A+ GRADED 1
Zabbix Certified
Specialist Exam (4)
(2025/2026 Update) |
Questions and Verified
Answers | Grade A
Instructions
This section covers Exam (4) of the Zabbix Certified Specialist
certification.
Attempt the questions as if under exam conditions.
The correct
Secti Answer is shown in green.
Rationales provide detailed guidance on correct/incorrect
choices.
, 2
1. In Zabbix 7.0, what is the primary purpose of trigger dependencies? A. To link items
across multiple hosts B. To suppress problems from dependent triggers when a parent trigger is
in PROBLEM state C. To automatically create new events for each dependency level D. To
synchronize trigger evaluations across proxies
Rationale: Trigger dependencies in Zabbix allow defining parent-child relationships,
suppressing child problems if the parent is active, preventing alert storms. Option A relates to
item prototypes; C misrepresents event generation; D is proxy-specific but not dependency-
focused (Zabbix 7.0 documentation on triggers).
2. Which trigger function is best for detecting a specific string pattern in log files? A. avg()
B. regexp() C. count() D. change()
Rationale: The regexp() function matches regular expressions against item values, ideal for log
pattern detection. avg() aggregates numerics; count() tallies occurrences; change() detects value
shifts (Zabbix trigger functions guide).
3. What happens to a trigger event in 'Multiple' generation mode if the trigger condition
flips multiple times within the problem recovery interval? A. Only the first event is generated
B. A new problem event is generated each time C. Events are queued and processed as one D.
The trigger is automatically disabled
Rationale: 'Multiple' mode creates separate events for each state change, useful for frequent
fluctuations. 'Single' mode would consolidate; queuing isn't standard; disabling requires manual
intervention (Zabbix 7.0 event generation modes).
4. For a trigger monitoring CPU load, which severity is recommended for values exceeding
90% for 5 minutes? A. Information B. Warning C. High D. Not classified
Rationale: High severity indicates significant impact requiring immediate attention, fitting
sustained high CPU. Information is minor; Warning for moderate; Not classified for unassigned
(Zabbix severity levels best practices).
5. In user media configuration, what defines the send-to for email notifications? A. Global
script parameter B. Send to specific email addresses defined in the media type C. Host inventory
field D. Action condition only
Rationale: Media types specify recipients like email addresses; user media links them to users.
Scripts use parameters but not for 'to'; inventory is metadata; conditions filter but don't define
recipients (Zabbix media configuration).
Zabbix Certified
Specialist Exam (4)
(2025/2026 Update) |
Questions and Verified
Answers | Grade A
Instructions
This section covers Exam (4) of the Zabbix Certified Specialist
certification.
Attempt the questions as if under exam conditions.
The correct
Secti Answer is shown in green.
Rationales provide detailed guidance on correct/incorrect
choices.
, 2
1. In Zabbix 7.0, what is the primary purpose of trigger dependencies? A. To link items
across multiple hosts B. To suppress problems from dependent triggers when a parent trigger is
in PROBLEM state C. To automatically create new events for each dependency level D. To
synchronize trigger evaluations across proxies
Rationale: Trigger dependencies in Zabbix allow defining parent-child relationships,
suppressing child problems if the parent is active, preventing alert storms. Option A relates to
item prototypes; C misrepresents event generation; D is proxy-specific but not dependency-
focused (Zabbix 7.0 documentation on triggers).
2. Which trigger function is best for detecting a specific string pattern in log files? A. avg()
B. regexp() C. count() D. change()
Rationale: The regexp() function matches regular expressions against item values, ideal for log
pattern detection. avg() aggregates numerics; count() tallies occurrences; change() detects value
shifts (Zabbix trigger functions guide).
3. What happens to a trigger event in 'Multiple' generation mode if the trigger condition
flips multiple times within the problem recovery interval? A. Only the first event is generated
B. A new problem event is generated each time C. Events are queued and processed as one D.
The trigger is automatically disabled
Rationale: 'Multiple' mode creates separate events for each state change, useful for frequent
fluctuations. 'Single' mode would consolidate; queuing isn't standard; disabling requires manual
intervention (Zabbix 7.0 event generation modes).
4. For a trigger monitoring CPU load, which severity is recommended for values exceeding
90% for 5 minutes? A. Information B. Warning C. High D. Not classified
Rationale: High severity indicates significant impact requiring immediate attention, fitting
sustained high CPU. Information is minor; Warning for moderate; Not classified for unassigned
(Zabbix severity levels best practices).
5. In user media configuration, what defines the send-to for email notifications? A. Global
script parameter B. Send to specific email addresses defined in the media type C. Host inventory
field D. Action condition only
Rationale: Media types specify recipients like email addresses; user media links them to users.
Scripts use parameters but not for 'to'; inventory is metadata; conditions filter but don't define
recipients (Zabbix media configuration).
