I85PREP
⌘ K
Dell PowerEdge Associate study materials
Dell PowerEdge Associate study resources

Dell PowerEdge Associate practice questions

One question at a time. Build your Dell PowerEdge Associate understanding.

First 50 of 190 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1PowerEdge iDRAC, lifecycle and fleet operations

Which Dell management software provides one-to-many fleet orchestration of PowerEdge servers across the data center?

  1. iDRAC9
  2. RACADM
  3. OpenManage Enterprise (OME) Correct answer.
  4. Lifecycle Controller

Explanation

OpenManage Enterprise (OME) is Dell's one-to-many systems-management console that discovers, monitors, configures, and updates fleets of PowerEdge servers, modular chassis, and networking. iDRAC9 manages a single server, RACADM is a CLI for iDRAC, and Lifecycle Controller handles per-server OS deployment and firmware tasks.

Question 2PowerEdge iDRAC, lifecycle and fleet operations

What is the role of the Lifecycle Controller embedded in PowerEdge servers?

  1. It accelerates database transactions on local NVMe drives
  2. It provides agent-free OS deployment, firmware updates, and configuration tasks via iDRAC Correct answer.
  3. It serves as a hardware RAID engine for the BOSS card
  4. It replaces the BIOS POST diagnostics

Explanation

The integrated Lifecycle Controller (iDRAC's embedded management agent) provides agent-free, GUI- and API-driven OS deployment, firmware/driver updates, hardware configuration, diagnostics, and export of system inventory. It eliminates the need for bootable utility CDs and works whether or not the OS is running.

Question 3PowerEdge iDRAC, lifecycle and fleet operations

Which command-line interface is used to script iDRAC and Lifecycle Controller actions over SSH or local SSH-equivalent?

  1. RACADM Correct answer.
  2. racman
  3. idrac-cli
  4. omcli

Explanation

RACADM is Dell's command-line interface for iDRAC and Lifecycle Controller. It can run remotely (over SSH) or in a local mode from the host OS. RACADM exposes nearly every iDRAC capability and is widely used for automation alongside the Redfish REST API.

Question 4PowerEdge iDRAC, lifecycle and fleet operations

Which OpenManage Enterprise capability detects deviations from a baseline configuration across managed PowerEdge servers?

  1. Drift Management Correct answer.
  2. Quick Sync
  3. TPM Provisioning
  4. Group Manager

Explanation

OpenManage Enterprise Drift Management compares each managed device's configuration against a defined baseline (template) and reports any drift. Administrators can remediate by re-applying the template, which is critical for compliance and standardization across large fleets.

Question 5PowerEdge iDRAC, lifecycle and fleet operations

Which OpenManage offering integrates fleet management directly into VMware vCenter as a plugin?

  1. OpenManage Integration for VMware vCenter (OMIVV) Correct answer.
  2. OpenManage Mobile
  3. OpenManage Network Integration (OMNI)
  4. Lifecycle Controller

Explanation

OpenManage Integration for VMware vCenter (OMIVV) is a vCenter plugin that surfaces PowerEdge inventory, firmware, and configuration management directly inside the vSphere Client. OMNI is the equivalent integration for Dell networking/VMware, while OpenManage Mobile is a smartphone tool.

Question 6PowerEdge iDRAC, lifecycle and fleet operations

An administrator wants to deploy ESXi to a new PowerEdge R760 without physical access. Which iDRAC capability accomplishes this?

  1. Use Lifecycle Controller OS Deployment with Virtual Media to mount the Dell-customized ESXi ISO Correct answer.
  2. Edit the BIOS to boot directly from the network share
  3. Install ESXi locally and then upload it via SupportAssist
  4. Deploy via Quick Sync 2 NFC tap

Explanation

Lifecycle Controller's OS Deployment workflow combined with iDRAC Virtual Media lets administrators remotely mount the Dell-customized ESXi ISO and install vSphere over the network with no physical access. Dell publishes ESXi custom images that include PowerEdge drivers and PERC firmware to streamline deployment.

Question 7PowerEdge iDRAC, lifecycle and fleet operations

Which Dell solution simplifies switch lifecycle management for VMware NSX and vSphere environments using Dell networking?

