DYNATRACE PROFESSIONAL ACTUAL FINAL PAPER
QUESTIONS AND ANSWERS 2025/2026 ALL RATED A+
✔✔What minimum PowerShell version is required for the download command to work?
- ✔✔PowerShell 3.0 with TLS 1.2 (or later)
✔✔In some cases, why does the installation order of ActiveGate and OneAgent matter?
- ✔✔Because the OneAgent installer needs to know about your ActiveGate installation
before the OneAgent can be installed
✔✔What are the two main rule types for management zones mentioned in the
documentation? - ✔✔1. Monitored entities
2. Dimensional data (logs and metrics)
✔✔What is the default maximum number of management zones you can add per
monitoring environment? - ✔✔5,000 management zones
✔✔How many UI-based management-zone rules can you add for entities per
monitoring environment? - ✔✔150 UI-based management-zone rules for entities
✔✔What logical operator is used to apply conditions within a single management zone
rule? - ✔✔AND logic (all conditions need to be met for the rule to apply)
✔✔What logical operator is used to apply multiple rules in a management zone? -
✔✔OR logic (any rule must apply for an entity to be included)
✔✔What is the limit on the total number of conditions for all management-zone rules
taken together? - ✔✔100,000 conditions
✔✔What is the maximum number of management zones to which an individual entity
can be added? - ✔✔200 management zones
✔✔When creating a text-based entity selector rule, what important part defines the type
of entity subject to the rule? - ✔✔type(<entityType>)
✔✔What are the two kinds of relationships used to refine entity selection in a text-based
rule? - ✔✔1. fromRelationship
2. toRelationship
✔✔What happens if you grant access to a host in a management zone? - ✔✔Any
custom metrics ingested via that host are also accessible within the management zone
,✔✔What condition types are available when adding a UI-based rule for dimensional
data? - ✔✔1. DIMENSION (for log attribute or metric dimension)
2. LOG_FILE_NAME (for log filename)
3. METRIC_KEY (for metric key)
4. ANY (for combined log or metric condition)
✔✔Can you define management-zone rules where one management zone filters by
another management zone? - ✔✔No, management zone predicates such as mzID or
mzName are not allowed in entity selector strings
✔✔What time period does the "Preview" function show for entities matching a rule? -
✔✔Entities that were active and online in the last 72 hours
✔✔When creating rules for services, what related entities can you optionally include
without creating extra rules? - ✔✔Underlying hosts and process groups
✔✔What UI-based data types can you select when creating a dimensional data rule? -
✔✔1. METRIC (for built-in, calculated, or ingested metrics)
2. LOG (for logs)
✔✔What is the primary purpose of configuring SAML in Dynatrace? - ✔✔To delegate
authentication to your organization's identity provider (IdP), allowing users to use their
corporate credentials for authentication in Dynatrace.
✔✔What are the three types of federation supported in Dynatrace? - ✔✔Global
federation, Account federation, and Environment federation.
✔✔What is the session timeout for Dynatrace SSO? - ✔✔1 hour, and it is not
configurable.
✔✔Which SAML protocol version is required for Dynatrace SSO? -
✔✔urn:oasis:names:tc:SAML:2.0
✔✔What NameID format is required for Dynatrace SSO? -
✔✔urn:oasis:names:tc:SAML:1.1:nameid-format
✔✔What must be signed in a SAML message for it to be compliant with Dynatrace
SSO? - ✔✔The entire SAML message must be signed; signing only SAML assertions is
insufficient and generates a 400 Bad Request response.
✔✔Which algorithms are acceptable for the X509Certificate in federation metadata? -
✔✔SHA256withRSA, SHA384withRSA, or SHA512withRSA
, ✔✔What are the four main steps for setting up SAML for your domain in Dynatrace? -
✔✔1) Create a fallback user account
2) Verify ownership of the domain
3) Configure SAML
4) Test your configuration
✔✔Why is creating a fallback user account important when configuring SAML? - ✔✔To
prevent being locked out of the system if there are configuration troubles with the SAML
setup.
✔✔What permissions should the fallback user account have? - ✔✔The fallback user
should belong to a group that has "View and manage users and groups" permission and
isn't covered by the federated sign-in.
✔✔How do you verify ownership of a domain in Dynatrace? - ✔✔By adding a TXT
resource record to the domain's DNS configuration and having Dynatrace verify that
record.
✔✔By adding a TXT resource record to the domain's DNS configuration and having
Dynatrace verify that record. - ✔✔All user group permissions (LOCAL, SAML, and
SCIM) are joined together. The user will be granted permissions from all group types.
✔✔What happens when you switch a LOCAL group to a SAML group? - ✔✔All existing
user assignments to that group are removed.
✔✔What happens to users during Just-in-Time provisioning with SAML authentication?
- ✔✔During sign-in, a user that doesn't already exist in Dynatrace is created
automatically.
✔✔How are group assignments updated for users signing in via SAML? - ✔✔Upon
each sign-in, the Dynatrace group assignment is updated based on the values specified
by the Federated attribute.
✔✔What is the scope limitation for Account-specific federation? - ✔✔The scope is
limited by your account and your configuration will not impact any other accounts from
your company using the same domain.
✔✔What is the scope limitation for Environment-specific federation? - ✔✔The scope is
limited to one or more environments.
✔✔After creating a SAML configuration, which federation type changes can be made? -
✔✔You can change the type from Account to Environment, or from Environment to
Account, but you cannot change from Global to Account/Environment or vice versa.
