SCP-500 Cheat Sheet 2026

The 30 highest-yield SCP-500 facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. In SolarWinds IPAM, which protocol integration allows automatic DNS record creation or deletion when IP addresses are assigned? → Dynamic DNS (DDNS) integration
2. Which SolarWinds Orion feature allows an administrator to assign 'maintenance windows' to nodes so alerts are suppressed during planned downtime? → Maintenance Mode / Scheduled Maintenance
3. In SolarWinds NPM, what does the term 'polling interval' refer to? → The frequency at which NPM queries devices for performance data
4. In SolarWinds NCM, what is the purpose of a 'Config Archive' rollback? → Restore a previous known-good configuration to a device
5. According to professional standards for SolarWinds deployments, how should sensitive credentials used by polling engines be stored? → In SolarWinds credential manager with role-based access
6. How should an SCP-500 professional respond to a compliance violation? → Report it promptly, investigate the root cause, and implement corrective actions
7. SolarWinds IPAM reduces risk by preventing which common network problem? → IP address conflicts and unauthorized allocations
8. To collect utilization statistics, which protocol should a network engineer enable on routers and switches? → SNMP
9. Which two performance metrics may a proper QoS implementation affect? (Select two.) → latency
10. When mapping SolarWinds capabilities to the NIST CSF 'Protect' function, which product BEST addresses PR.AC-4 (access permissions managed)? → SolarWinds Access Rights Manager (ARM)
11. Which SolarWinds product is MOST directly used to satisfy GDPR requirements around monitoring access to personal data stores? → SolarWinds Database Performance Analyzer
12. What SolarWinds feature allows you to compare two device configurations side by side to identify specific line-level differences? → Config Diff / Compare Configs view
13. What type of data does SolarWinds NTA (NetFlow Traffic Analyzer) primarily collect and analyze? → Network flow records showing bandwidth consumption by application and endpoint
14. In SolarWinds SAM, what is an 'Application Monitor Template'? → A reusable set of component monitors that define how to check a specific application
15. In SolarWinds Network Performance Monitor, which threshold type triggers an alert based on a calculated baseline rather than a fixed value? → Dynamic baseline threshold
16. What is an Additional Polling Engine (APE) used for in SolarWinds Orion? → Scaling monitoring capacity across large or geographically distributed networks
17. A customer wants to auto-deploy a standard SNMP configuration to all new Cisco routers discovered in SolarWinds NCM. Which NCM feature accomplishes this? → NCM Config Change Templates executed via an automated job
18. What SNMP version provides encryption and authentication, making it the most secure option supported by SolarWinds NPM? → SNMPv3
19. In SolarWinds Observability, correlating metrics, logs, and traces across a hybrid environment primarily addresses which risk? → Blind spots that allow incidents to go undetected across service boundaries
20. Which query language does SolarWinds provide for querying entities and relationships within the Orion data model? → SWQL
21. When SolarWinds NCM detects that a device configuration has changed outside of a maintenance window, the recommended risk response is to: → Generate an alert and compare the running config against the approved baseline
22. What role does peer review play in SCP-500 - Solarwinds Certified Professional practice? → It provides quality assurance and professional development through collegial evaluation
23. When documenting a SolarWinds environment for knowledge transfer, what should the runbook always include? → Alert thresholds, polling intervals, poller assignments, and escalation contacts
24. Which SNMP version provides both authentication and encryption for secure communication? → SNMP v3
25. What SolarWinds feature provides a unified timeline view of alerts, config changes, and performance anomalies for a single node? → PerfStack / Node Details timeline
26. What SolarWinds feature captures and stores syslog and SNMP trap messages for event correlation and troubleshooting? → Syslog and Trap Viewer
27. Which alert threshold type in SolarWinds triggers only when a condition persists for a defined number of consecutive polling cycles? → Sustained threshold
28. Which compliance framework explicitly requires organizations to segment cardholder data environments from other networks? → PCI DSS
29. What problem is SolarWinds High Availability (HA) designed to address? → Orion server or service failures that cause monitoring gaps
30. Which term describes the risk that remains after an organization has applied all planned security controls? → Residual risk