  1. OpenManage Network Integration (OMNI) Correct answer.
  2. OpenManage Mobile
  3. SupportAssist
  4. DSU

Explanation

OpenManage Network Integration (OMNI) is a vCenter plugin that automates Dell networking switch configuration for VMware vSphere and NSX environments, including VLAN and port-channel provisioning aligned with VM mobility. It complements OMIVV for server management.

Question 8PowerEdge iDRAC, lifecycle and fleet operations

Which protocol on PowerEdge servers exposes hardware sensor data over UDP and is widely used by traditional monitoring tools?

  1. Redfish
  2. SNMP Correct answer.
  3. gRPC
  4. NETCONF

Explanation

SNMP (Simple Network Management Protocol) is the long-standing UDP-based protocol used by tools like Nagios, Zabbix, and SolarWinds to poll PowerEdge sensor data and receive traps. iDRAC supports SNMP v1/v2c/v3, but Dell recommends Redfish for new development.

Question 9PowerEdge iDRAC, lifecycle and fleet operations

Which Dell System Update (DSU) capability is most useful for keeping PowerEdge servers compliant in a Linux-only environment?

  1. GUI-based wizard
  2. CLI-driven repository update of firmware and drivers Correct answer.
  3. Bare-metal imaging
  4. Hardware diagnostics

Explanation

Dell System Update (DSU) is a CLI tool for Linux (and Windows) that consumes Dell's online or local repositories to update firmware, BIOS, and drivers consistently across PowerEdge servers, ideal for scripted automation and Linux-only environments.

Question 10PowerEdge iDRAC, lifecycle and fleet operations

Which Dell PowerEdge tooling provides repository-based BIOS and firmware updates using a single signed catalog?

  1. Dell System Update (DSU) with Dell Repository Manager (DRM) Correct answer.
  2. RACADM ping
  3. SupportAssist log collector
  4. NIC Partitioning

Explanation

Dell Repository Manager (DRM) creates customized firmware/BIOS/driver bundles from Dell's signed catalogs, and Dell System Update (DSU) consumes those repositories to apply updates consistently across PowerEdge fleets, online or in air-gapped environments.

Question 11PowerEdge iDRAC, lifecycle and fleet operations

Which iDRAC element captures historical telemetry such as power, temperature, and IO over time for analytics?

  1. Streaming telemetry / Streaming Data Platform integration Correct answer.
  2. Quick Sync 2
  3. NMI button
  4. TPM

Explanation

iDRAC9/10 supports streaming telemetry that pushes detailed metrics (power, temperatures, network counters, etc.) to analytics back-ends, including Dell's Streaming Data Platform or third-party tools like Splunk. This enables fleet-wide trend analysis beyond simple SNMP polling.

Question 12PowerEdge iDRAC, lifecycle and fleet operations

Which iDRAC feature accelerates a PXE-less OS install by using a Dell-supplied driver pack delivered through Lifecycle Controller?

  1. Lifecycle Controller OS Deployment with embedded driver pack Correct answer.
  2. Quick Sync 2
  3. NMI button
  4. Group Manager

Explanation

Lifecycle Controller's OS Deployment workflow includes Dell-supplied driver packs for supported operating systems, eliminating the need to PXE-boot a separate OS deployment server. Combined with Virtual Media, this lets administrators install RHEL, ESXi, or Windows Server fully out-of-band.

Question 13PowerEdge iDRAC, lifecycle and fleet operations

Which feature enables PowerEdge servers to boot from a network repository to reimage hundreds of servers in parallel?

  1. PXE boot Correct answer.
  2. BOSS-N1
  3. Quick Sync
  4. SupportAssist

Explanation

PXE (Preboot eXecution Environment) boot lets PowerEdge servers fetch a bootloader and OS image over the network from a TFTP/HTTPS server, enabling mass provisioning. iDRAC supports HTTP/HTTPS boot and PXE boot configuration through BIOS settings.

Question 14PowerEdge iDRAC, lifecycle and fleet operations

Which OpenManage Enterprise plugin provides power and thermal analytics across the data center beyond per-server iDRAC views?

