Question 1: What should be included in a disaster recovery plan?

• Only the steps to restore the network.
• Only data storage information.
• A comprehensive plan including data recovery, system restoration, and emergency protocols.
• A list of authorized users.

A comprehensive disaster recovery plan (DRP) should encompass much more than just data backups. It must include detailed procedures for data recovery, system restoration (including hardware, software, and applications), and emergency protocols for communication and incident response. The plan should also define roles and responsibilities, contact information, and testing schedules to ensure a swift and effective recovery of all critical business operations after a disaster.

Question 2: Which lighting control strategy offers the greatest energy savings in areas with variable occupancy?

• Dimmer switches only
• Timer-based switching
• High-intensity discharge (HID) lamps
• Occupancy sensor-based controls (Correct answer)

Correct answer: Occupancy sensor-based controls

Occupancy sensors automatically turn lights off when areas are unoccupied, maximizing energy savings in variable-use spaces.

Question 3: Which document formally requests approval to spend money on a specific IT project or purchase?

• Statement of Work (SOW)
• Service Level Agreement (SLA)
• Business Case / Capital Expenditure Request (Correct answer)
• Purchase Order (PO)

Correct answer: Business Case / Capital Expenditure Request

A business case or CapEx request presents the justification, costs, and expected benefits to gain financial approval for a project.

Question 4: How does risk management apply to daily practice in Resident Rights & Advocacy for Certified System Administrator professionals?

• Through proactive identification of potential hazards and implementation of preventive measures (Correct answer)
• Only through responding to incidents after they occur
• Through annual safety audits exclusively
• By avoiding high-risk situations entirely

Correct answer: Through proactive identification of potential hazards and implementation of preventive measures

Effective risk management in Resident Rights & Advocacy requires proactive hazard identification and preventive measures, not just reactive responses. This approach reduces incidents, improves outcomes, and protects both professionals and clients.

Question 5: What does encryption do for data security?

• It increases the speed of data transfer.
• It reduces data storage requirements.
• It prevents unauthorized access to sensitive data.
• It prevents data from being backed up.

Encryption transforms data into a coded format, making it unreadable to anyone without the correct decryption key. This process is crucial for data security because it protects sensitive information from unauthorized access, even if the data is intercepted or stolen. By rendering the data unintelligible, encryption ensures confidentiality and integrity, safeguarding it both in transit and at rest.

Question 6: A nursing facility administrator is developing a policy to reduce polypharmacy. Which strategy is MOST effective as an administrative oversight measure?

• Limiting residents to a maximum of five medications regardless of clinical need
• Assigning a pharmacist to approve all new prescriptions before dispensing
• Mandating monthly medication regimen reviews by a consultant pharmacist (Correct answer)
• Requiring physician justification for each medication at the monthly care conference

Correct answer: Mandating monthly medication regimen reviews by a consultant pharmacist

Monthly medication regimen reviews by a consultant pharmacist are a regulatory requirement and a proven strategy for identifying and reducing unnecessary medications.

Question 7: When an Update Set is in 'Loaded' state, what is the next step to apply its changes?

• Export the Update Set as XML
• Preview the Update Set and resolve any conflicts before committing (Correct answer)
• Immediately commit the Update Set
• Mark it as Complete

Correct answer: Preview the Update Set and resolve any conflicts before committing

Previewing checks for conflicts or missing records before committing, which applies the changes to the target instance.

Question 8: A department head asks why their business unit is being billed for IT services they didn't explicitly request. The IT director explains this is a 'showback' model. What distinguishes showback from chargeback?

• Showback requires managerial approval; chargeback does not
• Showback transfers funds between departments; chargeback only reports costs
• Showback only reports allocated costs for visibility without actual fund transfers (Correct answer)
• Showback applies only to cloud costs; chargeback applies to on-premises

Correct answer: Showback only reports allocated costs for visibility without actual fund transfers

Showback reports cost allocations to business units for awareness, while chargeback actually transfers the funds from their budgets.

Question 9: Which of the following BEST describes a 'warm site' in disaster recovery?

• A site with hardware installed but requiring data restoration before going live (Correct answer)
• An empty facility with only basic utilities and no equipment
• A mobile trailer unit that can be deployed anywhere
• A fully operational duplicate environment identical to production

Correct answer: A site with hardware installed but requiring data restoration before going live

A warm site has pre-installed hardware and connectivity but requires data restoration from backups, resulting in a moderate RTO typically measured in hours.

Question 10: Staff who administer medications in a long-term care facility must demonstrate competency through:

• Shadowing another staff member for one week with no formal evaluation
• Certification only for nurses who administer controlled substances
• A one-time orientation module upon hire with no reassessment
• Initial training and periodic competency evaluations per state and federal standards (Correct answer)

Correct answer: Initial training and periodic competency evaluations per state and federal standards

Regulations require documented initial and ongoing competency evaluations for all staff involved in medication administration to ensure resident safety.

Question 11: During budget planning, the IT team is told to start each cost category from zero and justify every dollar. What budgeting method is being used?

• Zero-based budgeting (Correct answer)
• Rolling forecast budgeting
• Incremental budgeting
• Activity-based budgeting

Correct answer: Zero-based budgeting

Zero-based budgeting requires justifying all expenses from scratch each period rather than basing them on prior-year spending.

Question 12: A facility administrator discovers that a resident's medication label does not match the prescriber's current order. The FIRST action should be to:

• Dispose of the incorrectly labeled medication immediately
• Document the discrepancy in the resident's chart without further action
• Hold the medication and contact the pharmacy to clarify (Correct answer)
• Administer the medication as labeled and note the discrepancy

Correct answer: Hold the medication and contact the pharmacy to clarify

When a label discrepancy is identified, the medication should be held and the pharmacy contacted immediately to resolve the error before administration.

Question 13: An administrator is required to report a medication error that caused serious harm to a resident. Under OBRA regulations, this report must be made to:

• The pharmacy that dispensed the medication
• Only the attending physician and the family
• The state survey agency and, if applicable, the ombudsman program (Correct answer)
• The CDC national medication error database

Correct answer: The state survey agency and, if applicable, the ombudsman program

Serious adverse events, including harmful medication errors, must be reported to the state survey agency and potentially the long-term care ombudsman per OBRA requirements.

Question 14: What is the PRIMARY purpose of continuing education requirements in Resident Rights & Advocacy for CSA professionals?

• Networking with other professionals in the field
• Maintaining current knowledge and competency as the field evolves (Correct answer)
• Earning additional credentials for career advancement
• Fulfilling mandatory regulatory requirements only

Correct answer: Maintaining current knowledge and competency as the field evolves

Continuing education in Resident Rights & Advocacy ensures professionals maintain current knowledge and skills as standards, technologies, and best practices evolve in the Certified System Administrator field.

