cert
cert-1
cert-2

Pass CompTIA SK0-005 Exam in First Attempt Guaranteed!

Get 100% Latest Exam Questions, Accurate & Verified Answers to Pass the Actual Exam!
30 Days Free Updates, Instant Download!

cert-5
cert-6
SK0-005 Exam - Verified By Experts
SK0-005 Premium Bundle
$29.98

SK0-005 Premium Bundle

$79.99
$109.97
  • Premium File 617 Questions & Answers. Last update: Nov 13, 2026
  • Training Course 139 Video Lectures
  • Study Guide 533 Pages
 
$109.97
$79.99
accept 21 downloads in last 7 days
block-screenshots
Purchase CompTIA SK0-005 Exam Training Products Individually
CompTIA SK0-005 Premium File
Premium File 617 Q&A
$76.99$69.99
CompTIA SK0-005 Video Training Course
Training Course 139 Lectures
$21.99 $19.99
CompTIA SK0-005 PDF Study Guide
Study Guide 533 Pages
$21.99 $19.99
CompTIA SK0-005 Practice Test 79

Question 780

A change board is planning a verified response to this server event: A compromised administrator workstation sends commands to multiple application servers but the operations team plans to reimage only one visible victim. For the Malware persistence and containment issue, which response elements belong in the approved plan? Select TWO answers.

  1. Review EDR process trees, scheduled tasks, outbound connections, privileged logins and related host indicators.
  2. Unapproved outbound flows stop, legitimate data transfers remain and incident findings are documented.
  3. Isolate affected hosts, preserve evidence and investigate persistence and lateral movement before controlled remediation.
  4. Collect time-synchronized logs, hardware alerts and relevant volatile evidence according to incident procedures before destructive action.
  5. Disable endpoint protection alerts while leaving unknown startup tasks running.

Explanation

Correct Answer

A:

The expected technical relationship is: Malware response must address propagation and initial access; rebooting one host does not remove the attacker's foothold. Use findings to decide whether to: Isolate affected hosts, preserve evidence and investigate persistence and lateral movement before controlled remediation.

C:

Malware response must address propagation and initial access; rebooting one host does not remove the attacker's foothold. This is the appropriate targeted correction for Malware persistence and containment.

Incorrect Answers

B:

For this incident, the relevant principle is: Malware response must address propagation and initial access; rebooting one host does not remove the attacker's foothold. It does not directly address the reported Malware persistence and containment fault or prove its repair.

D:

For this incident, the relevant principle is: Malware response must address propagation and initial access; rebooting one host does not remove the attacker's foothold. The desired recovery condition is: Affected systems are contained, persistent mechanisms removed and monitored restoration shows no renewed indicators.

E:

Incident: A compromised administrator workstation sends commands to multiple application servers but the operations team plans to reimage only one visible victim.

Question 781

A server administrator is investigating a server issue involving expired certificate and trust failure triage: After a TLS certificate renewal, service clients reject a storage API because the intermediate chain is missing. The change must address the documented fault without creating unrelated risk. Which corrective action is most appropriate? Select ONE best answer.

  1. Restrict management exposure, enforce MFA and rate limiting and investigate authentication events and compromised credentials.
  2. Isolate affected hosts, preserve evidence and investigate persistence and lateral movement before controlled remediation.
  3. Inspect the certificate chain, names, validity and trusted roots, then renew or repair the appropriate certificates.
  4. Set every client to ignore certificate errors permanently to make the connection green.

Explanation

Correct Answer

C:

TLS trust failures are security-relevant authentication errors and require targeted trust repair, not blanket verification bypass.

Incorrect Answers

A:

This statement concerns Brute-force authentication and account lockout, a different Server+ technical control. It does not directly address the reported Expired certificate and trust failure triage fault or prove its repair. For this incident, the relevant principle is: TLS trust failures are security-relevant authentication errors and require targeted trust repair, not blanket verification bypass. A targeted investigation checks: Collect handshake diagnostics, SAN/issuer fields, trust store configuration and date/time status. The desired recovery condition is: Authenticated TLS succeeds from all expected clients without disabling validation.

