1. A server administrator discovers that a critical application on a Windows server is intermittently failing to connect to its database, which resides on a different server. Pinging the database server by IP address is successful, but pinging by hostname sometimes fails. Other services on the application server can resolve external hostnames without issue. Which of the following is the MOST likely cause of this problem?
Troubleshooting
A.The application server's network adapter is faulty.
B.There is an issue with the application server's DNS client configuration.
C.The database server is experiencing high CPU utilization.
D.The database server's firewall is blocking connections.
Show answerAnswer
B. There is an issue with the application server's DNS client configuration.
The ability to ping by IP but not consistently by hostname points directly to a name resolution issue. Since other services can resolve external hostnames, the problem is likely specific to how this application or the server's DNS client is configured for internal name resolution.
2. A server administrator is investigating a server that is experiencing intermittent network connectivity issues, characterized by dropped packets and unusually high latency to external resources. Internal network communication (within the same subnet) is unaffected. What is the MOST likely cause?
Troubleshooting
A.A saturated internal network switch.
B.Incorrect subnet mask on the server.
C.A faulty NIC on the server.
D.A misconfigured default gateway on the server.
Show answerAnswer
D. A misconfigured default gateway on the server.
If internal network communication (within the same subnet) is fine, but external communication (to different subnets/internet) is intermittently affected, it strongly points to an issue with the default gateway. The default gateway is responsible for routing traffic outside the local subnet. Intermittent issues suggest either a flapping gateway, an overloaded gateway, or incorrect configuration that sporadically routes traffic to a black hole.
3. A security auditor is reviewing the access controls for a critical production server. The auditor discovers that several administrators have been granted 'Full Control' permissions to a shared directory that only needs read access for their daily tasks. This violates which security principle?
Security and Disaster Recovery
A.Need to know
B.Defense in depth
C.Least privilege
D.Separation of duties
Show answerAnswer
C. Least privilege
The principle of least privilege dictates that users and processes should only be granted the minimum necessary permissions to perform their authorized functions. Granting 'Full Control' when only 'Read' is needed directly violates this principle.
4. A server administrator is deploying a new server that will host a critical database requiring extremely low latency and high I/O operations per second (IOPS) for its primary storage. The administrator wants to use direct-attached storage (DAS) for this purpose. Which of the following storage technologies would best meet these requirements?
Server Hardware Installation and Management
A.NVMe SSD
B.SAS HDD
C.SATA HDD
D.SATA SSD
Show answerAnswer
A. NVMe SSD
NVMe SSDs offer significantly higher performance and lower latency compared to other direct-attached storage options, making them ideal for critical database applications.
5. A server administrator notes that a critical database server running Linux is experiencing extremely high swap space utilization, even though physical RAM usage appears to be only 60%. This is causing significant performance degradation. Which of the following is the MOST likely reason for this behavior?
Troubleshooting
A.A memory leak in a specific application.
B.Insufficient disk space on the swap partition.
C.The kernel's `swappiness` parameter is set too high.
D.A faulty RAM module causing memory errors.
Show answerAnswer
C. The kernel's `swappiness` parameter is set too high.
Linux uses a kernel parameter called `swappiness` (usually `/proc/sys/vm/swappiness`) to control how aggressively the system moves processes out of physical memory and into swap space. A high `swappiness` value (e.g., default 60) can cause the kernel to swap out 'cold' (less frequently accessed) pages even when there is still plenty of free physical RAM, leading to unnecessary I/O and performance degradation.
6. A server administrator is tasked with deploying a new web application that requires a specific version of a database and several dependent libraries. The application needs to be isolated from other services on the same host, and its environment must be easily reproducible across development, staging, and production. Which of the following technologies would BEST meet these requirements?
Server Administration
A.Containerization (e.g., Docker)
B.Cloud-based IaaS
C.Virtual Machines (VMs)
D.Bare-metal installation
Show answerAnswer
A. Containerization (e.g., Docker)
Containerization (like Docker) provides lightweight, isolated environments for applications and their dependencies. This allows for specific versions of software to run without conflicts, ensures reproducibility across environments, and offers better resource utilization compared to full VMs.
7. A company is decommissioning several older hard disk drives that contain sensitive customer data. Simply deleting the files and reformatting the drives is deemed insufficient. Which method provides the highest level of data destruction to prevent forensic recovery?