Question 15: When a conflict arises between standard procedures and a unique situation in Financial Management & Budgeting, what should a CSA professional prioritize?

• The most cost-effective solution available
• Safety and ethical obligations while seeking expert consultation (Correct answer)
• The preference of the client or stakeholder
• Strict adherence to written procedures without exception

Correct answer: Safety and ethical obligations while seeking expert consultation

Safety and ethics always take priority in Financial Management & Budgeting. When standard procedures don't adequately address a unique situation, consulting with experienced colleagues or supervisors ensures both safety and professional standards are maintained.

Question 16: Which NIST framework function focuses on developing and implementing appropriate safeguards to ensure delivery of critical infrastructure services?

• Identify
• Detect
• Protect (Correct answer)
• Respond

Correct answer: Protect

The 'Protect' function in the NIST Cybersecurity Framework covers access control, awareness training, data security, and protective technologies.

Question 17: An IT project is estimated to cost $500,000 but is now forecasted to cost $650,000. The $150,000 difference is known as:

• Scope creep cost
• Contingency reserve
• Budget overrun / cost variance (Correct answer)
• Sunk cost

Correct answer: Budget overrun / cost variance

A cost variance (or budget overrun) is the difference between the planned budget and the revised forecast or actual cost.

Question 18: A consultant pharmacist conducting a medication regimen review (MRR) in a nursing facility is required to report irregularities to:

• The state board of pharmacy exclusively
• The attending physician and the Director of Nursing (Correct answer)
• The administrator and the regional CMS office
• Only the Director of Nursing

Correct answer: The attending physician and the Director of Nursing

Regulations require the consultant pharmacist to report medication irregularities to the attending physician and the Director of Nursing for follow-up action.

Question 19: Which backup strategy copies only data that has changed since the last full or incremental backup, and resets the archive bit after each backup?

• Full backup
• Mirror backup
• Incremental backup (Correct answer)
• Differential backup

Correct answer: Incremental backup

Incremental backups copy only changes since the last backup of any type and reset the archive bit, resulting in faster backups but longer restore times.

Question 20: The GNU General Public License (GPL) v3 requires that when distributing modified GPL-licensed software in binary form, you must also:

• Pay royalties to the original author
• License all other software in the same product under GPL
• Provide access to the corresponding source code (Correct answer)
• Obtain written permission from the Free Software Foundation

Correct answer: Provide access to the corresponding source code

GPL v3 requires that distributors of modified binaries provide corresponding complete source code under the same GPL v3 license terms.

Question 21: A technician notices vibration in a pump during operation. Which diagnostic tool is best suited to analyze this issue?

• Multimeter
• Ultrasonic thickness gauge
• Thermal imaging camera
• Vibration analyzer (Correct answer)

Correct answer: Vibration analyzer

A vibration analyzer measures frequency and amplitude of vibrations to diagnose mechanical issues in rotating equipment.

Question 22: In Resident Rights & Advocacy, what is the FIRST step a CSA professional should take when encountering a new case or situation?

• Implement an immediate solution based on past experience
• Conduct a comprehensive assessment and gather all relevant information (Correct answer)
• Document the situation and wait for further instructions
• Consult with a supervisor before taking any action

Correct answer: Conduct a comprehensive assessment and gather all relevant information

In Resident Rights & Advocacy, a thorough initial assessment ensures all relevant factors are identified before deciding on an appropriate course of action. This systematic approach is fundamental to Certified System Administrator practice.

Question 23: A CSA is evaluating whether to build internal training content or purchase an off-the-shelf course. Which factor most strongly favors building internally?

• The required training has a one-time delivery need
• The topic is a widely-adopted industry standard skill
• The budget for training development is limited
• The training must reflect proprietary systems, processes, or organizational context (Correct answer)

Correct answer: The training must reflect proprietary systems, processes, or organizational context

Custom internal content is justified when the subject matter is specific to the organization's own tools or processes that no vendor product covers.

Question 24: What happens to an Update Set when it is marked as 'Complete'?

• It becomes read-only and can be exported for migration to another instance (Correct answer)
• It merges with the Default Update Set
• It is deleted after 30 days
• It is automatically applied to the current instance

Correct answer: It becomes read-only and can be exported for migration to another instance

Marking an Update Set Complete locks it from further changes and makes it ready for export and promotion to other instances.

Question 25: Which standard of practice is MOST important for ensuring quality in Facility Operations & Maintenance?

• Following evidence-based protocols while adapting to specific circumstances (Correct answer)
• Minimizing documentation to focus on practical work
• Strictly adhering to the same procedure in every situation
• Using the most advanced technology available regardless of need

Correct answer: Following evidence-based protocols while adapting to specific circumstances

Evidence-based protocols provide a foundation of proven practices, but effective Certified System Administrator professionals must also adapt their approach based on specific circumstances and individual case needs within Facility Operations & Maintenance.

Question 26: Which ServiceNow feature automatically redirects users to a maintenance page when a scheduled downtime window is active?

• Safe Mode
• Outage Window
• Read-Only Mode
• Maintenance Mode (Correct answer)

Correct answer: Maintenance Mode

Maintenance Mode halts normal operation and displays a configurable maintenance message to all non-admin users.

Question 27: What is the primary purpose of a firewall in a network?

• To encrypt data transmissions.
• To prevent unauthorized access and monitor traffic.
• To manage network bandwidth.
• To improve network speed.

A firewall acts as a security barrier, controlling incoming and outgoing network traffic based on predefined security rules. Its primary purpose is to prevent unauthorized access to a private network and monitor data packets, blocking malicious traffic while allowing legitimate communications, thereby protecting the network from external threats.

Question 28: Under PCI DSS Requirement 10, what is the minimum log retention period organizations must maintain for audit logs?

• 3 years
• 30 days
• 6 months
• 12 months (Correct answer)

Correct answer: 12 months

PCI DSS Requirement 10.7 mandates that audit log history be retained for at least 12 months, with at least 3 months immediately available for analysis.

Question 29: Under CMS F-Tag F758, unnecessary medications in a nursing facility are defined as medications that are used:

• Without adequate monitoring, in excessive dose, for excessive duration, or without a clinical indication (Correct answer)
• For more than 30 days without a physician review
• Without the resident's written consent on file
• Only when prescribed by a non-attending physician

Correct answer: Without adequate monitoring, in excessive dose, for excessive duration, or without a clinical indication

F758 defines unnecessary medications as those used without adequate indication, in excessive dose, for excessive duration, without monitoring, or in the presence of adverse consequences.