  1. OpenManage Enterprise Power Manager Correct answer.
  2. Quick Sync
  3. BOSS Manager
  4. SupportAssist Mobile

Explanation

OpenManage Enterprise Power Manager is a plugin that aggregates power, thermal, and utilization metrics across managed PowerEdge fleets, supports group-level power policies, and reports on data-center efficiency. It builds on iDRAC telemetry and OME group structures.

Question 15PowerEdge hardware, workload and service boundaries

Which Dell PowerEdge chassis is the foundation of the modular MX platform, supporting compute and storage sleds with shared fabric?

  1. VRTX
  2. MX7000 Correct answer.
  3. FX2
  4. M1000e

Explanation

The PowerEdge MX7000 is the 7U modular chassis that anchors the MX platform. It hosts compute sleds such as the MX740c and MX750c, storage sleds, and fabric IO modules like the MX9116n and MX5108n. M1000e and FX2 are legacy chassis, while VRTX targets ROBO use cases.

Question 16PowerEdge hardware, workload and service boundaries

Which Dell PowerEdge series is purpose-built for ruggedized edge deployments such as telco, military, and retail environments?

  1. R-series
  2. T-series
  3. XR-series Correct answer.
  4. HS-series

Explanation

The PowerEdge XR-series (XR4000, XR5610, XR8000, XR12) is engineered for edge and ruggedized deployments, featuring short-depth chassis, extended temperature operation, and dust/shock tolerance suitable for telco MEC sites, military, and retail spaces. R-series is mainstream rack, T-series is tower, and HS-series targets HPC.

Question 17PowerEdge hardware, workload and service boundaries

Which Dell PowerEdge GPU-dense platform is designed to host eight NVIDIA H100 or B100 accelerators for large-scale AI training?

  1. R760
  2. XE9680 Correct answer.
  3. R6615
  4. T550

Explanation

The PowerEdge XE9680 is a purpose-built 6U accelerated server that hosts eight NVIDIA H100 or B100 SXM GPUs interconnected with NVLink/NVSwitch for large-language-model training and other AI workloads. R760 is a general-purpose rack server, R6615 is a 1U single-socket EPYC server, and T550 is a tower.

Question 18PowerEdge hardware, workload and service boundaries

Which Dell PowerEdge tower/rack convertible series targets small business and remote office environments?

  1. R-series
  2. T-series Correct answer.
  3. MX-series
  4. XE-series

Explanation

The PowerEdge T-series (such as T150, T350, T550) is Dell's tower lineup designed for SMB, branch, and quiet office environments. Some T-series models can be rack-mounted with optional kits. R-series is rack, MX is modular, and XE is GPU-dense for AI/HPC.

Question 19PowerEdge hardware, workload and service boundaries

Which IO module installed in the PowerEdge MX7000 chassis provides scalable 25 GbE compute-to-fabric connectivity?

  1. MX9116n Fabric Switching Engine
  2. MX5108n Ethernet switch
  3. MX25 25GbE pass-through Correct answer.
  4. MXG610s Fibre Channel switch

Explanation

The MX25 25GbE pass-through module exposes each MX compute sled's 25 GbE ports directly to top-of-rack switches without an embedded switch in the chassis. The MX9116n is a switch with multi-chassis fabric-stretching capability, MX5108n is a smaller embedded Ethernet switch, and MXG610s is for Fibre Channel.

Question 20PowerEdge hardware, workload and service boundaries

Which PowerEdge server is a 1U two-socket rack platform commonly deployed for general-purpose virtualization with current Intel Xeon processors?

  1. R660 Correct answer.
  2. R760
  3. R960
  4. T550

Explanation

The PowerEdge R660 is a 1U two-socket rack server based on 4th/5th Generation Intel Xeon Scalable processors. It is widely used for dense virtualization. The R760 is a 2U two-socket sibling, R960 is a 2U four-socket platform, and T550 is a tower.

Question 21PowerEdge hardware, workload and service boundaries

Which PowerEdge model is a 1U single-socket AMD EPYC platform suited for cost-optimized scale-out workloads?

