ZABBIX CERTIFIED SPECIALIST
COMPREHENSIVE EXAMINATION | ZABBIX
LLC | ACADEMIC YEAR 2026/2027
Core Domains
• Zabbix Architecture, Installation, and Core Components
• Hosts, Items, Triggers, Macros, Tags, and Templates
• Zabbix Agent, Agent 2, Active/Passive Checks, and Data
Collection
• Data Preprocessing, Intervals, Units, Value Maps, and
Dependent Items
• Problem Detection, Trigger Dependencies, Cause/Symptom
Events, and Actions
• Proxies, Distributed Monitoring, High Availability, and
Scalability
• Low-Level Discovery, Automation, and Template Inheritance
• Visualization, Dashboards, Graphs, Maps, and Reporting
• User Management, RBAC, Authentication, API, and Security
• Performance Tuning, Administration, Upgrades, and
Troubleshooting
Introduction
The Zabbix Certified Specialist Comprehensive Examination
evaluates the advanced knowledge and practical skills required to
configure, monitor, troubleshoot, and administer enterprise Zabbix
,environments. This assessment covers the full five-day Zabbix
Certified Specialist syllabus aligned with Zabbix 6.0 LTS and Zabbix
7.0 standards. The examination employs multiple-choice questions
that require applied decision-making, critical thinking, and real-
world problem-solving. Emphasis is placed on architecture design,
data collection pipelines, preprocessing, trigger expressions, action
workflows, low-level discovery, high availability, and API automation.
Successful completion demonstrates readiness to deploy and manage
Zabbix monitoring solutions at an enterprise scale.
SECTION ONE: QUESTIONS 1–100
Question 1
Which of the following database engines is explicitly NOT
supported as a backend database for the Zabbix Server in
production environments?
A. Microsoft SQL Server (MSSQL)
B. MySQL / MariaDB with InnoDB engine
C. PostgreSQL with TimescaleDB extension
D. PostgreSQL without TimescaleDB
A. Microsoft SQL Server (MSSQL)
RATIONALE: Zabbix 7.0 officially supports MySQL 8.0+,
PostgreSQL 15+, and TimescaleDB for production deployments.
Microsoft SQL Server (MSSQL) was supported in older Zabbix
versions but is no longer supported as a backend database for the
Zabbix Server in current production environments .
Question 2
A Zabbix deployment must monitor 3,000 geographically
,distributed servers. Remote sites have unreliable WAN connections,
and the central Zabbix server should not maintain direct
connections to every monitored endpoint. Which architecture is
most appropriate?
A. Install a separate Zabbix server at every site with independent
databases
B. Deploy Zabbix proxies at remote sites and have them forward
collected data to the central server
C. Configure all agents in active mode and eliminate the Zabbix
server
D. Replace the Zabbix server with Zabbix Java Gateway
B. Deploy Zabbix proxies at remote sites and have them forward
collected data to the central server
RATIONALE: Zabbix proxies are designed for distributed
monitoring, handling local data collection and preprocessing to
reduce network load and central server burden. Proxies collect
monitoring data close to monitored systems and forward it to the
central server, reducing WAN dependency and central polling
overhead .
Question 3
In Zabbix architecture, which component is responsible for storing
configuration, historical data, and trends?
A. Zabbix Server
B. Zabbix Proxy
C. Zabbix Database
D. Zabbix Frontend
, C. Zabbix Database
RATIONALE: The Zabbix Database stores all configuration data,
historical metrics, and trend data. The Zabbix Server processes data
and makes decisions, the Proxy buffers data for remote locations,
and the Frontend provides the web-based GUI .
Question 4
What is the primary difference between passive and active Zabbix
agent checks?
A. Passive: Server asks Agent port 10050; Active: Agent asks Server
port 10051 and pushes data
B. Both use the same communication model
C. Passive: Agent initiates connection; Active: Server initiates
connection
D. Active checks are only used for SNMP monitoring
A. Passive: Server asks Agent port 10050; Active: Agent asks
Server port 10051 and pushes data
RATIONALE: In passive checks, the Zabbix Server or Proxy
initiates a TCP connection to the Agent on port 10050 to request
item data. In active checks, the Agent initiates a TCP connection to
the Server on port 10051, requests a list of active checks, and
periodically pushes data. Active checks are better for firewall/NAT
environments and reduce server load .
