Question 1: Which software licensing model grants the user rights to use, study, modify, and distribute the software and its source code freely?

• Open-source license (Correct answer)
• Proprietary license
• Shareware license
• Freeware license

Correct answer: Open-source license

Open-source licenses (e.g., GPL, MIT, Apache) explicitly grant users the four fundamental freedoms including use, study, modification, and redistribution.

Question 2: An organization holds Oracle Database Enterprise Edition licenses with 'Named User Plus' (NUP) licensing. The minimum NUP count per processor is:

• 25 NUPs per processor (Correct answer)
• 10 NUPs per processor
• 100 NUPs per processor
• 50 NUPs per processor

Correct answer: 25 NUPs per processor

Oracle requires a minimum of 25 Named User Plus licenses per processor for Oracle Database Enterprise Edition.

Question 3: A support team reports that their assignment group is not receiving SLA breach notifications. After checking the notification, the administrator finds it is active. What should be checked next?

• Whether the SLA table has records
• Whether the group has a manager assigned
• The number of licenses available
• The notification's condition filter and user subscription settings (Correct answer)

Correct answer: The notification's condition filter and user subscription settings

If a notification is active but not sending, the condition filter may be excluding the relevant records or users may not meet subscription criteria.

Question 4: What is the role of RAID (Redundant Array of Independent Disks) in disaster recovery?

• To reduce power consumption.
• To improve system security.
• To provide data redundancy and fault tolerance.
• To speed up data transfer.

RAID (Redundant Array of Independent Disks) plays a critical role in disaster recovery by providing data redundancy and fault tolerance. It combines multiple physical disk drives into a single logical unit, distributing data across them in various ways. This configuration ensures that if one or more drives fail, data remains accessible and can be rebuilt from the remaining drives, preventing data loss and minimizing downtime.

Question 5: A technician notices vibration in a pump during operation. Which diagnostic tool is best suited to analyze this issue?

• Ultrasonic thickness gauge
• Thermal imaging camera
• Vibration analyzer (Correct answer)
• Multimeter

Correct answer: Vibration analyzer

A vibration analyzer measures frequency and amplitude of vibrations to diagnose mechanical issues in rotating equipment.

Question 6: A resident who speaks limited English needs to discuss their care plan. The facility's best practice is to:

• Simplify the conversation and use gestures instead
• Ask a bilingual family member to interpret all medical information
• Use a qualified medical interpreter or translation service (Correct answer)
• Postpone the care plan meeting indefinitely

Correct answer: Use a qualified medical interpreter or translation service

Using a qualified medical interpreter ensures accurate communication and protects the resident's right to understand their care.

Question 7: What is the benefit of updating the system after installation?

• To increase system speed.
• To ensure the system is compatible with the network.
• To improve the visual interface.
• To apply the latest security patches and fixes.

System updates, especially immediately after installation, are vital for applying the latest security patches, bug fixes, and performance enhancements. This protects the server from newly discovered vulnerabilities and ensures optimal operation. Regularly updating significantly reduces the risk of security breaches and system instability.

Question 8: In ServiceNow, what does cloning an instance accomplish?

• It mirrors production traffic to a test environment in real time
• It copies all data and configurations from a source instance to a target instance (Correct answer)
• It duplicates only the metadata of an instance
• It creates a new empty instance with default settings

Correct answer: It copies all data and configurations from a source instance to a target instance

Cloning overwrites the target instance with a copy of the source instance's data, configurations, and customizations.

Question 9: What documentation practice is considered essential in Facility Operations & Maintenance within the Certified System Administrator field?

• Recording actions, observations, and outcomes in real-time or as close to the event as possible (Correct answer)
• Using shorthand notes that can be expanded later if needed
• Completing all documentation at the end of the workday
• Only documenting unusual events or complications

Correct answer: Recording actions, observations, and outcomes in real-time or as close to the event as possible

Real-time or near-real-time documentation in Facility Operations & Maintenance ensures accuracy, provides a contemporaneous record, and is considered the gold standard for professional accountability and legal defensibility.

Question 10: A defect severity rating of 'Critical' typically means:

• The defect has been deferred to the next release cycle
• The defect causes a system crash or complete loss of a core function with no workaround (Correct answer)
• The defect is cosmetic and does not affect functionality
• The defect affects minor features with a workaround available

Correct answer: The defect causes a system crash or complete loss of a core function with no workaround

A Critical severity defect renders the system or a major feature completely non-functional with no acceptable workaround, requiring immediate resolution.

Question 11: What is the primary purpose of a 'hot site' in a disaster recovery strategy?

• To host a read-only mirror of production data
• To provide a fully operational duplicate environment with near-zero RTO (Correct answer)
• To archive cold backups off-site
• To store hardware spares for rapid shipping

Correct answer: To provide a fully operational duplicate environment with near-zero RTO

A hot site is a fully equipped, immediately operational alternate facility designed to achieve near-zero recovery time objective (RTO).

Question 12: Under the Computer Fraud and Abuse Act (CFAA), which activity would most likely constitute a federal violation?

• A developer testing their own code on a staging server
• A contractor accessing a database beyond the scope of their authorization (Correct answer)
• An administrator using remote desktop to manage a company server
• An employee accessing authorized systems outside of business hours

Correct answer: A contractor accessing a database beyond the scope of their authorization

The CFAA prohibits accessing a computer without authorization or exceeding authorized access, which includes a contractor accessing data outside the permitted scope.

Question 13: A perpetual software license differs from a subscription license primarily in that a perpetual license:

• Grants the right to use a specific software version indefinitely after a one-time purchase (Correct answer)
• Requires annual renewal to maintain legal use
• Includes free upgrades to all future major versions indefinitely
• Allows unlimited installations across all company devices

Correct answer: Grants the right to use a specific software version indefinitely after a one-time purchase

A perpetual license grants indefinite rights to use a specific version of the software for a single upfront payment, though ongoing maintenance may require separate fees.

Question 14: Which document serves as the legal record of a resident's care planning decisions and must be kept current in the clinical record?

• Comprehensive care plan (Correct answer)
• Dietary preference form
• Incident report
• Staffing schedule

Correct answer: Comprehensive care plan

The comprehensive care plan is both the clinical roadmap and a legal document that must be regularly reviewed and updated to reflect the resident's current needs.

Question 15: An organization running Red Hat Enterprise Linux wants to remain compliant. After adding 10 new servers, the administrator should primarily:

• Purchase additional subscription entitlements and attach them via Red Hat Subscription Manager (Correct answer)
• Download additional ISO files from Red Hat's website
• Migrate workloads to CentOS Stream instead
• Apply for an open-source waiver from Red Hat

Correct answer: Purchase additional subscription entitlements and attach them via Red Hat Subscription Manager

RHEL uses a subscription model; each system must be registered and attached to a valid subscription entitlement through Red Hat Subscription Manager (RHSM).

