I85PREP
⌘ K
Grafana Admin study materials
Grafana Admin study resources

Grafana Admin practice questions

One question at a time. Build your Grafana Admin understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Grafana administration (unverified - official domain list not published in source)

In Grafana's configuration file, which setting controls the port the HTTP server listens on for the web UI and API?

  1. http_port Correct answer.
  2. web_port
  3. listen_port
  4. server_port

Explanation

Grafana's server settings live in the [server] section of grafana.ini, and the http_port key defines the TCP port used by the HTTP/HTTPS listener. The default is 3000, and changing it requires a restart of the Grafana service.

Question 2Grafana administration (unverified - official domain list not published in source)

Which Grafana role grants a user full control over organization resources, including managing users, teams, and data sources, but not over server-level settings?

  1. Admin Correct answer.
  2. Editor
  3. Server Admin
  4. Viewer

Explanation

The organization Admin role can manage dashboards, folders, data sources, users, teams, and organization preferences. Server Admin is a separate, higher privilege that spans the whole Grafana instance rather than one organization.

Question 3Grafana administration (unverified - official domain list not published in source)

A team wants dashboards to load the same Prometheus data source regardless of which folder they sit in. Which feature should the administrator configure?

  1. A provisioning YAML with a fixed UID per dashboard
  2. A dashboard variable of type datasource
  3. A folder permission override
  4. A default data source in data source settings Correct answer.

Explanation

Marking a data source as default makes dashboards that reference the default resolve to it without hardcoding a specific source. Administrators set this in the data source configuration, and it applies instance-wide.

Question 4Grafana administration (unverified - official domain list not published in source)

Which command-line flag starts the Grafana server binary using a configuration file at a non-default path?

  1. --settings
  2. --config Correct answer.
  3. --ini-file
  4. --conf-path

Explanation

The grafana server binary accepts --config (or -c) followed by the path to a grafana.ini file. This overrides the default configuration location so the server reads settings from the specified file.

Question 5Grafana administration (unverified - official domain list not published in source)

An administrator wants Grafana to send alert notifications through a Slack webhook. Where is this contact point configured in modern Grafana alerting?

  1. In the Alerting section under Contact points Correct answer.
  2. In the dashboard panel's visualization options
  3. In grafana.ini under [smtp]
  4. In the data source settings for Prometheus

Explanation

Contact points define where alert notifications are delivered and are managed in the Alerting section of the Grafana UI. A Slack contact point stores the webhook URL and is referenced by notification policies.

Question 6Grafana administration (unverified - official domain list not published in source)

Which Grafana feature lets an administrator pre-load dashboards and data sources from files at startup so they cannot be edited via the UI?

  1. Snapshot sharing
  2. Provisioning Correct answer.
  3. Library panels
  4. Dashboard version history

Explanation

Provisioning loads data sources, dashboards, and alerting resources from configuration files at startup. Provisioned dashboards are read-only in the UI, which keeps them consistent with source control.

Question 7Grafana administration (unverified - official domain list not published in source)

A user reports seeing a dashboard but being unable to save changes. Which role assignment best explains this behavior?

  1. Admin
  2. Viewer Correct answer.
  3. Server Admin
  4. Editor

Explanation

Viewers can open and inspect dashboards but cannot modify or save them. Editors and above can save dashboard changes, so a save failure with visibility intact points to Viewer.

Question 8Grafana administration (unverified - official domain list not published in source)

Which setting in the [database] section configures Grafana to store its data in MySQL instead of the embedded SQLite database?

  1. driver = mysql
  2. backend = mysql
  3. engine = mysql
  4. type = mysql Correct answer.

Explanation

The [database] section uses a type key whose value selects the backend, such as sqlite3, mysql, or postgres. Additional keys like host, name, user, and password supply connection details for the chosen type.

Question 9Grafana administration (unverified - official domain list not published in source)

An administrator needs to allow users to log in with their existing OAuth2 identity provider. Which Grafana capability should be enabled?

  1. Anonymous access
  2. Basic authentication
  3. LDAP integration
  4. Generic OAuth authentication Correct answer.

Explanation

Grafana supports generic OAuth2 through the [auth.generic_oauth] configuration block, letting an external identity provider authenticate users. It requires client ID, client secret, scopes, and auth/token URLs.