B:

This statement concerns Malware persistence and containment, a different Server+ technical control. It does not directly address the reported Expired certificate and trust failure triage fault or prove its repair. For this incident, the relevant principle is: TLS trust failures are security-relevant authentication errors and require targeted trust repair, not blanket verification bypass. A targeted investigation checks: Collect handshake diagnostics, SAN/issuer fields, trust store configuration and date/time status. The desired recovery condition is: Authenticated TLS succeeds from all expected clients without disabling validation.

D:

This is the unsafe shortcut in the Expired certificate and trust failure triage scenario, not a justified remediation or diagnostic. TLS trust failures are security-relevant authentication errors and require targeted trust repair, not blanket verification bypass.

Question 782

While reviewing the CompTIA Server+ administration incident, a technician learns: After a TLS certificate renewal, service clients reject a storage API because the intermediate chain is missing. Which principle most directly explains how to address the described issue safely? Select ONE best answer.

  1. Tagged VLAN traffic must be permitted end-to-end; routing changes do not repair a missing layer-two VLAN path.
  2. TLS trust failures are security-relevant authentication errors and require targeted trust repair, not blanket verification bypass.
  3. Write-back caching requires reliable protected power or flash persistence; disabling cache can raise latency for safety.
  4. Unusual outbound volume and destinations may indicate exfiltration; investigation must preserve evidence and scope blast radius.

Explanation

Correct Answer

B:

This is the controlling principle for the reported Expired certificate and trust failure triage incident. The acceptance test is: Authenticated TLS succeeds from all expected clients without disabling validation.

Incorrect Answers

A:

This statement concerns Incorrect switch VLAN trunk allowance, a different Server+ technical control. It does not directly address the reported Expired certificate and trust failure triage fault or prove its repair. For this incident, the relevant principle is: TLS trust failures are security-relevant authentication errors and require targeted trust repair, not blanket verification bypass. A targeted investigation checks: Collect handshake diagnostics, SAN/issuer fields, trust store configuration and date/time status. The desired recovery condition is: Authenticated TLS succeeds from all expected clients without disabling validation.

C:

This statement concerns Write cache battery and storage performance, a different Server+ technical control. It does not directly address the reported Expired certificate and trust failure triage fault or prove its repair. For this incident, the relevant principle is: TLS trust failures are security-relevant authentication errors and require targeted trust repair, not blanket verification bypass. A targeted investigation checks: Collect handshake diagnostics, SAN/issuer fields, trust store configuration and date/time status. The desired recovery condition is: Authenticated TLS succeeds from all expected clients without disabling validation.

D:

This statement concerns Unauthorized outbound traffic and exfiltration detection, a different Server+ technical control. It does not directly address the reported Expired certificate and trust failure triage fault or prove its repair. For this incident, the relevant principle is: TLS trust failures are security-relevant authentication errors and require targeted trust repair, not blanket verification bypass. A targeted investigation checks: Collect handshake diagnostics, SAN/issuer fields, trust store configuration and date/time status. The desired recovery condition is: Authenticated TLS succeeds from all expected clients without disabling validation.

Question 783

Before a server change is approved, the on-call engineer receives this incident report: After a TLS certificate renewal, service clients reject a storage API because the intermediate chain is missing. Which evidence would most directly establish the stated root-cause hypothesis? Select ONE best answer.

  1. Correlate firewall/NetFlow records, process ownership, DNS logs, DLP alerts and identity sign-ins.
  2. Set every client to ignore certificate errors permanently to make the connection green.
  3. Review EDR process trees, scheduled tasks, outbound connections, privileged logins and related host indicators.
  4. Collect handshake diagnostics, SAN/issuer fields, trust store configuration and date/time status.

Explanation

Correct Answer

D:

These observations investigate the exact Expired certificate and trust failure triage failure rather than unrelated components. Incident: After a TLS certificate renewal, service clients reject a storage API because the intermediate chain is missing.

Incorrect Answers

A:

For this incident, the relevant principle is: TLS trust failures are security-relevant authentication errors and require targeted trust repair, not blanket verification bypass. A targeted investigation checks: Collect handshake diagnostics, SAN/issuer fields, trust store configuration and date/time status.

B:

TLS trust failures are security-relevant authentication errors and require targeted trust repair, not blanket verification bypass. This is the unsafe shortcut in the Expired certificate and trust failure triage scenario, not a justified remediation or diagnostic.

