lifecycle.
  4. Check asset exposure, affected software versions, exploit availability, scan confidence and compensating controls.
  5. Patches deploy without unacceptable outage and vulnerability scans verify the intended fixed version.

Explanation

Correct Answer

A:

Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority. A successful outcome is: Highest-risk reachable vulnerabilities are remediated or formally mitigated, then rescans confirm closure.

D:

The expected technical relationship is: Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority. These observations investigate the exact Vulnerability scanning and prioritization failure rather than unrelated components.

Incorrect Answers

B:

Incident: A fleet owner sees hundreds of CVEs and treats all severity scores equally without checking exposure and compensating controls.

C:

This statement concerns Decommissioning service identities and asset records, a different Server+ technical control. It does not directly address the reported Vulnerability scanning and prioritization fault or prove its repair.

E:

This statement concerns Patching with staged rollback, a different Server+ technical control. It does not directly address the reported Vulnerability scanning and prioritization fault or prove its repair.

Question 471

A server administrator is investigating a server issue involving patching with staged rollback: A critical OS patch is installed on every server at once and unexpectedly breaks a storage-driver dependency. The change must address the documented fault without creating unrelated risk. Which corrective action is most appropriate? Select ONE best answer.

  1. Prioritize verified vulnerabilities by exploitability, exposure and business impact; apply supported remediations with evidence.
  2. Test application-consistent restores including data, logs, permissions and integrity at defined intervals.
  3. Apply untested kernel patches to all critical hosts simultaneously with no rollback or maintenance window.
  4. Stage vendor-supported security updates, validate application compatibility, keep rollback options and document temporary mitigations.

Explanation

Correct Answer

D:

A successful outcome is: Patches deploy without unacceptable outage and vulnerability scans verify the intended fixed version. For this case, A critical OS patch is installed on every server at once and unexpectedly breaks a storage-driver dependency.

Incorrect Answers

A:

For this incident, the relevant principle is: Patch management balances exposure reduction with service continuity using tested change windows and exception handling. A targeted investigation checks: Inspect advisories, dependency matrix, staging test results, maintenance plan and postpatch scans.

B:

For this incident, the relevant principle is: Patch management balances exposure reduction with service continuity using tested change windows and exception handling. This statement concerns Application-consistent restore and integrity testing, a different Server+ technical control.

C:

This is the unsafe shortcut in the Patching with staged rollback scenario, not a justified remediation or diagnostic. Patch management balances exposure reduction with service continuity using tested change windows and exception handling.

Question 472

While reviewing the CompTIA Server+ administration incident, a technician learns: A critical OS patch is installed on every server at once and unexpectedly breaks a storage-driver dependency. Which principle most directly explains how to address the described issue safely? Select ONE best answer.

  1. RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices.
  2. Decommissioning includes logical trust and configuration removal, not just powering off and discarding hardware.
  3. A trusted internal network is not equivalent to all traffic being authorized; east-west access needs explicit boundaries.
  4. Patch management balances exposure reduction with service continuity using tested change windows and exception handling.

Explanation

Correct Answer

D:

The acceptance test is: Patches deploy without unacceptable outage and vulnerability scans verify the intended fixed version. This is the controlling principle for the reported Patching with staged rollback incident.

Incorrect Answers

A:

This statement concerns RPO and RTO-driven disaster recovery, a different Server+ technical control. It does not directly address the reported Patching with staged rollback fault or prove its repair. For this incident, the relevant principle is: Patch management balances exposure reduction with service continuity using tested change windows and exception handling. A targeted investigation checks: Inspect advisories, dependency matrix, staging test results, maintenance plan and postpatch scans. The desired recovery condition is: Patches deploy without unacceptable outage and vulnerability scans verify the intended fixed version.

B:

This statement concerns Decommissioning service identities and asset records, a different Server+ technical control. It does not directly address the reported Patching with staged rollback fault or prove its repair. For this incident, the relevant principle is: Patch management balances exposure reduction with service continuity using tested change windows and exception handling. A targeted investigation checks: Inspect advisories, dependency matrix, staging test results, maintenance plan and postpatch scans. The desired recovery condition is: Patches deploy without unacceptable outage and vulnerability scans verify the intended fixed version.

C:

This statement concerns Host firewall and east-west filtering, a different Server+ technical control. It does not directly address the reported Patching with staged rollback fault or prove its repair. For this incident, the relevant principle is: Patch management balances exposure reduction with service continuity using tested change windows and exception handling. A targeted investigation checks: Inspect advisories, dependency matrix, staging test results, maintenance plan and postpatch scans. The desired recovery condition is: Patches deploy without unacceptable outage and vulnerability scans verify the intended fixed version.

Question 473

Before a server change is approved, the on-call engineer receives this incident report: A critical OS patch is installed on every server at once and unexpectedly breaks a storage-driver dependency. Which evidence would most directly establish the stated root-cause hypothesis? Select ONE best answer.

  1. Apply untested kernel patches to all critical hosts simultaneously with no rollback or maintenance window.
  2. Check asset exposure, affected software versions, exploit availability, scan confidence and compensating controls.
  3. Inspect advisories, dependency matrix, staging test results, maintenance plan and postpatch scans.
  4. Measure actual restore durations, last consistent recovery points, dependencies and recovery staff availability.

Explanation

Correct Answer

C:

Confirm remediation through: Patches deploy without unacceptable outage and vulnerability scans verify the intended fixed version. These observations investigate the exact Patching with staged rollback failure rather than unrelated components.

Incorrect Answers

A:

This is the unsafe shortcut in the Patching with staged rollback scenario, not a justified remediation or diagnostic. Discriminate using: Inspect advisories, dependency matrix, staging test results, maintenance plan and postpatch scans.

B:

For this incident, the relevant principle is: Patch management balances exposure reduction with service continuity using tested change windows and exception handling. This statement concerns Vulnerability scanning and prioritization, a different Server+ technical control.

D:

For this incident, the relevant principle is: Patch management balances exposure reduction with service continuity using tested change windows and exception handling. This statement concerns RPO and RTO-driven disaster recovery, a different Server+ technical control.

Question 474

After the team implements a targeted remediation for Patching with staged rollback, the original incident was: A critical OS patch is installed on every server at once and unexpectedly breaks a storage-driver dependency. Which acceptance criterion would best demonstrate a durable and safe resolution? Select ONE best answer.

  1. Approved application flows work and unrelated lateral movement attempts are denied and logged.
  2. Patches deploy without unacceptable outage and vulnerability scans verify the intended fixed version.
  3. Sensitive data on lost media is protected and authorized recovery still works using controlled key escrow.
  4. A recovered application opens consistent data and passes functional and permission tests at the target restore point.

Explanation

Correct Answer

B:

Patch management balances exposure reduction with service continuity using tested change windows and exception handling.

Incorrect Answers

A:

This statement concerns Host firewall and east-west filtering, a different Server+ technical control. It does not directly address the reported Patching with staged rollback fault or prove its repair.

C:

This statement concerns Encryption at rest and key lifecycle, a different Server+ technical control. It does not directly address the reported Patching with staged rollback fault or prove its repair. For this incident, the relevant principle is: Patch management balances exposure reduction with service continuity using tested change windows and exception handling. A targeted investigation checks: Inspect advisories, dependency matrix, staging test results, maintenance plan and postpatch scans. The desired recovery condition is: Patches deploy without unacceptable outage and vulnerability scans verify the intended fixed version.

D:

This statement concerns Application-consistent restore and integrity testing, a different Server+ technical control. It does not directly address the reported Patching with staged rollback fault or prove its repair. For this incident, the relevant principle is: Patch management balances exposure reduction with service continuity using tested change windows and exception handling. A targeted investigation checks: Inspect advisories, dependency matrix, staging test results, maintenance plan and postpatch scans. The desired recovery condition is: Patches deploy without unacceptable outage and vulnerability scans verify the intended fixed version.

Question 475

A change board is planning a verified response to this server event: A critical OS patch is installed on every server at once and unexpectedly breaks a storage-driver dependency. For the Patching with staged rollback issue, which response elements belong in the approved plan? Select ONE best answer.

  1. Apply untested kernel patches to all critical hosts simultaneously with no rollback or maintenance window.
  2. Stage vendor-supported security updates, validate application compatibility, keep rollback options and document temporary mitigations. Then validate the change by confirming: Patches deploy without unacceptable outage and vulnerability scans verify the intended fixed version.
  3. Select recovery architecture to meet quantified RTO and RPO, then validate both during controlled recovery exercises.
  4. Inventory service tokens, access scopes, expiration dates, vault access and code-repository leakage.

Explanation

Correct Answer

B:

Patch management balances exposure reduction with service continuity using tested change windows and exception handling. The proposed change and outcome assessment work together for Patching with staged rollback.

Incorrect Answers

A:

This is the unsafe shortcut in the Patching with staged rollback scenario, not a justified remediation or diagnostic. Incident: A critical OS patch is installed on every server at once and unexpectedly breaks a storage-driver dependency.