Question 10Grafana administration (unverified - official domain list not published in source)

Which Grafana concept groups dashboards for access control and organization?

  1. Folders Correct answer.
  2. Snapshots
  3. Playlists
  4. Annotations

Explanation

Folders provide a hierarchy for dashboards and are the unit to which permissions are applied. Administrators grant roles or users access at the folder level, and dashboards inherit those permissions.

Question 11Grafana administration (unverified - official domain list not published in source)

An administrator wants to reduce load by having Grafana cache dashboard query results briefly. Which feature should be configured?

  1. Query caching Correct answer.
  2. Panel thresholds
  3. Data source proxy
  4. Dashboard versioning

Explanation

Query caching stores data source query results for a configurable time so repeated identical queries are served from cache. It is enabled in the [caching] configuration and can be set per data source.

Question 12Grafana administration (unverified - official domain list not published in source)

Which Grafana HTTP API endpoint returns a list of dashboards in the instance?

  1. /api/search Correct answer.
  2. /api/dashboards/uid/:uid
  3. /api/admin/users
  4. /api/health

Explanation

The /api/search endpoint returns dashboards and folders matching query parameters such as query and type. It is the standard way to list dashboards programmatically.

Question 13Grafana administration (unverified - official domain list not published in source)

What does the Grafana server admin flag allow a user to do that an organization Admin cannot?

  1. Edit dashboards in any folder
  2. View and manage all organizations and server-wide settings Correct answer.
  3. Manage data sources within an organization
  4. Create alert rules in any folder

Explanation

Server Admin is a global privilege that spans every organization and includes server-wide settings such as user management across organizations. Organization Admin is scoped to a single organization.

Question 14Grafana administration (unverified - official domain list not published in source)

An administrator configures anonymous access so public dashboards can be viewed without login. Which setting must be enabled?

  1. [auth] anonymous = true
  2. [security] allow_anonymous = true
  3. [auth.anonymous] enabled = true Correct answer.
  4. [users] anonymous_enabled = true

Explanation

Anonymous access is controlled in the [auth.anonymous] section with the enabled key. The org_name and org_role keys determine which organization and role anonymous visitors receive.

Question 15Grafana administration (unverified - official domain list not published in source)

Which Grafana plugin type extends the set of available data sources?

  1. Panel plugin
  2. App plugin
  3. Data source plugin Correct answer.
  4. Renderer plugin

Explanation

Data source plugins implement the backend and query editor needed to connect Grafana to a new store or API. Panel plugins add visualizations, and app plugins bundle dashboards and pages.

Question 16Grafana administration (unverified - official domain list not published in source)

An administrator must ensure Grafana starts even if a provisioned data source is temporarily unreachable. Which provisioning behavior should be used?

  1. Set disableDeletion to true
  2. Set prune to true
  3. Set deleteDatasources to remove the source
  4. Set allowUpdate to false Correct answer.

Explanation

Setting allowUpdate to false prevents Grafana from overwriting the existing data source configuration during provisioning. This keeps the configured source intact when the upstream is unreachable at startup.

Question 17Grafana administration (unverified - official domain list not published in source)

Which Grafana alerting component decides which contact point receives a firing alert?

  1. Mute timing
  2. Contact point
  3. Notification policy Correct answer.
  4. Alert rule

Explanation

Notification policies are a tree of matchers that route firing alerts to contact points. They determine grouping, timing, and which contact point handles a given label set.

Question 18Grafana administration (unverified - official domain list not published in source)

What is the purpose of a Grafana snapshot?

  1. To version a dashboard for rollback
  2. To back up the Grafana database
  3. To export a dashboard as JSON for provisioning
  4. To share an immutable copy of a dashboard with its data Correct answer.

Explanation

Snapshots capture a dashboard along with its rendered data so it can be shared and viewed without live data source access. They are immutable and commonly used for sharing point-in-time views.

Question 19Grafana administration (unverified - official domain list not published in source)

An administrator wants to limit how long dashboard query results are cached. Which configuration area controls the cache TTL?

