ExtremeCloud IQ Site Engine (XIQ-SE) study materials
ExtremeCloud IQ Site Engine (XIQ-SE) study resources

ExtremeCloud IQ Site Engine (XIQ-SE) practice questions

One question at a time. Build your ExtremeCloud IQ Site Engine (XIQ-SE) understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1ExtremeCloud IQ Site Engine Architecture, Deployment, and Licensing

In an ExtremeCloud IQ Site Engine deployment, which component provides the centralized web-based interface through which administrators manage network devices, view alarms, and launch management applications?

  1. The ExtremeCloud IQ Site Engine Client (Admin Console installed on a workstation)
  2. The ExtremeAnalytics Engine
  3. The ExtremeCloud IQ Site Engine Server (formerly NetSight Server) Correct answer.
  4. The ExtremeControl Engine

Explanation

The Site Engine Server hosts the central web interface and the shared services (inventory, alarms, policy, and the application launcher) that administrators reach from a browser. The client-side console is only a presentation layer and depends on the server. Engines extend functionality but do not host the main management UI.

Question 2ExtremeCloud IQ Site Engine Architecture, Deployment, and Licensing

Which statement best describes the role of an ExtremeControl Engine in an ExtremeCloud IQ Site Engine architecture?

  1. It acts as the SNMP trap receiver for the entire deployment.
  2. It enforces network access control by authenticating and authorizing endpoints and applying VLAN or policy assignments. Correct answer.
  3. It provides the licensing portal for all Site Engine applications.
  4. It stores the primary inventory database for all managed devices.

Explanation

ExtremeControl Engine is the access-control component that handles authentication, authorization, and endpoint policy enforcement. Inventory, licensing, and trap handling are functions of the Site Engine Server rather than the Control Engine. Separating these roles allows access control to scale independently.

Question 3ExtremeCloud IQ Site Engine Architecture, Deployment, and Licensing

An administrator wants to deploy ExtremeCloud IQ Site Engine in a highly available configuration so that management survives the loss of a single server. Which statement reflects the supported approach?

  1. Install only the client console on two workstations and rely on the server to remain online.
  2. Deploy two independent Site Engine Servers with different database names and manually merge reports.
  3. Deploy a primary Site Engine Server and configure a standby/redundant server pair so the database and services fail over. Correct answer.
  4. Run the Control Engine on the same host as the primary server to provide redundancy.

Explanation

ExtremeCloud IQ Site Engine supports a redundant server pair in which a standby server takes over the database and services if the primary fails. Independent servers with separate databases do not provide automatic failover. Redundancy is a server-level capability, not a client or Control Engine function.

Question 4ExtremeCloud IQ Site Engine Architecture, Deployment, and Licensing

Which factor most directly determines how many managed devices a single ExtremeCloud IQ Site Engine Server can support?

  1. The number of VLANs configured on managed switches
  2. The number of client consoles installed on administrator workstations
  3. The server hardware resources and the licensed scale tier Correct answer.
  4. The version of the web browser used to access the interface

Explanation

Scalability is governed by the server's CPU, memory, and disk resources together with the scale/device-count entitlement in the license. Client consoles, VLAN counts, and browsers do not define the supported device ceiling. Sizing guidance should be followed when planning large deployments.

Question 5ExtremeCloud IQ Site Engine Architecture, Deployment, and Licensing

An administrator is preparing to install ExtremeCloud IQ Site Engine on a Linux host. Which prerequisite is essential before running the installer?

  1. The host must have a supported operating system version and the required packages and resources documented for that release. Correct answer.
  2. The host must be joined to the same Active Directory domain as all managed switches.
  3. The host must already have ExtremeControl Engine installed.
  4. The host must run a database from a third-party vendor.

Explanation

Installation requires a supported OS release with the documented packages, disk space, memory, and ports available. The Site Engine bundles its own database, so an external database is not required. Domain membership and pre-installed Control Engine are not prerequisites for the server installation.

Question 6ExtremeCloud IQ Site Engine Architecture, Deployment, and Licensing

Which statement accurately describes how licensing is applied to ExtremeCloud IQ Site Engine applications such as ExtremeControl and ExtremeAnalytics?