C:

That option would select recovery architecture to meet quantified RTO and RPO, then validate both during controlled recovery exercises, but it addresses a different concern. Patch management balances exposure reduction with service continuity using tested change windows and exception handling.

D:

This statement concerns Service-account secret rotation and scope, a different Server+ technical control. It does not directly address the reported Patching with staged rollback fault or prove its repair. For this incident, the relevant principle is: Patch management balances exposure reduction with service continuity using tested change windows and exception handling. A targeted investigation checks: Inspect advisories, dependency matrix, staging test results, maintenance plan and postpatch scans. The desired recovery condition is: Patches deploy without unacceptable outage and vulnerability scans verify the intended fixed version.

Question 476

A server administrator is investigating a server issue involving patching with staged rollback: An appliance is known vulnerable but operators disable patching indefinitely without compensating controls or an exception review. The change must address the documented fault without creating unrelated risk. Which corrective action is most appropriate? Select ONE best answer.

  1. Apply untested kernel patches to all critical hosts simultaneously with no rollback or maintenance window.
  2. Stage vendor-supported security updates, validate application compatibility, keep rollback options and document temporary mitigations.
  3. Apply approved sanitization or cryptographic erase methods appropriate to media and classification, then retain evidence.
  4. Enable appropriate data-at-rest encryption with separated, access-controlled key storage, recovery procedures and rotation policy.

Explanation

Correct Answer

B:

A successful outcome is: Patches deploy without unacceptable outage and vulnerability scans verify the intended fixed version. For this case, An appliance is known vulnerable but operators disable patching indefinitely without compensating controls or an exception review.

Incorrect Answers

A:

This is the unsafe shortcut in the Patching with staged rollback scenario, not a justified remediation or diagnostic. Incident: An appliance is known vulnerable but operators disable patching indefinitely without compensating controls or an exception review.

C:

For this incident, the relevant principle is: Patch management balances exposure reduction with service continuity using tested change windows and exception handling.

D:

For this incident, the relevant principle is: Patch management balances exposure reduction with service continuity using tested change windows and exception handling. This statement concerns Encryption at rest and key lifecycle, a different Server+ technical control.

Question 477

While reviewing the CompTIA Server+ administration incident, a technician learns: An appliance is known vulnerable but operators disable patching indefinitely without compensating controls or an exception review. Which principle most directly explains how to address the described issue safely? Select ONE best answer.

  1. Physical access can bypass many software controls; identity, escort and audit are needed at equipment boundaries.
  2. File deletion and reformatting are not equivalent to verified sanitization of residual media data.
  3. File permissions do not protect stolen offline media; encryption's value depends on safeguarding keys and recoverability.
  4. Patch management balances exposure reduction with service continuity using tested change windows and exception handling.

Explanation

Correct Answer

D:

The acceptance test is: Patches deploy without unacceptable outage and vulnerability scans verify the intended fixed version.

Incorrect Answers

A:

This statement concerns Data center physical access enforcement, a different Server+ technical control. It does not directly address the reported Patching with staged rollback fault or prove its repair. For this incident, the relevant principle is: Patch management balances exposure reduction with service continuity using tested change windows and exception handling. A targeted investigation checks: Inspect advisories, dependency matrix, staging test results, maintenance plan and postpatch scans. The desired recovery condition is: Patches deploy without unacceptable outage and vulnerability scans verify the intended fixed version.

B:

This statement concerns Media sanitization by classification, a different Server+ technical control. It does not directly address the reported Patching with staged rollback fault or prove its repair. For this incident, the relevant principle is: Patch management balances exposure reduction with service continuity using tested change windows and exception handling. A targeted investigation checks: Inspect advisories, dependency matrix, staging test results, maintenance plan and postpatch scans. The desired recovery condition is: Patches deploy without unacceptable outage and vulnerability scans verify the intended fixed version.

C:

This statement concerns Encryption at rest and key lifecycle, a different Server+ technical control. It does not directly address the reported Patching with staged rollback fault or prove its repair. For this incident, the relevant principle is: Patch management balances exposure reduction with service continuity using tested change windows and exception handling. A targeted investigation checks: Inspect advisories, dependency matrix, staging test results, maintenance plan and postpatch scans. The desired recovery condition is: Patches deploy without unacceptable outage and vulnerability scans verify the intended fixed version.

Question 478

Before a server change is approved, the on-call engineer receives this incident report: An appliance is known vulnerable but operators disable patching indefinitely without compensating controls or an exception review. Which evidence would most directly establish the stated root-cause hypothesis? Select ONE best answer.