Security and Disaster Recovery
A.Overwriting with zeros
B.Low-level formatting
C.Secure erase utility
D.Degaussing
Show answerAnswer
D. Degaussing
Degaussing uses a strong magnetic field to completely randomize the magnetic domains on a hard drive platter, rendering all data unrecoverable. This is generally considered one of the most effective methods for data destruction on magnetic media.
8. A company is planning its disaster recovery strategy. They need a secondary site that can be brought online within a few hours to take over critical operations in case of a major outage at the primary data center. Data must be relatively current, with backups shipped regularly, but real-time synchronization is not strictly required due to cost constraints. Which type of disaster recovery site would be most appropriate?
Security and Disaster Recovery
A.Hot site
B.Active-Active site
C.Cold site
D.Warm site
Show answerAnswer
D. Warm site
A warm site is equipped with hardware and connectivity, but data and applications may need to be loaded from recent backups. This fits the requirement for a recovery within a few hours with 'relatively current' data from 'regularly shipped backups', balancing recovery time objectives (RTO) and recovery point objectives (RPO) with cost constraints.
9. A server administrator is deploying a new web application that requires specific network ports to be open for external access. After configuring the application and verifying it's running locally, external users report being unable to connect. The administrator confirms the server's local firewall is configured to allow the necessary inbound connections. What is the NEXT logical step in troubleshooting this external connectivity issue?
Troubleshooting
A.Restart the application service and operating system.
B.Check the network firewall or router upstream from the server.
C.Verify the server's IP address and subnet mask.
D.Check the application's internal logging for connection errors.
Show answerAnswer
B. Check the network firewall or router upstream from the server.
If the local firewall is confirmed to be open and the application is running, the next point of failure for external access is typically an upstream network device like a router or network firewall. These devices often have their own access control lists (ACLs) or port forwarding rules that might be blocking the traffic before it even reaches the server's local firewall.
10. A server administrator needs to ensure that the operating system installations across all new servers are consistent and adhere to company-defined security baselines. Which of the following documentation types is MOST critical for achieving this goal?
Server Administration
A.Incident Response Plan
B.System Design Document
C.Standard Operating Procedures (SOPs)
D.User Manuals
Show answerAnswer
C. Standard Operating Procedures (SOPs)
Standard Operating Procedures (SOPs) provide step-by-step instructions for routine tasks like OS installation, ensuring consistency, compliance with security baselines, and reducing errors across all deployments.
11. A server administrator is evaluating different server roles for a new application. The application is a custom-developed Python web service that processes complex data requests, interacts with a database, and generates dynamic content for users. It does NOT serve static files directly or handle email. Which server role BEST describes the primary function of this new application server?
Server Administration
A.Application server
B.Web server
C.File server
D.Database server
Show answerAnswer
A. Application server
An application server is specifically designed to host and execute business logic and application code (like a Python web service processing data requests and generating dynamic content). While it interacts with a web server and database, its primary role is running the application itself, not just serving static web pages or storing data.
12. A small business uses a single server for all its critical operations. The IT administrator is setting up a backup rotation scheme for daily incremental backups and weekly full backups, using tape media. To minimize the risk of data loss due to a single tape failure and to optimize the use of media, which backup rotation scheme is generally recommended for this scenario?
Security and Disaster Recovery
A.Grandfather-Father-Son (GFS)
B.Linear
C.Tower of Hanoi
D.FIFO (First-In, First-Out)
Show answerAnswer
A. Grandfather-Father-Son (GFS)
The Grandfather-Father-Son (GFS) rotation scheme is widely recommended for tape backups as it provides multiple generations of backups (daily, weekly, monthly/yearly) with varying retention periods, which minimizes the risk of data loss from a single tape failure and allows for recovery to different points in time. It balances storage efficiency with recovery capabilities.
13. A technician is installing a new enterprise server that will host several virtual machines. The server's specifications indicate support for DDR5 ECC RDIMMs. What is the primary benefit of using RDIMMs over UDIMMs in this server environment?
Server Hardware Installation and Management
A.Lower power consumption.
B.Faster memory clock speeds (MHz).
C.Increased total memory capacity and improved stability.
D.Reduced cost per gigabyte of RAM.
Show answerAnswer
C. Increased total memory capacity and improved stability.
RDIMMs (Registered DIMMs) include a register that buffers electrical loads, which stabilizes the signals to the memory controller. This allows servers to support a much larger number of DIMMs and higher total memory capacities with greater stability, making them ideal for enterprise servers and virtualized environments where large amounts of reliable RAM are critical.