  1. Licenses are auto-generated per managed device without administrator action.
  2. Each application has its own license entitlement that must be installed and is tied to the deployment's licensing identity. Correct answer.
  3. Licenses are only required for the client console and not for server-side applications.
  4. A single universal license enables every application at unlimited scale.

Explanation

ExtremeCloud IQ Site Engine applications are licensed individually, with entitlements for scale and feature sets, and the license is bound to the deployment's licensing identity. There is no single unlimited universal license, and client consoles do not require their own licenses. Device-based licenses are not generated automatically without administrator involvement.

Question 7ExtremeCloud IQ Site Engine Architecture, Deployment, and Licensing

An administrator needs to add an ExtremeControl Engine to an existing ExtremeCloud IQ Site Engine deployment. What is the correct relationship between the Engine and the Server?

  1. The Engine must run on the same physical host as the Server.
  2. The Engine replaces the Server and becomes the new primary management node.
  3. The Engine is registered to the Server so the Server can manage it and distribute configuration and policy. Correct answer.
  4. The Engine operates fully standalone and does not communicate with the Server.

Explanation

Additional Engines are registered to the Site Engine Server, which then manages them centrally and pushes configuration and policy. Engines do not operate as independent management islands, nor do they replace the Server role. They are typically deployed on separate hosts to distribute load.

Question 8ExtremeCloud IQ Site Engine Architecture, Deployment, and Licensing

Which port and protocol are commonly used by managed devices to send SNMP traps to ExtremeCloud IQ Site Engine?

  1. UDP port 162 Correct answer.
  2. UDP port 514
  3. TCP port 22
  4. TCP port 443

Explanation

SNMP traps are sent to the trap receiver on UDP port 162, which the Site Engine Server listens on. Port 443 is used for HTTPS web access, port 22 for SSH, and port 514 for syslog. Firewall rules must permit trap traffic to reach the server.

Question 9ExtremeCloud IQ Site Engine Architecture, Deployment, and Licensing

An administrator must ensure that managed switches can be discovered and managed by ExtremeCloud IQ Site Engine. Which combination best supports discovery and ongoing management?

  1. SNMP read/write credentials configured on devices and permitted through the network path to the Server Correct answer.
  2. A single shared local account on the Server with no device credentials
  3. Only syslog forwarding enabled on the devices
  4. Only ICMP ping enabled on the devices

Explanation

Discovery and management rely on SNMP credentials (and often CLI credentials) configured on devices and reachable from the Server. ICMP alone reveals reachability but not device details, and syslog forwarding provides events but not management access. A server-local account does not authenticate to network devices.

Question 10ExtremeCloud IQ Site Engine Architecture, Deployment, and Licensing

Which statement about the ExtremeCloud IQ Site Engine database is correct?

  1. It is stored only on client workstations.
  2. It is bundled with the Server and stores inventory, configuration, and event data. Correct answer.
  3. It requires a separately licensed Oracle instance.
  4. It is optional and the product runs entirely without persistent storage.

Explanation

The Site Engine Server includes a bundled database that persists inventory, configuration, alarm, and reporting data. No separate third-party database license is required. Client workstations do not host the database, and persistent storage is essential to product operation.

Question 11ExtremeCloud IQ Site Engine Architecture, Deployment, and Licensing

In a distributed ExtremeCloud IQ Site Engine deployment, what is the primary purpose of deploying multiple ExtremeControl Engines?

  1. To distribute authentication and policy enforcement load across network segments Correct answer.
  2. To host the web interface for administrators
  3. To store backup copies of the Server database
  4. To provide DNS resolution for managed devices

Explanation

Multiple Control Engines distribute authentication and enforcement work, often placing an Engine near the segments it serves. Database backups, the administrative web interface, and DNS are not the purpose of additional Control Engines. This distribution improves scale and resilience of access control.

Question 12ExtremeCloud IQ Site Engine Architecture, Deployment, and Licensing

Which statement describes the correct use of the ExtremeCloud IQ Site Engine client console?