Question 30: A company tracks the number of defects per thousand lines of code. This measurement is known as:

• Severity Index
• Defect Removal Efficiency
• Defect Density (Correct answer)
• Test Coverage

Correct answer: Defect Density

Defect Density is calculated as the number of defects divided by the size of the software (often per KLOC), providing a normalized quality indicator.

Question 31: At the end of Q2, IT spending is at 60% of the annual budget. What does this suggest, and what should be investigated?

• Spending is perfectly on track; no action needed
• The budget should immediately be cut by 10%
• Spending may be ahead of schedule; investigate whether projects are accelerating or costs are misclassified (Correct answer)
• The remaining 40% should be encumbered to prevent overspending

Correct answer: Spending may be ahead of schedule; investigate whether projects are accelerating or costs are misclassified

At midyear (50% of the year), spending 60% of the budget suggests the pace is faster than planned, warranting a review of acceleration causes or reclassification issues.

Question 32: A healthcare worker in a long-term care facility has a newly positive tuberculin skin test (TST) result with 15mm of induration. What is the appropriate next step?

• Place the worker on prophylactic isoniazid without further evaluation
• Refer the worker for medical evaluation including a chest X-ray to rule out active TB disease (Correct answer)
• Administer a second TST in 4 weeks to confirm the positive result
• Immediately place the worker on Airborne Precautions and restrict all resident contact

Correct answer: Refer the worker for medical evaluation including a chest X-ray to rule out active TB disease

A positive TST requires prompt medical evaluation including a chest X-ray to differentiate latent TB infection from active TB disease before determining appropriate management.

Question 33: When a long-term care facility uses an automated medication dispensing cabinet (ADC), the administrator must ensure that:

• Pharmacy oversight is no longer needed because the ADC tracks all transactions automatically
• Any staff member with a PIN can access all medications to improve speed
• Access is restricted by role, all transactions are logged, and override use is monitored and audited (Correct answer)
• Controlled substances are excluded from the ADC system entirely

Correct answer: Access is restricted by role, all transactions are logged, and override use is monitored and audited

ADCs must have role-based access controls, complete transaction audit trails, and administrative oversight of override usage to prevent diversion and errors.

Question 34: The purpose of a facility antibiogram is to:

• List all antibiotics approved for use within the facility formulary
• Track which residents have been prescribed antibiotics in the past year
• Summarize local patterns of antimicrobial resistance to guide empiric antibiotic selection (Correct answer)
• Document adverse reactions to antibiotics reported by residents

Correct answer: Summarize local patterns of antimicrobial resistance to guide empiric antibiotic selection

An antibiogram summarizes local susceptibility data, helping clinicians choose the most effective empiric antibiotic therapy based on the pathogens and resistance patterns prevalent in the facility.

Question 35: An organization maintains its backup tapes at a facility located 2 miles from the primary data center. A regional earthquake affects both sites simultaneously. What backup strategy flaw does this illustrate?

• Missing encryption on backup tapes
• Insufficient backup frequency
• Inadequate geographic separation of backup media (Correct answer)
• Failure to use incremental backups

Correct answer: Inadequate geographic separation of backup media

Storing backups too close to the primary site means a single regional disaster can destroy both, violating the geographic separation principle of off-site backup storage.

Question 36: What does 802.1X provide in a network environment?

• Port-based network access control using authentication (Correct answer)
• VLAN tagging across trunk links
• Spanning Tree loop prevention
• Wireless channel bonding

Correct answer: Port-based network access control using authentication

IEEE 802.1X enforces port-based access control, requiring devices to authenticate (via RADIUS) before being granted network access.

Question 37: Under 42 CFR §483.60, what is the minimum frequency with which a qualified dietitian must assess residents in a Medicare/Medicaid-certified nursing facility?

• Annually only
• Weekly
• As needed based on care plan and significant changes (Correct answer)
• Daily

Correct answer: As needed based on care plan and significant changes

Federal regulations require a qualified dietitian to assess residents based on their individual care plan schedule and whenever a significant nutritional change occurs.

Question 38: Which of the following best describes an administrator's responsibility during a CMS survey focused on medication management?

• Temporarily stopping medication administration during the survey period
• Delegating all surveyor interactions to the Director of Nursing
• Directing nursing staff to withhold medication records from surveyors
• Ensuring all medication storage, documentation, and administration practices align with current regulations (Correct answer)

Correct answer: Ensuring all medication storage, documentation, and administration practices align with current regulations

The administrator is responsible for facility-wide regulatory compliance, including ensuring medication practices meet CMS standards and that surveyors have appropriate access to records.

Question 39: A system administrator must define the Maximum Tolerable Downtime (MTD) for a payroll system that processes checks every two weeks. Which value is MOST appropriate for MTD?

• 72 hours
• 14 days (Correct answer)
• 4 hours
• 30 minutes

Correct answer: 14 days

MTD for a bi-weekly payroll system is typically up to 14 days, as missing one full payroll cycle would be unacceptable, so recovery must occur within that window.

Question 40: Which clone excluder type prevents sensitive data from being copied during an instance clone?

• Update Set Exclusions
• Data Preservers and Exclude Tables (Correct answer)
• Property Filters
• Field Masks

Correct answer: Data Preservers and Exclude Tables

Clone Data Preservers keep certain target records intact, while Exclude Tables prevent specific tables from being cloned from source.

Question 41: A resident's care plan indicates a low-sodium diet, but the resident asks for salty snacks. After education on risks, the resident still insists. The appropriate response is:

• Honor the informed request, update the care plan, and document the discussion (Correct answer)
• Add a salt substitute without telling the resident
• Refuse to provide any salty foods to protect the resident's health
• Contact family to override the resident's decision

Correct answer: Honor the informed request, update the care plan, and document the discussion

An informed resident with decision-making capacity may choose to deviate from recommended diet; staff must document and update the care plan accordingly.

Question 42: A resident with a do-not-resuscitate (DNR) order stops breathing. The correct staff action is:

• Begin CPR while waiting for a physician to confirm the DNR
• Follow the DNR order, provide comfort measures, and notify the charge nurse (Correct answer)
• Call 911 immediately regardless of the DNR
• Ask family members present whether to perform CPR

Correct answer: Follow the DNR order, provide comfort measures, and notify the charge nurse

A valid DNR order must be honored; staff provide comfort care and notify the nurse rather than initiating resuscitation.

Question 43: Federal law requires nursing facilities to post the contact information for which agency in a visible location?

• The State Long-Term Care Ombudsman program (Correct answer)
• The local chamber of commerce
• The American Medical Association
• The facility's liability insurance provider

Correct answer: The State Long-Term Care Ombudsman program

Facilities are federally required to visibly post the Long-Term Care Ombudsman contact information so residents and families can easily access advocacy resources.

