SK0-005 Practice Test

A newly hired systems administrator is concerned about fileshare access at the company. The administrator turns on DLP for the fileshare and lets it propagate for a week. Which of the following can the administrator perform now?

A. Manage the fileshare from an RDP session.

B. Audit the permissions of the fileshare.

C. Audit the access to the physical fileshare.

D. Manage the permissions from the fileshare.

Which of the following is a system that scans outgoing email for account numbers, sensitive phrases, and other forms of Pll?

A. SIEM

B. DLP

C. HIDS

D. IPS

The network's IDS is giving multiple alerts that unauthorized traffic from a critical application server is being sent to a known-bad public IP address.

One of the alerts contains the following information:

Exploit Alert

Attempted User Privilege Gain

2/2/07-3: 09:09 10.1.200.32

--> 208.206.12.9:80

This server application is part of a cluster in which two other servers are also servicing clients. The server administrator has verified the other servers are not sending out traffic to that public IP address. The IP address subnet of the application servers is 10.1.200.0/26. Which of the following should the administrator perform to ensure only authorized traffic is being sent from the application server and downtime is minimized? (Select two).

A. Disable all services on the affected application server.

B. Perform a vulnerability scan on all the servers within the cluster and patch accordingly.

C. Block access to 208.206.12.9 from all servers on the network.

D. Change the IP address of all the servers in the cluster to the 208.206.12.0/26 subnet.

E. Enable GPO to install an antivirus on all the servers and perform a weekly reboot.

F. Perform an antivirus scan on all servers within the cluster and reboot each server.

An application server's power cord was accidentally unplugged. After plugging the cord back in the server administrator notices some transactions were not written to the disk array. Which of the following is the MOST likely cause of the issue?

A. Backplane failure

B. CMOS failure

C. Misconfigured RAID

D. Cache battery failure

An administrator is configuring a new server for use as a database server. It will have two mirrored drives to hold the operating system, and there will be three drive bays remaining for storage Which of the following RAID levels will yield the BEST combination of available space and redundancy?

A. RAID

B. RAID 1

C. RAIDS

D. RAID 10