Question 16: Under Sarbanes-Oxley (SOX) Section 404, which party is responsible for assessing and reporting on the effectiveness of internal controls over financial reporting?

• The board of directors
• The SEC directly
• Company management, with external auditor attestation (Correct answer)
• The external auditor exclusively

Correct answer: Company management, with external auditor attestation

SOX Section 404 requires management to assess and report on ICFR effectiveness, and the external auditor must attest to and report on that assessment.

Question 17: A QA process improvement model that defines five maturity levels for software processes is:

• Capability Maturity Model Integration (CMMI) (Correct answer)
• Six Sigma DMAIC
• ITIL Service Lifecycle
• ISO 9001

Correct answer: Capability Maturity Model Integration (CMMI)

CMMI defines five process maturity levels—Initial, Managed, Defined, Quantitatively Managed, and Optimizing—to guide process improvement.

Question 18: A company using Microsoft 365 E3 licenses discovers employees are also using Power BI Premium features. What compliance action is required?

• Disable Power BI access company-wide immediately
• No action needed—Power BI Premium is included in E3
• Submit a retroactive licensing waiver to Microsoft
• Upgrade affected users to E5 or purchase standalone Power BI Premium licenses (Correct answer)

Correct answer: Upgrade affected users to E5 or purchase standalone Power BI Premium licenses

Power BI Premium features are not included in Microsoft 365 E3; organizations must license users with E5 or dedicated Power BI Premium per-user licenses.

Question 19: Under federal regulations, within how many days of a resident's admission must the initial comprehensive care plan be completed?

• 21 days (Correct answer)
• 30 days
• 7 days
• 14 days

Correct answer: 21 days

Federal regulations at 42 CFR §483.21 require the comprehensive care plan to be completed within 21 days of admission.

Question 20: A resident confides that another staff member has been making demeaning comments about their appearance. This is an example of:

• A misunderstanding that should be resolved privately
• Normal workplace stress the resident should overlook
• Verbal/emotional abuse, which must be reported immediately (Correct answer)
• Acceptable informal communication

Correct answer: Verbal/emotional abuse, which must be reported immediately

Demeaning or humiliating comments directed at a resident constitute verbal/emotional abuse and are mandatory report situations.

Question 21: Which ServiceNow application is used to manage and track the lifecycle of hardware assets from procurement to retirement?

• Service Catalog
• Asset Management (Correct answer)
• Project Portfolio Management
• Configuration Management

Correct answer: Asset Management

Asset Management in ServiceNow tracks the full lifecycle of hardware assets including procurement, deployment, maintenance, and retirement.

Question 22: Under HIPAA, what is the maximum civil monetary penalty per violation category when willful neglect is corrected within the required timeframe?

• $100,000
• $50,000 (Correct answer)
• $1,900,000
• $10,000

Correct answer: $50,000

HIPAA sets a maximum civil penalty of $50,000 per violation for willful neglect that is corrected within the required period.

Question 23: When an occupational exposure incident (e.g., needlestick) occurs, which of the following must be documented?

• A general incident report without identifying information to protect employee privacy
• Only the name of the employee and the date of the incident
• Only information about the source resident's confirmed diagnoses at the time of exposure
• The route of exposure, circumstances under which the exposure occurred, and source resident information if available (Correct answer)

Correct answer: The route of exposure, circumstances under which the exposure occurred, and source resident information if available

OSHA's Bloodborne Pathogens Standard requires documentation of the route of exposure, the circumstances of the incident, and source information to guide post-exposure evaluation and treatment.

Question 24: MRSA stands for which of the following?

• Multi-Resistant Streptococcal Agent
• Methicillin-Resistant Salmonella aureus
• Multi-Resistant Staphylococcal Antibiotic
• Methicillin-Resistant Staphylococcus aureus (Correct answer)

Correct answer: Methicillin-Resistant Staphylococcus aureus

MRSA stands for Methicillin-Resistant Staphylococcus aureus, a strain of staph bacteria resistant to many common antibiotics including methicillin.

Question 25: A resident's care plan indicates a low-sodium diet, but the resident asks for salty snacks. After education on risks, the resident still insists. The appropriate response is:

• Contact family to override the resident's decision
• Add a salt substitute without telling the resident
• Honor the informed request, update the care plan, and document the discussion (Correct answer)
• Refuse to provide any salty foods to protect the resident's health

Correct answer: Honor the informed request, update the care plan, and document the discussion

An informed resident with decision-making capacity may choose to deviate from recommended diet; staff must document and update the care plan accordingly.

Question 26: The Beers Criteria is a clinical tool used in long-term care to:

• Approve new medications for facility formulary inclusion
• Determine pharmacy billing rates for high-cost medications
• Rank prescribers based on prescribing accuracy
• Identify medications that are potentially inappropriate for older adults (Correct answer)

Correct answer: Identify medications that are potentially inappropriate for older adults

The Beers Criteria is an evidence-based list of medications that are potentially inappropriate for use in older adults due to increased risk of adverse effects.

Question 27: Which configuration is required to enable ServiceNow to send and receive REST API calls from external systems?

• The external IP must be whitelisted in glide.security.allowed_ips
• The SOAP plugin must be activated first
• Inbound REST Web Service and proper authentication credentials must be configured (Correct answer)
• A MID Server must be installed on the external system

Correct answer: Inbound REST Web Service and proper authentication credentials must be configured

An Inbound REST Web Service (or Scripted REST API) must be created and the caller must supply valid credentials to interact with ServiceNow via REST.

Question 28: Your organization's fiscal year ends December 31. You need a new storage array but budget is nearly exhausted. The vendor offers delivery in January. What budget concept is most relevant?

• Encumbrance accounting
• Accrual cutoff (Correct answer)
• Budget carryover
• Budget surplus

Correct answer: Accrual cutoff

The accrual cutoff determines which fiscal period an expense belongs to; delivery in January means the expense hits next year's budget.

Question 29: Which scenario best illustrates the concept of 'dignity of risk'?

• Restricting a diabetic resident from all desserts without their input
• Staff preventing a resident from walking independently to eliminate fall risk
• Administering a sedative to prevent a resident from wandering
• Allowing a resident to choose to eat in their room despite isolation concerns (Correct answer)

Correct answer: Allowing a resident to choose to eat in their room despite isolation concerns

Dignity of risk means allowing residents to make choices that carry some risk rather than removing autonomy in the name of safety.