C:

For this incident, the relevant principle is: TLS trust failures are security-relevant authentication errors and require targeted trust repair, not blanket verification bypass.

Question 784

After the team implements a targeted remediation for Expired certificate and trust failure triage, the original incident was: After a TLS certificate renewal, service clients reject a storage API because the intermediate chain is missing. Which acceptance criterion would best demonstrate a durable and safe resolution? Select ONE best answer.

  1. Authenticated TLS succeeds from all expected clients without disabling validation.
  2. Malicious login attempts are contained without losing authorized administrative access.
  3. Protected cache operation is restored and write latency improves without compromising in-flight write safety.
  4. The array returns to a healthy redundant state with error-free checks and a verified recovery copy.

Explanation

Correct Answer

A:

TLS trust failures are security-relevant authentication errors and require targeted trust repair, not blanket verification bypass.

Incorrect Answers

B:

This statement concerns Brute-force authentication and account lockout, a different Server+ technical control. It does not directly address the reported Expired certificate and trust failure triage fault or prove its repair.

C:

This statement concerns Write cache battery and storage performance, a different Server+ technical control. It does not directly address the reported Expired certificate and trust failure triage fault or prove its repair.

D:

This statement concerns RAID degraded state and predictive drive failure, a different Server+ technical control. It does not directly address the reported Expired certificate and trust failure triage fault or prove its repair. For this incident, the relevant principle is: TLS trust failures are security-relevant authentication errors and require targeted trust repair, not blanket verification bypass. A targeted investigation checks: Collect handshake diagnostics, SAN/issuer fields, trust store configuration and date/time status. The desired recovery condition is: Authenticated TLS succeeds from all expected clients without disabling validation.

Question 785

A change board is planning a verified response to this server event: After a TLS certificate renewal, service clients reject a storage API because the intermediate chain is missing. For the Expired certificate and trust failure triage issue, which response elements belong in the approved plan? Select ONE best answer.

  1. Set every client to ignore certificate errors permanently to make the connection green.
  2. Inspect the certificate chain, names, validity and trusted roots, then renew or repair the appropriate certificates. Then validate the change by confirming: Authenticated TLS succeeds from all expected clients without disabling validation.
  3. Contain unapproved egress, preserve flow and endpoint evidence and validate allowed destinations before reopening paths.
  4. Capture DHCP offers and ARP announcements, inspect scope exclusions, MAC addresses and gateway options.

Explanation

Correct Answer

B:

TLS trust failures are security-relevant authentication errors and require targeted trust repair, not blanket verification bypass. The proposed change and outcome assessment work together for Expired certificate and trust failure triage.

Incorrect Answers

A:

This is the unsafe shortcut in the Expired certificate and trust failure triage scenario, not a justified remediation or diagnostic. Incident: After a TLS certificate renewal, service clients reject a storage API because the intermediate chain is missing.

C:

This statement concerns Unauthorized outbound traffic and exfiltration detection, a different Server+ technical control. It does not directly address the reported Expired certificate and trust failure triage fault or prove its repair.

D:

This statement concerns DHCP and IP address conflict isolation, a different Server+ technical control. It does not directly address the reported Expired certificate and trust failure triage fault or prove its repair. For this incident, the relevant principle is: TLS trust failures are security-relevant authentication errors and require targeted trust repair, not blanket verification bypass. A targeted investigation checks: Collect handshake diagnostics, SAN/issuer fields, trust store configuration and date/time status. The desired recovery condition is: Authenticated TLS succeeds from all expected clients without disabling validation.

Question 786

A server administrator is investigating a server issue involving expired certificate and trust failure triage: A machine-management agent cannot connect to its controller after a certificate expires, and engineers propose skipping validation globally. The change must address the documented fault without creating unrelated risk. Which corrective action is most appropriate? Select ONE best answer.

  1. Test client resolvers and cached records, correct zone or resolver settings and honor TTL behavior.
  2. Set every client to ignore certificate errors permanently to make the connection green.
  3. Inspect the certificate chain, names, validity and trusted roots, then renew or repair the appropriate certificates.
  4. Trace conflicting ARP/DHCP responses, eliminate overlapping assignments or rogue offers and correct lease options.