  1. It runs the central database and must be installed on the Server only.
  2. It is installed on an administrator workstation and connects to the Server to present management functions. Correct answer.
  3. It must be installed on every managed switch.
  4. It replaces the Server web interface and eliminates the need for a browser.

Explanation

The client console is a workstation application that connects to the Site Engine Server for management functions. It does not host the database or replace the browser interface. Managed switches do not host the client console.

Question 13ExtremeCloud IQ Site Engine Architecture, Deployment, and Licensing

An administrator is planning capacity and wants to confirm the licensed device count for ExtremeCloud IQ Site Engine. Where should the administrator look?

  1. In the client console's local preferences file
  2. In the DNS zone file
  3. In the license entitlement information displayed in the Server's administration settings Correct answer.
  4. In the switch running configuration

Explanation

License entitlements, including device counts and application licenses, are visible in the Server's administration settings. Switch configurations, client preferences, and DNS do not record licensing. Reviewing entitlements helps verify capacity before adding devices.

Question 14ExtremeCloud IQ Site Engine Architecture, Deployment, and Licensing

Which statement best explains why ExtremeCloud IQ Site Engine separates the Server role from Engine roles?

  1. To allow the Server to centralize management while Engines scale specialized functions such as access control and analytics Correct answer.
  2. To eliminate the need for any licensing
  3. To avoid using SNMP for device management
  4. To ensure the client console can run without a network connection

Explanation

The architecture centralizes management on the Server and distributes specialized, resource-intensive functions to Engines. This separation supports scaling and resilience. It does not remove licensing requirements, enable offline clients, or eliminate SNMP.

Question 15ExtremeCloud IQ Site Engine Architecture, Deployment, and Licensing

An administrator must verify that the ExtremeCloud IQ Site Engine Server can receive syslog messages from managed devices. Which port should be permitted inbound to the Server?

  1. TCP 22
  2. UDP 514 Correct answer.
  3. UDP 162
  4. TCP 443

Explanation

Syslog messages are typically sent over UDP port 514, so the Server must accept traffic on that port. Port 443 serves HTTPS, 162 receives SNMP traps, and 22 is SSH. Confirming these ports prevents missing event data.

Question 16ExtremeCloud IQ Site Engine Architecture, Deployment, and Licensing

Which statement correctly describes the relationship between ExtremeCloud IQ (cloud) and ExtremeCloud IQ Site Engine (on-premises)?

  1. Site Engine is only a reporting add-on to the cloud service.
  2. Site Engine and ExtremeCloud IQ cloud share a single mandatory database.
  3. Site Engine is an on-premises management platform that can be deployed independently of the cloud service. Correct answer.
  4. Site Engine requires a continuous connection to ExtremeCloud IQ cloud to function.

Explanation

ExtremeCloud IQ Site Engine is an on-premises management platform that operates independently, while ExtremeCloud IQ is the cloud management service. Site Engine does not require a continuous cloud connection to function. It is a full management platform, not merely a reporting add-on, and it maintains its own database.

Question 17ExtremeCloud IQ Site Engine Architecture, Deployment, and Licensing

During installation planning, an administrator must choose between installing the Server and adding Engines later. Which statement reflects best practice?

  1. Install the Server first, complete initial configuration, then register Engines as needed. Correct answer.
  2. Install only Engines and manage devices without a Server.
  3. Install the client console first and use it as the Server.
  4. Install all Engines first and let them elect a Server automatically.

Explanation

The Server is the anchor of the deployment and must be installed and configured before Engines can register to it. Engines do not elect a Server automatically, and they cannot operate without one. The client console cannot serve as the Server.

Question 18ExtremeCloud IQ Site Engine Architecture, Deployment, and Licensing

An administrator observes that a newly added ExtremeControl Engine is not receiving policy from the Server. Which area should be investigated first?

  1. The number of VLANs on the managed switches
  2. The registration and connectivity status between the Engine and the Server Correct answer.
  3. The browser cache on the administrator workstation
  4. The DNS record for the client console

Explanation

Engines must be registered and able to communicate with the Server to receive configuration and policy. If registration or connectivity is broken, policy is not delivered. Switch VLAN counts, browser cache, and client DNS do not govern Engine-to-Server policy distribution.