Question 30: An organization subject to GDPR experiences a personal data breach. Within what timeframe must they notify the relevant supervisory authority if the breach poses a risk to individuals?

• 24 hours
• 72 hours (Correct answer)
• 7 days
• 48 hours

Correct answer: 72 hours

GDPR Article 33 requires notification to the supervisory authority within 72 hours of becoming aware of a breach, where feasible.

Question 31: A resident wishes to vote in an upcoming election. The facility must:

• Determine eligibility before allowing the resident to vote
• Assist the resident in exercising their right to vote, including arranging absentee ballots (Correct answer)
• Discourage political activity to maintain a peaceful environment
• Limit voting to residents without cognitive impairment

Correct answer: Assist the resident in exercising their right to vote, including arranging absentee ballots

Residents retain their right to vote, and facilities must assist with arrangements such as absentee ballots or transportation.

Question 32: What documentation practice is considered essential in Medication Management Oversight within the Certified System Administrator field?

• Completing all documentation at the end of the workday
• Using shorthand notes that can be expanded later if needed
• Only documenting unusual events or complications
• Recording actions, observations, and outcomes in real-time or as close to the event as possible (Correct answer)

Correct answer: Recording actions, observations, and outcomes in real-time or as close to the event as possible

Real-time or near-real-time documentation in Medication Management Oversight ensures accuracy, provides a contemporaneous record, and is considered the gold standard for professional accountability and legal defensibility.

Question 33: What is the PRIMARY purpose of continuing education requirements in Resident Rights & Advocacy for CSA professionals?

• Maintaining current knowledge and competency as the field evolves (Correct answer)
• Earning additional credentials for career advancement
• Networking with other professionals in the field
• Fulfilling mandatory regulatory requirements only

Correct answer: Maintaining current knowledge and competency as the field evolves

Continuing education in Resident Rights & Advocacy ensures professionals maintain current knowledge and skills as standards, technologies, and best practices evolve in the Certified System Administrator field.

Question 34: Federal regulations require that a nursing facility provide each resident with adequate fluid intake. What is the generally recommended minimum daily fluid intake for nursing facility residents?

• 500–750 mL/day
• 1,500–2,000 mL/day (Correct answer)
• 3,000–3,500 mL/day
• 1,000–1,200 mL/day

Correct answer: 1,500–2,000 mL/day

Most clinical guidelines and CMS surveyors expect long-term care residents to receive at least 1,500–2,000 mL of fluid daily to prevent dehydration.

Question 35: An administrator discovers that a vendor's software EULA prohibits reverse engineering. Under which U.S. law does a narrow 'interoperability' exception allow limited reverse engineering despite such contractual prohibitions?

• Digital Millennium Copyright Act (Correct answer)
• Electronic Communications Privacy Act
• Computer Fraud and Abuse Act
• Sarbanes-Oxley Act

Correct answer: Digital Millennium Copyright Act

The DMCA Section 1201(f) provides an interoperability exception permitting reverse engineering of software solely to achieve compatibility.

Question 36: An IT manager wants to spread the cost of a $120,000 server over 5 years on the financial statements. Which accounting method achieves this?

• Depreciation (Correct answer)
• Accrual accounting
• Cash-basis accounting
• Amortization

Correct answer: Depreciation

Depreciation allocates the cost of a tangible asset (like a server) over its useful life on the income statement.

Question 37: A resident with a do-not-resuscitate (DNR) order stops breathing. The correct staff action is:

• Follow the DNR order, provide comfort measures, and notify the charge nurse (Correct answer)
• Begin CPR while waiting for a physician to confirm the DNR
• Ask family members present whether to perform CPR
• Call 911 immediately regardless of the DNR

Correct answer: Follow the DNR order, provide comfort measures, and notify the charge nurse

A valid DNR order must be honored; staff provide comfort care and notify the nurse rather than initiating resuscitation.

Question 38: Which federal regulation governs food and nutrition services requirements for long-term care facilities certified by Medicare and Medicaid?

• 42 CFR §483.10
• 42 CFR §483.80
• 42 CFR §483.95
• 42 CFR §483.60 (Correct answer)

Correct answer: 42 CFR §483.60

42 CFR §483.60 contains all federal requirements for food and nutrition services in Medicare/Medicaid-certified nursing facilities.

Question 39: Why is it important to configure system security settings during installation?

• To prevent unauthorized access and attacks.
• To improve server performance.
• To enable system backups.
• To facilitate file sharing.

Configuring security settings early in the installation process establishes a strong defense against potential threats from the outset. This includes setting up firewalls, strong passwords, and access controls to protect the server from unauthorized access, malware, and other cyberattacks. This safeguards data and maintains system integrity.

Question 40: Why is it essential to test the system configuration after installation?

• To check if the system has malware.
• To verify the hardware is compatible.
• To verify network access.
• To ensure the system meets the user’s requirements.

Testing the system configuration after installation is crucial to confirm that all components are working as expected and that the server is ready to fulfill its intended role. This step verifies that the system meets the specified functional and performance requirements, ensuring stability and reliability before deployment and preventing future issues.

Question 41: What is the PRIMARY purpose of continuing education requirements in Emergency Preparedness & Safety for CSA professionals?

• Fulfilling mandatory regulatory requirements only
• Maintaining current knowledge and competency as the field evolves (Correct answer)
• Networking with other professionals in the field
• Earning additional credentials for career advancement

Correct answer: Maintaining current knowledge and competency as the field evolves

Continuing education in Emergency Preparedness & Safety ensures professionals maintain current knowledge and skills as standards, technologies, and best practices evolve in the Certified System Administrator field.

Question 42: During maintenance, an administrator needs to put the instance in maintenance mode to prevent user logins. Which property controls this?

• glide.login.disable
• glide.instance.maintenance (Correct answer)
• glide.access.blocked
• glide.user.lockout

Correct answer: glide.instance.maintenance

Setting glide.instance.maintenance to true redirects users to a maintenance page and restricts access to admin accounts only.

Question 43: What does 'deduplication' accomplish in a backup system?

• Compresses backup files using ZIP algorithms
• Eliminates redundant data blocks so identical data is stored only once (Correct answer)
• Splits large backup files into smaller chunks for easier transport
• Mirrors backup data to two separate locations simultaneously

Correct answer: Eliminates redundant data blocks so identical data is stored only once

Deduplication identifies and stores only unique data blocks, significantly reducing backup storage requirements.

Question 44: A system administrator at a federally funded university must ensure research systems comply with NIST SP 800-171. Which type of data does this standard specifically protect?