Explanation

Correct Answer

C:

TLS trust failures are security-relevant authentication errors and require targeted trust repair, not blanket verification bypass.

Incorrect Answers

A:

This statement concerns DNS client-specific failure, a different Server+ technical control. It does not directly address the reported Expired certificate and trust failure triage fault or prove its repair. For this incident, the relevant principle is: TLS trust failures are security-relevant authentication errors and require targeted trust repair, not blanket verification bypass. A targeted investigation checks: Collect handshake diagnostics, SAN/issuer fields, trust store configuration and date/time status. The desired recovery condition is: Authenticated TLS succeeds from all expected clients without disabling validation.

B:

This is the unsafe shortcut in the Expired certificate and trust failure triage scenario, not a justified remediation or diagnostic. Incident: A machine-management agent cannot connect to its controller after a certificate expires, and engineers propose skipping validation globally.

D:

That option would trace conflicting ARP/DHCP responses, eliminate overlapping assignments or rogue offers and correct lease options, but it addresses a different concern. TLS trust failures are security-relevant authentication errors and require targeted trust repair, not blanket verification bypass.

Question 787

While reviewing the CompTIA Server+ administration incident, a technician learns: A machine-management agent cannot connect to its controller after a certificate expires, and engineers propose skipping validation globally. Which principle most directly explains how to address the described issue safely? Select ONE best answer.

  1. Intermittent IP conflicts and unauthorized DHCP options can appear as random server outages while switch ports remain healthy.
  2. TLS trust failures are security-relevant authentication errors and require targeted trust repair, not blanket verification bypass.
  3. Name resolution failures should be isolated from transport connectivity by comparing direct IP and DNS queries.
  4. Application-level failures can occur with healthy CPU, network and OS; examine logs and service dependencies before hardware replacement.

Explanation

Correct Answer

B:

This is the controlling principle for the reported Expired certificate and trust failure triage incident. Scenario: A machine-management agent cannot connect to its controller after a certificate expires, and engineers propose skipping validation globally.

Incorrect Answers

A:

This statement concerns DHCP and IP address conflict isolation, a different Server+ technical control. It does not directly address the reported Expired certificate and trust failure triage fault or prove its repair. For this incident, the relevant principle is: TLS trust failures are security-relevant authentication errors and require targeted trust repair, not blanket verification bypass. A targeted investigation checks: Collect handshake diagnostics, SAN/issuer fields, trust store configuration and date/time status. The desired recovery condition is: Authenticated TLS succeeds from all expected clients without disabling validation.

C:

This statement concerns DNS client-specific failure, a different Server+ technical control. It does not directly address the reported Expired certificate and trust failure triage fault or prove its repair.

D:

This statement concerns Application crash and dependency triage, a different Server+ technical control. It does not directly address the reported Expired certificate and trust failure triage fault or prove its repair. For this incident, the relevant principle is: TLS trust failures are security-relevant authentication errors and require targeted trust repair, not blanket verification bypass. A targeted investigation checks: Collect handshake diagnostics, SAN/issuer fields, trust store configuration and date/time status. The desired recovery condition is: Authenticated TLS succeeds from all expected clients without disabling validation.

Question 788

Before a server change is approved, the on-call engineer receives this incident report: A machine-management agent cannot connect to its controller after a certificate expires, and engineers propose skipping validation globally. Which evidence would most directly establish the stated root-cause hypothesis? Select ONE best answer.

  1. Collect handshake diagnostics, SAN/issuer fields, trust store configuration and date/time status.
  2. Correlate stack traces, error codes, database connection metrics, package versions and deployment history.
  3. Inspect source IP patterns, failed/successful sign-ins, privileged access rules and MFA challenges.
  4. Set every client to ignore certificate errors permanently to make the connection green.

Explanation

Correct Answer

A:

These observations investigate the exact Expired certificate and trust failure triage failure rather than unrelated components. Incident: A machine-management agent cannot connect to its controller after a certificate expires, and engineers propose skipping validation globally.

Incorrect Answers

B:

For this incident, the relevant principle is: TLS trust failures are security-relevant authentication errors and require targeted trust repair, not blanket verification bypass.

