CompTIA SK0-005 Practice Test 56
Question 550
A change board is planning a verified response to this server event: A file backup restores directory names but misses ACLs and essential application metadata, violating recovery requirements. For the Application-consistent restore and integrity testing issue, which response elements belong in the approved plan? Select TWO answers.
- Test application-consistent restores including data, logs, permissions and integrity at defined intervals.
- An offline or isolated restore point survives a simulated primary-site or administrator compromise.
- Mark recovery complete solely when the backup agent reports a successful copy.
- Review backup job logs, quiesce/VSS status, restore checksums, ACLs and test-start results.
- Use narrowly scoped managed identities or service accounts and protect, rotate and revoke their secrets using approved storage.
Explanation
Correct Answer
A:Successful data transfer alone does not establish recoverability; services need consistent artifacts and configuration state. This is the appropriate targeted correction for Application-consistent restore and integrity testing.
D:These observations investigate the exact Application-consistent restore and integrity testing failure rather than unrelated components. The expected technical relationship is: Successful data transfer alone does not establish recoverability; services need consistent artifacts and configuration state.
Incorrect Answers
B:This statement concerns Immutable and offsite backup strategy, a different Server+ technical control. It does not directly address the reported Application-consistent restore and integrity testing fault or prove its repair.
C:Incident: A file backup restores directory names but misses ACLs and essential application metadata, violating recovery requirements.
E:That option would use narrowly scoped managed identities or service accounts and protect, rotate and revoke their secrets using approved storage, but it addresses a different concern. Successful data transfer alone does not establish recoverability; services need consistent artifacts and configuration state.
Question 551
A server administrator is investigating a server issue involving rpo and rto-driven disaster recovery: A payroll service requires recovery within two hours, but its documented restore procedure takes ten hours under rehearsal. The change must address the documented fault without creating unrelated risk. Which corrective action is most appropriate? Select ONE best answer.
- Revoke retired host credentials, certificates and network access, remove dependent records and close the asset lifecycle.
- Select recovery architecture to meet quantified RTO and RPO, then validate both during controlled recovery exercises.
- Include identity, DNS, network, certificates and data-dependency order in failover and failback runbooks; rehearse both directions.
- Treat a daily backup as automatically meeting a fifteen-minute RPO and two-hour RTO.
Explanation
Correct Answer
B:RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices.
Incorrect Answers
A:This statement concerns Decommissioning service identities and asset records, a different Server+ technical control. It does not directly address the reported RPO and RTO-driven disaster recovery fault or prove its repair. For this incident, the relevant principle is: RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices. A targeted investigation checks: Measure actual restore durations, last consistent recovery points, dependencies and recovery staff availability. The desired recovery condition is: A rehearsal restores end-to-end service within RTO and loses no more than allowed by RPO.
C:That option would include identity, DNS, network, certificates and data-dependency order in failover and failback runbooks; rehearse both directions, but it addresses a different concern. RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices.
D:This is the unsafe shortcut in the RPO and RTO-driven disaster recovery scenario, not a justified remediation or diagnostic. Incident: A payroll service requires recovery within two hours, but its documented restore procedure takes ten hours under rehearsal.
Question 552
While reviewing the CompTIA Server+ administration incident, a technician learns: A payroll service requires recovery within two hours, but its documented restore procedure takes ten hours under rehearsal. Which principle most directly explains how to address the described issue safely? Select ONE best answer.
- Encryption in transit needs authenticated peers, valid trust chains and modern protocol settings, not merely an encrypted port.
- Trust in the operating system begins before it starts; firmware and measured boot support protection against boot-level changes.
- Patch management balances exposure reduction with service continuity using tested change windows and exception handling.
- RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices.
Explanation
Correct Answer
D:Applying it leads to this operational action: Select recovery architecture to meet quantified RTO and RPO, then validate both during controlled recovery exercises.
Incorrect Answers
A:This statement concerns TLS certificate chain and secure transport, a different Server+ technical control. It does not directly address the reported RPO and RTO-driven disaster recovery fault or prove its repair. For this incident, the relevant principle is: RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices. A targeted investigation checks: Measure actual restore durations, last consistent recovery points, dependencies and recovery staff availability. The desired recovery condition is: A rehearsal restores end-to-end service within RTO and loses no more than allowed by RPO.