  1. [caching] Correct answer.
  2. [server]
  3. [database]
  4. [log]

Explanation

The [caching] section configures query caching behavior, including the backend and time-to-live. Administrators tune TTL there to balance freshness against load reduction.

Question 20Grafana administration (unverified - official domain list not published in source)

Which Grafana API is used to create or update a dashboard programmatically?

  1. DELETE /api/dashboards/uid/:uid
  2. GET /api/dashboards/uid/:uid
  3. GET /api/search
  4. POST /api/dashboards/db Correct answer.

Explanation

POST /api/dashboards/db creates a dashboard or updates it when the payload includes a matching id or uid. The request body carries the dashboard model and metadata such as the folder.

Question 21Grafana administration (unverified - official domain list not published in source)

An administrator enables LDAP authentication and wants users matched to Grafana organizations based on LDAP groups. Which configuration block handles this mapping?

  1. [users] allow_sign_up
  2. [auth.ldap] group_mappings Correct answer.
  3. [security] admin_password
  4. [auth.ldap] servers

Explanation

The [auth.ldap] group_mappings setting maps LDAP groups to Grafana organizations and roles. This lets directory group membership drive organization assignment and permissions.

Question 22Grafana administration (unverified - official domain list not published in source)

Which Grafana setting prevents users from creating their own accounts when single sign-on is used?

  1. [users] allow_sign_up = false Correct answer.
  2. [auth] disable_login = true
  3. [security] disable_signup = true
  4. [auth.anonymous] enabled = false

Explanation

The allow_sign_up key in the [users] section controls whether new users may self-register. Setting it to false requires accounts to be created by an administrator or via configured SSO provisioning.

Question 23Grafana administration (unverified - official domain list not published in source)

A team needs the same panel configuration reused across many dashboards. Which Grafana feature should the administrator recommend?

  1. Data links
  2. Dashboard snapshots
  3. Playlists
  4. Library panels Correct answer.

Explanation

Library panels store a panel definition that can be linked into multiple dashboards. Editing the library panel updates every dashboard that references it, keeping configurations consistent.

Question 24Grafana administration (unverified - official domain list not published in source)

An administrator must audit which dashboards a specific user can view. Which approach best determines effective access?

  1. Inspect folder permissions along with the user's roles and team memberships Correct answer.
  2. Review the dashboard version history
  3. Examine the data source provisioning files
  4. Check the user's organization role only

Explanation

Effective dashboard access depends on folder-level permissions combined with the user's organization role and team memberships. Reviewing only the role misses folder overrides granted to teams or individual users.

Question 25Grafana administration (unverified - official domain list not published in source)

Which Grafana feature allows administrators to define reusable alert notification timing windows that suppress alerts during maintenance?

  1. Notification policies
  2. Alert rules
  3. Mute timings Correct answer.
  4. Contact points

Explanation

Mute timings define recurring windows during which notifications are suppressed, such as planned maintenance. Notification policies reference mute timings to control when alerts are silenced.

Question 26Grafana administration (unverified - official domain list not published in source)

An administrator wants Grafana to send audit-relevant events, such as user sign-ins and dashboard saves, to an external SIEM. Which Grafana Enterprise capability should be enabled?

  1. Audit logging with a configured file or console sink Correct answer.
  2. Query caching with a Redis backend
  3. Usage insights with a reporting schedule
  4. Snapshot publishing with public sharing

Explanation

Audit logging records administrative and user actions such as sign-ins and dashboard changes, and can write those records to configured sinks for external collection. Usage insights and query caching serve performance and adoption analytics purposes instead of security auditing.

Question 27Grafana administration (unverified - official domain list not published in source)

An administrator needs Grafana to consult the same external directory for authentication and to resolve group membership for role synchronization. Which authentication integration natively provides both capabilities?

  1. Auth proxy
  2. Basic auth
  3. Anonymous auth
  4. LDAP Correct answer.

Explanation

The LDAP integration authenticates users against a directory server and can map LDAP group membership to Grafana organizations and roles. Basic auth and anonymous access do not query a directory for group membership, and auth proxy delegates identity to a fronting proxy.