  1. R660
  2. R6615 Correct answer.
  3. R760
  4. R960

Explanation

The PowerEdge R6615 is a 1U single-socket server based on 4th Generation AMD EPYC (Genoa/Bergamo) processors, offering high core count per socket at attractive cost for scale-out and cloud workloads. R7615 is its 2U sibling.

Question 22PowerEdge hardware, workload and service boundaries

Which Dell PowerEdge ruggedized edge server is short-depth and designed for telco RAN/MEC sites?

  1. XR4000 Correct answer.
  2. R660
  3. T350
  4. XE9680

Explanation

The PowerEdge XR4000 is a short-depth, modular, ruggedized edge server designed for telco RAN/MEC and similar edge sites. It supports both 1U and 2U sleds in 300 mm-deep chassis. R660 is mainstream rack, T350 is tower, and XE9680 is GPU-dense for AI training.

Question 23PowerEdge hardware, workload and service boundaries

Which generation of NVIDIA GPUs are hosted by the PowerEdge XE9680 specifically targeting LLM and large-scale AI training?

  1. A100 PCIe
  2. H100 SXM and B100 SXM Correct answer.
  3. T4
  4. L4

Explanation

The PowerEdge XE9680 hosts eight NVIDIA Hopper-generation H100 SXM accelerators (and supports B100/Blackwell-generation SXM modules in newer SKUs) interconnected by NVLink/NVSwitch for large-language-model training. PCIe-form-factor cards like the A100 PCIe, T4, and L4 fit other PowerEdge models.

Question 24PowerEdge hardware, workload and service boundaries

Which Dell PowerEdge HS-series characteristic distinguishes it from the mainstream R-series?

  1. Smaller form factor for branch offices
  2. Built-in SAN connectivity by default
  3. Optimized for HPC and high-density compute, often with DLC support Correct answer.
  4. Designed exclusively for Windows Server workloads

Explanation

The PowerEdge HS-series is engineered for HPC and dense scale-out compute, frequently with Direct Liquid Cooling support and stripped-down configurations focused on raw compute density. R-series remains the general-purpose mainstream rack platform.

Question 25PowerEdge hardware, workload and service boundaries

Which Dell PowerEdge GPU-dense form factor supports up to four NVIDIA H100 PCIe accelerators in a 2U chassis for inferencing or smaller training?

  1. XE9680
  2. XE8640 Correct answer.
  3. R660
  4. T350

Explanation

The PowerEdge XE8640 hosts four NVIDIA H100 SXM accelerators in a 2U/3U chassis, designed for inferencing and smaller-scale training. The XE9680 is the eight-GPU flagship, while R-series and T-series target general-purpose use.

Question 26PowerEdge hardware, workload and service boundaries

What is the maximum number of CPU sockets supported by the PowerEdge R960?

  1. 1
  2. 2
  3. 4 Correct answer.
  4. 8

Explanation

The PowerEdge R960 is a 2U four-socket rack server based on 4th/5th Generation Intel Xeon Scalable processors, designed for in-memory databases, large-scale virtualization, and consolidation. R660/R760 are two-socket, R6615 is single-socket EPYC.

Question 27PowerEdge hardware, workload and service boundaries

Which Dell offering helps sustain edge deployments by pushing IoT data from PowerEdge XR servers to centralized analytics platforms?

  1. Dell NativeEdge / Streaming Data Platform Correct answer.
  2. Dell PowerStore
  3. Dell PowerScale
  4. BOSS-N1

Explanation

Dell NativeEdge (and the related Streaming Data Platform) is Dell's edge orchestration and data movement framework that lets organizations deploy and manage PowerEdge XR servers at the edge and stream IoT/operational data to central data lakes for analytics.

Question 28PowerEdge iDRAC, lifecycle and fleet operations

What does iDRAC stand for in Dell PowerEdge servers?

  1. Integrated Disk Recovery and Access Console
  2. Integrated Dell Remote Access Controller Correct answer.
  3. Internal Data Replication and Access Controller
  4. Intel Direct Remote Access Channel

Explanation

iDRAC means integrated Dell Remote Access Controller. It provides relevant out-of-band management under the actual model, generation, license and configuration. Console, virtual media, API and other features are not universally identical on every server, and management reachability does not establish host-application health.

