SolarWinds Certified Professional (SCP-500) — Questions and Answers

Question 1: A SolarWinds professional notices that a colleague has granted a junior analyst admin-level access to the Orion console 'to save time.' What is the correct professional response?

Ignore it since the colleague is senior
Revoke the access yourself immediately
Report it to IT security as a policy violation and suggest proper role assignment (Correct answer)
Ask the junior analyst to self-restrict their usage

Correct answer: Report it to IT security as a policy violation and suggest proper role assignment

Reporting the violation through proper channels and suggesting corrective action upholds least-privilege principles while respecting organizational process.

Question 2: In evidence-based capacity planning, what does a 'time-to-threshold' projection in SolarWinds indicate?

The polling interval for SNMP data collection
The duration of the last maintenance window
The time since the last alert was acknowledged
The estimated date when a resource will reach its critical threshold if current growth continues (Correct answer)

Correct answer: The estimated date when a resource will reach its critical threshold if current growth continues

Time-to-threshold projections give administrators a data-driven deadline for procuring or provisioning additional capacity before a resource is exhausted.

Question 3: Which compliance framework explicitly requires organizations to segment cardholder data environments from other networks?

PCI DSS (Correct answer)
FISMA
HIPAA
SOX

Correct answer: PCI DSS

PCI DSS Requirement 1 mandates network segmentation to isolate cardholder data environments, which SolarWinds NCM can help audit.

Question 4: Which alert threshold type in SolarWinds triggers only when a condition persists for a defined number of consecutive polling cycles?

Baseline deviation alert
Single-poll threshold
Dynamic threshold
Sustained threshold (Correct answer)

Correct answer: Sustained threshold

Sustained thresholds reduce false positives by requiring the condition to persist across multiple consecutive polls before firing an alert.

Question 5: When SolarWinds NPM sends a 'node down' alert but the node is actually reachable, this is called a:

True negative
True positive
False negative
False positive (Correct answer)

Correct answer: False positive

A false positive alert fires when no actual problem exists, which can erode trust in the monitoring system if not addressed.

Question 6: What is a corrective action in SCP-500 - Solarwinds Certified Professional quality systems?

Ignoring minor issues
Temporary workarounds only
A systematic response to eliminate the cause of a detected nonconformity and prevent recurrence (Correct answer)
Blaming individuals for errors

Correct answer: A systematic response to eliminate the cause of a detected nonconformity and prevent recurrence

This is fundamental to SCP-500 - Solarwinds Certified Professional practice. A systematic response to eliminate the cause of a detected nonconformity and prevent recurrence represents the professional standard for quality in the SCP-500 certification framework.

Question 7: In SolarWinds, what is the role of 'UnDP' (Universal Device Pollers)?

Poll any custom OID not natively supported by NPM (Correct answer)
Reset device passwords remotely
Push firmware updates via SNMP SET
Generate compliance audit reports

Correct answer: Poll any custom OID not natively supported by NPM

UnDPs allow administrators to define custom SNMP OID polls so Orion can collect vendor-specific metrics beyond its built-in poller library.

Question 8: Which SolarWinds NCM feature enables automated remediation when a device configuration drifts from its compliance baseline?

Config Change Templates with automatic rollback (Correct answer)
SAM alert suppression
NetPath hop analysis
IPAM conflict detection

Correct answer: Config Change Templates with automatic rollback

NCM Config Change Templates can automatically push corrective configurations when drift is detected, enforcing continuous compliance.

Question 9: SolarWinds IPAM reduces risk by preventing which common network problem?

Packet fragmentation
DNS cache poisoning
BGP route flapping
IP address conflicts and unauthorized allocations (Correct answer)

Correct answer: IP address conflicts and unauthorized allocations

IPAM tracks IP address assignments to prevent duplicate IPs and unauthorized devices from claiming addresses.

Question 10: What SolarWinds SAM feature sends an alert when a Windows Application or System event log entry matches a specified event ID or source?

NetFlow Analyzer
Syslog Receiver
Windows Event Log Monitor (Correct answer)
Config Change Detector

Correct answer: Windows Event Log Monitor

The Windows Event Log Monitor polls the event log via WMI and triggers alerts when matching entries (by ID, source, or keyword) appear.

Question 11: In SolarWinds IPAM, which protocol integration allows automatic DNS record creation or deletion when IP addresses are assigned?