QUESTIONS AND ANSWERS 2025/2026 ALL RATED A+
✔✔What minimum PowerShell version is required for the download command to work?
- ✔✔PowerShell 3.0 with TLS 1.2 (or later)
✔✔In some cases, why does the installation order of ActiveGate and OneAgent matter?
- ✔✔Because the OneAgent installer needs to know about your ActiveGate installation
before the OneAgent can be installed
✔✔What are the two main rule types for management zones mentioned in the
documentation? - ✔✔1. Monitored entities
2. Dimensional data (logs and metrics)
✔✔What is the default maximum number of management zones you can add per
monitoring environment? - ✔✔5,000 management zones
✔✔How many UI-based management-zone rules can you add for entities per
monitoring environment? - ✔✔150 UI-based management-zone rules for entities
✔✔What logical operator is used to apply conditions within a single management zone
rule? - ✔✔AND logic (all conditions need to be met for the rule to apply)
✔✔What logical operator is used to apply multiple rules in a management zone? -
✔✔OR logic (any rule must apply for an entity to be included)
✔✔What is the limit on the total number of conditions for all management-zone rules
taken together? - ✔✔100,000 conditions
✔✔What is the maximum number of management zones to which an individual entity
can be added? - ✔✔200 management zones
✔✔When creating a text-based entity selector rule, what important part defines the type
of entity subject to the rule? - ✔✔type(<entityType>)
✔✔What are the two kinds of relationships used to refine entity selection in a text-based
rule? - ✔✔1. fromRelationship
2. toRelationship
✔✔What happens if you grant access to a host in a management zone? - ✔✔Any
custom metrics ingested via that host are also accessible within the management zone
,✔✔What condition types are available when adding a UI-based rule for dimensional
data? - ✔✔1. DIMENSION (for log attribute or metric dimension)
2. LOG_FILE_NAME (for log filename)
3. METRIC_KEY (for metric key)
4. ANY (for combined log or metric condition)
✔✔Can you define management-zone rules where one management zone filters by
another management zone? - ✔✔No, management zone predicates such as mzID or
mzName are not allowed in entity selector strings
✔✔What time period does the "Preview" function show for entities matching a rule? -
✔✔Entities that were active and online in the last 72 hours
✔✔When creating rules for services, what related entities can you optionally include
without creating extra rules? - ✔✔Underlying hosts and process groups
✔✔What UI-based data types can you select when creating a dimensional data rule? -
✔✔1. METRIC (for built-in, calculated, or ingested metrics)
2. LOG (for logs)
✔✔What is the primary purpose of configuring SAML in Dynatrace? - ✔✔To delegate
authentication to your organization's identity provider (IdP), allowing users to use their
corporate credentials for authentication in Dynatrace.
✔✔What are the three types of federation supported in Dynatrace? - ✔✔Global
federation, Account federation, and Environment federation.
✔✔What is the session timeout for Dynatrace SSO? - ✔✔1 hour, and it is not
configurable.
✔✔Which SAML protocol version is required for Dynatrace SSO? -
✔✔urn:oasis:names:tc:SAML:2.0
✔✔What NameID format is required for Dynatrace SSO? -
✔✔urn:oasis:names:tc:SAML:1.1:nameid-format
✔✔What must be signed in a SAML message for it to be compliant with Dynatrace
SSO? - ✔✔The entire SAML message must be signed; signing only SAML assertions is
insufficient and generates a 400 Bad Request response.
✔✔Which algorithms are acceptable for the X509Certificate in federation metadata? -
✔✔SHA256withRSA, SHA384withRSA, or SHA512withRSA
, ✔✔What are the four main steps for setting up SAML for your domain in Dynatrace? -
✔✔1) Create a fallback user account
2) Verify ownership of the domain
3) Configure SAML
4) Test your configuration
✔✔Why is creating a fallback user account important when configuring SAML? - ✔✔To
prevent being locked out of the system if there are configuration troubles with the SAML
setup.
✔✔What permissions should the fallback user account have? - ✔✔The fallback user
should belong to a group that has "View and manage users and groups" permission and
isn't covered by the federated sign-in.
✔✔How do you verify ownership of a domain in Dynatrace? - ✔✔By adding a TXT
resource record to the domain's DNS configuration and having Dynatrace verify that
record.
✔✔By adding a TXT resource record to the domain's DNS configuration and having
Dynatrace verify that record. - ✔✔All user group permissions (LOCAL, SAML, and
SCIM) are joined together. The user will be granted permissions from all group types.
✔✔What happens when you switch a LOCAL group to a SAML group? - ✔✔All existing
user assignments to that group are removed.
✔✔What happens to users during Just-in-Time provisioning with SAML authentication?
- ✔✔During sign-in, a user that doesn't already exist in Dynatrace is created
automatically.
✔✔How are group assignments updated for users signing in via SAML? - ✔✔Upon
each sign-in, the Dynatrace group assignment is updated based on the values specified
by the Federated attribute.
✔✔What is the scope limitation for Account-specific federation? - ✔✔The scope is
limited by your account and your configuration will not impact any other accounts from
your company using the same domain.
✔✔What is the scope limitation for Environment-specific federation? - ✔✔The scope is
limited to one or more environments.
✔✔After creating a SAML configuration, which federation type changes can be made? -
✔✔You can change the type from Account to Environment, or from Environment to
Account, but you cannot change from Global to Account/Environment or vice versa.
