Security and Disaster Recovery

Data and physical security, identity and access management, server hardening, backups, restores, and disaster recovery.

5 minutes 5 Questions

Security and Disaster Recovery are critical components of server administration covered in the CompTIA Server+ (SK0-005) exam. These topics ensure that servers, data, and services remain protected and can be restored in the event of failures, attacks, or catastrophic events. **Server Security** in…

Concepts covered
Backup Methods and FrequencyData Encryption ParadigmsPhysical Security and Access ControlsEnvironmental Controls for ServersUser Accounts and Group ManagementMultifactor Authentication and SSOSecurity Risks and Mitigation StrategiesOS and Application HardeningServer Decommissioning and Media DestructionMedia Rotation and Backup TypesRestore Methods and Backup ValidationDisaster Recovery TestingData Retention Policies and StoragePassword Policies and AuditingHost and Hardware SecurityPatch ManagementDisaster Recovery Sites and Replication
Test mode:
Start practice test

Server+ - Security and Disaster Recovery Example Questions

Test your knowledge of Security and Disaster Recovery

Question 1

What is the purpose of a vulnerability scan in server security?

Correct Answer: To identify known weaknesses and misconfigurations in systems and software

A vulnerability scan is a non-intrusive assessment tool designed to identify known weaknesses, security holes, and misconfigurations in systems, applications, and network devices by comparing them against databases of known vulnerabilities.

Actively exploiting flaws describes penetration testing, not vulnerability scanning. Monitoring real-time traffic and blocking packets describes an intrusion prevention system or firewall function. Applying automated patches describes patch management, which is a separate process that may follow a vulnerability scan but is not part of the scan itself.

The key concept tested is understanding the distinction between vulnerability scanning and other security activities such as penetration testing, intrusion prevention, and patch management.

Question 2

A company stores employee records on a server. A new administrator notices that backup tapes from five years ago are still kept in storage, even though company policy requires employee records to be retained for only three years. The administrator wants to understand why this is a problem. Which statement best explains the risk of keeping data beyond its defined retention period?

Correct Answer: Storing data past the retention period increases legal liability and consumes unnecessary storage resources

Keeping data beyond its defined retention period exposes the organization to increased legal liability, such as being compelled to produce old records during litigation (e-discovery), and wastes storage resources that could otherwise be reclaimed.

Backup software does not generate errors or corrupt newer archives simply because older tapes exist. Retention periods are unrelated to encryption standards or security posture weakening. Stored tapes sitting in physical storage have no effect on network throughput or backup operation performance.

The key concept tested is data retention policy compliance and understanding the legal and resource risks associated with retaining data longer than required.

Question 3

A systems administrator must secure daily database replication traffic traveling between two regional data centers over a public wide area network. The company requires a solution that explicitly targets the protection of information as it moves between geographically separated locations. Which encryption method applies the appropriate security paradigm for this administrative requirement?

Correct Answer: Implement an IPsec VPN tunnel across the WAN link to secure the data in motion.

Implementing an IPsec VPN tunnel encrypts network traffic over a public wide area network, directly addressing the requirement to protect data in motion between the two geographically separated data centers.
Transparent data encryption and full disk encryption are incorrect because they protect static data at rest on storage media rather than active network transmissions, while a trusted platform module secures local hardware components and boot sequences instead of external network traffic.
The key concept tested is selecting appropriate encryption controls for data in motion versus data at rest.

More Security and Disaster Recovery questions
456 questions (total)
Practice 100 questions
One session at a time, always new questions