NetFlow export
WMI query
Dynamic DNS (DDNS) integration (Correct answer)
SNMP trap receiver

Correct answer: Dynamic DNS (DDNS) integration

IPAM integrates with DNS servers using DDNS to automatically add or remove A/PTR records when IP assignments change, keeping DNS consistent.

Question 12: How should SCP-500 professionals stay current with regulatory changes?

Monitor regulatory updates, participate in professional associations, and attend continuing education (Correct answer)
Regulations rarely change
Rely on colleagues for updates
Wait until audited

Correct answer: Monitor regulatory updates, participate in professional associations, and attend continuing education

This is fundamental to SCP-500 - Solarwinds Certified Professional practice. Monitor regulatory updates, participate in professional associations, and attend continuing education represents the professional standard for regulatory in the SCP-500 certification framework.

Question 13: When documenting a SolarWinds environment for knowledge transfer, what should the runbook always include?

Alert thresholds, polling intervals, poller assignments, and escalation contacts (Correct answer)
Network topology diagrams in Visio format only
A full export of all node properties
Source code of all custom SQL queries

Correct answer: Alert thresholds, polling intervals, poller assignments, and escalation contacts

Operational runbooks must capture thresholds, polling configuration, poller assignments, and escalation paths so any qualified professional can manage the environment.

Question 14: Under DORA (Digital Operational Resilience Act) for financial entities, ICT risk management must include monitoring of third-party service providers. Which SolarWinds feature supports this?

IPAM DHCP scope management
NCM device configuration backups
NPM monitoring of external service endpoints and SLAs (Correct answer)
SAM Windows event log collection

Correct answer: NPM monitoring of external service endpoints and SLAs

NPM can monitor availability and performance of third-party service endpoints, providing the continuous ICT risk visibility DORA requires.

Question 15: Which regulation specifically requires covered entities to have a formal sanctions policy for employees who violate security policies, which SolarWinds alerting can help enforce?

GDPR Article 83
SOX Section 404
PCI DSS Requirement 12.3
HIPAA Security Rule §164.308(a)(1)(ii)(C) (Correct answer)

Correct answer: HIPAA Security Rule §164.308(a)(1)(ii)(C)

HIPAA Security Rule §164.308(a)(1)(ii)(C) requires a sanctions policy for security violations, and SolarWinds SEM alerts can document the violations triggering those sanctions.

Question 16: When researching an application performance issue, SolarWinds SAM's Application Dependency Mapping is valuable because it:

Reveals which infrastructure components an application relies on, helping scope the evidence collection (Correct answer)
Replaces the need for APM tools entirely
Automatically patches dependent applications
Disables alerts for dependent nodes

Correct answer: Reveals which infrastructure components an application relies on, helping scope the evidence collection

Application Dependency Mapping shows the infrastructure relationships an app depends on, guiding investigators to the right nodes and metrics.

Question 17: Which SolarWinds SAM component monitor verifies database availability and query execution by running a test SQL statement?

Windows Service Monitor
SQL Query Monitor (Correct answer)
HTTP Monitor
Script Monitor

Correct answer: SQL Query Monitor

The SQL Query Monitor connects to a database instance, executes a test query, and reports availability and response time based on the result.

Question 18: When establishing performance baselines in SolarWinds NPM, what is the recommended minimum data collection period before setting alert thresholds?

24 hours
7 days
30 days (Correct answer)
3 days

Correct answer: 30 days

A 30-day baseline captures weekly traffic patterns, business cycles, and peak periods needed for meaningful threshold configuration.

Question 19: What professional competency is evaluated when a SolarWinds professional recommends adding Orion High Availability (HA) to an existing deployment?

Business continuity planning and infrastructure resilience design (Correct answer)
Cost negotiation
End-user training
Vendor relationship management

Correct answer: Business continuity planning and infrastructure resilience design

Recommending HA demonstrates understanding of business continuity requirements and the ability to align platform architecture with organizational resilience objectives.

Question 20: Which SolarWinds Orion feature allows administrators to define acceptable performance ranges dynamically based on historical data rather than static thresholds?

Node status polling
Static threshold groups
Alert suppression windows
Dynamic baselines (Correct answer)

Correct answer: Dynamic baselines

Dynamic baselines calculate acceptable ranges from historical statistics, enabling anomaly detection without manually tuning static thresholds.

Question 21: A QA team is auditing SolarWinds alert noise. Which configuration change most effectively reduces duplicate alerts for the same event during an outage?