  1. Inspect advisories, dependency matrix, staging test results, maintenance plan and postpatch scans.
  2. Inspect backup targets, credential separation, immutability, offsite status and restore-point freshness.
  3. Review door events, camera footage, approved visitor roster, rack locks and access recertification.
  4. Apply untested kernel patches to all critical hosts simultaneously with no rollback or maintenance window.

Explanation

Correct Answer

A:

Confirm remediation through: Patches deploy without unacceptable outage and vulnerability scans verify the intended fixed version. Incident: An appliance is known vulnerable but operators disable patching indefinitely without compensating controls or an exception review.

Incorrect Answers

B:

For this incident, the relevant principle is: Patch management balances exposure reduction with service continuity using tested change windows and exception handling. This statement concerns Immutable and offsite backup strategy, a different Server+ technical control.

C:

For this incident, the relevant principle is: Patch management balances exposure reduction with service continuity using tested change windows and exception handling. This statement concerns Data center physical access enforcement, a different Server+ technical control.

D:

Incident: An appliance is known vulnerable but operators disable patching indefinitely without compensating controls or an exception review.

Question 479

After the team implements a targeted remediation for Patching with staged rollback, the original incident was: An appliance is known vulnerable but operators disable patching indefinitely without compensating controls or an exception review. Which acceptance criterion would best demonstrate a durable and safe resolution? Select ONE best answer.

  1. Patches deploy without unacceptable outage and vulnerability scans verify the intended fixed version.
  2. Only authorized destinations retain the required minimized data for the approved period, with traceable deletion or archival.
  3. Highest-risk reachable vulnerabilities are remediated or formally mitigated, then rescans confirm closure.
  4. Decommissioned media has verifiable sanitization or destruction evidence matching policy.

Explanation

Correct Answer

A:

Patch management balances exposure reduction with service continuity using tested change windows and exception handling.

Incorrect Answers

B:

This statement concerns Data classification and retention controls, a different Server+ technical control. It does not directly address the reported Patching with staged rollback fault or prove its repair. For this incident, the relevant principle is: Patch management balances exposure reduction with service continuity using tested change windows and exception handling. A targeted investigation checks: Inspect advisories, dependency matrix, staging test results, maintenance plan and postpatch scans. The desired recovery condition is: Patches deploy without unacceptable outage and vulnerability scans verify the intended fixed version.

C:

This statement concerns Vulnerability scanning and prioritization, a different Server+ technical control. It does not directly address the reported Patching with staged rollback fault or prove its repair. For this incident, the relevant principle is: Patch management balances exposure reduction with service continuity using tested change windows and exception handling. A targeted investigation checks: Inspect advisories, dependency matrix, staging test results, maintenance plan and postpatch scans. The desired recovery condition is: Patches deploy without unacceptable outage and vulnerability scans verify the intended fixed version.

D:

This statement concerns Media sanitization by classification, a different Server+ technical control. It does not directly address the reported Patching with staged rollback fault or prove its repair.

Question 480

A change board is planning a verified response to this server event: An appliance is known vulnerable but operators disable patching indefinitely without compensating controls or an exception review. For the Patching with staged rollback issue, which response elements belong in the approved plan? Select TWO answers.

  1. Apply untested kernel patches to all critical hosts simultaneously with no rollback or maintenance window.
  2. Enforce badges, role-based room or rack access, visitor logging and periodic access-review procedures.
  3. Stage vendor-supported security updates, validate application compatibility, keep rollback options and document temporary mitigations.
  4. Inspect advisories, dependency matrix, staging test results, maintenance plan and postpatch scans.
  5. Highest-risk reachable vulnerabilities are remediated or formally mitigated, then rescans confirm closure.

Explanation

Correct Answer

C:

A successful outcome is: Patches deploy without unacceptable outage and vulnerability scans verify the intended fixed version. This is the appropriate targeted correction for Patching with staged rollback.

D:

Confirm remediation through: Patches deploy without unacceptable outage and vulnerability scans verify the intended fixed version. The expected technical relationship is: Patch management balances exposure reduction with service continuity using tested change windows and exception handling.

Incorrect Answers

A:

Patch management balances exposure reduction with service continuity using tested change windows and exception handling.

B:

For this incident, the relevant principle is: Patch management balances exposure reduction with service continuity using tested change windows and exception handling. The desired recovery condition is: Patches deploy without unacceptable outage and vulnerability scans verify the intended fixed version.

E:

For this incident, the relevant principle is: Patch management balances exposure reduction with service continuity using tested change windows and exception handling. It does not directly address the reported Patching with staged rollback fault or prove its repair.

CompTIA Server+ Certification Exam (SK0-005) Practice Tests