A server administrator has confirmed that a server is compromised and is part of a botnet. Which immediate action should the administrator take to mitigate the breach?

Update the antivirus definitions

Disconnect the server from the network

After a network security breach, a server administrator needs to preserve evidence for forensic analysis. Which action is most appropriate to take?

Create a forensic image of the server's hard drive

Reboot the server to clear memory

Delete suspicious files to prevent further damage

A server is experiencing slow response times for clients in a remote office. The network team reports that the link utilization is low, but the round-trip time is consistently high. Which factor is the most likely cause of the observed performance issue?

Propagation delay over the long-distance link

Insufficient bandwidth on the link

Excessive packet collisions on the link

CompTIAServer+

Domain 4Objective 3

Troubleshoot Network SK0-005 Practice Questions (Page 4)

Part of the Troubleshooting domain, which accounts for 28% of the SK0-005 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 3–4 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

6concepts

28%of the exam

Questions 16–20

16foundation · easy
A server administrator has confirmed that a server is compromised and is part of a botnet. Which immediate action should the administrator take to mitigate the breach?
Select an answer first
17foundation · easy
After a network security breach, a server administrator needs to preserve evidence for forensic analysis. Which action is most appropriate to take?
Select an answer first
18foundation · easy
A server administrator needs to verify that a Windows server's network configuration is correct. Which command displays the current IP configuration, including the MAC address and DNS servers?
Select an answer first
19foundation · easy
A server is experiencing slow response times for clients in a remote office. The network team reports that the link utilization is low, but the round-trip time is consistently high. Which factor is the most likely cause of the observed performance issue?
Select an answer first
20foundation · easy
A server administrator notices that database queries are taking longer to complete. Network monitoring shows high round-trip time between the application server and the database server. Which condition is the administrator most likely observing?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SK0-005

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SK0-005” is a trademark of its owner, used for identification only.

Troubleshoot Network SK0-005 Practice Questions (Page 4)

Questions 16–20

A server administrator has confirmed that a server is compromised and is part of a botnet. Which immediate action should the administrator take to mitigate the breach?

After a network security breach, a server administrator needs to preserve evidence for forensic analysis. Which action is most appropriate to take?

A server administrator needs to verify that a Windows server's network configuration is correct. Which command displays the current IP configuration, including the MAC address and DNS servers?

A server is experiencing slow response times for clients in a remote office. The network team reports that the link utilization is low, but the round-trip time is consistently high. Which factor is the most likely cause of the observed performance issue?

A server administrator notices that database queries are taking longer to complete. Network monitoring shows high round-trip time between the application server and the database server. Which condition is the administrator most likely observing?

Keep studying — Troubleshooting