A data center environment currently hosts more than 100 servers that include homegrown and commercial software. The management team has asked the server administrator to find a way to eliminate all company-owned data centers. Which of the following models will the administrator most likely choose to meet this need?
Correct Answer: C
A public cloud model will most likely meet the need of eliminating all company-owned data centers. A public cloud is a type of cloud computing service that is provided by a third-party vendor over the internet. A public cloud offers scalability, flexibility, and cost-effectiveness for hosting servers and applications, as the customers only pay for the resources they use and do not have to maintain their own infrastructure. A public cloud can also provide high availability, security, and performance for the servers and applications, as the vendor manages the underlying hardware and software. A public cloud can support various types of services, such as software as a service (SaaS), platform as a service (PaaS), or infrastructure as a service (IaaS). References: [CompTIA Server+ Certification Exam Objectives], Domain 1.0: Server Administration, Objective 1.2: Given a scenario, compare and contrast server roles and requirements for each.
SK0-005 Exam Question 122
An administrator is configuring a host-based firewall tor a server. The server needs to allow SSH, FTP, and LDAP traffic. Which of the following ports must be configured so this traffic will be allowed? (Select THREE).
Correct Answer: A,B,H
These are the port numbers that must be configured on a host-based firewall for a server that needs to allow SSH, FTP, and LDAP traffic. A port number is a numerical identifier that specifies a communication endpoint for a network protocol or an application. A host-based firewall is a software tool that monitors and controls incoming and outgoing network traffic on a single host based on predefined rules. SSH (Secure Shell) is a protocol that allows secure remote access and file transfer over an encrypted connection. The default port number for SSH is 22. FTP (File Transfer Protocol) is a protocol that allows transferring files between hosts over a network connection. The default port number for FTP is 21. LDAP (Lightweight Directory Access Protocol) is a protocol that allows accessing and managing directory services over a network connection. The default port number for LDAP is 389. References: https://www.howtogeek.com/190014/virtualization-basics- understanding-techniques-and-fundamentals/ https://www.howtogeek.com/220152/what-is-the-difference- between-127.0.0.1-and-0.0.0.0/https://www.howtogeek.com/428483/what-is-end-to-end-encryption-and-why- does-it-matter/
SK0-005 Exam Question 123
A server administrator is deploying a new server that has two hard drives on which to install the OS. Which of the following RAID configurations should be used to provide redundancy for the OS?
Correct Answer: B
RAID 1 (mirroring) is a RAID configuration that should be used to provide redundancy for the OS on a server that has two hard drives on which to install the OS. RAID 1 (mirroring) is a configuration that duplicates data across two or more drives. It provides fault tolerance and improves read performance, but reduces storage capacity by half. If one drive fails in RAID 1, the other drive can continue to operate without data loss or system downtime. RAID 0 (striping) is a configuration that splits data across two or more drives without parity or redundancy. It improves performance but offers no fault tolerance. If one drive fails in RAID 0, all data is lost and the system cannot boot. RAID 5 (striping with parity) is a configuration that stripes data across three or more drives with parity information. It provides fault tolerance and improves performance, but reduces storage capacity by one drive's worth of space. RAID 5 can tolerate one drive failure without data loss, but not two ormore. RAID 6 (striping with double parity) is a configuration that stripes data across four or more drives with double parity information. It provides fault tolerance and improves performance, but reduces storage capacity by two drives' worth of space. RAID 6 can tolerate two drive failures without data loss, but not three or more.References:https://www.howtogeek.com/199068/how-to-upgrade-your-existing- hard-drive-in-under-an-hour/
SK0-005 Exam Question 124
A newly hired systems administrator is concerned about fileshare access at the company. The administrator turns on DLP for the fileshare and lets it propagate for a week. Which of the following can the administrator perform now?
Correct Answer: B
Data Loss Prevention (DLP) systems are designed to monitor and protect sensitive data from unauthorized access, use, or transmission. By enabling DLP on a fileshare, the system administrator can track how data is accessed and used over time. After allowing the DLP system to run for a week, the administrator can audit the permissions of the fileshare. This involves reviewing which users and groups have access to the fileshare and determining if their permissions align with their roles and responsibilities. Auditing permissions helps identify any discrepancies or excessive privileges that could lead to potential data breaches or unauthorized data exposure. Other Options: * A. Manage the fileshare from an RDP session: Remote Desktop Protocol (RDP) allows administrators to remotely manage servers and their resources. While this is a method to access the server, it doesn't directly relate to auditing or managing fileshare permissions. * C. Audit the access to the physical fileshare: Auditing physical access involves reviewing who has physical entry to the hardware where the fileshare resides. While important, enabling DLP focuses on monitoring digital access and data movement rather than physical security. * D. Manage the permissions from the fileshare: Managing permissions involves setting or modifying user access rights. However, before making changes, it's crucial to audit existing permissions to understand the current access control structure. Therefore, after running DLP for a week, the appropriate action is to audit the permissions of the fileshare to ensure that access controls are properly configured and align with the principle of least privilege. References: * CompTIA Server+ Certification Exam Objectives (SK0-005): Security and Disaster Recovery - Explain data security risks and mitigation strategies
SK0-005 Exam Question 125
Which of the following types of asset management documentation is commonly used as a reference when processing the replacement of a faulty server component?
Correct Answer: A
A warranty is a type of asset management documentation that is commonly used as a reference when processing the replacement of a faulty server component. A warranty is a guarantee from the manufacturer or vendor that covers the repair or replacement of defective parts within a specified period of time. A purchase order, a license, or a baseline document are not directly related to the replacement of a faulty server component. References: [CompTIA Server+ Certification Exam Objectives], Domain 1.0: Server Architecture, Objective 1.4: Explain asset management and documentation processes.