Question 5
A Zabbix administrator is designing a monitoring infrastructure for
15,000 devices across three data centers. Which architectural
COMPREHENSIVE EXAMINATION | ZABBIX
LLC | ACADEMIC YEAR 2026/2027
Core Domains
• Zabbix Architecture, Installation, and Core Components
• Hosts, Items, Triggers, Macros, Tags, and Templates
• Zabbix Agent, Agent 2, Active/Passive Checks, and Data
Collection
• Data Preprocessing, Intervals, Units, Value Maps, and
Dependent Items
• Problem Detection, Trigger Dependencies, Cause/Symptom
Events, and Actions
• Proxies, Distributed Monitoring, High Availability, and
Scalability
• Low-Level Discovery, Automation, and Template Inheritance
• Visualization, Dashboards, Graphs, Maps, and Reporting
• User Management, RBAC, Authentication, API, and Security
• Performance Tuning, Administration, Upgrades, and
Troubleshooting
Introduction
The Zabbix Certified Specialist Comprehensive Examination
evaluates the advanced knowledge and practical skills required to
configure, monitor, troubleshoot, and administer enterprise Zabbix
,environments. This assessment covers the full five-day Zabbix
Certified Specialist syllabus aligned with Zabbix 6.0 LTS and Zabbix
7.0 standards. The examination employs multiple-choice questions
that require applied decision-making, critical thinking, and real-
world problem-solving. Emphasis is placed on architecture design,
data collection pipelines, preprocessing, trigger expressions, action
workflows, low-level discovery, high availability, and API automation.
Successful completion demonstrates readiness to deploy and manage
Zabbix monitoring solutions at an enterprise scale.
SECTION ONE: QUESTIONS 1–100
Question 1
Which of the following database engines is explicitly NOT
supported as a backend database for the Zabbix Server in
production environments?
A. Microsoft SQL Server (MSSQL)
B. MySQL / MariaDB with InnoDB engine
C. PostgreSQL with TimescaleDB extension
D. PostgreSQL without TimescaleDB
A. Microsoft SQL Server (MSSQL)
RATIONALE: Zabbix 7.0 officially supports MySQL 8.0+,
PostgreSQL 15+, and TimescaleDB for production deployments.
Microsoft SQL Server (MSSQL) was supported in older Zabbix
versions but is no longer supported as a backend database for the
Zabbix Server in current production environments .
Question 2
A Zabbix deployment must monitor 3,000 geographically
,distributed servers. Remote sites have unreliable WAN connections,
and the central Zabbix server should not maintain direct
connections to every monitored endpoint. Which architecture is
most appropriate?
A. Install a separate Zabbix server at every site with independent
databases
B. Deploy Zabbix proxies at remote sites and have them forward
collected data to the central server
C. Configure all agents in active mode and eliminate the Zabbix
server
D. Replace the Zabbix server with Zabbix Java Gateway
B. Deploy Zabbix proxies at remote sites and have them forward
collected data to the central server
RATIONALE: Zabbix proxies are designed for distributed
monitoring, handling local data collection and preprocessing to
reduce network load and central server burden. Proxies collect
monitoring data close to monitored systems and forward it to the
central server, reducing WAN dependency and central polling
overhead .
Question 3
In Zabbix architecture, which component is responsible for storing
configuration, historical data, and trends?
A. Zabbix Server
B. Zabbix Proxy
C. Zabbix Database
D. Zabbix Frontend
, C. Zabbix Database
RATIONALE: The Zabbix Database stores all configuration data,
historical metrics, and trend data. The Zabbix Server processes data
and makes decisions, the Proxy buffers data for remote locations,
and the Frontend provides the web-based GUI .
Question 4
What is the primary difference between passive and active Zabbix
agent checks?
A. Passive: Server asks Agent port 10050; Active: Agent asks Server
port 10051 and pushes data
B. Both use the same communication model
C. Passive: Agent initiates connection; Active: Server initiates
connection
D. Active checks are only used for SNMP monitoring
A. Passive: Server asks Agent port 10050; Active: Agent asks
Server port 10051 and pushes data
RATIONALE: In passive checks, the Zabbix Server or Proxy
initiates a TCP connection to the Agent on port 10050 to request
item data. In active checks, the Agent initiates a TCP connection to
the Server on port 10051, requests a list of active checks, and
periodically pushes data. Active checks are better for firewall/NAT
environments and reduce server load .
Question 5
A Zabbix administrator is designing a monitoring infrastructure for
15,000 devices across three data centers. Which architectural