Question 44: Which fire suppression system is MOST appropriate for a data center server room to minimize hardware damage?

• Clean agent gaseous suppression (e.g., FM-200 or Novec 1230) (Correct answer)
• Foam-based suppression system
• Dry-pipe sprinkler system
• Wet-pipe sprinkler system

Correct answer: Clean agent gaseous suppression (e.g., FM-200 or Novec 1230)

Clean agent gaseous systems suppress fire without leaving residue or causing water damage, making them ideal for protecting sensitive electronic equipment.

Question 45: Under the Americans with Disabilities Act (ADA), a nursing facility must provide:

• Daily physician visits for all residents
• Free private rooms for all residents
• Reasonable accommodations to ensure equal access for residents with disabilities (Correct answer)
• Interpreters for every language spoken by residents

Correct answer: Reasonable accommodations to ensure equal access for residents with disabilities

The ADA requires facilities to make reasonable accommodations so residents with disabilities can access services and activities equally.

Question 46: Which standard of practice is MOST important for ensuring quality in Regulatory Compliance & Licensing?

• Strictly adhering to the same procedure in every situation
• Following evidence-based protocols while adapting to specific circumstances (Correct answer)
• Minimizing documentation to focus on practical work
• Using the most advanced technology available regardless of need

Correct answer: Following evidence-based protocols while adapting to specific circumstances

Evidence-based protocols provide a foundation of proven practices, but effective Certified System Administrator professionals must also adapt their approach based on specific circumstances and individual case needs within Regulatory Compliance & Licensing.

Question 47: In IT financial management, what does the term 'run the business' (RTB) spending refer to?

• Vendor contract negotiations
• R&D expenses for innovation projects
• Costs to maintain and operate existing IT systems and services (Correct answer)
• Capital investments in new IT projects

Correct answer: Costs to maintain and operate existing IT systems and services

Run-the-business (RTB) costs cover keeping existing systems operational—maintenance, support, licensing—as opposed to grow/transform-the-business projects.

Question 48: A facility manager wants to reduce water consumption in cooling towers. Which approach directly reduces evaporative water loss?

• Lowering chilled water supply temperature
• Increasing condenser water flow rate
• Raising the cycles of concentration (Correct answer)
• Installing variable frequency drives on cooling tower fans

Correct answer: Raising the cycles of concentration

Raising cycles of concentration allows more dissolved solids before blowdown is needed, reducing total makeup water consumption.

Question 49: What is the primary purpose of an infrared (IR) thermography scan during a facility electrical inspection?

• Test insulation resistance of wiring
• Detect hot spots indicating loose connections, overloads, or failing components (Correct answer)
• Identify improperly grounded circuits
• Measure power factor across distribution panels

Correct answer: Detect hot spots indicating loose connections, overloads, or failing components

IR thermography identifies abnormal heat signatures in electrical systems that indicate potential faults before they cause failures or fires.

Question 50: Which fire suppression system is most appropriate for a server room to avoid water damage to equipment?

• Deluge system
• Wet pipe sprinkler
• Dry pipe sprinkler
• Clean agent (gaseous) suppression (Correct answer)

Correct answer: Clean agent (gaseous) suppression

Clean agent systems use inert or chemical gases to suppress fires without leaving residue or causing water damage to electronics.

Question 51: A sysadmin performing a post-incident review discovers that alerts were generated 4 hours before the incident but were not acted on. Which remediation action BEST addresses this gap?

• Implement an escalation policy ensuring unacknowledged alerts auto-escalate to on-call management (Correct answer)
• Disable alerts that generate false positives
• Increase the sensitivity threshold on all monitoring rules
• Move monitoring responsibilities to a third-party SOC

Correct answer: Implement an escalation policy ensuring unacknowledged alerts auto-escalate to on-call management

An auto-escalation policy ensures that unacknowledged alerts reach higher levels of the on-call chain, preventing critical warnings from being silently missed.

Question 52: Which standard of practice is MOST important for ensuring quality in Financial Management & Budgeting?

• Using the most advanced technology available regardless of need
• Strictly adhering to the same procedure in every situation
• Minimizing documentation to focus on practical work
• Following evidence-based protocols while adapting to specific circumstances (Correct answer)

Correct answer: Following evidence-based protocols while adapting to specific circumstances

Evidence-based protocols provide a foundation of proven practices, but effective Certified System Administrator professionals must also adapt their approach based on specific circumstances and individual case needs within Financial Management & Budgeting.

Question 53: Which QA activity is performed to ensure that a fixed defect has been correctly resolved without introducing new issues?

• Test condition identification
• Confirmation testing (re-testing) and regression testing (Correct answer)
• Boundary value analysis
• Exploratory testing

Correct answer: Confirmation testing (re-testing) and regression testing

Confirmation testing verifies the specific defect fix works, while regression testing ensures the fix did not break other areas of the application.

Question 54: What is the purpose of the 'glide.db.pool.connections' system property in ServiceNow?

• It sets the number of active users allowed
• It defines the memory allocated to the JVM
• It configures the cache expiration interval
• It controls the number of database connections available to the application (Correct answer)

Correct answer: It controls the number of database connections available to the application

The glide.db.pool.connections property determines how many simultaneous database connections the instance can maintain.

Question 55: What is the primary purpose of a Resident Assessment Protocol (RAP) triggered during the MDS process?

• To bill Medicare for services
• To document physician orders
• To report quality measures to CMS
• To identify risk areas and guide individualized care planning (Correct answer)

Correct answer: To identify risk areas and guide individualized care planning

RAPs (now called Care Area Assessments) flag potential clinical problems and guide the interdisciplinary team in developing targeted, individualized care plans.

Question 56: A care plan conference should include which of the following participants?

• Physician and director of nursing only
• Administrator and department heads only
• Resident, family/representative, and interdisciplinary team (Correct answer)
• State surveyor and ombudsman

Correct answer: Resident, family/representative, and interdisciplinary team

Person-centered care planning requires the resident, their family or legal representative, and the interdisciplinary team to participate in care conferences.

Question 57: Which QA role is primarily responsible for evaluating whether a product meets business requirements from the end-user perspective?

• Security auditor
• Unit tester
• Performance engineer
• User Acceptance Tester (UAT) (Correct answer)

Correct answer: User Acceptance Tester (UAT)

User Acceptance Testing (UAT) is performed by end-users or business stakeholders to validate that the system fulfills business requirements before go-live.

Question 58: An organization subject to GDPR experiences a personal data breach. Within what timeframe must they notify the relevant supervisory authority if the breach poses a risk to individuals?

