SAC Cheat Sheet 2026

The 30 highest-yield SAC facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. Which cron schedule expression runs a job at 2:30 AM every Monday? → 30 2 * * 1
2. What is the default subnet mask for a Class C IP address? → 255.255.255.0
3. During a system audit, you discover that log retention is set to 30 days but policy requires 90 days. What type of finding is this? → Compliance gap
4. Which type of backup stores only the data that has changed since the last full backup? → Differential backup
5. What is the purpose of subnetting in network administration? → To divide a larger network into smaller, manageable logical segments
6. Which evaluation approach compares system performance against a previously recorded baseline? → Baseline comparison
7. What is the purpose of a cron job in Linux? → To schedule repetitive tasks
8. How does continuing education relate to automation & scripting fundamentals for SAC certified professionals? → It ensures professionals stay current with evolving standards and best practices
9. When configuring Windows Server Update Services (WSUS), what is the purpose of the 'approve' step for updates? → To authorize specific updates for installation on targeted computer groups
10. Which of the following best describes a key competency required for incident response & disaster recovery in SAC certification? → Critical thinking and evidence-based decision making
11. Which log file on a Linux system typically records authentication and login events? → /var/log/auth.log
12. A Windows system experiences a BSOD with error 'IRQL_NOT_LESS_OR_EQUAL'. What does this typically indicate? → A driver accessing memory at an incorrect interrupt request level
13. What is the key difference between a vulnerability assessment and a penetration test? → Vulnerability assessments identify weaknesses; penetration tests actively exploit them
14. Which command is used to create a virtual machine in VirtualBox from the command line? → VBoxManage
15. Which Windows feature restores system files to an earlier point in time? → System Restore
16. Which of the following best describes a key competency required for cloud infrastructure & deployment in SAC certification? → Critical thinking and evidence-based decision making
17. Which type of backup strategy captures only the data that has changed since the LAST FULL backup, regardless of incremental backups? → Differential backup
18. Which Linux kernel parameter file controls the maximum number of open file descriptors system-wide? → /proc/sys/fs/file-max
19. What is the MAIN purpose of performing a tabletop exercise in the context of disaster recovery? → To walk key stakeholders through hypothetical disaster scenarios to test plans verbally
20. Which attack involves sending unsolicited emails to trick users into revealing credentials? → Phishing
21. Which version control practice ensures that documentation changes are traceable to a specific author and timestamp? → Committing changes with descriptive messages
22. Which command can be used to test connectivity to a remote server? → ping
23. A system administrator is classifying data stored on company servers. Which data classification level typically requires the MOST stringent access controls? → Top Secret / Restricted
24. What is the purpose of the /etc/fstab file in Linux? → Lists filesystems to mount at boot
25. What is the main difference between a hard link and a symbolic (soft) link in Linux? → Hard links share the same inode; symbolic links point to a path
26. Which risk treatment option involves transferring the financial consequences of a risk to a third party? → Risk transference
27. What is the primary purpose of Infrastructure as Code (IaC) tools like Terraform or CloudFormation? → Provisioning and managing infrastructure through machine-readable configuration files
28. Which Ansible inventory concept groups hosts so that plays can target multiple servers by a shared label? → Host groups
29. What is the primary purpose of security architecture & network defense in the context of System Administration Certification? → To ensure consistent quality and professional accountability
30. What is the purpose of a tabletop exercise in disaster recovery evaluation? → Walk stakeholders through a simulated scenario to evaluate response plans