Question 28Grafana administration (unverified - official domain list not published in source)

What does the Grafana configuration setting `allow_sign_up` under `[auth.google]` control?

  1. Whether a first-time OAuth login automatically creates a Grafana user Correct answer.
  2. Whether Google OAuth tokens are refreshed on a schedule
  3. Whether Google users are placed in the default organization
  4. Whether Google accounts may be linked to existing Grafana users

Explanation

When allow_sign_up is enabled, a user who authenticates through the provider for the first time gets a Grafana user created automatically. If it is disabled, an administrator must pre-create the account before that person can sign in.

Question 29Grafana administration (unverified - official domain list not published in source)

An administrator wants to know which dashboards are most frequently viewed across the whole Grafana instance. Which built-in feature answers this?

  1. Audit log sinks
  2. Usage insights statistics Correct answer.
  3. Provisioning reports
  4. Snapshot dashboards

Explanation

Usage insights collects statistics about dashboard and data source usage, including view counts, and surfaces them for administrators. Audit logs record individual actions rather than aggregate popularity, and snapshots are static copies.

Question 30Grafana administration (unverified - official domain list not published in source)

Which environment variable overrides the Grafana configuration file value for the HTTP port at startup?

  1. GF_SERVER_HTTP_PORT Correct answer.
  2. GRAFANA_HTTP_PORT
  3. GRAFANA_SERVER_PORT
  4. GF_HTTP_PORT

Explanation

Grafana maps configuration keys to environment variables using the GF_ prefix and underscores for section and key names, so [server] http_port becomes GF_SERVER_HTTP_PORT. Environment variables take precedence over values in the configuration file.

Question 31Grafana administration (unverified - official domain list not published in source)

Which Grafana role is scoped to a single organization and can manage its users, teams, and dashboards but cannot manage server-wide settings?

  1. Grafana Server Admin
  2. Viewer
  3. Editor
  4. Organization Admin Correct answer.

Explanation

Organization Admin grants broad control inside one organization, including managing its users, teams, and dashboards. Server Admin operates above organizations and can manage global settings and all organizations.

Question 32Grafana administration (unverified - official domain list not published in source)

An administrator wants to define alert notification policies so that alerts with a specific label are routed to a dedicated on-call team. Which Grafana alerting concept is used to match those labels?

  1. Alert rule groups
  2. Mute timings
  3. Notification policy matchers Correct answer.
  4. Contact point integrations

Explanation

Notification policies contain matchers that evaluate alert labels and determine which contact point receives the notification. Contact points define delivery destinations, while matchers decide routing.

Question 33Grafana administration (unverified - official domain list not published in source)

What is the primary purpose of the Grafana `[paths]` configuration section?

  1. To define network proxy settings for outbound requests
  2. To set the default time zone for dashboards
  3. To configure database connection pooling
  4. To specify directories for data, logs, plugins, and provisioning files Correct answer.

Explanation

The [paths] section tells Grafana where to find or write data, logs, plugins, and provisioning configuration on disk. Other concerns such as proxying, time zone, and database pooling live in their own sections.

Question 34Grafana administration (unverified - official domain list not published in source)

An administrator wants to move Grafana's embedded SQLite data into PostgreSQL for production reliability. Which `[database]` type value should be configured?

  1. pgsql
  2. postgresql
  3. postgres Correct answer.
  4. pg

Explanation

Grafana accepts the database type value postgres in the [database] section when using PostgreSQL. The connection details such as host, user, and password are then supplied alongside it.

Question 35Grafana administration (unverified - official domain list not published in source)

After editing the Grafana configuration file, an administrator restarts the service but the changes do not take effect. Which cause is most likely?

  1. The changes require a database migration first
  2. The service is reading a different configuration file path than the one edited Correct answer.
  3. The Grafana binary must be recompiled
  4. The configuration file uses YAML syntax

Explanation

Grafana loads the configuration file at the path given by the --config flag or the default location, so editing a different file has no effect. Verifying the effective path and restarting the correct service resolves this.

Question 36Grafana administration (unverified - official domain list not published in source)

An administrator wants provisioned dashboards to be read-only so users cannot overwrite them from the UI. Which provisioning setting accomplishes this?

