I85PREP
⌘ K
CITO study materials
CITO study resources

CITO practice questions

One question at a time. Build your CITO understanding.

First 50 of 190 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Daily IT operation, handover and service restoration

What is the primary objective of a structured shift handover protocol in daily IT operations?

  1. To reassign all open incidents to third-party vendors
  2. To ensure continuous, seamless operation by transferring accurate context, status, and pending tasks between shifts Correct answer.
  3. To audit the physical attendance of incoming operators
  4. To shut down non-essential monitoring tools during shift changes

Explanation

A structured shift handover ensures operational continuity by transferring vital contextual knowledge, active system statuses, ongoing incidents, and pending tasks from the outgoing shift to the incoming team. This minimizes operational gaps and prevents missed tasks or unhandled incidents.

Question 2Daily IT operation, handover and service restoration

During a routine monitoring shift, an IT operator notices CPU utilization on a core database server spike to 92% for 30 seconds before returning to 15%. What is the most appropriate immediate action?

  1. Immediately restart the server to restore baseline performance
  2. Log the transient event, check system logs for batch processing jobs, and monitor for recurrence Correct answer.
  3. Escalate immediately to executive management as a major outage
  4. Disable monitoring alerts for that database server to prevent alert fatigue

Explanation

A short-lived CPU spike is often caused by scheduled batch operations or heavy query compilation. The operator should log the occurrence, correlate it with scheduled jobs, and monitor for recurrence rather than taking destructive actions like restarting or triggering unnecessary escalations.

Question 3Daily IT operation, handover and service restoration

Which document must an outgoing IT operator update and review with incoming staff during a shift handover?

  1. Annual IT budget ledger
  2. Shift operational log (shift logbook) Correct answer.
  3. Vendor contract renewal schedule
  4. Disaster recovery policy document

Explanation

The shift operational logbook records all events, changes, incidents, maintenance activities, and system anomalies during a shift. Reviewing this log during handover ensures incoming operators are fully aware of system status.

Question 4Daily IT operation, handover and service restoration

Why is ambient temperature monitoring critical at the cold aisle server intakes according to ASHRAE guidelines?

  1. To ensure operator physical comfort while working inside racks
  2. To prevent thermal throttling and hardware degradation caused by hot air recirculation Correct answer.
  3. To reduce network cable latency inside high-density switches
  4. To measure ambient humidity outside the data center building

Explanation

ASHRAE guidelines specify intake air temperature standards (18°C–27°C) at server cold aisles. Monitoring air entering the servers prevents thermal throttling, hardware shutdown, or premature component failure caused by localized hot spots.

Question 5Daily IT operation, handover and service restoration

An IT operator notices that a critical network link monitor is reporting intermittent packet loss every 15 minutes. How does synthetic transaction monitoring help diagnose this issue compared to standard ping monitoring?

  1. Synthetic monitoring simulates real user application traffic patterns to verify functional responsiveness beyond ICMP reachability Correct answer.
  2. Synthetic monitoring physically repairs damaged optical fiber connections automatically
  3. Synthetic monitoring turns off network interfaces during test cycles
  4. Synthetic monitoring replaces network firewalls during diagnostic tests

Explanation

Synthetic transaction monitoring executes scripted end-to-end user actions (e.g., logging in, querying a database) to test application health and responsiveness. Unlike simple ICMP ping requests, synthetic tests reveal application-layer latency and intermittent transaction dropouts.

Question 6Daily IT operation, handover and service restoration

Which metric should an IT operator monitor to ensure that storage array capacity does not cause abrupt database write failures?

  1. LUN disk space growth rate and thin-provisioning allocation thresholds Correct answer.
  2. Fibre Channel switch port fan speed
  3. Tape library robotics arm cycle count
  4. RAM speed in the backup proxy server

Explanation

Monitoring LUN capacity growth trends and thin-provisioned storage consumption thresholds allows operators to trigger capacity expansion requests before volumes reach 100% capacity and cause database crash states.

Question 7Daily IT operation, handover and service restoration

What is the main benefit of utilizing an automated event correlation engine in a Central Monitoring Console?

  1. It eliminates the requirement for system backups
  2. It suppresses duplicate alerts and groups related symptom events into a single actionable incident record Correct answer.
  3. It automatically approves all pending maintenance change requests
  4. It replaces physical security guards at data center entrances

Explanation

Event correlation engines process thousands of raw system events, filter out noise, and group related symptoms (e.g., switch failure causing 50 server connectivity alerts) into one consolidated incident root cause, preventing operator alert fatigue.

Question 8Daily IT operation, handover and service restoration

Which operational document defines the acceptable performance boundaries (e.g., maximum network response time) that an operator monitors daily?

  1. Service Level Target (SLT) within the Service Level Agreement (SLA) Correct answer.
  2. Vendor hardware purchase invoice
  3. Software license end-user agreement
  4. Employee non-disclosure agreement

Explanation

Service Level Targets (SLTs) specify quantitative thresholds for service performance, such as system availability percentages and response times, enabling operators to track adherence to SLAs.

Question 9Daily IT operation, handover and service restoration

An IT operator notices that a critical batch job failed due to a 'Disk Full' error on a secondary log partition. What is the proper operational procedure?

  1. Delete all system system32 or root directories to free space quickly
  2. Follow the established SOP to clear or archive old application log files, restart the batch job, and log the incident Correct answer.
  3. Ignore the failure since it only affects secondary logs
  4. Format the entire hard drive volume without backing up data

Explanation

Operators must adhere to Standard Operating Procedures (SOPs) when handling disk space issues. The SOP will define which log files can be archived or purged safely, allowing the job to be re-run cleanly.

Question 10Daily IT operation, handover and service restoration

What is the purpose of configuring Simple Network Management Protocol (SNMP) Trap messages on network routers and switches?

  1. To encrypt user passwords sent over HTTP
  2. To allow network devices to proactively push immediate alert messages to the central monitoring console when an event occurs Correct answer.
  3. To back up router configuration files to magnetic tape automatically
  4. To balance electrical power loads between UPS batteries

Explanation

SNMP Traps are asynchronous alerts sent automatically by managed devices to a central management station when specific events occur (e.g., link down, power supply failure), eliminating the need to wait for the next polling cycle.

Question 11Daily IT operation, handover and service restoration

An IT operator is reviewing shift logs and notices that a specific server experienced three unprovoked automatic reboots over the past 24 hours. How should this scenario be handled?

  1. Classify it as a minor anomaly and mark all tickets closed
  2. Log a problem record (or escalate to Problem Management) for root-cause analysis of recurring unexpected reboots Correct answer.
  3. Replace the server motherboard immediately without taking system logs
  4. Disable the server's automatic reboot policy and leave it powered off indefinitely

Explanation

Recurring incidents indicate an underlying, unresolved root cause. Operators should escalate the issue to Problem Management so engineers can analyze crash dumps and identify the systemic fault.

Question 12Daily IT operation, handover and service restoration

In a data center equipped with a Building Management System (BMS) and an Information Technology Service Management (ITSM) tool, what is the operator's primary role regarding BMS alerts?

  1. Operators must rewrite the BMS software code whenever an alarm triggers
  2. Operators monitor BMS alarms for facility infrastructure (power, cooling, fire) and correlate them with IT service impacts Correct answer.
  3. Operators should disconnect BMS sensors to keep consoles clear
  4. Operators only handle software bugs and ignore all physical facility alerts

Explanation

IT operators must monitor BMS alerts (such as chiller failures or generator warnings) because physical infrastructure failures directly compromise server room availability and IT service health.

Question 13Daily IT operation, handover and service restoration

What is the recommended practice when an outgoing operator has an open high-priority ticket at the end of their shift?

  1. Close the ticket immediately so the shift ends with zero open tickets
  2. Conduct a formal verbal and written handover of the ticket status, recent diagnostic findings, and next action items to the incoming operator Correct answer.
  3. Transfer the ticket to an external vendor without notifying the incoming shift
  4. Delete the ticket history to simplify handover

Explanation

Active high-priority tickets must be formally handed over with full context (what has been tested, current hypothesis, pending actions) to ensure work continues uninterrupted during the shift change.

Question 14Daily IT operation, handover and service restoration

Why should IT operators avoid sharing operator console login accounts during shift operations?

  1. Shared accounts increase network bandwidth requirements
  2. Shared accounts destroy individual accountability and render operational audit logs useless Correct answer.
  3. Console monitoring tools run slower when multiple users share passwords
  4. Shared accounts prevent system backups from executing

Explanation

Individual accounts support attribution and controlled access. Shared credentials weaken accountability and can make it harder to determine which person acted, though relevant audit logs may still contain useful technical evidence. Access, authentication and logging should follow the actual approved operational policy.

Question 15Daily IT operation, handover and service restoration

Which daily operational checklist task ensures that physical access controls to the server room remain uncompromised?

  1. Verifying that emergency exit doors are latched securely and access log audit records match physical visitor logs Correct answer.
  2. Checking that all server rack doors are kept unlocked for easy access
  3. Turning off all CCTV cameras during non-business hours
  4. Disabling biometric scanners to speed up staff entry

Explanation

Operators must check physical security perimeters daily, ensuring emergency doors are closed/latched, rack locks are engaged, and visitor sign-ins match electronic badge logs.

Question 16Daily IT operation, handover and service restoration

An IT operator is evaluating disk input/output metrics and notices high IOPS accompanied by high I/O wait times on a file server. What does this condition indicate?

  1. The storage subsystem is experiencing an I/O bottleneck, delaying CPU processing Correct answer.
  2. The network interface card is operating in half-duplex mode
  3. The server power supply unit has failed completely
  4. The system memory RAM modules are ECC uncorrectable

Explanation

High I/O wait time indicates that the CPU is waiting for disk read/write requests to finish. Combined with high IOPS, this points to a storage throughput bottleneck requiring storage optimization or tiering.

Question 17Daily IT operation, handover and service restoration

What action should an IT operator take if an automated alarm monitoring console suddenly goes completely blank during a shift?

  1. Assume all systems are functioning normally and wait for the shift to end
  2. Immediately switch to the secondary/backup monitoring station, report the console failure, and verify system status manually Correct answer.
  3. Power off all data center servers immediately
  4. Reformat the monitoring console server without saving logs

Explanation

Loss of monitoring console display represents a loss of operational visibility. Operators must fail over to redundant monitoring consoles immediately and manually inspect critical systems to ensure no hidden outages are occurring.

Question 18Daily IT operation, handover and service restoration

Why is it important to place specific monitoring alerts into 'Maintenance Mode' prior to executing approved system maintenance?

  1. To prevent automated false alarms from triggering false incident escalations and alert fatigue Correct answer.
  2. To permanently delete system logs generated during the work window
  3. To increase server processing speeds during maintenance
  4. To bypass physical door lock security systems

Explanation

Placing devices in maintenance mode suppresses expected alerts (e.g., node down warnings during a reboot) so that operators and on-call engineers are not spammed with false positives during scheduled work.

Question 19Daily IT operation, handover and service restoration

What is the primary function of a 'heartbeat' signal in operational clustering and high-availability monitoring?

  1. To measure ambient sound levels in the server room
  2. To send continuous periodic signals between nodes to verify health and trigger failover if a node stops responding Correct answer.
  3. To clean dust from circuit board components automatically
  4. To calculate monthly energy costs for the IT department

Explanation

Heartbeat signals are lightweight periodic messages exchanged between clustered nodes. If a node fails to send heartbeats, the cluster mechanism detects the failure and initiates automated failover.

Question 20Daily IT operation, handover and service restoration

An IT operator notices that a core network switch's memory consumption has been steadily increasing by 2% every day for three weeks. What type of operational analysis does this represent?

  1. Trend analysis for proactive capacity management and resource leak identification Correct answer.
  2. Post-incident forensic investigation of a ransomware attack
  3. Disaster recovery site failover validation
  4. Emergency operating procedure execution

Explanation

Tracking slow, consistent consumption increases over time is trend analysis. It allows operators to catch software memory leaks or capacity exhaustion proactively before a system crash occurs.

Question 21Daily IT operation, handover and service restoration

Which daily operational task ensures that tape cartridges inside an automated tape library are accurately tracked?

  1. Performing a periodic inventory scan (audit scan) of library slots via the management console Correct answer.
  2. Washing tape cartridges with soapy water
  3. Exposing tape cartridges to strong magnetic fields to clear dust
  4. Manually rearranging tape cartridges randomly across slots

Explanation

Library inventory scans read barcode labels on tape cartridges and update the media database slot map, ensuring backup software accurately locates specific media for restores.

Question 22Daily IT operation, handover and service restoration

According to IT Service Management standards, how is an 'Incident' defined?

  1. An unplanned interruption to an IT service or reduction in the quality of an IT service Correct answer.
  2. The underlying cause of one or more unknown future enhancements
  3. A scheduled change to upgrade server hardware during off-peak hours
  4. A formal request from a user for a new laptop keyboard

Explanation

An incident is defined as an unplanned interruption or quality reduction of an IT service. The goal of Incident Management is to restore normal service operation as quickly as possible.

Question 23Daily IT operation, handover and service restoration

In the supplied operational prioritization model, incident priority is derived from which two dimensions?

  1. Priority = Impact x Urgency Correct answer.
  2. Priority = Cost x Duration
  3. Priority = Server Count / CPU Speed
  4. Priority = Vendor Rating + Staff Count

Explanation

The keyed option names impact and urgency, the inputs in this supplied model. An actual organization usually defines a matrix or decision policy; numeric multiplication is not a universal ITSM rule. Severity, safety, dependencies and escalation authority must follow the approved service process.

Question 24Daily IT operation, handover and service restoration

What is the difference between Functional Escalation and Hierarchical Escalation?

  1. Functional escalation transfers an incident to specialized technical groups; Hierarchical escalation notifies higher levels of management Correct answer.
  2. Functional escalation is used only for hardware; Hierarchical escalation is used only for software
  3. Functional escalation is automatic; Hierarchical escalation can never occur
  4. Functional escalation requires customer approval; Hierarchical escalation requires vendor approval

Explanation

Functional escalation moves a ticket laterally or vertically to teams with specific technical skills (e.g., L1 operator to L2 database administrator). Hierarchical escalation moves up the management chain when organizational authority or resource reallocation is required.

Question 25Daily IT operation, handover and service restoration

An IT operator detects that the primary e-commerce payment gateway database is completely unreachable, affecting thousands of online transactions. What is the operator's immediate priority?

  1. Wait 4 hours to see if the network self-heals before logging a ticket
  2. Log a Severity-1 (Major) incident ticket, initiate the Major Incident response procedure, and notify the Major Incident Manager Correct answer.
  3. Begin recoding the web application code on the production server
  4. Send an email to all customers apologizing for the downtime

Explanation

A complete loss of a revenue-generating core service is a Severity-1 Major Incident. Operators must immediately log the Sev-1 ticket and trigger the Major Incident Management workflow to mobilize rapid restoration resources.

Question 26Daily IT operation, handover and service restoration

What role does an IT operator play during a Major Incident Bridge Call?

  1. Leading long-term contract renegotiations with internet service providers
  2. Providing clear operational status updates, executing authorized diagnostic checks, and logging timeline actions accurately Correct answer.
  3. Dismissing technical support teams to reduce call noise
  4. Taking over executive PR announcements

Explanation

During major incident bridge calls, operators support the Incident Commander by reporting current console metrics, performing verified diagnostic tasks, and keeping precise timeline entries in the incident log.

Question 27Daily IT operation, handover and service restoration

What is the key distinction between a Workaround and a Permanent Solution in Incident and Problem Management?

  1. A workaround temporarily restores service functionality without eliminating the root cause; a permanent solution removes the root cause entirely Correct answer.
  2. A workaround is implemented by vendors; a permanent solution is implemented by operators
  3. A workaround takes 6 months to apply; a permanent solution takes 5 minutes
  4. A workaround requires hardware replacement; a permanent solution requires deleting system logs

Explanation

Workarounds bypass or mitigate the impact of an incident quickly (e.g., failing over to a secondary node) to restore service. Problem Management then investigates the underlying root cause to deliver a permanent fix.

Question 28Daily IT operation, handover and service restoration

Why should recurring minor incidents (e.g., a print spooler crashing every Tuesday morning) be linked to a single Problem Record?

  1. To allow operators to ignore future occurrences of the crash
  2. To enable Problem Management to investigate common patterns, identify root cause, and implement a systemic solution Correct answer.
  3. To automatically charge the end user for printer usage
  4. To hide the crashes from monthly reporting

Explanation

Linking recurring incidents to a Problem Record consolidates trend data, helping problem managers perform root-cause analysis (RCA) and deliver a definitive fix that stops repeat incidents.

Question 29Daily IT operation, handover and service restoration

Which event classification requires immediate logging but does NOT indicate a current service disruption?

  1. Informational Event (e.g., successful user login, backup completed) Correct answer.
  2. Severity 1 Incident
  3. Emergency Change Request
  4. Disaster Recovery Declaration

Explanation

Informational events represent normal system operations and state changes (e.g., successful logins, job completions) that are logged for audit and monitoring baseline purposes without requiring active intervention.

Question 30Daily IT operation, handover and service restoration

What is the primary risk of 'Alert Fatigue' among IT operations staff?

  1. Operators become desensitized to frequent low-value alarms and may miss critical, high-severity system alerts Correct answer.
  2. Monitoring consoles consume excessive electrical current
  3. Server hard drives fill up with video files
  4. Network switch ports turn off automatically

Explanation

Alert fatigue occurs when operators are flooded with unactionable noise or false positives. This desensitization increases the likelihood that genuine critical alerts will be overlooked or delayed.

Question 31Daily IT operation, handover and service restoration

What information MUST be included in an incident ticket prior to functional escalation to Level 2 Network Engineering?

  1. Exact device hostname, IP address, error messages, baseline test results, and initial operator diagnostic steps taken Correct answer.
  2. The home address of the network engineer on call
  3. The purchase price of the network switch
  4. A copy of the annual corporate financial report

Explanation

Escalation quality depends on accurate diagnostic context. Including exact hostnames, IPs, error logs, and initial troubleshooting steps prevents duplicate effort and speeds up Level 2 resolution.

Question 32Daily IT operation, handover and service restoration

What is meant by a 'Warm Handoff' during incident escalation?

  1. Directly speaking with the receiving engineer to explain incident context and verify receipt before transferring responsibility Correct answer.
  2. Reassigning a ticket in the system without informing anyone
  3. Leaving a printed ticket note on an empty desk overnight
  4. Sending an automated email broadcast to all employees

Explanation

A warm handoff involves real-time communication (voice or chat) with the next support tier to brief them on status and confirm acceptance, ensuring no high-priority ticket falls through the cracks.

Question 33Daily IT operation, handover and service restoration

What operational data should IT operators contribute to a Post-Incident Review (PIR) following a Major Outage?

  1. Accurate console timeline events, initial alert timestamps, log snippets, and operational barriers encountered during restoration Correct answer.
  2. Personal opinions on company management structure
  3. Guesses about future stock market performance
  4. List of irrelevant vendor marketing brochures

Explanation

Operators provide essential factual data for PIRs: precise alert timestamps, console event logs, diagnostic timelines, and operational challenges faced. This empirical evidence drives root cause analysis and preventative action plans.

Question 34Daily IT operation, handover and service restoration

An IT operator notices a Warning alert indicating a UPS is running on battery power due to a utility mains voltage drop. What is the operator's immediate task?

  1. Monitor battery discharge runtime, verify utility failure with facility management, and prepare for emergency generator transfer or graceful shutdown procedures Correct answer.
  2. Immediately turn off the UPS output breaker to save battery charge
  3. Unplug the UPS from the wall electrical socket
  4. Ignore the alert until the battery dies completely

Explanation

When mains power drops, the UPS sustains the load on batteries. The operator must track available battery runtime, coordinate with facility engineers regarding emergency diesel generator start, and prepare for controlled shutdown if power is not restored.

Question 35Daily IT operation, handover and service restoration

How should an IT operator handle a suspicious event alert indicating multiple failed root login attempts from an unknown external IP address?

  1. Escalate immediately to the Information Security / SOC team following the Security Incident Response procedure Correct answer.
  2. Delete the security log file to clear the alert console
  3. Reply to the external IP address asking them to stop
  4. Shut down all internal network switches

Explanation

Security events (unauthorized access attempts, brute-force indicators) must be escalated immediately to the Security Operations Center (SOC) or IT Security team per security incident escalation workflows.

Question 36Daily IT operation, handover and service restoration

What is the primary role of a Known Error Database (KEDB) for first-line IT operators?

  1. It allows operators to quickly search documented workarounds and resolution steps for previously identified system defects Correct answer.
  2. It stores employee payroll and bonus history
  3. It generates random passwords for network users
  4. It controls physical air conditioning fan speeds

Explanation

The KEDB maintains records of known problems, their underlying root causes, and proven workarounds. Operators consult the KEDB during incident triage to restore service rapidly using pre-approved procedures.

Question 37Daily IT operation, handover and service restoration

Who is responsible for issuing official status communications to business stakeholders during a Major Incident?

  1. The designated Incident Communications Lead or Major Incident Manager Correct answer.
  2. Every IT operator individually via personal social media
  3. External third-party hardware repair technicians
  4. The junior night-shift trainee without review

Explanation

To prevent conflicting or inaccurate messaging, business communications during major outages are restricted to designated Incident Communications Leads or Major Incident Managers.

Question 38Daily IT operation, handover and service restoration

What is the correct protocol when an external vendor fails to dispatch a field engineer within the contractual SLA time limit?

  1. Escalate hierarchically to the Service Delivery Manager / Vendor Manager and log an SLA breach record Correct answer.
  2. Cancel the vendor contract on the spot without legal review
  3. Drive to the vendor's headquarters to perform the repair yourself
  4. Close the incident ticket as unresolvable

Explanation

SLA non-compliance by vendors must be escalated to internal Vendor Managers or Service Delivery Managers to trigger contractual penalties and executive intervention.

Question 39Daily IT operation, handover and service restoration

An IT operator is faced with five concurrent incoming alerts: a water leak under the main SAN, a printer out of paper, a user forgetting a password, a server fan running fast, and a batch job warning. Which alert gets highest priority?

  1. Water leak under the main SAN Correct answer.
  2. Printer out of paper
  3. User password reset
  4. Batch job warning

Explanation

A water leak under the primary Storage Area Network poses an immediate existential threat to core storage infrastructure, representing the highest business impact and urgency.

Question 40Daily IT operation, handover and service restoration

What is the purpose of categorizing incident tickets using standardized categories (e.g., Hardware > Storage > Disk Failure)?

  1. To enable accurate ticket routing, meaningful trend analysis, and clear SLA tracking across IT domains Correct answer.
  2. To increase the length of time required to log tickets
  3. To restrict users from submitting feedback
  4. To encrypt ticket contents from system administrators

Explanation

Standardized taxonomy trees ensure tickets are automatically routed to correct technical teams and provide clean data for reporting and problem management trend analysis.

Question 41Daily IT operation, handover and service restoration

An IT operator receives an unverified alert that a door to the main server hall was forced open without a valid badge swipe. What immediate action is required?

  1. Dispatch security personnel or check CCTV feeds immediately to verify physical intrusion, while alerting the Shift Supervisor Correct answer.
  2. Wait until the end of the shift to see if the door closes
  3. Turn off room lighting to hide the servers
  4. Delete the intrusion alarm event from the security console

Explanation

Forced door alarms indicate potential physical security breaches. Operators must verify physical security immediately via CCTV or security dispatches to protect physical assets.

Question 42Daily IT operation, handover and service restoration

When is an incident ticket formally allowed to be closed in the ITSM system?

  1. When service restoration is verified, root workaround or fix is confirmed functional, and user/business sign-off or auto-closure period has elapsed Correct answer.
  2. As soon as Level 1 support reassigns the ticket to Level 2
  3. When the shift operator leaves for lunch
  4. Immediately upon ticket creation

Explanation

Incident closure requires verification that normal service is fully restored and that the customer or automated verification confirms functionality.

Question 43Facility maintenance, condition evidence and service verification

What is the key operational distinction between a Standard Operating Procedure (SOP) and a Method of Procedure (MOP)?

  1. An SOP provides routine, repeatable instructions for standard daily tasks; a MOP provides a detailed, step-by-step execution plan for specific, high-risk maintenance activities Correct answer.
  2. An SOP is written for managers; a MOP is written for customers
  3. An SOP is used during fire emergencies; a MOP is used for software licensing
  4. An SOP requires executive approval; a MOP requires no approval

Explanation

The keyed distinction describes the terminology supplied here: routine repeatable SOP work versus a specific controlled maintenance MOP. Naming conventions differ among organizations, and neither label automatically grants authority or ensures safety. Follow the actual controlled document, competency requirements, change approval and escalation boundaries.

Question 44Facility maintenance, condition evidence and service verification

Which critical section MUST be included in every Method of Procedure (MOP) document before approval?

  1. Rollback / Back-out plan detailing exact steps to restore original system state if maintenance fails Correct answer.
  2. List of nearby lunch restaurants
  3. Vendor company stock price forecast
  4. Employee vacation schedule

Explanation

A Rollback Plan is mandatory in every MOP. If unforeseen issues occur during maintenance, the team must follow tested back-out steps to return the system safely to its functional pre-maintenance state.

Question 45Facility maintenance, condition evidence and service verification

Before initiating any scheduled hardware maintenance on a production server rack, what must the IT operator verify first?

  1. That an approved Change Request (CR) exists, the maintenance window is active, and stakeholders have been notified Correct answer.
  2. That all office windows are opened for ventilation
  3. That the server operating system license has expired
  4. That all security cameras are disconnected

Explanation

Executing unapproved maintenance threatens system stability. Operators must verify an approved Change Request (CR), confirm the maintenance window timing, and ensure pre-notification requirements are fulfilled.

Question 46Facility maintenance, condition evidence and service verification

When populating a server rack with heavy equipment (e.g., UPS units, disk arrays, heavy servers), what is the correct vertical placement rule?

  1. Install the heaviest equipment at the bottom of the rack to maintain a low center of gravity and prevent tipping Correct answer.
  2. Install the heaviest equipment at the top of the rack to keep it near ceiling air conditioners
  3. Mount heavy equipment in the middle unit (20U) only, leaving the bottom 10U completely empty
  4. Distribute heavy equipment on side exterior walls of the rack chassis

Explanation

Heavy components (batteries, transformers, dense storage arrays) must be installed at the bottom of server racks. This keeps the center of gravity low, preventing rack instability or tipping during seismic events or equipment slide-outs.

Question 47Facility maintenance, condition evidence and service verification

In a standard Hot Aisle / Cold Aisle data center layout, how should server rack equipment be oriented?

  1. Equipment front air intakes must face the Cold Aisle, and rear exhausts must discharge into the Hot Aisle Correct answer.
  2. Equipment front air intakes must face the Hot Aisle
  3. Alternating adjacent servers in opposite directions within the same rack
  4. All servers facing sideways toward the aisle walls

Explanation

Hot/Cold aisle design segregates intake and exhaust airflow. Equipment must draw cool supply air from the Cold Aisle into front intakes and expel hot exhaust air into the Hot Aisle out the rear.

Question 48Facility maintenance, condition evidence and service verification

What risk arises when an optical-fiber patch cord is bent more tightly than its manufacturer-specified minimum bend radius?

  1. Macrobending light loss, micro-cracks in glass cores, and signal attenuation or total link failure Correct answer.
  2. Increased copper electrical resistance
  3. Overheating of the fiber plastic jacket causing fire
  4. Reversal of network packet sequence numbers

Explanation

Bending a fiber more tightly than its specified minimum radius can increase optical loss or cause physical damage. A larger radius is not the violation described here. Follow the actual cable/connector specification and approved handling procedure; do not inspect an energized fiber with the naked eye.

Question 49Facility maintenance, condition evidence and service verification

Under what circumstances should an IT operator execute an Emergency Operating Procedure (EOP)?

  1. During catastrophic or high-risk emergency events (e.g., active fire, utility power failure, structural flood) to safeguard human life and physical assets Correct answer.
  2. When performing routine monthly patch updates
  3. Whenever a customer submits a low-priority ticket
  4. To test new monitoring software color schemes

Explanation

EOPs provide urgent action protocols during active physical or facility disasters (fires, major leaks, total power collapses) where rapid, standardized execution is essential to protect life and core infrastructure.

Question 50Facility maintenance, condition evidence and service verification

Under the supplied site policy requiring continuous escort of outside contractors, what must happen when a vendor performs approved work inside the secure server room?

  1. Vendor contractors must be escorted and supervised continuously by authorized staff, signed into access logs, and restricted strictly to authorized work scopes Correct answer.
  2. Contractors are given master key cards and left unsupervised overnight
  3. Contractors are permitted to bring unauthorized guests into the facility
  4. Contractors may connect personal unvetted laptops directly to production core switches without authorization

Explanation

Under this explicitly supplied site policy, authorized personnel must supervise the vendor, record access and restrict work to the approved scope. Other sites can use different approved controls. Neither a vendor badge nor technical expertise independently authorizes unscheduled changes or unrestricted access.