Question 19ExtremeCloud IQ Site Engine Architecture, Deployment, and Licensing

Which statement about the licensing identity used by ExtremeCloud IQ Site Engine is correct?

  1. It changes each time a device is discovered.
  2. It is the same for every deployment worldwide.
  3. It is only needed for the client console.
  4. It binds installed licenses to the specific deployment so they cannot be freely reused elsewhere. Correct answer.

Explanation

The licensing identity ties entitlements to a specific deployment, preventing unrestricted reuse on other systems. It is unique per deployment and does not change with each discovery event. Client consoles do not carry the deployment licensing identity.

Question 20ExtremeCloud IQ Site Engine Architecture, Deployment, and Licensing

Which deployment consideration most affects whether an ExtremeControl Engine should be placed close to the network edge?

  1. The need to minimize latency and WAN dependency for authentication and enforcement traffic Correct answer.
  2. The color scheme of the administrative web interface
  3. The version of the bundled database
  4. The number of client consoles in use

Explanation

Placing an Engine near the edge reduces latency and reliance on WAN links for authentication and enforcement. UI appearance, console counts, and database version do not drive placement. Local placement also improves resilience if the WAN fails.

Question 21ExtremeCloud IQ Site Engine Architecture, Deployment, and Licensing

Which statement describes the purpose of the ExtremeAnalytics Engine within ExtremeCloud IQ Site Engine?

  1. It enforces endpoint access control.
  2. It provides the central inventory database.
  3. It provides application and traffic visibility and reporting for the network. Correct answer.
  4. It serves the administrative web interface.

Explanation

ExtremeAnalytics Engine delivers application and traffic visibility with reporting and analytics. Inventory storage, access-control enforcement, and the web interface belong to the Server and Control Engine roles. Analytics complements management by adding traffic insight.

Question 22ExtremeCloud IQ Site Engine Architecture, Deployment, and Licensing

An administrator is troubleshooting why the ExtremeCloud IQ Site Engine web interface is unreachable from a workstation. Which check is most relevant?

  1. Verify that UDP 162 is open from the workstation.
  2. Verify that the switch's VLAN configuration matches the workstation.
  3. Verify that TCP 443 is permitted between the workstation and the Server. Correct answer.
  4. Verify that the client console is installed on the workstation.

Explanation

The web interface is served over HTTPS on TCP 443, so connectivity on that port is the key check. UDP 162 relates to trap reception, VLAN matching is not a web-access requirement, and the client console is not needed for browser access.

Question 23ExtremeCloud IQ Site Engine Architecture, Deployment, and Licensing

Which statement best explains the benefit of the redundant server pair in ExtremeCloud IQ Site Engine?

  1. It doubles the number of client consoles that can connect.
  2. It allows management services and the database to resume on the standby node if the primary fails. Correct answer.
  3. It removes the need for licensing on the standby node.
  4. It automatically discovers devices without credentials.

Explanation

A redundant server pair keeps a standby node synchronized so services and the database can resume after a primary failure. Redundancy does not increase console capacity, eliminate licensing, or bypass credential requirements for discovery. It addresses availability, not scale or security.

Question 24ExtremeCloud IQ Site Engine Architecture, Deployment, and Licensing

Which statement about the resources required by an ExtremeControl Engine is accurate?

  1. Engines require a dedicated external database server.
  2. Engines require no memory beyond the operating system minimum.
  3. Engine sizing is determined solely by the number of client consoles.
  4. Engine sizing depends on factors such as the number of endpoints and authentication throughput it must handle. Correct answer.

Explanation

Control Engine sizing depends on endpoint counts and authentication throughput, which drive CPU and memory needs. Engines do not run on minimal memory, are not sized by console counts, and do not require an external database. Following sizing guidance prevents performance problems.

Question 25Site Engine Installation, Upgrade, and Initial Configuration

When preparing a server for an ExtremeCloud IQ Site Engine installation, which operating system consideration is most relevant to whether the appliance can be deployed on that host?

  1. The host must be a hypervisor appliance image only, never a physical server
  2. The host must run a container-optimized OS with no package manager
  3. The host must run any recent Windows Server release with the GUI role enabled
  4. The host must run a supported Linux distribution listed in the release notes for that XIQ-SE version Correct answer.

Explanation

XIQ-SE is delivered as an appliance-style deployment whose supported base operating systems are explicitly enumerated per release. Deploying on an unsupported OS or version places the installation outside the validated configuration and can break bundled services. Always confirm the exact supported platform against the release notes before building the host.

Question 26Site Engine Installation, Upgrade, and Initial Configuration

You are sizing a new XIQ-SE server that will manage a large number of switches and access points while also running the ExtremeCloud IQ Controller integration. Which resource should you verify first against the published sizing guidance?

  1. The number of USB ports exposed to the guest OS
  2. The color depth configured on the management console
  3. The number of unused PCIe slots on the motherboard
  4. The CPU core count and RAM allocated to the virtual machine Correct answer.

Explanation

Sizing guidance for XIQ-SE is expressed primarily in terms of managed devices, CPU cores, and memory, because the management, reporting, and integration services are compute- and memory-intensive. Verifying cores and RAM against the sizing table for your device count is the first step. Peripheral hardware such as slots, console color depth, and USB ports has no bearing on capacity.

Question 27Site Engine Installation, Upgrade, and Initial Configuration

During the initial configuration of a freshly installed XIQ-SE server, what is the purpose of setting the management IP address and hostname before adding devices?

  1. It defines the address used by the web UI and by devices for management communication Correct answer.
  2. It configures the DHCP scope handed to newly discovered devices
  3. It assigns the address devices use to reach the RADIUS service only
  4. It permanently locks the server to a single subnet with no routing

Explanation

The management address and hostname identify the XIQ-SE server to administrators using the web interface and to managed devices that send syslog, SNMP traps, and configuration requests. Establishing them first prevents later re-addressing that would break device registrations. DHCP scope configuration is a separate function performed elsewhere.

Question 28Site Engine Installation, Upgrade, and Initial Configuration

An administrator needs to back up the XIQ-SE configuration before applying an upgrade. Which approach reflects the supported practice?

  1. Copy only the web server access logs to an external share
  2. Export the device inventory CSV and treat that as a full backup
  3. Use the built-in backup and restore function to capture the database and configuration Correct answer.
  4. Take a hypervisor snapshot and never perform an in-product backup

Explanation

XIQ-SE provides a built-in backup and restore capability that captures the configuration database and supporting files needed to rebuild the server. Relying on this supported mechanism ensures the backup is consistent and restorable by the product. Partial exports or log copies do not capture the full state.

Question 29Site Engine Installation, Upgrade, and Initial Configuration

Which statement correctly describes the licensing model an administrator should expect when standing up a new XIQ-SE installation?

  1. A single perpetual license unlocks every optional module permanently
  2. Licenses are applied per managed device or feature tier and must be installed to enable those capabilities Correct answer.
  3. No license is ever required because all features are enabled by default
  4. Licensing is handled entirely by the managed switches, not the server

Explanation

XIQ-SE uses entitlement-based licensing tied to managed devices and feature tiers, and the license must be installed on the server to activate the corresponding capabilities. Without the appropriate entitlement, features remain unavailable even though the software is installed. Managed devices do not hold or enforce the server's licensing.

Question 30Site Engine Installation, Upgrade, and Initial Configuration

Before beginning an XIQ-SE upgrade, which preparatory action best reduces the risk of an unrecoverable failure?

  1. Remove the server's DNS entries so the installer skips lookups
  2. Delete the existing database to start clean
  3. Verify the target version's upgrade path and take a current backup Correct answer.
  4. Disable all SNMP polling to speed up the installer

Explanation

Upgrades are only supported along defined paths, so confirming that your current version can move directly to the target (or requires an intermediate release) is essential. Pairing that check with a current backup ensures you can recover if the upgrade fails. Deleting data or disabling services beforehand increases risk without benefit.

