Question 1: An organization holds Oracle Database Enterprise Edition licenses with 'Named User Plus' (NUP) licensing. The minimum NUP count per processor is:

• 10 NUPs per processor
• 50 NUPs per processor
• 25 NUPs per processor (Correct answer)
• 100 NUPs per processor

Correct answer: 25 NUPs per processor

Oracle requires a minimum of 25 Named User Plus licenses per processor for Oracle Database Enterprise Edition.

Question 2: A resident with a do-not-resuscitate (DNR) order stops breathing. The correct staff action is:

• Ask family members present whether to perform CPR
• Call 911 immediately regardless of the DNR
• Follow the DNR order, provide comfort measures, and notify the charge nurse (Correct answer)
• Begin CPR while waiting for a physician to confirm the DNR

Correct answer: Follow the DNR order, provide comfort measures, and notify the charge nurse

A valid DNR order must be honored; staff provide comfort care and notify the nurse rather than initiating resuscitation.

Question 3: Under the Computer Fraud and Abuse Act (CFAA), which activity would most likely constitute a federal violation?

• A contractor accessing a database beyond the scope of their authorization (Correct answer)
• A developer testing their own code on a staging server
• An employee accessing authorized systems outside of business hours
• An administrator using remote desktop to manage a company server

Correct answer: A contractor accessing a database beyond the scope of their authorization

The CFAA prohibits accessing a computer without authorization or exceeding authorized access, which includes a contractor accessing data outside the permitted scope.

Question 4: What happens to an Update Set when it is marked as 'Complete'?

• It is deleted after 30 days
• It becomes read-only and can be exported for migration to another instance (Correct answer)
• It merges with the Default Update Set
• It is automatically applied to the current instance

Correct answer: It becomes read-only and can be exported for migration to another instance

Marking an Update Set Complete locks it from further changes and makes it ready for export and promotion to other instances.

Question 5: A 'triggered' Care Area Assessment (CAA) in the MDS process indicates which of the following?

• The facility will receive a deficiency citation from the state
• The resident's Medicare benefits have been exhausted
• A potential risk or problem area requiring further clinical investigation before care planning (Correct answer)
• The resident must be discharged immediately

Correct answer: A potential risk or problem area requiring further clinical investigation before care planning

A triggered CAA flags a clinical area—such as pressure ulcers or falls—that requires the team to investigate further and decide whether to address it in the care plan.

Question 6: What is the purpose of an IT financial 'contingency reserve' in a project budget?

• To address identified risks and unforeseen cost overruns (Correct answer)
• To fund discretionary upgrades identified after project approval
• To cover known project costs that haven't been contracted yet
• To offset favorable variances in other budget lines

Correct answer: To address identified risks and unforeseen cost overruns

A contingency reserve is a planned budget allocation to manage identified risks and unexpected costs within the project scope.

Question 7: A care plan conference should include which of the following participants?

• State surveyor and ombudsman
• Resident, family/representative, and interdisciplinary team (Correct answer)
• Physician and director of nursing only
• Administrator and department heads only

Correct answer: Resident, family/representative, and interdisciplinary team

Person-centered care planning requires the resident, their family or legal representative, and the interdisciplinary team to participate in care conferences.

Question 8: A resident tells the aide, 'I don't want my daughter to know about my diagnosis.' What must the aide do?

• Document the statement and ignore it during family meetings
• Ask the supervisor to override the request for safety reasons
• Respect the resident's confidentiality and share with the care team only (Correct answer)
• Tell the daughter anyway since she is listed as emergency contact

Correct answer: Respect the resident's confidentiality and share with the care team only

HIPAA and resident rights protect a resident's right to keep health information private from family.

Question 9: Which NIST framework function focuses on developing and implementing appropriate safeguards to ensure delivery of critical infrastructure services?

• Identify
• Respond
• Protect (Correct answer)
• Detect

Correct answer: Protect

The 'Protect' function in the NIST Cybersecurity Framework covers access control, awareness training, data security, and protective technologies.

Question 10: A resident confides that another staff member has been making demeaning comments about their appearance. This is an example of:

• Normal workplace stress the resident should overlook
• Verbal/emotional abuse, which must be reported immediately (Correct answer)
• Acceptable informal communication
• A misunderstanding that should be resolved privately

Correct answer: Verbal/emotional abuse, which must be reported immediately

Demeaning or humiliating comments directed at a resident constitute verbal/emotional abuse and are mandatory report situations.

Question 11: A system administrator is asked to justify a hardware refresh by showing the cost over the asset's lifetime. Which financial concept best applies?