• 7 days
• 72 hours (Correct answer)
• 24 hours
• 48 hours

Correct answer: 72 hours

GDPR Article 33 requires notification to the supervisory authority within 72 hours of becoming aware of a breach, where feasible.

Question 59: Which staffing model is most appropriate when an IT department needs specialized skills for a defined, short-term project?

• Redistribute the work among existing staff without additional resources
• Delay the project until budget allows a full-time hire
• Hire a full-time permanent employee for the role
• Engage a contractor or staff augmentation resource for the project duration (Correct answer)

Correct answer: Engage a contractor or staff augmentation resource for the project duration

Contractors and staff augmentation provide specialized skills on a flexible, time-limited basis without the long-term commitment of a permanent hire.

Question 60: During a tabletop exercise, team members walk through a disaster scenario step-by-step. What is the KEY advantage of this exercise type over a full simulation?

• It validates RTO and RPO metrics with real data
• It tests actual system failover mechanisms
• It identifies plan gaps with minimal cost and no operational disruption (Correct answer)
• It replaces the need for a Business Impact Analysis

Correct answer: It identifies plan gaps with minimal cost and no operational disruption

Tabletop exercises expose weaknesses in plans and team understanding through discussion at very low cost, without risking production systems or causing downtime.

Question 61: Why is system performance monitoring important after updates and repairs?

• To verify the completion of the updates.
• To prevent unauthorized access.
• To clean the system hardware.
• To track the system's performance and identify potential issues.

After updates or repairs, system performance monitoring is vital to ensure that the changes have not negatively impacted the system's operation. It helps track key metrics, identify any new bottlenecks, or uncover unexpected issues that might arise from the modifications, ensuring the system continues to run optimally and efficiently.

Question 62: An administrator discovers that backup jobs have been completing successfully for months, but restores from those backups consistently fail. What is the most likely root cause?

• The backup window is too short
• The backup media is write-protected
• The backup software license expired
• Backup verification or integrity testing was never performed (Correct answer)

Correct answer: Backup verification or integrity testing was never performed

Backups should be regularly tested via restore drills; a backup that was never verified may be silently corrupted or incomplete.

Question 63: Under NFPA 70E, what is the primary goal of an Arc Flash Hazard Analysis?

• Identify load imbalances across distribution phases
• Calculate monthly electrical utility costs
• Document all electrical equipment serial numbers
• Determine incident energy levels to select appropriate PPE for electrical work (Correct answer)

Correct answer: Determine incident energy levels to select appropriate PPE for electrical work

Arc flash analysis calculates potential energy released during an arc flash event to establish safe work boundaries and required PPE categories.

Question 64: Under OBRA regulations, how often must a nursing facility complete a comprehensive resident assessment (MDS)?

• Every 6 months
• Within 14 days of admission, then at least annually with quarterly reviews (Correct answer)
• Only upon significant change in condition
• Annually

Correct answer: Within 14 days of admission, then at least annually with quarterly reviews

OBRA requires an MDS within 14 days of admission, quarterly reviews, and annual comprehensive reassessments.

Question 65: Which standard of practice is MOST important for ensuring quality in Quality Assurance Programs?

• Using the most advanced technology available regardless of need
• Following evidence-based protocols while adapting to specific circumstances (Correct answer)
• Strictly adhering to the same procedure in every situation
• Minimizing documentation to focus on practical work

Correct answer: Following evidence-based protocols while adapting to specific circumstances

Evidence-based protocols provide a foundation of proven practices, but effective Certified System Administrator professionals must also adapt their approach based on specific circumstances and individual case needs within Quality Assurance Programs.

Question 66: What is the purpose of network segmentation?

• To increase network bandwidth.
• To improve data encryption.
• To reduce the amount of data stored on a server.
• To enhance network security by limiting access to sensitive areas.

Network segmentation involves dividing a computer network into multiple smaller, isolated segments or subnets. The primary purpose of this strategy is to enhance network security by limiting the scope of potential breaches. By restricting communication between segments, an attacker who compromises one part of the network cannot easily move laterally to access sensitive areas, thus containing threats and reducing the attack surface.

Question 67: An administrator needs to temporarily disable all notifications for a major maintenance window. What is the fastest way to achieve this in ServiceNow?

• Set the 'Send when' condition to false on each notification
• Deactivate every user account temporarily
• Delete all notification records
• Disable the Email Sending property in System Properties (Correct answer)

Correct answer: Disable the Email Sending property in System Properties

Setting the 'glide.email.send' property to false in System Properties globally suppresses all outbound email notifications instantly.

Question 68: What documentation practice is considered essential in Medication Management Oversight within the Certified System Administrator field?

• Completing all documentation at the end of the workday
• Recording actions, observations, and outcomes in real-time or as close to the event as possible (Correct answer)
• Only documenting unusual events or complications
• Using shorthand notes that can be expanded later if needed

Correct answer: Recording actions, observations, and outcomes in real-time or as close to the event as possible

Real-time or near-real-time documentation in Medication Management Oversight ensures accuracy, provides a contemporaneous record, and is considered the gold standard for professional accountability and legal defensibility.

Question 69: What is two-factor authentication (2FA)?

• Using a username and password.
• Combining two forms of authentication for security.
• Requiring only a password.
• Using a fingerprint scanner alone.

Two-factor authentication (2FA) enhances security by requiring users to provide two different types of credentials from distinct categories. These categories typically include something the user *knows* (like a password), something the user *has* (like a phone or token), and something the user *is* (like a fingerprint). By combining two of these factors, 2FA significantly reduces the risk of unauthorized access even if one factor is compromised.

Question 70: A ServiceNow instance is returning '503 Service Unavailable' errors intermittently during peak hours. What is the most likely cause?

• A corrupt Update Set
• Incorrect ACL configuration
• Instance reaching transaction or memory capacity limits (Correct answer)
• An expired SSL certificate

Correct answer: Instance reaching transaction or memory capacity limits

503 errors in ServiceNow typically indicate the instance has hit its transaction node capacity or memory limits, causing requests to be rejected.

Question 71: Which metric measures how quickly an IT investment recovers its initial cost from net benefits?

• Payback Period (Correct answer)
• Internal Rate of Return (IRR)
• Net Present Value (NPV)
• Earnings Before Interest and Taxes (EBIT)

Correct answer: Payback Period

The payback period calculates how long it takes for cumulative net benefits to equal the initial investment cost.

Question 72: SOC 2 Type II reports differ from SOC 2 Type I reports primarily because Type II reports:

• Apply only to cloud service providers
• Cover a broader set of Trust Service Criteria
• Evaluate design and operating effectiveness over a period of time (Correct answer)
• Are prepared by management rather than external auditors

Correct answer: Evaluate design and operating effectiveness over a period of time

SOC 2 Type II evaluates both the design and operating effectiveness of controls over a defined review period, typically 6–12 months.