C:

For this incident, the relevant principle is: TLS trust failures are security-relevant authentication errors and require targeted trust repair, not blanket verification bypass. This statement concerns Brute-force authentication and account lockout, a different Server+ technical control.

D:

TLS trust failures are security-relevant authentication errors and require targeted trust repair, not blanket verification bypass.

Question 789

After the team implements a targeted remediation for Expired certificate and trust failure triage, the original incident was: A machine-management agent cannot connect to its controller after a certificate expires, and engineers propose skipping validation globally. Which acceptance criterion would best demonstrate a durable and safe resolution? Select ONE best answer.

  1. The array returns to a healthy redundant state with error-free checks and a verified recovery copy.
  2. Unapproved outbound flows stop, legitimate data transfers remain and incident findings are documented.
  3. Authenticated TLS succeeds from all expected clients without disabling validation.
  4. Clients obtain unique approved addresses and correct gateways without duplicate-IP warnings.

Explanation

Correct Answer

C:

TLS trust failures are security-relevant authentication errors and require targeted trust repair, not blanket verification bypass. This evidence tests whether the original Expired certificate and trust failure triage weakness has been corrected under realistic conditions.

Incorrect Answers

A:

This statement concerns RAID degraded state and predictive drive failure, a different Server+ technical control. It does not directly address the reported Expired certificate and trust failure triage fault or prove its repair. For this incident, the relevant principle is: TLS trust failures are security-relevant authentication errors and require targeted trust repair, not blanket verification bypass. A targeted investigation checks: Collect handshake diagnostics, SAN/issuer fields, trust store configuration and date/time status. The desired recovery condition is: Authenticated TLS succeeds from all expected clients without disabling validation.

B:

This statement concerns Unauthorized outbound traffic and exfiltration detection, a different Server+ technical control. It does not directly address the reported Expired certificate and trust failure triage fault or prove its repair. For this incident, the relevant principle is: TLS trust failures are security-relevant authentication errors and require targeted trust repair, not blanket verification bypass. A targeted investigation checks: Collect handshake diagnostics, SAN/issuer fields, trust store configuration and date/time status. The desired recovery condition is: Authenticated TLS succeeds from all expected clients without disabling validation.

D:

This statement concerns DHCP and IP address conflict isolation, a different Server+ technical control. It does not directly address the reported Expired certificate and trust failure triage fault or prove its repair.

Question 790

A change board is planning a verified response to this server event: A machine-management agent cannot connect to its controller after a certificate expires, and engineers propose skipping validation globally. For the Expired certificate and trust failure triage issue, which response elements belong in the approved plan? Select TWO answers.

  1. Inspect the certificate chain, names, validity and trusted roots, then renew or repair the appropriate certificates.
  2. Trace application errors, dependencies, configuration and resource metrics; restore a supported version or correct the actual limit.
  3. Collect handshake diagnostics, SAN/issuer fields, trust store configuration and date/time status.
  4. Unapproved outbound flows stop, legitimate data transfers remain and incident findings are documented.
  5. Set every client to ignore certificate errors permanently to make the connection green.

Explanation

Correct Answer

A:

TLS trust failures are security-relevant authentication errors and require targeted trust repair, not blanket verification bypass. A successful outcome is: Authenticated TLS succeeds from all expected clients without disabling validation.

C:

The expected technical relationship is: TLS trust failures are security-relevant authentication errors and require targeted trust repair, not blanket verification bypass.

Incorrect Answers

B:

That option would trace application errors, dependencies, configuration and resource metrics; restore a supported version or correct the actual limit, but it addresses a different concern. TLS trust failures are security-relevant authentication errors and require targeted trust repair, not blanket verification bypass.

D:

This statement concerns Unauthorized outbound traffic and exfiltration detection, a different Server+ technical control. It does not directly address the reported Expired certificate and trust failure triage fault or prove its repair. For this incident, the relevant principle is: TLS trust failures are security-relevant authentication errors and require targeted trust repair, not blanket verification bypass.

E:

This is the unsafe shortcut in the Expired certificate and trust failure triage scenario, not a justified remediation or diagnostic. Discriminate using: Collect handshake diagnostics, SAN/issuer fields, trust store configuration and date/time status.

CompTIA Server+ Certification Exam (SK0-005) Practice Tests