Zabbix Certified Specialist Exam 2026/2027 | Zabbix
LLC | IT Monitoring Test Bank | Q&A with Answers
& Rationales | Architecture, Items, Triggers,
Templates, Low-Level Discovery, Advanced
Monitoring & Troubleshooting
INTRODUCTION
The questions are organized across four core domains: Domain 1 – Zabbix
Architecture and Installation (44 questions); Domain 2 – Item and Trigger
Configuration (44 questions); Domain 3 – Templates and Low-Level Discovery
(44 questions); and Domain 4 – Advanced Monitoring, Maintenance, and
Troubleshooting (43 questions). Each question is accompanied by the correct
answer and a detailed rationale grounded in foundational IT monitoring
methodology, including principles drawn from the official Zabbix documentation
and Certified Specialist course materials. The content emphasizes architectural
understanding, precise item and trigger configuration, template and discovery
design, and operational troubleshooting of Zabbix monitoring environments.
ACTUAL QUESTIONS
Domain 1: Zabbix Architecture and Installation (Questions 1-44)
Question 1. Which component of the Zabbix architecture is responsible for
collecting data from agents, proxies, and other sources and writing it to the
database?
A. Zabbix server
B. Zabbix frontend
C. Zabbix agent
D. Zabbix proxy only
Rationale: The Zabbix server is the central process that performs polling, trap
processing, alert generation, and database writes. The frontend is the web UI;
agents and proxies collect or forward data.
Question 2. What is the primary purpose of a Zabbix proxy?
A. To replace the Zabbix server entirely
B. To store historical data permanently
C. To collect monitoring data on behalf of the server, reducing load and
,enabling monitoring of remote or segmented networks
D. To provide the web interface
Rationale: Proxies offload data collection, buffer data during network outages,
and allow monitoring across firewalls or remote sites while the server remains the
single source of truth.
Question 3. Which database engines are officially supported by Zabbix for the
server backend?
A. MySQL/MariaDB, PostgreSQL, and TimescaleDB (as a PostgreSQL
extension)
B. Only SQLite for production
C. Oracle Database exclusively
D. MongoDB and Cassandra
Rationale: Zabbix officially supports MySQL/MariaDB and PostgreSQL.
TimescaleDB can be used with PostgreSQL for improved history performance.
SQLite is limited to very small or proxy deployments.
Question 4. During installation, which configuration file is the main server
configuration file?
A. zabbix_agentd.conf
B. zabbix_server.conf
C. zabbix_proxy.conf
D. zabbix_web.conf
Rationale: The main Zabbix server configuration file is zabbix_server.conf,
typically located in /etc/zabbix/. It defines database connections, listeners, and
performance tuning parameters.
Question 5. Which process in the Zabbix server architecture is responsible for
processing trigger expressions and generating events?
A. Poller
B. Trapper
C. Trigger processor (or Evaluator)
D. Housekeeper
Rationale: The trigger processor evaluates trigger expressions against incoming
data to generate events (OK/PROBLEM). Pollers collect data, trappers handle
active agent data, and the housekeeper removes old data.
Question 6. A company needs to monitor a network segment behind a strict
firewall without opening multiple ports to the main Zabbix server. What is the
,recommended architecture?
A. Deploy a Zabbix agent on the firewall.
B. Deploy a Zabbix proxy in the segmented network and allow it to
communicate with the server on a single port (typically 10051).
C. Use SNMP traps exclusively.
D. Install a second Zabbix server and configure database replication.
Rationale: A Zabbix proxy acts as a local collection point. It only requires
outbound access to the Zabbix server, simplifying firewall rules and reducing the
attack surface.
Question 7. What is the default TCP port for the Zabbix server to listen for
active agent and proxy connections?
A. 10050
B. 10051
C. 80
D. 443
Rationale: The Zabbix server listens on TCP port 10051 for incoming connections
from active agents, proxies, and senders. Port 10050 is the default for passive
agent checks.
Question 8. Which Zabbix component is responsible for sending data to the
server when using active checks?