Question 73: IT leadership presents three cloud pricing options: reserved instances, on-demand, and spot instances. Which is typically most cost-effective for predictable, steady-state workloads?

• Burstable instances
• On-demand instances
• Spot instances
• Reserved instances (Correct answer)

Correct answer: Reserved instances

Reserved instances offer significant discounts (up to 72%) over on-demand pricing in exchange for a 1- or 3-year commitment, ideal for steady workloads.

Question 74: A resident who is cognitively capable must be offered the opportunity to participate in their own care plan conference. Under OBRA 87, what happens if the resident declines participation?

• The ombudsman must attend in the resident's place
• The facility may proceed without the resident and document the declination (Correct answer)
• The physician must make all care decisions unilaterally
• The conference is cancelled until the resident agrees

Correct answer: The facility may proceed without the resident and document the declination

If a capable resident declines to attend their care conference, the facility proceeds with the meeting and documents that the resident was offered the opportunity but chose not to participate.

Question 75: What is the primary purpose of the MID Server in a ServiceNow implementation?

• To host the ServiceNow application database
• To render the ServiceNow UI for end users
• To store and manage Update Sets
• To facilitate communication between the ServiceNow cloud instance and on-premises systems (Correct answer)

Correct answer: To facilitate communication between the ServiceNow cloud instance and on-premises systems

The MID Server is a Java application that acts as a secure bridge between the ServiceNow cloud and systems within a private network.

Question 76: Your organization uses a chargeback model for IT services. What is the primary purpose of this approach?

• To transfer ownership of IT assets to individual departments
• To allocate IT costs to the business units that consume them (Correct answer)
• To punish departments that overspend
• To eliminate the need for an IT budget

Correct answer: To allocate IT costs to the business units that consume them

Chargeback models assign IT costs directly to the consuming business units, promoting accountability and accurate cost attribution.

Question 77: What minimum contact time with soap and water is recommended by the CDC for effective hand hygiene?

• 30 seconds
• 60 seconds
• 10 seconds
• 20 seconds (Correct answer)

Correct answer: 20 seconds

The CDC recommends scrubbing hands with soap and water for at least 20 seconds to effectively reduce microbial contamination.

Question 78: In Financial Management & Budgeting, what is the FIRST step a CSA professional should take when encountering a new case or situation?

• Conduct a comprehensive assessment and gather all relevant information (Correct answer)
• Implement an immediate solution based on past experience
• Consult with a supervisor before taking any action
• Document the situation and wait for further instructions

Correct answer: Conduct a comprehensive assessment and gather all relevant information

In Financial Management & Budgeting, a thorough initial assessment ensures all relevant factors are identified before deciding on an appropriate course of action. This systematic approach is fundamental to Certified System Administrator practice.

Question 79: In long-term care, 'advance care planning' documentation such as a POLST form primarily communicates which information?

• The resident's financial assets and insurance coverage
• The resident's medical treatment preferences for end-of-life or serious illness (Correct answer)
• The facility's emergency evacuation procedures
• The physician's billing codes for skilled services

Correct answer: The resident's medical treatment preferences for end-of-life or serious illness

A POLST (Physician Orders for Life-Sustaining Treatment) form translates a resident's wishes about CPR, hospitalization, and other interventions into actionable medical orders.

Question 80: How does risk management apply to daily practice in Financial Management & Budgeting for Certified System Administrator professionals?

• Only through responding to incidents after they occur
• By avoiding high-risk situations entirely
• Through annual safety audits exclusively
• Through proactive identification of potential hazards and implementation of preventive measures (Correct answer)

Correct answer: Through proactive identification of potential hazards and implementation of preventive measures

Effective risk management in Financial Management & Budgeting requires proactive hazard identification and preventive measures, not just reactive responses. This approach reduces incidents, improves outcomes, and protects both professionals and clients.

Question 81: Which score on the Mini Nutritional Assessment (MNA) indicates that a nursing facility resident is at risk for malnutrition and requires a full dietitian assessment?

• 17–23.5 (Correct answer)
• Any score below 30
• Less than 17
• 24–30

Correct answer: 17–23.5

An MNA screening score of 17–23.5 indicates risk for malnutrition and should trigger a full dietitian assessment and care plan intervention.

Question 82: What does 'Mean Time Between Failures' (MTBF) measure in facility equipment management?

• Average time to repair a failed component
• Average operational time between successive failures (Correct answer)
• Cost per failure incident
• Total downtime over a year

Correct answer: Average operational time between successive failures

MTBF is the average time a system operates between failures, used to estimate equipment reliability.

Question 83: How does risk management apply to daily practice in Regulatory Compliance & Licensing for Certified System Administrator professionals?

• Through annual safety audits exclusively
• Only through responding to incidents after they occur
• By avoiding high-risk situations entirely
• Through proactive identification of potential hazards and implementation of preventive measures (Correct answer)

Correct answer: Through proactive identification of potential hazards and implementation of preventive measures

Effective risk management in Regulatory Compliance & Licensing requires proactive hazard identification and preventive measures, not just reactive responses. This approach reduces incidents, improves outcomes, and protects both professionals and clients.

Question 84: What type of maintenance is being performed when a technician uses oil analysis to monitor lubricant degradation in rotating equipment?

• Predictive (condition-based) maintenance (Correct answer)
• Preventive maintenance
• Emergency maintenance
• Corrective maintenance

Correct answer: Predictive (condition-based) maintenance

Oil analysis monitors equipment condition in real time to predict failures before they occur, which is the definition of predictive maintenance.

Question 85: When a resident's legal guardian makes decisions the resident clearly opposes, staff should:

• Always defer to the guardian without question
• Contact law enforcement immediately
• Ignore the resident's objections since guardianship overrides all wishes
• Assess whether the resident has capacity and consult the care team and ethics committee if needed (Correct answer)

Correct answer: Assess whether the resident has capacity and consult the care team and ethics committee if needed

Staff should assess the resident's decision-making capacity and may involve an ethics committee when guardian decisions appear to conflict with the resident's known wishes.

Question 86: A resident experiences a suspected adverse drug reaction (ADR) following a new medication. The administrator's responsibility includes ensuring that:

• The pharmacy is solely responsible for investigating the reaction
• The family is notified only if the reaction is life-threatening
• The medication is quietly discontinued without documentation
• The event is documented, the prescriber is notified, and an incident report is filed (Correct answer)

Correct answer: The event is documented, the prescriber is notified, and an incident report is filed

Suspected ADRs require thorough documentation, immediate prescriber notification, and completion of an incident report as part of the facility's quality assurance process.