• Controlled Unclassified Information (CUI) (Correct answer)
• Classified National Security Information
• Protected Health Information (PHI)
• Personally Identifiable Information (PII)

Correct answer: Controlled Unclassified Information (CUI)

NIST SP 800-171 establishes requirements for protecting Controlled Unclassified Information (CUI) in non-federal systems and organizations.

Question 45: What minimum contact time with soap and water is recommended by the CDC for effective hand hygiene?

• 20 seconds (Correct answer)
• 60 seconds
• 30 seconds
• 10 seconds

Correct answer: 20 seconds

The CDC recommends scrubbing hands with soap and water for at least 20 seconds to effectively reduce microbial contamination.

Question 46: What does the term 'Recovery Point Objective (RPO)' define in the context of disaster recovery planning?

• The maximum acceptable length of time a system can be offline
• The target time to restore a system to full capacity
• The maximum acceptable amount of data loss measured in time (Correct answer)
• The point in the recovery process when testing begins

Correct answer: The maximum acceptable amount of data loss measured in time

RPO defines how much data loss (measured as a time interval) is acceptable, determining the required backup frequency.

Question 47: In long-term care, 'advance care planning' documentation such as a POLST form primarily communicates which information?

• The resident's financial assets and insurance coverage
• The physician's billing codes for skilled services
• The facility's emergency evacuation procedures
• The resident's medical treatment preferences for end-of-life or serious illness (Correct answer)

Correct answer: The resident's medical treatment preferences for end-of-life or serious illness

A POLST (Physician Orders for Life-Sustaining Treatment) form translates a resident's wishes about CPR, hospitalization, and other interventions into actionable medical orders.

Question 48: A resident refuses to participate in a scheduled group activity. What is the correct staff response?

• Honor the refusal and document it without pressure (Correct answer)
• Ask a family member to convince the resident to attend
• Require participation since it is on the care plan
• Report the refusal to the charge nurse immediately

Correct answer: Honor the refusal and document it without pressure

Residents have the right to refuse any activity, and staff must respect that choice and document it.

Question 49: What is the first step in setting up a new server?

• Install the operating system.
• Install antivirus software.
• Configure network settings.
• Set up user accounts.

The operating system (OS) is the foundational software that manages all hardware and software resources on a server. Without an OS, the server cannot function or host any applications. Therefore, installing the operating system is the essential first step before any other configurations or software installations can take place.

Question 50: What must a facility do before implementing a chemical restraint (psychotropic medication) for a non-emergency behavioral symptom?

• Try non-pharmacological interventions first and obtain informed consent from the resident or representative (Correct answer)
• Notify the state survey agency in advance
• Obtain verbal permission from any staff member present
• Apply the medication and monitor for 48 hours before documenting

Correct answer: Try non-pharmacological interventions first and obtain informed consent from the resident or representative

CMS requires that non-pharmacological interventions be attempted first and that informed consent be obtained before using medications as chemical restraints.

Question 51: A 'significant change in status assessment' (SCSA) must be completed when a resident experiences which of the following?

• A major decline or improvement that is not expected to resolve (Correct answer)
• A routine medication change ordered by the physician
• A minor cold lasting two days
• A scheduled quarterly review date

Correct answer: A major decline or improvement that is not expected to resolve

An SCSA is required when a resident shows a major, non-temporary decline or improvement in status that affects multiple areas of functioning.

Question 52: A newly hired medication aide (CMA) may administer medications in states that permit the CMA role ONLY after:

• Completing a 4-year nursing degree
• Working under direct nurse supervision for six months with no formal certification
• Successfully completing state-approved training and passing a competency examination (Correct answer)
• Receiving approval from the consulting pharmacist

Correct answer: Successfully completing state-approved training and passing a competency examination

In states that allow CMAs, they must complete a state-approved training program and pass a competency test before independently administering medications.

Question 53: Which of the following best describes an administrator's responsibility during a CMS survey focused on medication management?

• Delegating all surveyor interactions to the Director of Nursing
• Ensuring all medication storage, documentation, and administration practices align with current regulations (Correct answer)
• Directing nursing staff to withhold medication records from surveyors
• Temporarily stopping medication administration during the survey period

Correct answer: Ensuring all medication storage, documentation, and administration practices align with current regulations

The administrator is responsible for facility-wide regulatory compliance, including ensuring medication practices meet CMS standards and that surveyors have appropriate access to records.

Question 54: Under OBRA regulations, how often must a nursing facility complete a comprehensive resident assessment (MDS)?

• Only upon significant change in condition
• Within 14 days of admission, then at least annually with quarterly reviews (Correct answer)
• Every 6 months
• Annually

Correct answer: Within 14 days of admission, then at least annually with quarterly reviews

OBRA requires an MDS within 14 days of admission, quarterly reviews, and annual comprehensive reassessments.

Question 55: When performing a software asset management (SAM) audit, an administrator discovers 50 installations of software for which only 30 licenses exist. This condition is best described as:

• License overdeployment (Correct answer)
• License shelfware
• License stacking
• License harvesting

Correct answer: License overdeployment

License overdeployment (also called underlicensing) occurs when the number of software installations exceeds the number of valid licenses owned.

Question 56: How does risk management apply to daily practice in Regulatory Compliance & Licensing for Certified System Administrator professionals?

• Only through responding to incidents after they occur
• By avoiding high-risk situations entirely
• Through proactive identification of potential hazards and implementation of preventive measures (Correct answer)
• Through annual safety audits exclusively

Correct answer: Through proactive identification of potential hazards and implementation of preventive measures

Effective risk management in Regulatory Compliance & Licensing requires proactive hazard identification and preventive measures, not just reactive responses. This approach reduces incidents, improves outcomes, and protects both professionals and clients.

Question 57: A facility's medication pass observation program is primarily designed to:

• Evaluate individual nurses for disciplinary purposes
• Monitor controlled substance diversion by staff
• Reduce the number of medications prescribed per resident
• Identify medication administration errors and training needs (Correct answer)

Correct answer: Identify medication administration errors and training needs

Medication pass observations are a quality assurance tool used to identify errors, unsafe practices, and staff education needs.

Question 58: Staff who administer medications in a long-term care facility must demonstrate competency through:

• Initial training and periodic competency evaluations per state and federal standards (Correct answer)
• A one-time orientation module upon hire with no reassessment
• Certification only for nurses who administer controlled substances
• Shadowing another staff member for one week with no formal evaluation

Correct answer: Initial training and periodic competency evaluations per state and federal standards

Regulations require documented initial and ongoing competency evaluations for all staff involved in medication administration to ensure resident safety.