Question 29PowerEdge iDRAC, lifecycle and fleet operations

Which industry-standard REST API does iDRAC9 implement for programmatic out-of-band management?

  1. IPMI 2.0
  2. SNMP v3
  3. Redfish Correct answer.
  4. WS-Man

Explanation

iDRAC9 and iDRAC10 implement the DMTF Redfish RESTful API for modern programmatic management. Redfish uses HTTPS plus JSON and replaces legacy interfaces like IPMI and WS-Man for automation tasks. iDRAC also continues to expose IPMI 2.0 and SNMP for compatibility, but Redfish is the strategic API.

Question 30PowerEdge iDRAC, lifecycle and fleet operations

Which iDRAC license tier is required to use the virtual console (KVM-over-IP) and virtual media features?

  1. Basic
  2. Express
  3. Enterprise Correct answer.
  4. Standard

Explanation

iDRAC Enterprise (or the newer Datacenter SKU) is required to enable advanced features such as virtual console (HTML5 KVM-over-IP), virtual media, Lifecycle Controller automation, and remote OS deployment. iDRAC Basic/Express provide only fundamental monitoring and a subset of management.

Question 31PowerEdge iDRAC, lifecycle and fleet operations

What is the primary purpose of the iDRAC Service Module (ISM)?

  1. To act as a host firewall for management traffic
  2. To provide an in-band agent that exchanges OS-level information with iDRAC Correct answer.
  3. To replace the iDRAC processor with a faster ARM core
  4. To manage storage replication between PowerEdge servers

Explanation

The iDRAC Service Module (ISM) is a lightweight in-band agent installed in the host operating system that complements iDRAC by exchanging OS-level information such as host name, IP, OS logs, snapshot info, and detailed inventory back to iDRAC. It enables features like Lifecycle Log inclusion of OS events and full power cap visibility.

Question 32PowerEdge iDRAC, lifecycle and fleet operations

Which iDRAC feature uses NFC to provision and access basic management functions through a mobile app?

  1. Group Manager
  2. Quick Sync 2 Correct answer.
  3. SupportAssist
  4. OpenManage Mobile bezel

Explanation

Quick Sync 2 uses Bluetooth Low Energy and NFC to let an OpenManage Mobile-equipped phone read iDRAC inventory, configure basic settings, and view system health by tapping the bezel. It eliminates the need for crash carts during initial provisioning. Group Manager is a one-to-many iDRAC clustering feature.

Question 33PowerEdge iDRAC, lifecycle and fleet operations

Which feature lets administrators manage up to 100 iDRACs as a group from a single login without dedicated management software?

  1. iDRAC Direct
  2. Group Manager Correct answer.
  3. SupportAssist
  4. OpenManage Network Integration

Explanation

iDRAC Group Manager lets up to 100 PowerEdge servers be managed as one group from a single iDRAC console, with shared inventory, alerts, and one-to-many actions. It is included with iDRAC Enterprise and gives small environments OME-like one-to-many management without deploying OME.

Question 34PowerEdge iDRAC, lifecycle and fleet operations

Which iDRAC feature provides redirection of a local ISO or USB image to the server as if it were physically attached?

  1. Virtual Media Correct answer.
  2. Virtual Console
  3. Lifecycle Controller
  4. SupportAssist

Explanation

iDRAC Virtual Media maps a local or network-shared ISO image, USB drive, or floppy as a virtual device the server sees as locally attached. It is heavily used to install operating systems remotely. Virtual Console handles KVM-over-IP video/keyboard/mouse redirection.

Question 35PowerEdge iDRAC, lifecycle and fleet operations

Which Dell PowerEdge management interface is being phased out in favor of the Redfish REST API for new automation development?

  1. IPMI 2.0 Correct answer.
  2. HTTPS web UI
  3. Virtual Console
  4. Lifecycle Controller GUI

Explanation

IPMI 2.0 is being deprioritized industry-wide for security and feature reasons; Dell recommends Redfish for new programmatic management. iDRAC continues to support IPMI for legacy tooling, but new features are exposed via Redfish first. The HTTPS web UI, Virtual Console, and Lifecycle Controller remain supported.