14. A server administrator is implementing a new backup strategy for a critical database. The strategy involves performing a full backup every Sunday, and then daily backups that only include files that have changed since the LATEST full OR differential backup. This approach aims to reduce backup time and storage space compared to daily full backups, while keeping recovery relatively efficient. Which backup type is being described for the daily backups?
Security and Disaster Recovery
A.Incremental backup
B.Snapshot backup
C.Differential backup
D.Full backup
Show answerAnswer
C. Differential backup
A differential backup copies all data that has changed since the LAST full backup. The scenario states that daily backups include files changed since the 'latest full OR differential backup,' which is a common (though sometimes confusingly worded) way to describe a differential backup that builds upon the most recent full backup.
15. A system administrator needs to automate the daily backup process for a critical application server. The backup script is written in Bash and needs to execute at 2:00 AM every day. Which utility should the administrator use on a Linux server to schedule this recurring task?
Server Administration
A.cron
B.at
C.systemd-timer
D.Task Scheduler
Show answerAnswer
A. cron
The `cron` utility is the standard and most commonly used tool on Linux systems for scheduling recurring tasks at specified intervals or times.
16. A server administrator is preparing to decommission a server that contains sensitive customer data. Before the server is physically removed from the data center, the administrator must ensure that all data on its hard drives is irrecoverably destroyed to prevent unauthorized access. Which of the following methods is the most secure and appropriate for this task?
Server Administration
A.Using a data sanitization tool to overwrite the drives multiple times.
B.Physically removing the hard drives and storing them in a locked cabinet.
C.Deleting all files and emptying the recycle bin.
D.Performing a quick format of the hard drives.
Show answerAnswer
A. Using a data sanitization tool to overwrite the drives multiple times.
Overwriting the drives multiple times with a data sanitization tool is the most secure software-based method to render data irrecoverable. Simple deletion or quick formats only remove pointers to data, leaving the actual data recoverable.
17. A large enterprise is designing a robust backup and disaster recovery strategy. For their most critical applications, they require continuous data protection with minimal potential for data loss and the ability to replicate data across geographically dispersed data centers in real-time. Which replication method is best suited for this requirement?
Security and Disaster Recovery
A.Snapshot Replication
B.Asynchronous Replication
C.Tape Backup Replication
D.Synchronous Replication
Show answerAnswer
D. Synchronous Replication
Synchronous replication ensures that data is written to both the primary and secondary storage systems simultaneously. The primary system waits for confirmation from the secondary before acknowledging the write to the application, guaranteeing zero data loss (RPO = 0) at the cost of potential latency, which is acceptable for critical applications requiring minimal data loss and real-time replication.
18. A technician needs to connect a server's internal SAS host bus adapter to an external JBOD disk enclosure using a single cable capable of carrying four SAS lanes. Which connector type should the technician use?
Server Hardware Installation and Management
A.RJ-45
B.SFF-8482
C.LC duplex
D.SFF-8087 (Mini-SAS)
Show answerAnswer
D. SFF-8087 (Mini-SAS)
SFF-8087, commonly called Mini-SAS, is a connector that bundles four SAS lanes into a single cable, making it the standard choice for connecting HBAs to SAS expanders or JBOD enclosures.
19. A server administrator notices that a newly deployed virtual machine (VM) on an ESXi host is exhibiting extremely poor disk performance, despite the underlying storage array being robust and other VMs on the same host performing normally. The VM's virtual disk is configured as 'thick provisioned, lazy zeroed'. Which of the following is the MOST likely cause of the poor performance?
Troubleshooting
A.The initial zeroing process of the thick provisioned, lazy zeroed disk
B.Network I/O bottleneck on the ESXi host
C.Outdated VMTools on the virtual machine
D.Insufficient CPU allocation for the VM
Show answerAnswer
A. The initial zeroing process of the thick provisioned, lazy zeroed disk
A 'thick provisioned, lazy zeroed' disk occupies its full allocated space immediately but does not zero out the blocks until they are written to for the first time. This 'on-demand zeroing' process, especially during initial writes or heavy I/O workloads, can introduce significant latency and consume disproportionate I/O resources, leading to poor disk performance for that specific VM until all blocks have been zeroed.
20. A server administrator is designing a new server infrastructure for a high-traffic e-commerce website. The primary requirement is to minimize downtime in case of a single server failure, ensuring continuous service availability. Which architectural principle should be prioritized to meet this requirement?
Server Administration
A.Scalability
B.Load balancing
C.High Availability (HA)
D.Disaster Recovery (DR)
Show answerAnswer
C. High Availability (HA)
High Availability (HA) is specifically designed to ensure continuous operation and minimize downtime by eliminating single points of failure, often through redundancy, failover mechanisms, and clustering. This directly addresses the requirement of minimizing downtime during a single server failure.