Question 59: A resident asks to see their medical record. Under HIPAA, the facility must provide access:

• Only with physician approval
• Within 30 days of the request, with a possible 30-day extension (Correct answer)
• Within 72 hours only in emergency situations
• Only to the resident's legal guardian

Correct answer: Within 30 days of the request, with a possible 30-day extension

HIPAA grants residents the right to access their medical records within 30 days, extendable once by another 30 days.

Question 60: When a long-term care facility uses an automated medication dispensing cabinet (ADC), the administrator must ensure that:

• Controlled substances are excluded from the ADC system entirely
• Access is restricted by role, all transactions are logged, and override use is monitored and audited (Correct answer)
• Any staff member with a PIN can access all medications to improve speed
• Pharmacy oversight is no longer needed because the ADC tracks all transactions automatically

Correct answer: Access is restricted by role, all transactions are logged, and override use is monitored and audited

ADCs must have role-based access controls, complete transaction audit trails, and administrative oversight of override usage to prevent diversion and errors.

Question 61: A nursing facility administrator is developing a policy to reduce polypharmacy. Which strategy is MOST effective as an administrative oversight measure?

• Limiting residents to a maximum of five medications regardless of clinical need
• Mandating monthly medication regimen reviews by a consultant pharmacist (Correct answer)
• Assigning a pharmacist to approve all new prescriptions before dispensing
• Requiring physician justification for each medication at the monthly care conference

Correct answer: Mandating monthly medication regimen reviews by a consultant pharmacist

Monthly medication regimen reviews by a consultant pharmacist are a regulatory requirement and a proven strategy for identifying and reducing unnecessary medications.

Question 62: What is the PRIMARY purpose of continuing education requirements in Regulatory Compliance & Licensing for CSA professionals?

• Fulfilling mandatory regulatory requirements only
• Earning additional credentials for career advancement
• Networking with other professionals in the field
• Maintaining current knowledge and competency as the field evolves (Correct answer)

Correct answer: Maintaining current knowledge and competency as the field evolves

Continuing education in Regulatory Compliance & Licensing ensures professionals maintain current knowledge and skills as standards, technologies, and best practices evolve in the Certified System Administrator field.

Question 63: The MDS 3.0 Section Q addresses which area of resident care?

• Cognitive patterns
• Swallowing and nutritional status
• Special treatments and procedures
• Return to community referrals (Correct answer)

Correct answer: Return to community referrals

MDS 3.0 Section Q specifically covers participation in assessment and goal setting related to a resident's desire to return to the community.

Question 64: An administrator is reviewing a Transform Map used during data import. What does the 'Coalesce' option on a field mapping do?

• Uses the field to identify existing records for update rather than creating duplicates (Correct answer)
• Skips the field if it is empty
• Encrypts the field value before import
• Combines multiple field values into one

Correct answer: Uses the field to identify existing records for update rather than creating duplicates

Coalescing on a field means ServiceNow will use that field's value to match incoming data against existing records, updating them instead of creating duplicates.

Question 65: The GNU General Public License (GPL) v3 requires that when distributing modified GPL-licensed software in binary form, you must also:

• Pay royalties to the original author
• Provide access to the corresponding source code (Correct answer)
• License all other software in the same product under GPL
• Obtain written permission from the Free Software Foundation

Correct answer: Provide access to the corresponding source code

GPL v3 requires that distributors of modified binaries provide corresponding complete source code under the same GPL v3 license terms.

Question 66: Which type of electrical testing verifies the integrity of insulation on cables and prevents current leakage between conductors?

• Phase rotation testing
• Continuity testing
• Ground fault circuit testing
• Insulation resistance (Megger) testing (Correct answer)

Correct answer: Insulation resistance (Megger) testing

Insulation resistance testing (megohmmeter testing) applies high DC voltage to measure resistance between conductors, detecting degraded insulation.

Question 67: Which of the following represents the 'portal of entry' link in the chain of infection?

• A contaminated wound on a healthcare worker's hand
• A mucous membrane exposed to respiratory secretions (Correct answer)
• The respiratory tract of a coughing resident
• A resident with a suppressed immune system

Correct answer: A mucous membrane exposed to respiratory secretions

A portal of entry is the site through which an infectious agent enters a susceptible host, such as mucous membranes exposed to secretions.

Question 68: Which of the following BEST describes a healthcare-associated infection that would be classified as a 'sentinel event' requiring immediate reporting?

• An increase in hand hygiene compliance observations falling below 75%
• A single resident developing a urinary tract infection after catheter insertion
• Two residents with similar symptoms from the same unit within one week
• A resident death attributable to a healthcare-associated infection that was preventable (Correct answer)

Correct answer: A resident death attributable to a healthcare-associated infection that was preventable

A sentinel event is an unexpected occurrence involving death or serious physical harm; a resident death from a preventable HAI meets this definition and requires immediate review and reporting.

Question 69: An employee approaches their manager to report feeling overwhelmed by their current workload. What is the manager's best immediate response?

• Acknowledge the concern and schedule a workload review meeting (Correct answer)
• Advise the employee to work overtime until the backlog clears
• Escalate the issue directly to HR without speaking with the employee further
• Reassure the employee that all team members face the same pressure

Correct answer: Acknowledge the concern and schedule a workload review meeting

Acknowledging the concern and scheduling a structured review demonstrates respect and allows for collaborative problem-solving.

Question 70: A facility administrator discovers that a resident's medication label does not match the prescriber's current order. The FIRST action should be to:

• Document the discrepancy in the resident's chart without further action
• Dispose of the incorrectly labeled medication immediately
• Administer the medication as labeled and note the discrepancy
• Hold the medication and contact the pharmacy to clarify (Correct answer)

Correct answer: Hold the medication and contact the pharmacy to clarify

When a label discrepancy is identified, the medication should be held and the pharmacy contacted immediately to resolve the error before administration.

Question 71: In agile QA, a 'Definition of Done' (DoD) primarily serves to:

• Establish agreed-upon criteria that a user story must meet before it is considered complete (Correct answer)
• Define the sprint backlog prioritization order
• Limit the number of defects allowed per sprint
• Replace all traditional test documentation

Correct answer: Establish agreed-upon criteria that a user story must meet before it is considered complete

The Definition of Done is a shared checklist of quality criteria—such as code review, testing, and documentation—that must be satisfied before a story is accepted.

Question 72: Which document defines the minimum performance requirements for new commercial building energy systems in the United States?

• IEEE 1100
• ASHRAE 90.1 (Correct answer)
• ASHRAE 62.1
• NFPA 101

Correct answer: ASHRAE 90.1

ASHRAE 90.1 sets minimum energy efficiency standards for commercial buildings and is adopted by most US state energy codes.