Disable all email notifications
Increase polling frequency
Move to SNMP traps only
Enable alert suppression or reset conditions with time delays (Correct answer)

Correct answer: Enable alert suppression or reset conditions with time delays

Configuring alert reset conditions with appropriate time delays prevents the same alert from repeatedly firing during a sustained outage.

Question 22: What is the professional standard for handling a SolarWinds alert that fires repeatedly for the same node within a short window?

Escalate every instance to the network team
Acknowledge and suppress without investigation
Delete and recreate the alert rule
Investigate root cause, apply a maintenance window if planned work is underway, and tune the threshold if the alert is spurious (Correct answer)

Correct answer: Investigate root cause, apply a maintenance window if planned work is underway, and tune the threshold if the alert is spurious

Investigating root cause before suppression or tuning ensures genuine issues are not masked and alert rules accurately reflect operational reality.

Question 23: In SolarWinds SAM, which mechanism ensures that application monitors are correctly associated with the right nodes during a QA validation pass?

Node groups
Application templates assigned via discovery or manual binding (Correct answer)
Alert dependencies
Custom properties only

Correct answer: Application templates assigned via discovery or manual binding

Application templates are bound to nodes either manually or through automated discovery rules, and validating these bindings ensures monitors collect data from the correct targets.

Question 24: What is the primary database platform used by SolarWinds Orion to store all monitoring and configuration data?

PostgreSQL
Oracle Database
MySQL
Microsoft SQL Server (Correct answer)

Correct answer: Microsoft SQL Server

SolarWinds Orion requires Microsoft SQL Server as its backend database for storing all monitoring data, alerts, and configuration.

Question 25: Which SolarWinds Orion module would you use to monitor Quality of Service (QoS) markings and queuing on WAN interfaces?

Web Performance Monitor
IP SLA Manager / QoS Monitor (Correct answer)
Network Configuration Manager
Storage Resource Monitor

Correct answer: IP SLA Manager / QoS Monitor

QoS Monitor (part of IP SLA) tracks DSCP markings, queue depths, and drops to verify QoS policy effectiveness on WAN links.

Question 26: What role does the SolarWinds 'Orion Web Console' play in the platform architecture?

It is the primary user interface for viewing dashboards, alerts, and managing the platform (Correct answer)
It is the background service that performs all SNMP polling operations
It is the component responsible for sending email alert notifications
It functions as the SQL Server database engine storing all collected data

Correct answer: It is the primary user interface for viewing dashboards, alerts, and managing the platform

The Orion Web Console is the IIS-hosted web application that provides administrators and users with dashboards, reports, alert management, and configuration through a browser interface.

Question 27: In SolarWinds NPM, what polling method uses flow data exported from routers and switches to measure traffic volume?

SNMP polling
ICMP ping sweeps
WMI queries
NetFlow/sFlow analysis (Correct answer)

Correct answer: NetFlow/sFlow analysis

NetFlow and sFlow are flow-based protocols that routers export to NPM, enabling detailed traffic analysis without full packet capture.

Question 28: Which SolarWinds Orion database is used to store all collected performance data, alerts, and configuration by default?

Microsoft SQL Server (Correct answer)
SQLite
Oracle Database
MySQL

Correct answer: Microsoft SQL Server

SolarWinds Orion requires Microsoft SQL Server as its backend database for storing all monitoring data and configuration.

Question 29: Which SolarWinds Orion scalability component distributes the web console load when many users access the interface simultaneously?

Additional Web Server (AWS) (Correct answer)
Orion Agent Relay
NetFlow Receiver
Additional Polling Engine (APE)

Correct answer: Additional Web Server (AWS)

An Additional Web Server (AWS) provides extra web console endpoints so user load is spread across multiple servers, preventing performance degradation on the main Orion server.

Question 30: Which SolarWinds feature allows QA teams to define a hierarchy where alerts on child nodes are suppressed if their parent (upstream) device is already down?

Alert escalation chains
Custom properties
Network topology mapping
Alert dependencies (Correct answer)

Correct answer: Alert dependencies

Alert dependencies prevent child-node alerts from firing when a parent node is down, reducing alert storm noise during upstream failures.

SolarWinds Certified Professional (SCP-500)

The SolarWinds Certified Professional (SCP-500) exam validates expertise in SolarWinds network management and monitoring products, covering configuration, performance analysis, alerting, compliance, and troubleshooting across enterprise IT environments. It is a retired foundational certification code, replaced by product-specific SCP exams.

Questions

35 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds