Pass the CompTIA DataSys+ DS0-001 Questions and answers with Dumpstech

The correct answer is B. 40%. CompTIA DataSys+ explains that Resource Governor is used to manage and allocate CPU and memory resources among multiple workloads or resource pools within a database system. When configuring resource pools, administrators must ensure that the total allocation of minimum resources does not exceed 100%, as all resource pools share the same finite system resources.

In this scenario, the first resource pool has a minimum CPU and memory allocation of 25%, and the second resource pool has a minimum allocation of 35%. Together, these minimum guarantees account for 60% of total available resources. Resource Governor enforces these minimums to ensure that critical workloads always receive their reserved share of system resources, even under heavy load.

The remaining resources are calculated by subtracting the total minimum allocation from 100%.

100% − 60% = 40%

This remaining 40% represents the maximum CPU and memory that can be safely assigned to the third resource pool without violating Resource Governor rules. Assigning a higher value would exceed the total available system resources and would not be permitted under proper configuration guidelines emphasized in DataSys+.

Option A (20%) underutilizes available resources and is unnecessarily restrictive. Option C (60%) and D (100%) are invalid because they would cause the combined minimum allocations to exceed system capacity, leading to misconfiguration or enforcement failures. DataSys+ stresses careful capacity planning when using Resource Governor to balance performance, fairness, and system stability.

Resource Governor is especially useful in multi-tenant or mixed-workload environments, where critical applications must be protected from resource starvation. Proper calculation of minimums and maximums ensures predictable performance and prevents one workload from monopolizing system resources.

Therefore, the correct maximum allocation for the third resource pool is 40%, making option B the correct and fully verified answer aligned with CompTIA DataSys+ guidance.

The index that stores records in a tabular format is columnstore. A columnstore index is a type of index that stores and compresses data by columns rather than by rows. A columnstore index can improve the performance and efficiency of queries that perform aggregations, calculations, or analysis on large amounts of data, such as data warehouse or business intelligence applications. A columnstore index can also reduce the storage space required for data by applying various compression techniques, such as dictionary encoding, run-length encoding, bit packing, etc. The other options are either different types of indexes or not related to indexes at all. For example, a non-clustered index is a type of index that stores the values of one or more columns in a sorted order along with pointers to the corresponding rows in the table; a unique index is a type of index that enforces uniqueness on one or more columns in a table; a secondary index is an alternative term for a non-clustered index. References: CompTIA DataSys+ Course Outline, Domain 3.0 Database Management and Maintenance, Objective 3.1 Given a scenario, perform common database maintenance tasks.

The characteristic of all non-relational databases is unstructured data. Unstructured data is data that does not have a predefined or fixed format, schema, or structure. Unstructured data can include various types of data, such as text, images, audio, video, etc. Non-relational databases, also known as NoSQL databases, are databases that store and manage unstructured data using different models, such as key-value, document, graph, columnar, etc. Non-relational databases are suitable for handling large volumes, variety, and velocity of data that do not fit well in the relational model. The other options are either characteristics of relational databases or not related to database types at all. For example, columns with the same data type, logical record groupings, and tabular schema are characteristics of relational databases, which are databases that store and manage structured data using tables, rows, columns, and constraints. References: CompTIA DataSys+ Course Outline, Domain 1.0 Database Fundamentals, Objective 1.1 Given a scenario, identify common database types.

The correct answer is B. Brute-force. CompTIA DataSys+ identifies brute-force attacks as a common authentication-based threat in database and system environments. A brute-force attack involves repeatedly attempting to authenticate to an account by systematically trying different credentials or repeatedly targeting known or default accounts in hopes that one attempt will succeed. The presence of multiple ongoing connection attempts in logs is a key indicator of this attack type.

In this scenario, the attacker is attempting to connect using a default account, even though it has been disabled. Default accounts are well-known targets because attackers are often aware of their usernames and may assume weak or unchanged credentials. DataSys+ emphasizes that attackers frequently attempt brute-force or password-spraying attacks against default or administrative accounts, especially when exposed services are accessible over the network. Even if the account is disabled, repeated attempts still generate log entries and clearly signal brute-force behavior.

Option A, malware, typically involves malicious software executing on a system and does not primarily manifest as repeated login attempts in authentication logs. Option C, on-path (man-in-the-middle) attacks, involve intercepting or altering network traffic between two parties and would not appear as repeated failed authentication attempts from a single source. Option D, SQL injection, targets application input fields and database queries, not authentication mechanisms tied to account logins.

CompTIA DataSys+ stresses the importance of monitoring logs for failed authentication attempts as part of intrusion detection and security auditing. It also highlights defensive controls such as account lockout policies, disabling default accounts, strong authentication mechanisms, and intrusion detection systems to mitigate brute-force attacks.

Because the defining characteristic in the scenario is repeated connection attempts against an account, the activity is best classified as a brute-force attack, making option B the correct and fully verified answer.

The correct answer is D. Envelope encryption. CompTIA DataSys+ describes envelope encryption as a key management and data protection method that combines the efficiency of symmetric encryption with the security and manageability of hierarchical key structures. In this approach, data is first encrypted using a data encryption key (DEK), and then the DEK itself is encrypted (or “wrapped”) using a key encryption key (KEK), often referred to as a managed root key.

Envelope encryption is widely used in enterprise database systems and cloud platforms because it provides strong security while simplifying key rotation and management. Encrypting large volumes of data directly with a root or master key would be inefficient and risky. Instead, DataSys+ explains that symmetric DEKs are used for fast data encryption, while the root key is used only to protect the DEKs. If a root key must be rotated or compromised, only the wrapped DEKs need to be re-encrypted—not the underlying data.