Question 31Site Engine Installation, Upgrade, and Initial Configuration

An administrator is upgrading XIQ-SE and the release notes state that an intermediate version is required before reaching the target release. What does this mean for the upgrade plan?

  1. The server must be reinstalled from scratch at the target version
  2. The target version can be installed directly with no intermediate step
  3. Only the database schema needs manual editing between versions
  4. The upgrade must pass through the specified intermediate release first Correct answer.

Explanation

When the documented upgrade path requires an intermediate release, the installer or support policy does not permit skipping directly to the target. You must upgrade to the specified intermediate version, let it complete and stabilize, then proceed to the target. Attempting a direct jump risks schema and service incompatibilities.

Question 32Site Engine Installation, Upgrade, and Initial Configuration

After installing XIQ-SE, an administrator cannot reach the web interface from a browser on the management network. Which troubleshooting step is most appropriate first?

  1. Disable the firewall on all managed switches
  2. Replace the server's network card
  3. Reinstall the operating system immediately
  4. Confirm the management interface is up, addressed correctly, and reachable by ping Correct answer.

Explanation

Basic reachability should be verified before deeper investigation: confirm the management interface has the intended address, is administratively up, and responds to ping from the client subnet. If that fails, the issue is network or addressing rather than the web service. Escalating to reinstall or hardware replacement is premature.

Question 33Site Engine Installation, Upgrade, and Initial Configuration

Which task belongs to initial configuration of XIQ-SE rather than to ongoing device management?

  1. Reviewing an alarm generated by an access point
  2. Running an on-demand report on wireless clients
  3. Pushing a VLAN change to a production switch stack
  4. Configuring the server's time source and NTP synchronization Correct answer.

Explanation

Setting the server's time source and confirming NTP synchronization is part of bringing the platform online, because accurate time underpins logging, certificates, and event correlation. Pushing configuration changes, reviewing alarms, and running reports are recurring operational activities performed after the system is in service. Establishing time early avoids timestamp inconsistencies across collected data.

Question 34Site Engine Installation, Upgrade, and Initial Configuration

A technician plans to restore an XIQ-SE backup taken from a server running a different software version onto a newly installed server. What should the technician verify before proceeding?

  1. That the new server has a different hostname than the original
  2. That the backup file is smaller than one gigabyte
  3. That the backup and target server versions are compatible for restore Correct answer.
  4. That the backup was created on a physical server rather than a virtual machine

Explanation

Restoring a backup into a server running an incompatible software version can fail or corrupt the configuration database. Compatibility between the backup's source version and the target installation must be confirmed against the documentation. File size, hostname differences, and physical versus virtual origin are not the governing factors.

Question 35Site Engine Installation, Upgrade, and Initial Configuration

During initial setup, an administrator wants discovered devices to be placed into the correct network topology automatically. Which configuration element most directly supports this?

  1. The number of administrator accounts created
  2. The server's screen resolution
  3. The SNMP community or credentials configured for device polling Correct answer.
  4. The web browser's language setting

Explanation

Topology discovery depends on successful SNMP polling of devices, which requires correct community strings or credentials. Without valid SNMP access, XIQ-SE cannot read neighbor and interface data to build the topology. Browser settings, display resolution, and account counts do not affect discovery.

Question 36Site Engine Installation, Upgrade, and Initial Configuration

An administrator must change the IP address of an XIQ-SE server after devices have already been onboarded. What is the primary concern?

  1. Devices and integrations configured to reach the old address must be updated Correct answer.
  2. The server will lose its ability to run reports
  3. The licenses will be invalidated and must be re-purchased
  4. The device inventory will be permanently deleted

Explanation

Managed devices, integrations, and administrators reference the server by its management address, so re-addressing requires updating those references to maintain communication. Licenses and inventory are not destroyed by an address change. Planning the change avoids gaps in polling and event collection.

Question 37Site Engine Installation, Upgrade, and Initial Configuration

Which item should be documented as part of a repeatable XIQ-SE installation standard for future deployments?

  1. The names of the administrators who attended training
  2. The vendor of the office printers
  3. The serial numbers of every managed switch
  4. The supported OS version, sizing tier, and network addressing scheme used Correct answer.

Explanation

A repeatable installation standard captures the validated platform, sizing, and addressing decisions so future builds match the supported configuration. These are the variables that most affect whether the deployment is supportable. Training attendance, device serials, and peripheral vendors are not installation parameters.

Question 38Site Engine Installation, Upgrade, and Initial Configuration

After upgrading XIQ-SE, an administrator observes that a feature previously in use is no longer available. What is the most likely cause to investigate first?

  1. The administrator's browser was updated
  2. The feature's license entitlement was not re-applied or validated after upgrade Correct answer.
  3. The managed switches were all rebooted
  4. The server's power supply is failing

Explanation

Upgrades can reset or invalidate license state, and features gated by entitlement will disappear until the license is reinstalled or validated. Checking the licensing status is the fastest path to explaining a missing capability. Hardware, switch reboots, and browser updates do not selectively remove licensed features.

Question 39Site Engine Installation, Upgrade, and Initial Configuration

Which practice best supports a clean, verifiable XIQ-SE installation when the server will be deployed in a virtual environment?

  1. Provision CPU, RAM, and disk per the sizing guidance and record the baseline Correct answer.
  2. Use thin provisioning for the database volume to save space
  3. Skip the hostname configuration to avoid DNS conflicts
  4. Allocate less RAM than the sizing table recommends to leave room for other guests

Explanation

Provisioning resources to match the published sizing guidance and recording the baseline configuration ensures the deployment is supportable and repeatable. Undersizing or thin-provisioning the database volume can cause performance and stability problems under load. Documenting the baseline also simplifies later troubleshooting and upgrades.

Question 40Site Engine Installation, Upgrade, and Initial Configuration

An administrator is following the upgrade procedure and the installer prompts for confirmation of the current version before proceeding. Why is this verification important?

  1. It confirms the starting point matches a supported upgrade path Correct answer.
  2. It selects the language for device-generated alarms
  3. It determines the color scheme of the web interface
  4. It sets the number of concurrent administrator sessions allowed

Explanation

The installer's version check ensures the upgrade proceeds from a version that is on a supported path to the target. If the detected version is not eligible, the correct intermediate step must be taken first. This verification is about compatibility, not cosmetic or session settings.

Question 41Site Engine Installation, Upgrade, and Initial Configuration

After restoring an XIQ-SE backup to a replacement server, an administrator finds that devices are not reporting events. Which check is most relevant?

  1. Whether the administrator used a different web browser
  2. Whether the replacement server's address and credentials match what devices are configured to use Correct answer.
  3. Whether the backup file was compressed
  4. Whether the server's keyboard layout was changed

Explanation

Devices send events to a specific destination address using configured credentials, so a replacement server must present the same address or the devices must be updated to the new one. Mismatched addressing or credentials silently stops event delivery. Compression, browser choice, and keyboard layout do not affect event reporting.

Question 42Site Engine Installation, Upgrade, and Initial Configuration

A team must upgrade several XIQ-SE servers in a distributed deployment. Which sequencing consideration is most important to preserve management continuity?

  1. Upgrade only the server with the most managed devices and leave the rest unchanged
  2. Downgrade all servers first to a common older release
  3. Upgrade all servers simultaneously to minimize total downtime
  4. Upgrade the servers in an order that keeps required services available and respects version compatibility between components Correct answer.

Explanation

In a distributed deployment, components depend on one another and on compatible versions, so the upgrade order must keep essential services reachable while each node moves through the supported path. Simultaneous upgrades risk a total outage and cross-version incompatibility. Partial or downgrade strategies do not achieve a consistent target state.

Question 43Site Engine Installation, Upgrade, and Initial Configuration

An administrator wants to validate a new XIQ-SE build in a lab before upgrading production. Which lab design most faithfully predicts production upgrade risk?

  1. A lab on a workstation OS with minimal resources
  2. A lab with default settings and no devices onboarded
  3. A lab that mirrors the production version, sizing tier, and key integrations Correct answer.
  4. A lab running a different major version than production

Explanation

A meaningful rehearsal reproduces the production starting version, resource tier, and integrations so that upgrade steps and compatibility issues surface before the real change. A lab that diverges in version or resources can pass while production fails. Mirroring the environment is what makes the test predictive.

