Troubleshoot Network SK0-005 Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A server administrator discovers that a server has been compromised and is part of a botnet. The server is running a critical application that cannot be offline for more than 30 minutes. The administrator has a recent backup and a tested recovery plan. What is the best course of action?

   • ABlock the botnet's command-and-control IP at the firewall and continue running.
   • BDisconnect the server, restore from backup, and apply security patches.
   • CRun a full antivirus scan and hope it removes the botnet.
   • DShut down the server and perform a full forensic analysis before restoring.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   A server is configured with a static IP address of 192.168.1.100/24, but it cannot communicate with a server at 192.168.2.50/24. Which misconfiguration is the most likely cause of this issue?

   • AIncorrect subnet mask
   • BDNS server misconfiguration
   • CWrong default gateway
   • DDuplicate IP address
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   Users report that file transfers to a server are slow, but web browsing to the same server is fast. The server has a single NIC with a 1 Gbps link. The administrator checks the switch port and sees that it is set to 'auto' while the server NIC is set to '100 Mbps Full'. What is the most likely cause of the slow file transfers?

   • AThe server NIC is negotiating at 100 Mbps instead of 1 Gbps.
   • BThe server is experiencing CPU saturation during file transfers.
   • CThe switch port is configured for half-duplex.
   • DThe network cable is damaged and causing errors.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A server administrator notices that a file server has been sending large amounts of data to an unknown external IP address during off-hours. The server's antivirus is up to date and reports no issues. Which action should the administrator take first?

   • AChange the server's administrator password.
   • BReview the server's firewall logs to identify the source of the traffic.
   • CRun a full antivirus scan on the server.
   • DDisconnect the server from the network immediately.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A server administrator is troubleshooting latency between two servers in different data centers. The administrator runs a ping test and sees an average RTT of 150 ms. The link is a dedicated WAN connection. What is the most likely cause of the high latency?

   • AThe servers are using a slow protocol.
   • BA misconfigured MTU on the routers.
   • CThe DNS servers are slow to respond.
   • DThe physical distance between the data centers.
   Reveal Solution Discussion Select an answer first