B:This statement concerns Secure Boot TPM and hardware root of trust, a different Server+ technical control. It does not directly address the reported RPO and RTO-driven disaster recovery fault or prove its repair. For this incident, the relevant principle is: RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices. A targeted investigation checks: Measure actual restore durations, last consistent recovery points, dependencies and recovery staff availability. The desired recovery condition is: A rehearsal restores end-to-end service within RTO and loses no more than allowed by RPO.
C:This statement concerns Patching with staged rollback, a different Server+ technical control. It does not directly address the reported RPO and RTO-driven disaster recovery fault or prove its repair. For this incident, the relevant principle is: RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices. A targeted investigation checks: Measure actual restore durations, last consistent recovery points, dependencies and recovery staff availability. The desired recovery condition is: A rehearsal restores end-to-end service within RTO and loses no more than allowed by RPO.
Question 553
Before a server change is approved, the on-call engineer receives this incident report: A payroll service requires recovery within two hours, but its documented restore procedure takes ten hours under rehearsal. Which evidence would most directly establish the stated root-cause hypothesis? Select ONE best answer.
- Check service dependency map, replicated identity/DNS reachability, endpoint changes and data consistency during drill.
- Treat a daily backup as automatically meeting a fifteen-minute RPO and two-hour RTO.
- Inspect Secure Boot signatures, TPM state, PCR or attestation reports and key-recovery readiness.
- Measure actual restore durations, last consistent recovery points, dependencies and recovery staff availability.
Explanation
Correct Answer
D:These observations investigate the exact RPO and RTO-driven disaster recovery failure rather than unrelated components. Incident: A payroll service requires recovery within two hours, but its documented restore procedure takes ten hours under rehearsal.
Incorrect Answers
A:For this incident, the relevant principle is: RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices. A targeted investigation checks: Measure actual restore durations, last consistent recovery points, dependencies and recovery staff availability.
B:This is the unsafe shortcut in the RPO and RTO-driven disaster recovery scenario, not a justified remediation or diagnostic. RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices.
C:For this incident, the relevant principle is: RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices.
Question 554
After the team implements a targeted remediation for RPO and RTO-driven disaster recovery, the original incident was: A payroll service requires recovery within two hours, but its documented restore procedure takes ten hours under rehearsal. Which acceptance criterion would best demonstrate a durable and safe resolution? Select ONE best answer.
- An offline or isolated restore point survives a simulated primary-site or administrator compromise.
- A rehearsal restores end-to-end service within RTO and loses no more than allowed by RPO.
- Patches deploy without unacceptable outage and vulnerability scans verify the intended fixed version.
- Retired assets cannot authenticate or receive traffic and records accurately show the disposition.
Explanation
Correct Answer
B:RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices.
Incorrect Answers
A:This statement concerns Immutable and offsite backup strategy, a different Server+ technical control. It does not directly address the reported RPO and RTO-driven disaster recovery fault or prove its repair. For this incident, the relevant principle is: RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices. A targeted investigation checks: Measure actual restore durations, last consistent recovery points, dependencies and recovery staff availability. The desired recovery condition is: A rehearsal restores end-to-end service within RTO and loses no more than allowed by RPO.
C:This statement concerns Patching with staged rollback, a different Server+ technical control. It does not directly address the reported RPO and RTO-driven disaster recovery fault or prove its repair.
D:This statement concerns Decommissioning service identities and asset records, a different Server+ technical control. It does not directly address the reported RPO and RTO-driven disaster recovery fault or prove its repair.
Question 555
A change board is planning a verified response to this server event: A payroll service requires recovery within two hours, but its documented restore procedure takes ten hours under rehearsal. For the RPO and RTO-driven disaster recovery issue, which response elements belong in the approved plan? Select ONE best answer.
- Enable supported Secure Boot and TPM-backed integrity or key protection with verified recovery procedures.
- Select recovery architecture to meet quantified RTO and RPO, then validate both during controlled recovery exercises. Then validate the change by confirming: A rehearsal restores end-to-end service within RTO and loses no more than allowed by RPO.
- Review effective access, role inheritance, audit logs and task-specific permission requirements.
- Treat a daily backup as automatically meeting a fifteen-minute RPO and two-hour RTO.