• Total Cost of Ownership (TCO) (Correct answer)
• Capital Expenditure (CapEx)
• Net Present Value (NPV)
• Return on Investment (ROI)

Correct answer: Total Cost of Ownership (TCO)

Total Cost of Ownership (TCO) accounts for all costs—purchase, maintenance, support, and disposal—over an asset's entire lifecycle.

Question 12: A manager is preparing to deliver corrective feedback to an IT employee about repeated tardiness. Which feedback model is considered best practice?

• Ask the employee's peers to provide the feedback on the manager's behalf
• Deliver feedback only during the annual review to give context
• Send the feedback in writing to avoid confrontation
• Use a structured approach: describe the behavior, state the impact, and specify the expected change (Correct answer)

Correct answer: Use a structured approach: describe the behavior, state the impact, and specify the expected change

Structured feedback—behavior, impact, expectation—is clear, actionable, and less likely to be perceived as personal attack.

Question 13: A facility experiences frequent nuisance tripping of circuit breakers on a 20A circuit. What is the most likely cause?

• The circuit breaker is rated too high for the wiring
• Connected load consistently exceeds 80% of circuit capacity (Correct answer)
• The breaker is on a ground-fault circuit interrupter (GFCI) branch
• Voltage supply to the panel is too high

Correct answer: Connected load consistently exceeds 80% of circuit capacity

NEC guidelines recommend loading circuits to no more than 80% of rated capacity; sustained loads above this cause thermal tripping.

Question 14: An IT project is estimated to cost $500,000 but is now forecasted to cost $650,000. The $150,000 difference is known as:

• Sunk cost
• Budget overrun / cost variance (Correct answer)
• Contingency reserve
• Scope creep cost

Correct answer: Budget overrun / cost variance

A cost variance (or budget overrun) is the difference between the planned budget and the revised forecast or actual cost.

Question 15: Which federal regulation governs the pharmaceutical services requirements in Medicare/Medicaid certified nursing facilities?

• 21 CFR Part 211
• 42 CFR Part 483 Subpart B (Correct answer)
• 29 CFR Part 1910
• 45 CFR Part 164

Correct answer: 42 CFR Part 483 Subpart B

42 CFR Part 483 Subpart B establishes the requirements for long-term care facilities, including pharmaceutical services standards.

Question 16: How does risk management apply to daily practice in Medication Management Oversight for Certified System Administrator professionals?

• By avoiding high-risk situations entirely
• Only through responding to incidents after they occur
• Through proactive identification of potential hazards and implementation of preventive measures (Correct answer)
• Through annual safety audits exclusively

Correct answer: Through proactive identification of potential hazards and implementation of preventive measures

Effective risk management in Medication Management Oversight requires proactive hazard identification and preventive measures, not just reactive responses. This approach reduces incidents, improves outcomes, and protects both professionals and clients.

Question 17: Which of the following is considered a restraint under federal nursing home regulations?

• Call light placed within easy reach
• Side rails raised on both sides of the bed without therapeutic justification (Correct answer)
• A lap tray used specifically for eating meals
• A wheelchair with a standard footrest

Correct answer: Side rails raised on both sides of the bed without therapeutic justification

Bilateral full side rails can prevent a resident from voluntarily leaving bed and are classified as a physical restraint.

Question 18: What does a VPN tunnel do?

• Creates a secure, encrypted connection between devices and servers.
• Blocks incoming network traffic.
• Improves internet speed.
• Scans for viruses in the network.

A Virtual Private Network (VPN) tunnel establishes a secure and encrypted connection over a public network, such as the internet. This "tunnel" encapsulates and encrypts all data passing through it, protecting it from eavesdropping and tampering. Its primary function is to provide privacy and security, allowing users to access resources securely as if they were directly connected to a private network.

Question 19: A ServiceNow instance is experiencing high memory usage. Which diagnostic tool provides real-time performance metrics including memory and thread usage?

• Performance Analytics
• Instance Scan
• Stats.do (Correct answer)
• Session Management

Correct answer: Stats.do

The stats.do page provides real-time JVM statistics including memory heap usage, thread counts, and active transaction data.

Question 20: What is the purpose of a Requirements Traceability Matrix (RTM) in QA?

• To track defect resolution timelines
• To document system architecture dependencies
• To schedule test execution cycles
• To map requirements to corresponding test cases ensuring full coverage (Correct answer)

Correct answer: To map requirements to corresponding test cases ensuring full coverage

An RTM maps each business or system requirement to one or more test cases, ensuring every requirement is tested and no coverage gaps exist.