Option A, asymmetric encryption, uses public and private key pairs but is computationally expensive and not typically used to encrypt large datasets directly. Option B, DEK-based encryption, is incomplete because it describes only the use of data encryption keys and does not account for the additional wrapping layer that defines envelope encryption. Option C, symmetric encryption, correctly describes how data is encrypted but does not include the managed key hierarchy required by the question.

CompTIA DataSys+ emphasizes envelope encryption as a best practice for data-at-rest protection, particularly in environments that require compliance, auditing, and centralized key management. It is commonly implemented using hardware security modules (HSMs) or cloud key management services.

Therefore, the method where data is encrypted with a DEK and then wrapped with a managed root key is envelope encryption, making option D the correct and fully verified answer.

The purpose of a snapshot is to create an image of a database. A snapshot is a copy of the state and content of a database at a specific point in time. A snapshot can be used for various purposes, such as backup and recovery, testing and development, reporting and analysis, etc. A snapshot can be created using various techniques, such as full copy, incremental copy, differential copy, etc. A snapshot can also be created using various tools or commands provided by the database system or software. The other options are either incorrect or irrelevant for this question. For example, dynamic data replication is a process that copies and synchronizes data from one database server (the source) to one or more database servers (the target) in real time; a synonym is an alias or an alternative name for an object in a database; C is an incomplete option. References: CompTIA DataSys+ Course Outline, Domain 5.0 Business Continuity, Objective 5.2 Given a scenario, implement backup and restoration of database management systems.

The correct answer is B. Checkpoints. CompTIA DataSys+ explains that checkpoints play a critical role in database recovery mechanisms by limiting the amount of transaction log data that must be processed during recovery. Log-based recovery relies on transaction logs to restore the database to a consistent state after a failure. If checkpoints are infrequent, the database engine must replay a large portion of the transaction log, which increases recovery time and system overhead.

A checkpoint is a process where the database writes all modified (dirty) pages from memory to disk and records a synchronization point in the transaction log. After a checkpoint completes, the database knows that all changes up to that point are safely stored on disk. During recovery, the system only needs to process log entries that occurred after the most recent checkpoint, significantly reducing recovery workload and time. DataSys+ highlights checkpoints as a key performance and availability feature, especially in systems with high transaction volumes.

Option A, deadlocks, are concurrency issues that occur when two or more transactions block each other indefinitely. While deadlock handling is important for transaction throughput, it does not reduce log-based recovery overhead. Option C, locks, control concurrent access to data and help maintain consistency, but they do not affect how much log data must be replayed during recovery. Option D, indexes, improve query performance but can actually increase logging activity because index changes are also logged.

CompTIA DataSys+ emphasizes that effective recovery planning includes optimizing logging behavior and checkpoint frequency. Properly configured checkpoints strike a balance between runtime performance and recovery efficiency by reducing excessive log replay without causing unnecessary disk I/O.

Therefore, to best mitigate the overhead caused by log-based recoveries, the database manager should use checkpoints, making option B the correct and fully verified answer.

The service that is responsible for assigning, managing, and reclaiming IP addresses on a TCP/IP-based network is DHCP. DHCP, or Dynamic Host Configuration Protocol, is a service that automatically assigns IP addresses and other network configuration parameters, such as subnet mask, default gateway, DNS server, etc., to computers or devices on a network. DHCP helps simplify the administration and management of IP addresses on a network, as well as avoid conflicts or errors caused by manual or duplicate assignments. DHCP also allows computers or devices to release or renew their IP addresses when they join or leave the network. The other options are either different services or not related to IP addresses at all. For example, DNS, or Domain Name System, is a service that translates domain names into IP addresses and vice versa; LDAP, or Lightweight Directory Access Protocol, is a service that provides access to directory information such as users, groups, or devices on a network; ISMTP is not a valid acronym or service. References: CompTIA DataSys+ Course Outline, Domain 2.0 Database Deployment, Objective 2.1 Given a scenario, select an appropriate database deployment method.

The two database instances that are created by default when SQL Server is installed are master and model. Master is a system database that contains the information and settings of the SQL Server instance, such as the configuration, logins, endpoints, databases, etc. Master is essential for the operation and management of the SQL Server instance, and it should be backed up regularly. Model is a system database that serves as a template for creating new user databases. Model contains the default settings and objects, such as tables, views, procedures, etc., that will be inherited by the new user databases. Model can be modified to customize the new user databases according to specific needs or preferences. The other options are either not database instances or not created by default when SQL Server is installed. For example, root is not a database instance, but a term that refers to the highest level of access or privilege in a system; log is not a database instance, but a file that records the changes made by transactions on a database; view is not a database instance, but an object that represents a subset or a combination of data from one or more tables; index is not a database instance, but a data structure that stores the values of one or more columns of a table in a sorted order. References: CompTIA DataSys+ Course Outline, Domain 2.0 Database Deployment, Objective 2.3 Given a scenario, update database systems.

The best option to configure IP addresses to allow access to the database is a firewall. A firewall is a network device or software that controls the incoming and outgoing traffic based on a set of rules or policies. A firewall can be used to filter the traffic by IP addresses, ports, protocols, or other criteria, and allow or deny access to the database accordingly. The other options are either not relevant or not sufficient for this task. For example, a static IP address is an IP address that does not change over time, but it does not determine the access to the database; a dynamic IP address is an IP address that changes periodically, but it does not control the traffic to the database; an IDNS is an Internet Domain Name System, which translates domain names into IP addresses, but it does not regulate the access to the database. References: CompTIA DataSys+ Course Outline, Domain 4.0 Data and Database Security, Objective 4.2 Given a scenario, implement security controls for databases.