What is the primary purpose of implementing multi-factor authentication (MFA) for server access?

To track user login times for auditing

To reduce the risk of unauthorized access even if a password is compromised

To eliminate the need for strong passwords

To simplify the login process for users

Which authentication method is most appropriate for a server that needs to authenticate automated scripts without user interaction?

Password-based authentication with MFA

Certificate-based authentication

A company is implementing MFA for all server administrators. They are considering using SMS-based one-time passcodes. However, the security team is concerned about SIM-swapping attacks. Which alternative MFA method would be more secure and address this concern?

Authenticator app on a smartphone that generates TOTP codes.

Email-based one-time passcodes.

Push notifications to a smartphone.

An administrator needs to allow a specific user to write to a file while preventing all other users from accessing it. What should be configured?

An ACL entry granting write permission to that user and denying access to others

A group with all users except that one

A server administrator is evaluating authentication methods for a new remote access solution. The company wants to use certificate-based authentication for its VPN. What is a key advantage of certificate-based authentication over password-based authentication?

Certificates are easier to share among users.

Certificates are harder to guess or brute-force than passwords.

Certificates do not require a public key infrastructure (PKI).

CompTIAServer+

Domain 3Objective 3

Identity and Access Management SK0-005 Practice Questions (Page 3)

Part of the Security and disaster recovery domain, which accounts for 24% of the SK0-005 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~8–14 in this domain), expect 1–2 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

7concepts

24%of the exam

Questions 11–15

11foundation · easy
What is the primary purpose of implementing multi-factor authentication (MFA) for server access?
Select an answer first
12foundation · easy
Which authentication method is most appropriate for a server that needs to authenticate automated scripts without user interaction?
Select an answer first
13expert · hard
A company is implementing MFA for all server administrators. They are considering using SMS-based one-time passcodes. However, the security team is concerned about SIM-swapping attacks. Which alternative MFA method would be more secure and address this concern?
Select an answer first
14foundation · easy
An administrator needs to allow a specific user to write to a file while preventing all other users from accessing it. What should be configured?
Select an answer first
15application · medium
A server administrator is evaluating authentication methods for a new remote access solution. The company wants to use certificate-based authentication for its VPN. What is a key advantage of certificate-based authentication over password-based authentication?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SK0-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SK0-005” is a trademark of its owner, used for identification only.