Explanation
Correct Answer
B:RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices. The proposed change and outcome assessment work together for RPO and RTO-driven disaster recovery.
Incorrect Answers
A:That option would enable supported Secure Boot and TPM-backed integrity or key protection with verified recovery procedures, but it addresses a different concern. RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices. A targeted investigation checks: Measure actual restore durations, last consistent recovery points, dependencies and recovery staff availability.
C:That option would review effective access, role inheritance, audit logs and task-specific permission requirements, but it addresses a different concern. RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices.
D:This is the unsafe shortcut in the RPO and RTO-driven disaster recovery scenario, not a justified remediation or diagnostic. Discriminate using: Measure actual restore durations, last consistent recovery points, dependencies and recovery staff availability.
Question 556
A server administrator is investigating a server issue involving rpo and rto-driven disaster recovery: A medical system has a fifteen-minute maximum data-loss objective yet replicates nightly with no log shipping. The change must address the documented fault without creating unrelated risk. Which corrective action is most appropriate? Select ONE best answer.
- Select recovery architecture to meet quantified RTO and RPO, then validate both during controlled recovery exercises.
- Apply a documented hardening baseline, disable unused services/accounts and keep only approved management protocols.
- Treat a daily backup as automatically meeting a fifteen-minute RPO and two-hour RTO.
- Enable supported Secure Boot and TPM-backed integrity or key protection with verified recovery procedures.
Explanation
Correct Answer
A:RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices.
Incorrect Answers
B:That option would apply a documented hardening baseline, disable unused services/accounts and keep only approved management protocols, but it addresses a different concern. RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices.
C:This is the unsafe shortcut in the RPO and RTO-driven disaster recovery scenario, not a justified remediation or diagnostic. Incident: A medical system has a fifteen-minute maximum data-loss objective yet replicates nightly with no log shipping.
D:That option would enable supported Secure Boot and TPM-backed integrity or key protection with verified recovery procedures, but it addresses a different concern. RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices. This statement concerns Secure Boot TPM and hardware root of trust, a different Server+ technical control.
Question 557
While reviewing the CompTIA Server+ administration incident, a technician learns: A medical system has a fifteen-minute maximum data-loss objective yet replicates nightly with no log shipping. Which principle most directly explains how to address the described issue safely? Select ONE best answer.
- Trust in the operating system begins before it starts; firmware and measured boot support protection against boot-level changes.
- RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices.
- Reducing active attack surface is a practical first line of defense; unused defaults should not remain exposed.
- Risk-based remediation combines technical severity and local exposure; score alone does not establish operational priority.
Explanation
Correct Answer
B:Applying it leads to this operational action: Select recovery architecture to meet quantified RTO and RPO, then validate both during controlled recovery exercises. This is the controlling principle for the reported RPO and RTO-driven disaster recovery incident.
Incorrect Answers
A:This statement concerns Secure Boot TPM and hardware root of trust, a different Server+ technical control. It does not directly address the reported RPO and RTO-driven disaster recovery fault or prove its repair. For this incident, the relevant principle is: RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices. A targeted investigation checks: Measure actual restore durations, last consistent recovery points, dependencies and recovery staff availability. The desired recovery condition is: A rehearsal restores end-to-end service within RTO and loses no more than allowed by RPO.
C:This statement concerns Disable unused services and secure baseline, a different Server+ technical control. It does not directly address the reported RPO and RTO-driven disaster recovery fault or prove its repair. For this incident, the relevant principle is: RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices. A targeted investigation checks: Measure actual restore durations, last consistent recovery points, dependencies and recovery staff availability. The desired recovery condition is: A rehearsal restores end-to-end service within RTO and loses no more than allowed by RPO.
D:This statement concerns Vulnerability scanning and prioritization, a different Server+ technical control. It does not directly address the reported RPO and RTO-driven disaster recovery fault or prove its repair. For this incident, the relevant principle is: RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices. A targeted investigation checks: Measure actual restore durations, last consistent recovery points, dependencies and recovery staff availability. The desired recovery condition is: A rehearsal restores end-to-end service within RTO and loses no more than allowed by RPO.