  1. disableDeletion: true
  2. allowUiUpdates: false Correct answer.
  3. updateIntervalSeconds: 0
  4. foldersFromFilesStructure: true

Explanation

Setting allowUiUpdates to false prevents users from saving over provisioned dashboards in the UI, keeping the file as the source of truth. disableDeletion protects against removal but does not block edits.

Question 37Grafana administration (unverified - official domain list not published in source)

An administrator plans to use Grafana's image renderer for scheduled reports. Which component must be installed and reachable by Grafana?

  1. An SMTP relay for email
  2. A Prometheus server for metrics
  3. A Redis instance for caching
  4. A headless browser rendering service configured as the renderer Correct answer.

Explanation

Rendering images requires the Grafana image renderer service, which Grafana calls to capture panels and dashboards. Without it, report images and rendered panels fail.

Question 38Grafana administration (unverified - official domain list not published in source)

An administrator wants Grafana to serve dashboards over HTTPS with a certificate issued by an internal CA. Which `[server]` settings must be configured?

  1. protocol = https plus cert_file and cert_key Correct answer.
  2. protocol = https plus ca_file and client_cert
  3. protocol = https plus root_ca and key_file
  4. protocol = http plus tls_ca and tls_cert

Explanation

Serving HTTPS requires protocol set to https along with cert_file and cert_key pointing to the server certificate and private key. Other certificate settings govern client authentication rather than the server's own TLS.

Question 39Grafana administration (unverified - official domain list not published in source)

An administrator wants to prevent users from sharing dashboards publicly outside the organization. Which approach best enforces this?

  1. Require LDAP authentication
  2. Enable anonymous authentication
  3. Set all users to the Viewer role
  4. Disable snapshot and public dashboard sharing in the server configuration Correct answer.

Explanation

Public sharing and snapshot sharing are controlled by server-level settings that can be disabled to prevent external exposure. Role changes and authentication methods do not by themselves block sharing of dashboards.

Question 40Grafana administration (unverified - official domain list not published in source)

An administrator needs to create many users and organizations programmatically in a repeatable way. Which Grafana HTTP API capability supports this?

  1. The admin API for users and organizations, authenticated with an admin token Correct answer.
  2. The alerting API, authenticated with a contact point token
  3. The snapshot API, authenticated with an anonymous session
  4. The dashboard API, authenticated with a viewer token

Explanation

The admin API exposes endpoints for creating users and organizations and requires a token belonging to a server admin. Dashboard, alerting, and snapshot APIs address other resources and cannot manage users.

Question 41Grafana administration (unverified - official domain list not published in source)

An administrator wants Grafana to trust identity headers from an upstream reverse proxy that has already authenticated the user. Which authentication configuration enables this?

  1. auth.anonymous with an organization role
  2. auth.proxy with header_name and enabled set to true Correct answer.
  3. auth.basic with a shared password file
  4. auth.ldap with a bind user

Explanation

The auth.proxy settings let Grafana accept a username from a header set by a trusted proxy, optionally with additional headers for name and email. Basic, anonymous, and LDAP authentication do not consume proxy headers.

Question 42Grafana administration (unverified - official domain list not published in source)

An administrator wants to rotate the secret key used to encrypt stored data source credentials. Which setting governs this key?

  1. cookie_name in the [auth] section
  2. admin_password in the [security] section
  3. signout_redirect_url in the [auth] section
  4. secret_key in the [security] section Correct answer.

Explanation

The secret_key setting in the [security] section provides the key material used to encrypt sensitive data such as data source credentials. Changing it requires re-entering affected credentials because existing ciphertext cannot be decrypted with the new key.

Question 43Grafana administration (unverified - official domain list not published in source)

An administrator wants to limit which IP ranges can reach the Grafana login page. Which approach fits Grafana's own configuration?

  1. Set allowed_ips in the [server] section
  2. Set ip_whitelist in the [security] section
  3. Set trusted_ips in the [auth] section
  4. Restrict access at the network layer, since Grafana has no allowlist setting for this Correct answer.