Question 21: A sysadmin is asked to identify IT costs that remain constant regardless of usage levels. These are best described as:

• Marginal costs
• Fixed costs (Correct answer)
• Variable costs
• Direct costs

Correct answer: Fixed costs

Fixed costs (e.g., data center leases, perpetual licenses) do not change with usage volume, unlike variable costs that scale with consumption.

Question 22: Under OSHA's Bloodborne Pathogens Standard (29 CFR 1910.1030), the hepatitis B vaccination series must be offered free of charge to which employees?

• All employees, including administrative and dietary staff
• All employees with occupational exposure to blood or other potentially infectious materials (Correct answer)
• Only licensed nursing staff who perform invasive procedures
• Only employees who have had a known exposure incident in the past 12 months

Correct answer: All employees with occupational exposure to blood or other potentially infectious materials

OSHA requires employers to offer free hepatitis B vaccination to all employees with occupational exposure to blood or other potentially infectious materials, not just clinical staff.

Question 23: Which type of ServiceNow script is executed automatically when a record is displayed, inserted, updated, or deleted on the server side?

• UI Policy
• Client Script
• Business Rule (Correct answer)
• Script Include

Correct answer: Business Rule

Business Rules are server-side scripts that trigger on database operations (display, before, after, async) for specified tables.

Question 24: What is the primary purpose of the MID Server in a ServiceNow implementation?

• To host the ServiceNow application database
• To store and manage Update Sets
• To facilitate communication between the ServiceNow cloud instance and on-premises systems (Correct answer)
• To render the ServiceNow UI for end users

Correct answer: To facilitate communication between the ServiceNow cloud instance and on-premises systems

The MID Server is a Java application that acts as a secure bridge between the ServiceNow cloud and systems within a private network.

Question 25: In HVAC terminology, what does 'DOAS' stand for and what is its primary function?

• Dual-Output Air System — splits airflow between zones
• Dynamic Outdoor Adjustment System — varies setpoints based on weather
• Direct Outdoor Air System — conditions and delivers 100% outside air to buildings (Correct answer)
• Distributed OSHA Air Standard — ensures ventilation code compliance

Correct answer: Direct Outdoor Air System — conditions and delivers 100% outside air to buildings

A DOAS conditions 100% outdoor air before it enters occupied spaces, separating ventilation from space conditioning.

Question 26: A facility administrator discovers that a resident's medication label does not match the prescriber's current order. The FIRST action should be to:

• Administer the medication as labeled and note the discrepancy
• Hold the medication and contact the pharmacy to clarify (Correct answer)
• Document the discrepancy in the resident's chart without further action
• Dispose of the incorrectly labeled medication immediately

Correct answer: Hold the medication and contact the pharmacy to clarify

When a label discrepancy is identified, the medication should be held and the pharmacy contacted immediately to resolve the error before administration.

Question 27: A chemical spill occurs near the data center loading dock. Which OSHA standard primarily governs employee emergency response for hazardous substance releases?

• OSHA 29 CFR 1910.147 (Lockout/Tagout)
• OSHA 29 CFR 1910.119 (PSM)
• OSHA 29 CFR 1910.120 (HAZWOPER) (Correct answer)
• OSHA 29 CFR 1910.1030 (Bloodborne Pathogens)

Correct answer: OSHA 29 CFR 1910.120 (HAZWOPER)

OSHA 29 CFR 1910.120 (HAZWOPER) establishes requirements for emergency response operations involving hazardous substance releases.

Question 28: What does 'deduplication' accomplish in a backup system?

• Eliminates redundant data blocks so identical data is stored only once (Correct answer)
• Mirrors backup data to two separate locations simultaneously
• Splits large backup files into smaller chunks for easier transport
• Compresses backup files using ZIP algorithms

Correct answer: Eliminates redundant data blocks so identical data is stored only once

Deduplication identifies and stores only unique data blocks, significantly reducing backup storage requirements.

Question 29: A subnet has the address 192.168.10.0/26. How many usable host addresses does it provide?

• 254
• 126
• 30
• 62 (Correct answer)

Correct answer: 62

A /26 subnet has 64 total addresses (2^6), minus 2 for network and broadcast, leaving 62 usable host addresses.

Question 30: Which type of UPS topology provides the highest level of power protection by always running equipment off the inverter?

• Delta-conversion UPS
• Standby (offline) UPS
• Double-conversion (online) UPS (Correct answer)
• Line-interactive UPS

Correct answer: Double-conversion (online) UPS

Double-conversion UPS always powers the load through the inverter, completely isolating equipment from power anomalies.