Question 36PowerEdge iDRAC, lifecycle and fleet operations

Which Dell management feature lets a single iDRAC be reached over the same Ethernet cable used for the host's primary LAN traffic?

  1. NIC Partitioning
  2. Shared LOM (Sideband Management) Correct answer.
  3. BlueField DPU
  4. NCM

Explanation

Shared LOM (also called sideband or NC-SI shared management) lets iDRAC traffic ride on the same physical Ethernet port used by the host OS via the NIC's sideband interface. It saves a switch port at the cost of less traffic isolation. The dedicated iDRAC port keeps management physically separate.

Question 37PowerEdge iDRAC, lifecycle and fleet operations

Which generation of iDRAC introduced support for NVMe Gen 5 and additional Redfish telemetry on PowerEdge?

  1. iDRAC8
  2. iDRAC9
  3. iDRAC10 Correct answer.
  4. iDRAC7

Explanation

iDRAC10 is the next-generation Dell out-of-band controller introduced with newer PowerEdge platforms, with extended Redfish telemetry, refreshed UI, NVMe Gen 5 awareness, and improved cybersecurity controls. iDRAC9 remains widely deployed on prior generations.

Question 38PowerEdge iDRAC, lifecycle and fleet operations

What is the function of the iDRAC Direct USB port located on the front of newer PowerEdge servers?

  1. Charging mobile devices
  2. Direct laptop connection to iDRAC for local management without a network cable Correct answer.
  3. Connecting USB tape drives for backup
  4. Booting the server from a USB stick

Explanation

iDRAC Direct exposes a micro-USB port (or USB Type-C on newer platforms) on the server's front. A technician can connect a laptop and access the iDRAC web UI directly without needing network connectivity, useful for initial provisioning or in-rack troubleshooting.

Question 39PowerEdge iDRAC, lifecycle and fleet operations

Which iDRAC alert mechanism can email an administrator when a critical event such as a fan failure occurs?

  1. Alert destination (SMTP / email) Correct answer.
  2. SNMP get
  3. RACADM ping
  4. PXE notify

Explanation

iDRAC supports email alert destinations using SMTP, in addition to SNMP traps, syslog forwarding, IPMI alerts, and Redfish event subscriptions. Administrators can configure severity filters and recipients per event source to integrate iDRAC into existing notification workflows.

Question 40Identity, access and cryptographic protection

Which Dell security feature verifies that hardware components were not tampered with between Dell's factory and the customer's data center?

  1. Cyber Resilient Architecture
  2. Secured Component Verification (SCV) Correct answer.
  3. Lockdown Mode
  4. BIOS Recovery

Explanation

Secured Component Verification supports comparing relevant delivered components with a signed factory inventory under its actual coverage. It can identify particular mismatches; it is not proof that no imaginable tampering occurred or that every component and threat is covered. Follow the supported verification and exception-handling process.

Question 41Identity, access and cryptographic protection

Which feature in PowerEdge BIOS verifies firmware and bootloader signatures during system startup?

  1. Secure Boot Correct answer.
  2. Wake-on-LAN
  3. Hyper-Threading
  4. Memory Mirroring

Explanation

UEFI Secure Boot validates the signatures of bootloaders, drivers, and firmware modules during system startup to prevent execution of unsigned or tampered code. PowerEdge servers also include Silicon Root of Trust and BIOS Recovery as part of Dell's Cyber Resilient Architecture.

Question 42Identity, access and cryptographic protection

Which iDRAC feature lets administrators temporarily prevent any configuration changes to a server, including BIOS and firmware updates?

  1. Lockdown Mode Correct answer.
  2. SupportAssist
  3. Group Manager
  4. BIOS Recovery

Explanation

iDRAC Lockdown Mode is a temporary security state that prevents any configuration or firmware change to the server, including via Redfish, RACADM, or local UEFI. It is used during change-freezes or after a known-good baseline is reached. Lockdown can only be lifted by an authorized iDRAC user.

Question 43Identity, access and cryptographic protection

Which PowerEdge feature provides automatic recovery to a known-good BIOS image if a corrupted update is detected during boot?