21. A company is implementing a new data retention policy for its archival server backups. The policy states that a full backup must be performed monthly, and these monthly backups must be kept for 7 years. Weekly incremental backups are performed and kept for 1 month, and daily incremental backups are kept for 1 week. This tiered approach to data retention is an example of which backup strategy?
Security and Disaster Recovery
A.Active-Passive Clustering
B.Snapshotting
C.Mirroring
D.Grandfather-Father-Son (GFS)
Show answerAnswer
D. Grandfather-Father-Son (GFS)
The Grandfather-Father-Son (GFS) backup strategy is a rotation scheme that uses daily (Son), weekly (Father), and monthly/yearly (Grandfather) backups, each with different retention periods. The scenario describes exactly this tiered approach with varying retention for daily, weekly, and monthly backups.
22. A server administrator discovers that a database server is performing very slowly, and applications connecting to it are frequently timing out. Upon checking the server's resource monitor, the disk I/O utilization is consistently at 100%, even during periods of low activity, while CPU and memory usage are normal. The server uses a RAID 5 array with five 1TB drives. Which of the following is the MOST likely cause of the performance issue?
Troubleshooting
A.Network bottleneck to the database server.
B.A failed drive in the RAID 5 array.
C.Insufficient RAM allocated to the database.
D.Excessive CPU context switching.
Show answerAnswer
B. A failed drive in the RAID 5 array.
High disk I/O utilization (100%) with normal CPU and memory usage, especially on a RAID 5 array, is a strong indicator of a degraded array due to a failed drive. While RAID 5 can tolerate one drive failure, performance significantly degrades as the controller must reconstruct data on the fly.
23. A server in a high-security data center needs to be protected from unauthorized physical access. Which of the following physical security measures would be most effective in preventing an attacker from tampering with the server's internal components without detection?
Security and Disaster Recovery
A.Visitor log and escort policy
B.Biometric access control for the server room door
C.Rack-mounted server with a locking front bezel
D.CCTV surveillance with motion detection
Show answerAnswer
C. Rack-mounted server with a locking front bezel
While other options protect the room, a locking front bezel on a rack-mounted server directly prevents an attacker from opening the server chassis and tampering with internal components like hard drives or memory, even if they gain access to the server room itself. This provides a direct layer of protection at the server level.
24. A server administrator is tasked with deploying a new application across 50 virtual machines. Each VM requires the same operating system, application stack, and initial configuration. Manually installing and configuring each VM would be time-consuming and prone to errors. Which deployment method would be most efficient and ensure consistency across all VMs?
Server Administration
A.PXE boot and unattended installation
B.Creating a golden image (template) and deploying it
C.Scripting individual installations with a custom Bash script
D.Manual OS installation via ISO for each VM
Show answerAnswer
B. Creating a golden image (template) and deploying it
Creating a golden image (template) with the OS, application stack, and initial configuration pre-installed is the most efficient and consistent method for deploying many identical virtual machines. This minimizes manual effort and reduces configuration drift.
25. A server rack contains several high-density servers that generate a significant amount of heat. The data center currently uses standard perforated floor tiles for cold air delivery and exhausts hot air into a common plenum. To improve cooling efficiency and prevent hot spots, which of the following cooling strategies would be MOST effective?
Server Hardware Installation and Management
A.Replace all perforated floor tiles with solid ones.
B.Increase the overall room temperature to reduce cooling load.
C.Install additional CRAC units without modifying airflow patterns.
D.Implement hot aisle containment.
Show answerAnswer
D. Implement hot aisle containment.
Hot aisle containment isolates the hot exhaust air from servers, preventing it from mixing with the cold intake air. This increases the temperature differential across the cooling units (CRACs), making them more efficient and effectively eliminating hot spots by ensuring all cold air is directed to server intakes and all hot air is returned to the CRAC without recirculation.
Incorrect settings on a client machine that prevent it from properly resolving hostnames to IP addresses, often leading to connectivity issues when using hostnames.
Symptoms include successful IP-based connectivity but failed hostname-based connectivity.
Can be caused by incorrect DNS server addresses, firewall rules blocking DNS traffic, or issues with local host files.
Troubleshooting involves checking `ipconfig /all` (Windows) or `cat /etc/resolv.conf` (Linux) and testing DNS servers.