Question 558
Before a server change is approved, the on-call engineer receives this incident report: A medical system has a fifteen-minute maximum data-loss objective yet replicates nightly with no log shipping. Which evidence would most directly establish the stated root-cause hypothesis? Select ONE best answer.
- Capture denied flows, review service dependency map, evaluate host firewall rule precedence and test expected ports.
- Treat a daily backup as automatically meeting a fifteen-minute RPO and two-hour RTO.
- Measure actual restore durations, last consistent recovery points, dependencies and recovery staff availability.
- Check asset exposure, affected software versions, exploit availability, scan confidence and compensating controls.
Explanation
Correct Answer
C:These observations investigate the exact RPO and RTO-driven disaster recovery failure rather than unrelated components. Incident: A medical system has a fifteen-minute maximum data-loss objective yet replicates nightly with no log shipping.
Incorrect Answers
A:For this incident, the relevant principle is: RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices. This statement concerns Host firewall and east-west filtering, a different Server+ technical control.
B:RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices.
D:For this incident, the relevant principle is: RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices. This statement concerns Vulnerability scanning and prioritization, a different Server+ technical control.
Question 559
After the team implements a targeted remediation for RPO and RTO-driven disaster recovery, the original incident was: A medical system has a fifteen-minute maximum data-loss objective yet replicates nightly with no log shipping. Which acceptance criterion would best demonstrate a durable and safe resolution? Select ONE best answer.
- Users complete critical transactions in the alternate site, and a rehearsed failback restores a consistent primary.
- Sensitive data on lost media is protected and authorized recovery still works using controlled key escrow.
- A rehearsal restores end-to-end service within RTO and loses no more than allowed by RPO.
- Only documented required services and accounts remain, with functional checks passing after hardening.
Explanation
Correct Answer
C:RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices.
Incorrect Answers
A:This statement concerns Site failover dependencies and failback, a different Server+ technical control. It does not directly address the reported RPO and RTO-driven disaster recovery fault or prove its repair. For this incident, the relevant principle is: RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices. A targeted investigation checks: Measure actual restore durations, last consistent recovery points, dependencies and recovery staff availability. The desired recovery condition is: A rehearsal restores end-to-end service within RTO and loses no more than allowed by RPO.
B:This statement concerns Encryption at rest and key lifecycle, a different Server+ technical control. It does not directly address the reported RPO and RTO-driven disaster recovery fault or prove its repair. For this incident, the relevant principle is: RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices. A targeted investigation checks: Measure actual restore durations, last consistent recovery points, dependencies and recovery staff availability. The desired recovery condition is: A rehearsal restores end-to-end service within RTO and loses no more than allowed by RPO.
D:This statement concerns Disable unused services and secure baseline, a different Server+ technical control. It does not directly address the reported RPO and RTO-driven disaster recovery fault or prove its repair.
Question 560
A change board is planning a verified response to this server event: A medical system has a fifteen-minute maximum data-loss objective yet replicates nightly with no log shipping. For the RPO and RTO-driven disaster recovery issue, which response elements belong in the approved plan? Select TWO answers.
- Users complete critical transactions in the alternate site, and a rehearsed failback restores a consistent primary.
- Select recovery architecture to meet quantified RTO and RPO, then validate both during controlled recovery exercises.
- Treat a daily backup as automatically meeting a fifteen-minute RPO and two-hour RTO.
- Measure actual restore durations, last consistent recovery points, dependencies and recovery staff availability.
- Prioritize verified vulnerabilities by exploitability, exposure and business impact; apply supported remediations with evidence.
Explanation
Correct Answer
B:RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices. This is the appropriate targeted correction for RPO and RTO-driven disaster recovery.
D:These observations investigate the exact RPO and RTO-driven disaster recovery failure rather than unrelated components. The expected technical relationship is: RTO measures acceptable service restoration time; RPO measures acceptable data loss, and they drive different design choices.
Incorrect Answers
A:This statement concerns Site failover dependencies and failback, a different Server+ technical control. It does not directly address the reported RPO and RTO-driven disaster recovery fault or prove its repair.
C:Discriminate using: Measure actual restore durations, last consistent recovery points, dependencies and recovery staff availability.
E:This statement concerns Vulnerability scanning and prioritization, a different Server+ technical control. It does not directly address the reported RPO and RTO-driven disaster recovery fault or prove its repair.