Question 73: Which of the following best describes an IT 'cost center'?

• A department whose costs are tracked but which does not directly generate revenue (Correct answer)
• A financial reserve for emergency IT spending
• A cloud region designated for cost optimization
• A business unit that generates direct revenue from IT products

Correct answer: A department whose costs are tracked but which does not directly generate revenue

A cost center tracks expenses for a department (like IT) that supports the business but doesn't directly generate revenue, unlike a profit center.

Question 74: Which document legally designates another person to make healthcare decisions when a resident loses capacity?

• Do-not-resuscitate order
• Durable power of attorney for healthcare (Correct answer)
• POLST form
• Living will

Correct answer: Durable power of attorney for healthcare

A durable power of attorney for healthcare (healthcare proxy) designates a specific person to make medical decisions on behalf of an incapacitated individual.

Question 75: In ServiceNow's QA approach, Automated Test Framework (ATF) tests are primarily used to:

• Automate regression testing of ServiceNow configurations and customizations (Correct answer)
• Generate synthetic data for development environments
• Load test ServiceNow instances under high concurrency
• Monitor production incidents in real time

Correct answer: Automate regression testing of ServiceNow configurations and customizations

ServiceNow ATF enables teams to build and run automated tests that validate configurations, business rules, and UI interactions within a ServiceNow instance.

Question 76: A resident's roommate consistently plays the television loudly at night, disturbing sleep. What is the best advocacy action?

• Move the complaining resident without their input
• Tell the complaining resident to wear earplugs
• Ignore the complaint since both residents have equal rights
• Facilitate a care conference to balance both residents' rights (Correct answer)

Correct answer: Facilitate a care conference to balance both residents' rights

Staff must balance competing resident rights through communication, compromise, and care planning.

Question 77: What is the main purpose of conducting a tabletop exercise in disaster recovery planning?

• To test backup restoration speed across all production systems
• To physically failover production workloads to the DR site
• To benchmark RTO performance under real failure conditions
• To walk key personnel through simulated disaster scenarios and validate the DR plan without system disruption (Correct answer)

Correct answer: To walk key personnel through simulated disaster scenarios and validate the DR plan without system disruption

A tabletop exercise is a discussion-based simulation that identifies gaps in DR procedures without impacting live systems.

Question 78: What documentation practice is considered essential in Regulatory Compliance & Licensing within the Certified System Administrator field?

• Using shorthand notes that can be expanded later if needed
• Completing all documentation at the end of the workday
• Only documenting unusual events or complications
• Recording actions, observations, and outcomes in real-time or as close to the event as possible (Correct answer)

Correct answer: Recording actions, observations, and outcomes in real-time or as close to the event as possible

Real-time or near-real-time documentation in Regulatory Compliance & Licensing ensures accuracy, provides a contemporaneous record, and is considered the gold standard for professional accountability and legal defensibility.

Question 79: What is the function of the 'Activate Plugin' feature in ServiceNow administration?

• It restarts the application server nodes
• It installs third-party software packages
• It enables optional ServiceNow features and applications that are not active by default (Correct answer)
• It deploys a MID Server agent

Correct answer: It enables optional ServiceNow features and applications that are not active by default

Plugin activation enables built-in ServiceNow capabilities (such as ITSM modules) that are packaged but inactive by default.

Question 80: A resident with dementia becomes agitated when bathing. Which approach best respects their rights while ensuring safety?

• Skip all bathing to avoid distress
• Physically restrain the resident to complete the bath quickly
• Use a person-centered approach: offer choices, use preferred music, and try a different time (Correct answer)
• Administer a PRN sedative before every bath

Correct answer: Use a person-centered approach: offer choices, use preferred music, and try a different time

Person-centered care techniques that offer choice and comfort respect dignity and autonomy even when cognitive capacity is reduced.

Question 81: Which of the following scenarios would constitute a medication error that must be reported per facility policy?

• A physician changes a medication order during evening rounds
• A resident receives another resident's blood pressure medication due to a transcription error (Correct answer)
• A pharmacist delivers a medication 30 minutes after the scheduled delivery window
• A nurse documents a medication one hour late in the MAR but administered it on time

Correct answer: A resident receives another resident's blood pressure medication due to a transcription error

Administering a medication to the wrong resident is a definitive medication error requiring documentation, incident reporting, prescriber notification, and monitoring for adverse effects.

Question 82: Which QA activity is performed to ensure that a fixed defect has been correctly resolved without introducing new issues?

• Test condition identification
• Exploratory testing
• Confirmation testing (re-testing) and regression testing (Correct answer)
• Boundary value analysis

Correct answer: Confirmation testing (re-testing) and regression testing

Confirmation testing verifies the specific defect fix works, while regression testing ensures the fix did not break other areas of the application.

Question 83: Under the Americans with Disabilities Act (ADA), a nursing facility must provide:

• Free private rooms for all residents
• Reasonable accommodations to ensure equal access for residents with disabilities (Correct answer)
• Daily physician visits for all residents
• Interpreters for every language spoken by residents

Correct answer: Reasonable accommodations to ensure equal access for residents with disabilities

The ADA requires facilities to make reasonable accommodations so residents with disabilities can access services and activities equally.

Question 84: An administrator needs to temporarily disable all notifications for a major maintenance window. What is the fastest way to achieve this in ServiceNow?

• Delete all notification records
• Deactivate every user account temporarily
• Disable the Email Sending property in System Properties (Correct answer)
• Set the 'Send when' condition to false on each notification

Correct answer: Disable the Email Sending property in System Properties

Setting the 'glide.email.send' property to false in System Properties globally suppresses all outbound email notifications instantly.

Question 85: Which standard of practice is MOST important for ensuring quality in Financial Management & Budgeting?

• Strictly adhering to the same procedure in every situation
• Using the most advanced technology available regardless of need
• Minimizing documentation to focus on practical work
• Following evidence-based protocols while adapting to specific circumstances (Correct answer)

Correct answer: Following evidence-based protocols while adapting to specific circumstances

Evidence-based protocols provide a foundation of proven practices, but effective Certified System Administrator professionals must also adapt their approach based on specific circumstances and individual case needs within Financial Management & Budgeting.

Question 86: An IDS detects suspicious traffic but takes no automatic blocking action. What differentiates an IPS from an IDS?

• An IPS logs events; an IDS does not
• An IPS can actively block or drop malicious traffic (Correct answer)
• An IPS requires a separate VLAN
• An IPS operates at Layer 7 only

Correct answer: An IPS can actively block or drop malicious traffic

An Intrusion Prevention System (IPS) is inline with traffic and can actively drop or block packets, whereas an IDS only monitors and alerts.