Explanation

Grafana does not provide a built-in source IP allowlist for the HTTP server, so access restriction is typically enforced by a firewall, reverse proxy, or network policy. Fictional settings in the other options do not exist in the configuration.

Question 44Grafana administration (unverified - official domain list not published in source)

An administrator wants to use an external secrets manager to supply the Grafana admin password at startup. Which mechanism supports this without hardcoding the value in the configuration file?

  1. Embedding the password in a data source URL
  2. Storing the password in a dashboard annotation
  3. Editing the configuration file after every restart
  4. Reading the value from an environment variable through the container or service manager Correct answer.

Explanation

Environment variables or the service manager's own secret injection can pass the admin password to Grafana at runtime without committing it to a file. Editing files manually or storing secrets in dashboards and URLs exposes credentials.

Question 45Grafana administration (unverified - official domain list not published in source)

An administrator wants to upgrade Grafana across a major version. Which practice best reduces the risk of breaking dashboards and plugins?

  1. Review release notes, back up the database, and test the upgrade in a staging instance Correct answer.
  2. Delete all plugins before upgrading
  3. Disable provisioning permanently before upgrading
  4. Upgrade production directly and rely on automatic rollback

Explanation

Major upgrades can change database schema, plugin compatibility, and configuration defaults, so reviewing release notes, backing up, and staging the change limits risk. Direct production upgrades without a tested rollback path are unsafe.

Question 46Grafana administration (unverified - official domain list not published in source)

An administrator wants to grant a team the ability to edit dashboards in a specific folder while keeping other folders read-only. Which Grafana mechanism provides this?

  1. Global organization role changes for all users
  2. Anonymous access with a Viewer role
  3. A shared snapshot link
  4. Folder permissions with team-level role assignments Correct answer.

Explanation

Folder permissions allow administrators to assign roles to users or teams for individual folders, so edit rights can be scoped narrowly. Global role changes affect the whole organization, and snapshots are read-only copies.

Question 47Grafana administration (unverified - official domain list not published in source)

An administrator observes that alert rules in a group are evaluated later than their configured interval. Which factor should be examined first?

  1. The snapshot retention policy
  2. The dashboard's default time range
  3. The alert rule group evaluation interval and the load on the queried data sources Correct answer.
  4. The contact point's email delivery latency

Explanation

Alert evaluation timing is governed by the rule group's evaluation interval, and slow data source queries can delay each evaluation cycle. Contact point delivery and dashboard display settings do not affect when rules are evaluated.

Question 48Grafana administration (unverified - official domain list not published in source)

An administrator must ensure that data source credentials are not exposed in exported dashboard JSON. Which statement reflects Grafana's behavior?

  1. Credentials are embedded in dashboard JSON and must be removed manually
  2. Data source credentials are stored server-side and are not included in dashboard JSON Correct answer.
  3. Credentials are stored in each panel's JSON model
  4. Credentials are exported only when snapshots are created

Explanation

Dashboards reference data sources by identifier or UID, while credentials remain on the server in the Grafana database or provisioning files. Exporting dashboard JSON therefore does not carry secrets.

Question 49Grafana administration (unverified - official domain list not published in source)

An administrator wants to enforce that all users authenticate through a single identity provider while still allowing a break-glass local account for emergencies. Which configuration best achieves this?

  1. Enable anonymous authentication with the Admin role
  2. Require every user to share one OAuth client secret
  3. Disable basic auth sign-in for regular users while keeping an admin account available Correct answer.
  4. Disable all authentication methods including basic auth

Explanation

Restricting regular sign-in to the identity provider while retaining a controlled local admin account provides both centralized authentication and an emergency path. Anonymous admin access or removing all authentication methods undermines security.

Question 50Grafana administration (unverified - official domain list not published in source)

An administrator needs to diagnose why a provisioned data source is missing after startup. Which diagnostic step is most direct?

  1. Open the snapshot list in the UI
  2. Inspect the alert rule history
  3. Query the dashboard API for the data source list
  4. Check Grafana server logs for provisioning errors referencing the data source file Correct answer.

Explanation

Provisioning failures are reported in the Grafana server log with the file and error, making the log the most direct diagnostic source. The dashboard API and UI lists do not explain why provisioning failed.