Question 44Site Engine Installation, Upgrade, and Initial Configuration

During initial configuration, an administrator enables integration with an external authentication source. What must be confirmed for administrators to log in successfully afterward?

  1. That the external source is reachable and the required group or role mapping is defined Correct answer.
  2. That the server's disk is defragmented
  3. That the local admin account is deleted immediately
  4. That all managed devices use the same credentials

Explanation

External authentication succeeds only when the server can reach the directory or identity source and when the returned identity maps to an authorized role. Verifying reachability and role mapping prevents lockouts after enabling the integration. Deleting local accounts, unifying device credentials, or defragmenting disks does not establish authentication.

Question 45Device Discovery, Onboarding, and Inventory Management

In ExtremeCloud IQ Site Engine, which protocol is used by the discovery process to read forwarding tables from switches and map MAC addresses to switch ports?

  1. SNMP Correct answer.
  2. LLDP
  3. Syslog
  4. RADIUS

Explanation

XIQ-SE discovery relies on SNMP to read the forwarding database (FDB) and ARP tables from network devices, which lets it associate end-station MAC addresses with the switch port they are learned on. Syslog and RADIUS carry event and authentication data rather than topology tables.

Question 46Device Discovery, Onboarding, and Inventory Management

A network engineer wants XIQ-SE to discover devices without supplying a seed IP address or range. Which discovery method should be used?

  1. Subnet scan
  2. Seedless discovery Correct answer.
  3. Manual add
  4. Port scan

Explanation

Seedless discovery uses protocols such as LLDP, CDP, and OSPF neighbor information plus ARP data to locate devices without an administrator providing seed addresses. Subnet and port scans require explicit address ranges to be configured first.

Question 47Device Discovery, Onboarding, and Inventory Management

Which credential type must be configured in a XIQ-SE device profile so the appliance can read device configuration and inventory data over SNMP?

  1. Kerberos ticket
  2. TACACS+ shared secret
  3. SNMP community or SNMPv3 credentials Correct answer.
  4. SSH key pair only

Explanation

SNMP read credentials, either a community string for v1/v2c or SNMPv3 user credentials, are required for XIQ-SE to poll device MIBs for inventory and configuration data. TACACS+ and Kerberos are used for administrative authentication to devices, not for SNMP polling.

Question 48Device Discovery, Onboarding, and Inventory Management

During discovery, a device is reachable by ping but XIQ-SE reports it as unreachable for SNMP polling. Which cause is most likely?

  1. The device is licensed for XIQ-SE
  2. The device is running LLDP
  3. The device is configured with an incorrect SNMP community string in its profile Correct answer.
  4. The device has no ARP entries

Explanation

When ICMP succeeds but SNMP polling fails, the usual cause is a credential mismatch such as a wrong community string or SNMPv3 user in the assigned device profile. Reachability confirms IP connectivity, so the failure lies in the SNMP layer rather than routing.

Question 49Device Discovery, Onboarding, and Inventory Management

What is the purpose of a device group in XIQ-SE inventory management?

  1. To logically organize devices for policy, profile, and reporting scope Correct answer.
  2. To provide DHCP relay services
  3. To assign IP addresses to discovered devices
  4. To replace VLAN configuration on switches

Explanation

Device groups provide logical containers that let administrators apply device profiles and policies and scope reports and alarms to a defined set of devices. They do not perform address assignment or VLAN configuration.

Question 50Device Discovery, Onboarding, and Inventory Management

An administrator wants XIQ-SE to automatically apply a device profile to newly discovered devices based on IP subnet. Which configuration element should be used?

  1. A syslog filter
  2. A static route on the appliance
  3. A discovery rule with matching criteria and an assigned device profile Correct answer.
  4. A trap receiver entry

Explanation

Discovery rules match devices by criteria such as IP range, subnet, or device type and assign the appropriate device profile automatically during discovery. Static routes, syslog filters, and trap receivers do not control profile assignment.