  1. Secure Boot
  2. BIOS Recovery Correct answer.
  3. TPM Backup
  4. UEFI Shell

Explanation

BIOS Recovery (sometimes called BIOS Restore) automatically reverts to a known-good backup BIOS image stored in a secondary flash region if corruption or update failure is detected, allowing the server to boot without manual intervention. It is part of Dell's Cyber Resilient Architecture.

Question 44Identity, access and cryptographic protection

Which authentication source can iDRAC use for centralized administrator login in an enterprise?

  1. Active Directory / LDAP Correct answer.
  2. Only local accounts
  3. Kerberos only
  4. NIS

Explanation

iDRAC supports Microsoft Active Directory (with extended schema or standard schema) and generic LDAP for centralized user authentication. RBAC is enforced through directory groups mapped to iDRAC roles. iDRAC also supports SAML SSO for OpenManage Enterprise integration.

Question 45Identity, access and cryptographic protection

Which Dell PowerEdge component is responsible for hardware-based cryptographic key storage for OS-level features like BitLocker?

  1. TPM 2.0 Correct answer.
  2. BOSS-N1
  3. PERC H965
  4. iDRAC

Explanation

PowerEdge servers ship with an optional or built-in TPM 2.0 (Trusted Platform Module) chip that securely stores cryptographic keys, measured boot values, and platform secrets. OS features such as Windows BitLocker and Linux TPM-bound LUKS rely on TPM 2.0 for key sealing.

Question 46Identity, access and cryptographic protection

Which feature on PowerEdge servers verifies the integrity of every firmware component using cryptographic signatures rooted in immutable silicon?

  1. Silicon Root of Trust Correct answer.
  2. Lifecycle Log
  3. SNMP traps
  4. Quick Sync 2

Explanation

Silicon Root of Trust uses immutable, factory-burned cryptographic keys in PowerEdge silicon to verify the BIOS, iDRAC firmware, and other components on every boot. Combined with Secure Boot and BIOS Recovery, it forms the base of Dell's Cyber Resilient Architecture.

Question 47Identity, access and cryptographic protection

Which iDRAC feature exposes signed firmware update verification to ensure that only Dell-signed images are installed?

  1. Signed firmware (Firmware Image Validation) Correct answer.
  2. Quick Sync 2
  3. Group Manager
  4. SupportAssist

Explanation

PowerEdge servers verify the cryptographic signatures of firmware payloads (BIOS, iDRAC, PERC, NIC) at install time, refusing to flash images not signed by Dell. This prevents firmware-level tampering and is part of the Cyber Resilient Architecture.

Question 48Identity, access and cryptographic protection

Which iDRAC feature lets the system automatically rotate iDRAC passwords on a schedule using an external secrets manager?

  1. Credential Rotation via Redfish Correct answer.
  2. Quick Sync 2
  3. NPAR
  4. Lockdown Mode

Explanation

Modern iDRAC versions can integrate with secrets managers (HashiCorp Vault, CyberArk) using Redfish APIs to rotate iDRAC credentials automatically on a schedule. This reduces standing privilege risk and aligns iDRAC with enterprise PAM workflows.

Question 49Identity, access and cryptographic protection

Which PowerEdge front-bezel security feature physically prevents unauthorized removal of front-accessible drives?

  1. Lockable front bezel Correct answer.
  2. TPM
  3. Cyber Recovery
  4. Chassis Intrusion Sensor

Explanation

PowerEdge servers offer a lockable front bezel with a unique key that physically blocks access to front-accessible drives. The chassis intrusion sensor separately detects top-cover removal and alerts iDRAC, but the bezel handles drive-bay protection.

Question 50Identity, access and cryptographic protection

Which PowerEdge security feature helps prevent unauthorized iDRAC access by limiting management to a designated VLAN?

  1. Management VLAN tagging on the dedicated iDRAC NIC Correct answer.
  2. Front-bezel lock
  3. Quick Sync 2
  4. TPM

Explanation

iDRAC supports 802.1Q VLAN tagging on its dedicated NIC, restricting management traffic to an isolated management VLAN. Combined with ACLs and per-IP filters, this is a fundamental control to prevent management-plane exposure to general data networks.