A. Zabbix get
B. Zabbix sender
C. Zabbix agent (active mode)
D. Zabbix frontend
Rationale: In active mode, the Zabbix agent initiates a connection to the server (or
proxy) on port 10051 to request a list of items to monitor and send the collected
values.
Question 9. When installing the Zabbix frontend, which of the following is a
requirement?
A. A supported web server (Apache, Nginx) with PHP and required modules.
B. A dedicated database server separate from the Zabbix server.
C. A Windows Server operating system.
D. Java Runtime Environment (JRE).
Rationale: The Zabbix frontend is a PHP application that requires a web server
(Apache/Nginx) and specific PHP modules (e.g., bcmath, gd, mysqli, pgsql).
, Question 10. What is the role of the Zabbix "Housekeeper" process?
A. It manages user sessions.
B. It periodically removes outdated history, trends, and events from the
database.
C. It cleans up temporary files on the server.
D. It restarts failed pollers.
Rationale: The housekeeper process deletes old data based on the configured
"Housekeeping" settings to prevent the database from growing indefinitely.
Question 11. Which of the following is a valid database backend for a Zabbix
Proxy?
A. SQLite
B. Oracle
C. Microsoft SQL Server
D. IBM DB2
Rationale: Zabbix proxies can use SQLite, MySQL/MariaDB, or PostgreSQL as
their local database.
Question 12. In a distributed Zabbix setup, which node is considered the
"single source of truth" for configuration and historical data?
A. The Zabbix proxy
B. The Zabbix server
C. The Zabbix frontend
D. The Zabbix agent
Rationale: The Zabbix server holds the central configuration and processes all
data, while proxies only collect and forward data temporarily.
Question 13. What is the purpose of the zabbix_get utility?
A. To send data to the Zabbix server.
B. To retrieve data from a Zabbix agent for troubleshooting.
C. To start the Zabbix server.
D. To compile Zabbix from source.
Rationale: zabbix_get is a command-line utility used to communicate directly with
a Zabbix agent to request a specific item's value, useful for debugging agent
connectivity and item keys.
Question 14. Which Zabbix process is responsible for processing data sent
by zabbix_sender?
A. Poller
LLC | IT Monitoring Test Bank | Q&A with Answers
& Rationales | Architecture, Items, Triggers,
Templates, Low-Level Discovery, Advanced
Monitoring & Troubleshooting
INTRODUCTION
The questions are organized across four core domains: Domain 1 – Zabbix
Architecture and Installation (44 questions); Domain 2 – Item and Trigger
Configuration (44 questions); Domain 3 – Templates and Low-Level Discovery
(44 questions); and Domain 4 – Advanced Monitoring, Maintenance, and
Troubleshooting (43 questions). Each question is accompanied by the correct
answer and a detailed rationale grounded in foundational IT monitoring
methodology, including principles drawn from the official Zabbix documentation
and Certified Specialist course materials. The content emphasizes architectural
understanding, precise item and trigger configuration, template and discovery
design, and operational troubleshooting of Zabbix monitoring environments.
ACTUAL QUESTIONS
Domain 1: Zabbix Architecture and Installation (Questions 1-44)
Question 1. Which component of the Zabbix architecture is responsible for
collecting data from agents, proxies, and other sources and writing it to the
database?
A. Zabbix server
B. Zabbix frontend
C. Zabbix agent
D. Zabbix proxy only
Rationale: The Zabbix server is the central process that performs polling, trap
processing, alert generation, and database writes. The frontend is the web UI;
agents and proxies collect or forward data.
Question 2. What is the primary purpose of a Zabbix proxy?
A. To replace the Zabbix server entirely
B. To store historical data permanently
C. To collect monitoring data on behalf of the server, reducing load and
,enabling monitoring of remote or segmented networks
D. To provide the web interface
Rationale: Proxies offload data collection, buffer data during network outages,
and allow monitoring across firewalls or remote sites while the server remains the
single source of truth.
Question 3. Which database engines are officially supported by Zabbix for the
server backend?
A. MySQL/MariaDB, PostgreSQL, and TimescaleDB (as a PostgreSQL
extension)
B. Only SQLite for production
C. Oracle Database exclusively
D. MongoDB and Cassandra
Rationale: Zabbix officially supports MySQL/MariaDB and PostgreSQL.