Question 87: A resident wishes to vote in an upcoming election. The facility must:

• Discourage political activity to maintain a peaceful environment
• Limit voting to residents without cognitive impairment
• Determine eligibility before allowing the resident to vote
• Assist the resident in exercising their right to vote, including arranging absentee ballots (Correct answer)

Correct answer: Assist the resident in exercising their right to vote, including arranging absentee ballots

Residents retain their right to vote, and facilities must assist with arrangements such as absentee ballots or transportation.

Question 88: A resident with capacity wants to leave the facility against medical advice (AMA). Staff should:

• Provide required information, have them sign AMA documentation, and allow them to leave (Correct answer)
• Physically prevent the resident from leaving
• Lock the exit doors temporarily
• Call the family to physically restrain the resident

Correct answer: Provide required information, have them sign AMA documentation, and allow them to leave

A cognitively capable resident has the right to leave AMA; staff must inform them of risks and document but cannot forcibly detain them.

Question 89: What must a facility do before implementing a chemical restraint (psychotropic medication) for a non-emergency behavioral symptom?

• Apply the medication and monitor for 48 hours before documenting
• Try non-pharmacological interventions first and obtain informed consent from the resident or representative (Correct answer)
• Obtain verbal permission from any staff member present
• Notify the state survey agency in advance

Correct answer: Try non-pharmacological interventions first and obtain informed consent from the resident or representative

CMS requires that non-pharmacological interventions be attempted first and that informed consent be obtained before using medications as chemical restraints.

Question 90: What are CMS 'Quality Measures' (QMs) derived from in a nursing facility?

• Employee satisfaction surveys
• Physician progress notes
• State inspection reports only
• MDS assessment data submitted to CMS (Correct answer)

Correct answer: MDS assessment data submitted to CMS

CMS Quality Measures are calculated from MDS data that facilities submit, and they are publicly reported on the Nursing Home Care Compare website.

Question 91: A resident refuses to participate in a scheduled group activity. What is the correct staff response?

• Ask a family member to convince the resident to attend
• Honor the refusal and document it without pressure (Correct answer)
• Require participation since it is on the care plan
• Report the refusal to the charge nurse immediately

Correct answer: Honor the refusal and document it without pressure

Residents have the right to refuse any activity, and staff must respect that choice and document it.

Question 92: Which procurement strategy involves purchasing IT hardware through a leasing arrangement rather than outright ownership to preserve capital?

• Just-in-time procurement
• Competitive bidding
• Operating lease / hardware-as-a-service (Correct answer)
• Vendor consolidation

Correct answer: Operating lease / hardware-as-a-service

Operating leases and HaaS models let organizations use equipment without ownership, preserving capital and converting CapEx to predictable OpEx.

Question 93: A system administrator wants to verify that all software installed on company systems is licensed. Which process best describes this ongoing compliance activity?

• Software asset management (SAM) (Correct answer)
• Vulnerability scanning
• Configuration baseline auditing
• Penetration testing

Correct answer: Software asset management (SAM)

Software Asset Management (SAM) is the practice of managing and optimizing the purchase, deployment, and retirement of software licenses within an organization.

Question 94: Which scenario best illustrates the concept of 'dignity of risk'?

• Administering a sedative to prevent a resident from wandering
• Allowing a resident to choose to eat in their room despite isolation concerns (Correct answer)
• Restricting a diabetic resident from all desserts without their input
• Staff preventing a resident from walking independently to eliminate fall risk

Correct answer: Allowing a resident to choose to eat in their room despite isolation concerns

Dignity of risk means allowing residents to make choices that carry some risk rather than removing autonomy in the name of safety.

Question 95: How does risk management apply to daily practice in Emergency Preparedness & Safety for Certified System Administrator professionals?

• Through proactive identification of potential hazards and implementation of preventive measures (Correct answer)
• Only through responding to incidents after they occur
• By avoiding high-risk situations entirely
• Through annual safety audits exclusively

Correct answer: Through proactive identification of potential hazards and implementation of preventive measures

Effective risk management in Emergency Preparedness & Safety requires proactive hazard identification and preventive measures, not just reactive responses. This approach reduces incidents, improves outcomes, and protects both professionals and clients.

Question 96: An organization negotiates a 3-year Enterprise Agreement (EA) with a software vendor. What financial risk does this introduce?

• The vendor can terminate the agreement unilaterally
• Prices may increase annually within the agreement
• The organization is locked into a fixed cost commitment regardless of actual usage changes (Correct answer)
• Software updates are no longer included in the agreement

Correct answer: The organization is locked into a fixed cost commitment regardless of actual usage changes

Enterprise Agreements commit organizations to fixed payments for the contract term, creating risk if usage drops or technology needs change.

Question 97: An employee witnesses a coworker collapse in the server room. No AED is available on that floor. What is the CORRECT immediate action sequence?

• Call 911 immediately, begin CPR if trained, and send someone to retrieve the nearest AED (Correct answer)
• Begin CPR immediately, then call 911 after two minutes
• Wait for a trained first responder to arrive before touching the victim
• Move the victim to a more accessible location before calling for help

Correct answer: Call 911 immediately, begin CPR if trained, and send someone to retrieve the nearest AED

The correct sequence is to call 911 immediately, begin hands-only CPR if trained, and dispatch someone to locate the nearest AED to maximize survival odds.

Question 98: A resident asks to see their medical record. Under HIPAA, the facility must provide access:

• Within 72 hours only in emergency situations
• Only to the resident's legal guardian
• Only with physician approval
• Within 30 days of the request, with a possible 30-day extension (Correct answer)

Correct answer: Within 30 days of the request, with a possible 30-day extension

HIPAA grants residents the right to access their medical records within 30 days, extendable once by another 30 days.

Question 99: Which RAID level provides disk striping with parity distributed across all drives, offering both performance and fault tolerance?

• RAID 0
• RAID 1
• RAID 10
• RAID 5 (Correct answer)

Correct answer: RAID 5

RAID 5 stripes data and distributes parity across all member drives, tolerating a single drive failure.

Question 100: Which compliance standard specifically addresses security controls for organizations processing, storing, or transmitting cardholder data?

• PCI DSS (Correct answer)
• NIST CSF
• ISO 27001
• SOC 2

Correct answer: PCI DSS

The Payment Card Industry Data Security Standard (PCI DSS) was established by major card brands specifically to protect cardholder data environments.

Question 101: Which standard of practice is MOST important for ensuring quality in Medication Management Oversight?