Question 87: A resident experiences a suspected adverse drug reaction (ADR) following a new medication. The administrator's responsibility includes ensuring that:

• The medication is quietly discontinued without documentation
• The pharmacy is solely responsible for investigating the reaction
• The family is notified only if the reaction is life-threatening
• The event is documented, the prescriber is notified, and an incident report is filed (Correct answer)

Correct answer: The event is documented, the prescriber is notified, and an incident report is filed

Suspected ADRs require thorough documentation, immediate prescriber notification, and completion of an incident report as part of the facility's quality assurance process.

Question 88: The purpose of the Pharmacy and Therapeutics (P&T) Committee in a long-term care setting is to:

• Approve individual resident prescriptions on a case-by-case basis
• Negotiate drug pricing directly with pharmaceutical manufacturers
• Replace the role of the consulting pharmacist in conducting MRRs
• Establish and review the facility formulary, medication use policies, and monitor medication-related quality indicators (Correct answer)

Correct answer: Establish and review the facility formulary, medication use policies, and monitor medication-related quality indicators

The P&T Committee oversees formulary management, medication policies, and quality improvement initiatives related to pharmaceutical services across the facility.

Question 89: A facility receives a surveyor citation related to medication labeling. The MOST likely root cause an administrator should investigate is:

• Resident refusal to accept labeled medications
• Inadequate nursing documentation of medication effectiveness
• Medications dispensed without resident name, drug name, strength, dose, and directions (Correct answer)
• The pharmacy's failure to supply medications on time

Correct answer: Medications dispensed without resident name, drug name, strength, dose, and directions

Proper medication labeling must include the resident's name, drug name, strength, dose, frequency, and route; omissions in these elements are the most common labeling citation.

Question 90: A healthcare organization using a cloud EHR system must ensure their cloud provider signs which specific HIPAA document before sharing protected health information?

• Service Level Agreement (SLA)
• Data Processing Agreement (DPA)
• Non-Disclosure Agreement (NDA)
• Business Associate Agreement (BAA) (Correct answer)

Correct answer: Business Associate Agreement (BAA)

HIPAA requires covered entities to execute a Business Associate Agreement (BAA) with any vendor that creates, receives, maintains, or transmits PHI on their behalf.

Question 91: Microsoft's volume licensing 'License Mobility through Software Assurance' benefit allows customers to do which of the following?

• Reassign licenses to shared servers in third-party hosted environments more frequently than normally permitted (Correct answer)
• Use older versions of software under the same license
• Run software on personal home devices for free
• Convert perpetual licenses to subscription licenses at no additional cost

Correct answer: Reassign licenses to shared servers in third-party hosted environments more frequently than normally permitted

License Mobility through Software Assurance allows customers to reassign eligible server application licenses to third-party shared servers without the standard 90-day reassignment restriction.

Question 92: In IT financial management, what does the term 'run the business' (RTB) spending refer to?

• Costs to maintain and operate existing IT systems and services (Correct answer)
• R&D expenses for innovation projects
• Capital investments in new IT projects
• Vendor contract negotiations

Correct answer: Costs to maintain and operate existing IT systems and services

Run-the-business (RTB) costs cover keeping existing systems operational—maintenance, support, licensing—as opposed to grow/transform-the-business projects.

Question 93: What is the purpose of a 'raised floor' system in a data center?

• Serve as a grounding plane for static electricity
• Create a plenum for distributing conditioned air and routing cables (Correct answer)
• Reduce electromagnetic interference between server rows
• Provide structural support for heavy server racks

Correct answer: Create a plenum for distributing conditioned air and routing cables

Raised floors create a pressurized plenum below the floor that routes cold air to equipment and can also manage cable pathways.

Question 94: The typical incubation period for norovirus, a common cause of gastroenteritis outbreaks in long-term care facilities, is:

• 3–5 days
• 7–14 days
• 6–12 hours
• 12–48 hours (Correct answer)

Correct answer: 12–48 hours

Norovirus has an incubation period of 12–48 hours, which is important for identifying the exposure window during an outbreak investigation.

Question 95: Which type of testing verifies that new code changes have not adversely impacted existing functionality?

• Smoke testing
• Exploratory testing
• Boundary testing
• Regression testing (Correct answer)

Correct answer: Regression testing

Regression testing re-executes previously passing test cases after code changes to ensure existing functionality remains unbroken.

Question 96: A resident who was previously physically restrained now has a new care plan with restraint-free alternatives. This change reflects compliance with:

• ADA accessibility mandates
• OSHA workplace safety standards
• CMS F-tag F604 requirements to minimize physical restraint use (Correct answer)
• State fire code regulations

Correct answer: CMS F-tag F604 requirements to minimize physical restraint use

CMS F604 requires facilities to use physical restraints only as a last resort and to pursue alternatives that preserve resident freedom and dignity.

Question 97: An organization uses a SAN-based snapshot for backup. After a storage array failure, they discover the snapshots were stored on the same array as the primary data. What backup principle was violated?

• The encryption-at-rest requirement
• The GFS rotation policy
• The 3-2-1 rule requiring at least one copy on a separate medium (Correct answer)
• The incremental backup schedule

Correct answer: The 3-2-1 rule requiring at least one copy on a separate medium

The 3-2-1 rule requires at least one copy on different media; storing snapshots on the same array violates this fundamental redundancy principle.

Question 98: What is the primary advantage of a 'warm site' compared to a 'cold site' in disaster recovery?

• It eliminates the need for backup tapes
• It has pre-installed hardware and connectivity, requiring only data restoration to become operational (Correct answer)
• It runs in an active-active configuration at all times
• It costs less than a cold site

Correct answer: It has pre-installed hardware and connectivity, requiring only data restoration to become operational

A warm site has hardware and network infrastructure ready but requires data restoration, giving a middle ground between cost and recovery speed.

Question 99: When a conflict arises between standard procedures and a unique situation in Quality Assurance Programs, what should a CSA professional prioritize?

• Strict adherence to written procedures without exception
• The most cost-effective solution available
• The preference of the client or stakeholder
• Safety and ethical obligations while seeking expert consultation (Correct answer)

Correct answer: Safety and ethical obligations while seeking expert consultation

Safety and ethics always take priority in Quality Assurance Programs. When standard procedures don't adequately address a unique situation, consulting with experienced colleagues or supervisors ensures both safety and professional standards are maintained.

Question 100: Which fire suppression system is most appropriate for a server room to avoid water damage to equipment?

