CompTIA Server+ Full Exam Objectives with Simulators
By Mr Sparkles · Updated Jun 12, 2026
| Certification | Server+ (SK0-005) |
| Questions | 243 |
| Passing Score | 75% |
| Format | 98% Multiple Choice |
| Sessions Logged | 517 |
| Your progress | Log in / Register to track times taken, best score, questions mastered, and coverage on this quiz. |
| Rating |
Certification Summary
CompTIA Server+ SK0-005 targets system administrators and server technicians responsible for the physical and virtual maintenance of data center hardware. These professionals spend their time managing the lifecycle of server components, often dealing with the reality that a documented maintenance window serves more as a suggestion than a hard limit for the hardware team.
Server Administration, Troubleshooting, and Security and Disaster Recovery constitute the majority of the exam, focusing on how you handle degraded RAID arrays or unexpected permission shifts to keep services online. The rest of the content covers hardware installation and configuration, where you identify specific cabling standards and physical components required to populate a rack. You will spend significant time analyzing terminal outputs and log file snippets to diagnose hardware-level faults.
Topics covered
Server Administration64 questions
- Explain the importance of asset management and documentation.9 q
- Summarize scripting basics for server administration.9 q
- Summarize the purpose and operation of virtualization.9 q
- Given a scenario, configure servers to use network infrastructure services.9 q
- Given a scenario, install server operating systems.9 q
- Explain the key concepts of high availability for servers.10 q
- Given a scenario, configure and maintain server functions and features.9 q
Server Hardware Installation and Management42 questions
- Given a scenario, perform server hardware maintenance.15 q
- Given a scenario, install physical hardware.14 q
- Given a scenario, deploy and manage storage.13 q
Troubleshooting67 questions
- Explain the troubleshooting theory and methodology.12 q
- Given a scenario, troubleshoot common hardware failures.10 q
- Given a scenario, troubleshoot network connectivity issues.11 q
- Given a scenario, troubleshoot common OS and software problems.12 q
- Given a scenario, troubleshoot storage problems.11 q
- Given a scenario, troubleshoot security problems.11 q
Security and Disaster Recovery58 questions
- Summarize physical security concepts.7 q
- Summarize proper server decommissioning concepts.6 q
- Explain the importance of disaster recovery.8 q
- Explain the importance of backups and restores.7 q
- Summarize data security concepts.7 q
- Explain data security risks and mitigation strategies.8 q
- Explain important concepts pertaining to identity and access management.8 q
- Given a scenario, apply server hardening methods.7 q
Uncategorized12 questions
Question catalog for this preview
Catalog listing of the 5 preview questions for this quiz.
Question 1
The command: systemctl enable --now firewalld is run on a Linux server. What does this accomplish?
Explanation
systemctl enable starts the service immediately and configures it to start automatically at every subsequent boot; --now combines the start and enable actions. On systemd systems, systemctl is the normal interface for service state and can be used cleanly inside automation. It also lets the script check status, start, stop, restart, or enable services consistently.
Question 2
A security administrator deploys a production-like server loaded with realistic-looking but fake sensitive data that has no legitimate business purpose. Connections to this server trigger immediate alerts. What is this security control called?
Explanation
A honeypot is a decoy system loaded with attractive-looking fake data; any access to it is by definition unauthorized and triggers security alerts, helping detect reconnaissance and intrusion activity. For Server+ questions, the safest approach is to tie the clue in the scenario to the function the technology actually performs in production.
Question 3
A company deploys a dedicated firewall between its internal servers and the internet. Servers running public-facing services are placed in a subnet accessible from the internet but isolated from internal corporate resources. What is this intermediate network zone called?
Explanation
A DMZ is an intermediate network zone that exposes specific services to the internet while isolating them from the internal corporate network, limiting breach impact. The wording in the stem matters here because it points to the operating characteristic being tested, not just a related technology name.
Question 4
All servers run a modular antivirus solution. One server begins exhibiting symptoms that suggest its AV engine may have been disabled by malware. Which TWO actions should be taken FIRST?
Explanation
Isolating the server prevents lateral movement; an offline scan from trusted media bypasses any rootkit or malware that may have disabled or subverted the installed AV engine. This is also a good example of why memorizing terms is not enough; the scenario is testing when that term applies operationally.
Question 5
Monitoring has flagged APP-SRV-02 for unusual outbound HTTPS traffic to an external address during off-hours. The server hosts an internal reporting application and also runs several scheduled maintenance jobs. You have been given a simulated PowerShell investigation console on the server. Determine what is causing the outbound traffic, identify the strongest evidence, and choose the best containment and prevention steps.
Explanation
The strongest evidence shows APP-SRV-02 making unexpected outbound HTTPS connections to 203.0.113.77 from PID 4136. That PID maps to powershell.exe running as CORP\svc-reporting. The scheduled task ReportCacheUpdate launches C:/Scripts/Temp/report_cache_update.ps1 using that same service account, and local administrator membership shows the service account is overprivileged. The best response is to contain the activity while preserving evidence, disable the suspicious task, and rotate or disable the affected service account credential.