• Using the most advanced technology available regardless of need
• Minimizing documentation to focus on practical work
• Strictly adhering to the same procedure in every situation
• Following evidence-based protocols while adapting to specific circumstances (Correct answer)

Correct answer: Following evidence-based protocols while adapting to specific circumstances

Evidence-based protocols provide a foundation of proven practices, but effective Certified System Administrator professionals must also adapt their approach based on specific circumstances and individual case needs within Medication Management Oversight.

Question 102: What should be done after identifying security vulnerabilities during system maintenance?

• Perform a full system reset.
• Apply patches or updates immediately.
• Ignore the issue until it becomes critical.
• Notify the end users about the issue.

Upon identifying security vulnerabilities, the most critical action is to apply relevant patches or updates without delay. These patches are specifically designed to close security gaps and protect the system from potential exploits. Prompt application minimizes the window of opportunity for attackers and maintains system integrity and security.

Question 103: A user reports that a form is loading slowly. The administrator suspects a client script is causing the delay. Which tool should be used to diagnose this?

• Field Watcher
• JavaScript Debugger in the browser (Correct answer)
• Session Debug
• System Diagnostics

Correct answer: JavaScript Debugger in the browser

The browser's built-in JavaScript Debugger allows administrators to profile and identify slow-running client-side scripts.

Question 104: What is the correct method for disposing of contaminated sharps in a long-term care facility?

• Place in a labeled biohazard bag and dispose with regular medical waste
• Immediately place uncapped needles and sharps directly into an approved puncture-resistant sharps container (Correct answer)
• Wrap in multiple layers of gauze and dispose in a dedicated yellow waste bin
• Recap the needle, place in a biohazard bag, and seal before discarding

Correct answer: Immediately place uncapped needles and sharps directly into an approved puncture-resistant sharps container

Sharps must be placed immediately after use — uncapped — into an approved puncture-resistant sharps container at the point of use to prevent needlestick injuries.

Question 105: A company deploys software on 200 servers using a per-core license that allows 16 cores per license. How many licenses are required if each server has 24 physical cores?

• 200
• 300 (Correct answer)
• 600
• 400

Correct answer: 300

Each 24-core server needs 24/16 = 1.5 licenses, rounded up to 2, but per-core models typically count actual cores: 200 servers × 24 cores ÷ 16 cores/license = 300 licenses.

Question 106: MRSA stands for which of the following?

• Multi-Resistant Streptococcal Agent
• Methicillin-Resistant Staphylococcus aureus (Correct answer)
• Methicillin-Resistant Salmonella aureus
• Multi-Resistant Staphylococcal Antibiotic

Correct answer: Methicillin-Resistant Staphylococcus aureus

MRSA stands for Methicillin-Resistant Staphylococcus aureus, a strain of staph bacteria resistant to many common antibiotics including methicillin.

Question 107: What is the PRIMARY purpose of continuing education requirements in Financial Management & Budgeting for CSA professionals?

• Maintaining current knowledge and competency as the field evolves (Correct answer)
• Networking with other professionals in the field
• Fulfilling mandatory regulatory requirements only
• Earning additional credentials for career advancement

Correct answer: Maintaining current knowledge and competency as the field evolves

Continuing education in Financial Management & Budgeting ensures professionals maintain current knowledge and skills as standards, technologies, and best practices evolve in the Certified System Administrator field.

Question 108: Under OSHA's Bloodborne Pathogens Standard (29 CFR 1910.1030), the hepatitis B vaccination series must be offered free of charge to which employees?

• All employees with occupational exposure to blood or other potentially infectious materials (Correct answer)
• Only employees who have had a known exposure incident in the past 12 months
• All employees, including administrative and dietary staff
• Only licensed nursing staff who perform invasive procedures

Correct answer: All employees with occupational exposure to blood or other potentially infectious materials

OSHA requires employers to offer free hepatitis B vaccination to all employees with occupational exposure to blood or other potentially infectious materials, not just clinical staff.

Question 109: Which federally mandated assessment tool must be completed for every resident admitted to a Medicare- or Medicaid-certified nursing facility in the US?

• Resident Assessment Instrument (RAI) / MDS (Correct answer)
• OASIS-E
• HCAHPS Survey
• UB-04 Claim Form

Correct answer: Resident Assessment Instrument (RAI) / MDS

The Resident Assessment Instrument (RAI), which includes the Minimum Data Set (MDS), is federally required for all residents in certified long-term care facilities.

Question 110: Which protocol replaces Telnet for secure remote administration of network devices and servers?

• SFTP
• SSH (Correct answer)
• RDP
• SNMP

Correct answer: SSH

SSH (Secure Shell) provides encrypted remote command-line access, replacing the plaintext Telnet protocol.

Question 111: An administrator is deploying VMware vSphere. The licensing model charges per physical CPU socket. A server with 2 CPUs and 32 cores total requires how many vSphere licenses?

• 2 (Correct answer)
• 4
• 32
• 1

Correct answer: 2

VMware vSphere licenses are issued per physical CPU socket, so a dual-socket server requires exactly 2 licenses regardless of core count.

Question 112: A resident's family requests that a specific herbal supplement be given to the resident. The administrator should ensure that:

• The family is allowed to administer the supplement independently without documentation
• The supplement is refused automatically as it is not a prescription medication
• The attending physician is notified and approves the supplement before it is administered (Correct answer)
• The supplement is added to the medication administration record without physician review

Correct answer: The attending physician is notified and approves the supplement before it is administered

All supplements, including herbal products, must be reviewed and approved by the attending physician before administration to assess for drug interactions and contraindications.

Question 113: A user's account is locked out after multiple failed login attempts. Which table should the administrator check to review the lockout details?

• sys_user
• sys_user_session
• sys_auth_policy_result
• syslog_auth (Correct answer)

Correct answer: syslog_auth

The syslog_auth table records authentication events including failed login attempts and account lockouts for security auditing.

Question 114: In quality management, the concept of 'Cost of Poor Quality' (CoPQ) includes which of the following?

• Internal failure costs and external failure costs (Correct answer)
• Auditor salaries and compliance fees
• Documentation costs and test automation licenses
• Training costs and equipment upgrades

Correct answer: Internal failure costs and external failure costs

CoPQ encompasses internal failure costs (defects caught before release) and external failure costs (defects found by customers), both of which reflect the price of not meeting quality standards.

Question 115: Why is it important to test backup systems regularly?

• To improve system performance.
• To ensure that backups can be successfully restored.
• To reduce storage usage.
• To enhance network security.

Regular testing of backup systems is crucial to verify that data can be successfully restored when needed. A backup is only valuable if it is recoverable, and without testing, there's no guarantee that the backup process is working correctly or that the data itself is intact and usable. Testing helps identify potential issues with backup media, software, or procedures before a real disaster strikes, ensuring reliable data recovery.