• Wet pipe sprinkler
• Clean agent (gaseous) suppression (Correct answer)
• Dry pipe sprinkler
• Deluge system

Correct answer: Clean agent (gaseous) suppression

Clean agent systems use inert or chemical gases to suppress fires without leaving residue or causing water damage to electronics.

Question 101: What is the purpose of an IT financial 'contingency reserve' in a project budget?

• To fund discretionary upgrades identified after project approval
• To address identified risks and unforeseen cost overruns (Correct answer)
• To offset favorable variances in other budget lines
• To cover known project costs that haven't been contracted yet

Correct answer: To address identified risks and unforeseen cost overruns

A contingency reserve is a planned budget allocation to manage identified risks and unexpected costs within the project scope.

Question 102: Which budget variance indicates that actual spending exceeded the planned budget?

• Neutral variance
• Zero-based variance
• Unfavorable variance (Correct answer)
• Favorable variance

Correct answer: Unfavorable variance

An unfavorable (or adverse) variance means actual costs were higher than budgeted, signaling overspending.

Question 103: In Quality Assurance Programs, what is the FIRST step a CSA professional should take when encountering a new case or situation?

• Consult with a supervisor before taking any action
• Conduct a comprehensive assessment and gather all relevant information (Correct answer)
• Document the situation and wait for further instructions
• Implement an immediate solution based on past experience

Correct answer: Conduct a comprehensive assessment and gather all relevant information

In Quality Assurance Programs, a thorough initial assessment ensures all relevant factors are identified before deciding on an appropriate course of action. This systematic approach is fundamental to Certified System Administrator practice.

Question 104: FISMA requires federal agencies to categorize their information systems using which framework to determine appropriate security controls?

• ISO 27001
• NIST FIPS 199 and SP 800-53 (Correct answer)
• CIS Controls
• COBIT 5

Correct answer: NIST FIPS 199 and SP 800-53

FISMA mandates use of FIPS 199 for categorizing systems as Low, Moderate, or High impact, then applying corresponding NIST SP 800-53 controls.

Question 105: Which coaching technique is most effective when an IT employee understands the process conceptually but makes errors in execution?

• Require the employee to reread the procedure documentation
• Use observation followed by immediate, specific corrective feedback (Correct answer)
• Reassign the task to a more experienced team member
• Escalate the performance issue to HR

Correct answer: Use observation followed by immediate, specific corrective feedback

Observation and specific feedback close the gap between theoretical understanding and correct execution in real conditions.

Question 106: In a QA program, what is the primary purpose of a test plan document?

• To record test execution results
• To define the scope, approach, resources, and schedule for testing activities (Correct answer)
• To document user acceptance criteria only
• To list all known bugs in the system

Correct answer: To define the scope, approach, resources, and schedule for testing activities

A test plan defines the scope, objectives, approach, resources, environment, and schedule needed to guide all testing activities within a project.

Question 107: Federal law requires nursing facilities to post the contact information for which agency in a visible location?

• The State Long-Term Care Ombudsman program (Correct answer)
• The American Medical Association
• The local chamber of commerce
• The facility's liability insurance provider

Correct answer: The State Long-Term Care Ombudsman program

Facilities are federally required to visibly post the Long-Term Care Ombudsman contact information so residents and families can easily access advocacy resources.

Question 108: A resident's care plan must be revised following a 'significant change in status.' Which of the following would typically trigger this requirement?

• A routine annual dental cleaning
• A one-time episode of mild constipation
• Onset of a new stage III pressure ulcer (Correct answer)
• A physician changing a vitamin supplement order

Correct answer: Onset of a new stage III pressure ulcer

A new stage III pressure ulcer represents a major decline in status affecting multiple functional areas and requires a Significant Change in Status Assessment and updated care plan.

Question 109: Under GDPR, which legal basis allows an organization to process personal data without explicit user consent when it is necessary to fulfill a contract with that individual?

• Legal obligation
• Legitimate interest
• Vital interests
• Contractual necessity (Correct answer)

Correct answer: Contractual necessity

Article 6(1)(b) of GDPR permits processing when it is necessary for the performance of a contract to which the data subject is party.

Question 110: A QA manager wants to measure how thoroughly the test suite exercises the application's codebase. Which metric should they use?

• Mean Time to Repair (MTTR)
• Code coverage (statement or branch coverage) (Correct answer)
• Test execution rate
• Defect Removal Efficiency

Correct answer: Code coverage (statement or branch coverage)

Code coverage metrics (statement, branch, or path coverage) measure the percentage of the codebase executed during testing, indicating thoroughness of the test suite.

Question 111: In a QA program, 'exit criteria' define:

• The conditions that must be met before testing activities are considered complete (Correct answer)
• The process for escalating defects to senior management
• When new testers join the project
• The maximum number of defects allowed per test cycle

Correct answer: The conditions that must be met before testing activities are considered complete

Exit criteria are predefined conditions—such as test coverage thresholds, open defect counts, or risk levels—that signal testing for a phase is sufficiently complete.

Question 112: An administrator is deploying VMware vSphere. The licensing model charges per physical CPU socket. A server with 2 CPUs and 32 cores total requires how many vSphere licenses?

• 32
• 4
• 1
• 2 (Correct answer)

Correct answer: 2

VMware vSphere licenses are issued per physical CPU socket, so a dual-socket server requires exactly 2 licenses regardless of core count.

Question 113: An IT manager must reduce team headcount by two positions. Which process should guide the selection of affected employees?

• Personal relationships and team dynamics
• Last hired, first released without exception
• Objective criteria aligned with business need and documented performance data (Correct answer)
• Voluntary selection by the employees themselves

Correct answer: Objective criteria aligned with business need and documented performance data

Reductions in force must be based on objective, documented criteria to avoid discrimination and ensure defensibility.

Question 114: During a system upgrade, an administrator notices that a custom Business Rule is conflicting with an out-of-box update. What is the recommended approach?

• Delete the custom Business Rule and recreate it after upgrade
• Roll back the upgrade immediately
• Review the upgrade conflict and merge changes carefully using the Upgrade Monitor (Correct answer)
• Skip the upgrade to preserve customizations

Correct answer: Review the upgrade conflict and merge changes carefully using the Upgrade Monitor

The Upgrade Monitor highlights conflicts between customizations and out-of-box updates, allowing admins to review and merge changes safely.

Question 115: A ServiceNow administrator needs to schedule a recurring job to clean up old log entries every Sunday at 2 AM. Which feature should they use?

• Scheduled Job (Correct answer)
• Script Include
• Business Rule
• Flow Designer

Correct answer: Scheduled Job

Scheduled Jobs in ServiceNow allow administrators to run scripts or workflows at defined intervals, such as weekly at a specific time.