Incorrectly configured default gateway IP address on a server, preventing or intermittently disrupting communication with hosts outside its local subnet.
Symptoms include successful internal network communication but failed or intermittent external communication.
The default gateway is the exit point for traffic leaving the local network segment.
Troubleshooting involves checking `ipconfig` (Windows) or `ip route` (Linux) and pinging the gateway IP.
A security principle that requires users, programs, and processes to be granted only the minimum necessary permissions to perform their authorized functions.
Minimizes potential damage from errors or malicious acts.
A kernel parameter (`vm.swappiness`) in Linux that controls the tendency of the kernel to move processes out of physical memory and into swap space. A higher value (0-100) means more aggressive swapping.
Default value is often 60 on many distributions.
Lowering `swappiness` (e.g., to 10 or 0 for databases) can improve performance by keeping more data in physical RAM.
Excessive swapping, even with free RAM, points to a high `swappiness` value.
Containerization is a lightweight virtualization technology that packages an application and all its dependencies (libraries, binaries, configuration files) into a single, isolated unit called a container.
Provides process-level isolation, not full OS isolation like VMs.
Ensures application portability and reproducibility across environments.
Offers faster startup times and lower resource overhead than VMs.
A disaster recovery site that has essential hardware and infrastructure in place, but requires loading of data and applications to become fully operational.
Lower cost than a hot site, higher than a cold site.
Recovery Time Objective (RTO) typically hours to days.
Recovery Point Objective (RPO) depends on backup frequency.
Investigating network devices (routers, firewalls, load balancers) positioned between a server and external clients when local connectivity works but external connectivity fails despite the server's local firewall being open.
Commonly involves checking port forwarding, NAT rules, and Access Control Lists (ACLs).
External connectivity issues often originate outside the server itself.
Tools include `traceroute`/`tracert` to identify network path and firewall/router management interfaces.
SOPs are detailed, step-by-step instructions compiled by an organization to help workers carry out routine operations. They aim to achieve efficiency, quality output, and uniformity of performance.
Ensures consistency and reduces errors in repetitive tasks.
Facilitates training and knowledge transfer.
Critical for compliance with security and operational standards.
A software framework that provides an environment for running and managing enterprise applications, often handling business logic and dynamic content generation.
A backup rotation scheme that uses daily (Son), weekly (Father), and monthly/yearly (Grandfather) backups to provide varying retention periods and recovery points.
Balances storage space with recovery capability.
Provides multiple generations of backups.
Widely used for tape and disk-based backup strategies.
A type of memory module used in servers that includes a register to buffer electrical loads, allowing for higher memory capacities and improved stability.
cron is a time-based job scheduler in Unix-like computer operating systems. Users who wish to maintain their own regularly scheduled jobs use crontab (cron table) files.
Used for scheduling recurring tasks
Jobs defined in crontab files
Syntax specifies minute, hour, day of month, month, day of week
A data replication method where data is written to both the primary and secondary storage systems simultaneously, ensuring zero data loss (RPO = 0) at the expense of potential latency.
Guarantees RPO = 0 (zero data loss).
Primary system waits for confirmation from secondary.
Introduces latency, typically used over short distances.
A high-density SAS connector that bundles four SAS lanes into one cable, commonly used to connect HBAs/RAID controllers to backplanes or JBOD enclosures.
SFF-8087 = internal mini-SAS, 4 lanes per cable
SFF-8088 is the external equivalent connector
SFF-8482 connects a single SAS/SATA drive directly
A virtual disk provisioning type where the full disk space is allocated immediately, but blocks are zeroed out only when they are first written to by the guest OS.
Consumes full space immediately.
Zeroing on first write can cause performance spikes.
Different from 'eager zeroed' (zeroed at creation) or 'thin provisioned' (grows as needed).
A backup rotation scheme that uses three generations of backups: daily (Son), weekly (Father), and monthly/yearly (Grandfather), each with increasingly longer retention periods.
Optimizes storage and recovery times.
Provides multiple recovery points over different timescales.
When a drive fails in a RAID 5 array, the array enters a degraded state, continuing to function but with significantly reduced performance due to on-the-fly data reconstruction.
RAID 5 can tolerate a single drive failure.
Performance degrades substantially when in a degraded state.
High disk I/O with normal CPU/memory often points to degraded RAID.
A golden image, or VM template, is a pre-configured virtual machine disk image that includes an operating system, applications, and configurations, used as a master copy for deploying multiple identical VMs.
Questions are original practice items written to match the published exam objectives. Step2Study is not affiliated with or endorsed by any certification body.