TimescaleDB can be used with PostgreSQL for improved history performance.
SQLite is limited to very small or proxy deployments.
Question 4. During installation, which configuration file is the main server
configuration file?
A. zabbix_agentd.conf
B. zabbix_server.conf
C. zabbix_proxy.conf
D. zabbix_web.conf
Rationale: The main Zabbix server configuration file is zabbix_server.conf,
typically located in /etc/zabbix/. It defines database connections, listeners, and
performance tuning parameters.
Question 5. Which process in the Zabbix server architecture is responsible for
processing trigger expressions and generating events?
A. Poller
B. Trapper
C. Trigger processor (or Evaluator)
D. Housekeeper
Rationale: The trigger processor evaluates trigger expressions against incoming
data to generate events (OK/PROBLEM). Pollers collect data, trappers handle
active agent data, and the housekeeper removes old data.
Question 6. A company needs to monitor a network segment behind a strict
firewall without opening multiple ports to the main Zabbix server. What is the
,recommended architecture?
A. Deploy a Zabbix agent on the firewall.
B. Deploy a Zabbix proxy in the segmented network and allow it to
communicate with the server on a single port (typically 10051).
C. Use SNMP traps exclusively.
D. Install a second Zabbix server and configure database replication.
Rationale: A Zabbix proxy acts as a local collection point. It only requires
outbound access to the Zabbix server, simplifying firewall rules and reducing the
attack surface.
Question 7. What is the default TCP port for the Zabbix server to listen for
active agent and proxy connections?
A. 10050
B. 10051
C. 80
D. 443
Rationale: The Zabbix server listens on TCP port 10051 for incoming connections
from active agents, proxies, and senders. Port 10050 is the default for passive
agent checks.
Question 8. Which Zabbix component is responsible for sending data to the
server when using active checks?
A. Zabbix get
B. Zabbix sender
C. Zabbix agent (active mode)
D. Zabbix frontend
Rationale: In active mode, the Zabbix agent initiates a connection to the server (or
proxy) on port 10051 to request a list of items to monitor and send the collected
values.
Question 9. When installing the Zabbix frontend, which of the following is a
requirement?
A. A supported web server (Apache, Nginx) with PHP and required modules.
B. A dedicated database server separate from the Zabbix server.
C. A Windows Server operating system.
D. Java Runtime Environment (JRE).
Rationale: The Zabbix frontend is a PHP application that requires a web server
(Apache/Nginx) and specific PHP modules (e.g., bcmath, gd, mysqli, pgsql).
, Question 10. What is the role of the Zabbix "Housekeeper" process?
A. It manages user sessions.
B. It periodically removes outdated history, trends, and events from the
database.
C. It cleans up temporary files on the server.
D. It restarts failed pollers.
Rationale: The housekeeper process deletes old data based on the configured
"Housekeeping" settings to prevent the database from growing indefinitely.
Question 11. Which of the following is a valid database backend for a Zabbix
Proxy?
A. SQLite
B. Oracle
C. Microsoft SQL Server
D. IBM DB2
Rationale: Zabbix proxies can use SQLite, MySQL/MariaDB, or PostgreSQL as
their local database.
Question 12. In a distributed Zabbix setup, which node is considered the
"single source of truth" for configuration and historical data?
A. The Zabbix proxy
B. The Zabbix server
C. The Zabbix frontend
D. The Zabbix agent
Rationale: The Zabbix server holds the central configuration and processes all
data, while proxies only collect and forward data temporarily.
Question 13. What is the purpose of the zabbix_get utility?
A. To send data to the Zabbix server.
B. To retrieve data from a Zabbix agent for troubleshooting.
C. To start the Zabbix server.
D. To compile Zabbix from source.
Rationale: zabbix_get is a command-line utility used to communicate directly with
a Zabbix agent to request a specific item's value, useful for debugging agent
connectivity and item keys.
Question 14. Which Zabbix process is responsible for processing data sent
by zabbix_sender?
A. Poller
