A GIS administrator team must perform system maintenance over the weekend. The team must
ensure that members do not add, publish, or edit any items in ArcGIS Enterprise. Members still need
the ability to access and view items as necessary.
Which action should the team perform?
A
Explanation:
The correct solution is to place ArcGIS Enterprise in read-only mode. This is an administrative
function designed specifically to prevent changes to content or configuration while still allowing
users to view and access existing items.
From the official ArcGIS Enterprise documentation:
“Read-only mode allows an administrator to restrict changes to the portal. When enabled, no users
(including administrators) can create, update, or delete items, groups, or users. However, users can
still search for and view items, access content, and use apps and services.”
This feature is typically used during maintenance windows or before performing disaster recovery
tasks to preserve system state.
Option B is incorrect because changing user roles to Viewer would not prevent content changes by
administrators or other roles with publishing privileges.
Option C refers to cloning, which is not a preventive or temporary access control measure, but rather
a method for standby deployments or replication.
Option D (disabling the Web Adaptor) would disrupt access entirely, which does not match the
requirement to allow viewing.
Reference:
ArcGIS Enterprise Portal Administration Guide – Read-only mode feature behavior and impact on
user interactions
A GIS contractor is developing and testing an upcoming workflow for a client. The contractor is
publishing fictional hydrant locations as a service to be consumed in a custom application. The
contractor wants to consume as few resources as possible for the client’s ArcGIS Server because they
do not have a testing environment.
Which type of service should the contractor publish?
A
Explanation:
The contractor should publish a hosted feature service. Hosted feature services are managed entirely
by the ArcGIS Data Store, not by the ArcGIS Server site directly. This means they consume fewer
server resources since they are not managed by a dedicated ArcGIS Server site’s memory or CPU at
runtime the way traditional services are.
From ArcGIS documentation:
“Hosted feature layers (services) are stored in and powered by the ArcGIS Data Store, relieving ArcGIS
Server from managing service processes. This is ideal for testing, lightweight apps, or non-production
workflows when minimizing load on the GIS Server is desired.”
Option B (Non-hosted map service) would require server-side management and is more resource-
intensive.
Option C (Scene service) is used for 3D visualization and is not appropriate for 2D hydrant location
data.
Option D (Non-hosted feature service) would also consume more ArcGIS Server resources.
Reference:
ArcGIS Enterprise – Understanding hosted layers vs. services on GIS Server
=====================
An organization's portal license file provides for 30 Editor user type and 15 GIS Professional user type
licenses. After performing a needs assessment, the GIS administrator discovers that the organization
requires 10 Viewer, 40 Editor, and 20 GIS Professional user type licenses.
When downloading a new license file, how many of each user type license should the administrator
specify?
C
Explanation:
When downloading a new license file from My Esri to accommodate the organization’s user needs,
administrators should request the exact quantities identified in the internal needs assessment:
10 Viewer
40 Editor
20 GIS Professional
These quantities will be used to generate the new license file, which reflects the actual number of
entitlements needed. Esri licensing is flexible in this regard, and the administrator can request
different counts per type within their entitlements.
From the ArcGIS Enterprise Licensing documentation:
“When generating a new license file for your deployment, you can specify the number of each user
type and role needed. The license file will reflect these values, and must match the needs of your
organization.”
Option A provides insufficient licenses.
Option B omits the necessary Viewer licenses.
Option D reflects original entitlements, not the updated requirement.
Reference:
ArcGIS Enterprise Administration – User Types and Licensing Model
A GIS administrator is responsible for maintaining the stability of a large internal ArcGIS Enterprise
deployment. After the Domain CA certificate is replaced with a new one and the new PKCS#12
format PFX file is imported into all Portal for ArcGIS, ArcGIS Server, and ArcGIS Data Store
deployments, the following issues are identified:
When connecting directly to the Portal for ArcGIS administration endpoint via port 7443, the new
certificate is not recognized and is considered invalid
When connecting directly to the ArcGIS Server administration endpoint via port 6443, the new
certificate is not recognized and is considered invalid
When connecting to the ArcGIS Data Store endpoint via port 2443, the new certificate is recognized
and considered valid
What is causing this issue?
A
Explanation:
When replacing SSL certificates in ArcGIS Enterprise components, ArcGIS Server and Portal for ArcGIS
require the root and intermediate (issuing) certificates to be explicitly imported into their trust
stores. Unlike the ArcGIS Data Store, which can often rely on the system-level trust store, ArcGIS
Server and Portal maintain their own certificate trust management.
From the official ArcGIS Enterprise documentation:
“When using certificates issued by an internal or external CA, it is essential to also import the
corresponding root and intermediate certificates into the Portal for ArcGIS and ArcGIS Server trust
stores to ensure the certificate chain is validated properly.”
Option B is incorrect. Domain CA certificates are supported and recommended over self-signed
certificates for internal deployments.
Option C refers to an acceptable format but does not address the issue, which is about importing the
chain of trust.
Option D is incorrect; PKCS#12 (.pfx) certificates are supported but must be paired with the correct
chain files.
Reference:
ArcGIS Enterprise – Managing CA certificates in Portal and ArcGIS Server environments
=====================
A GIS administrator is publishing a feature service. All 2,400 features in the dataset must be able to
be returned from a single request to the service.
Which action should the administrator perform?
B
Explanation:
By default, feature services limit the number of records returned in a single request (usually set to
1,000). To allow all 2,400 features to be returned in one call, the administrator needs to increase the
“Maximum number of records returned by the server” (maxRecordCount) setting during or after
publishing.
From the ArcGIS Server documentation:
“The maxRecordCount property defines the number of records returned by the server in a single
request. To return all features, this value must be increased accordingly.”
Option A (adjust pooling) relates to concurrency and scalability, not data retrieval limits.
Option C would keep the default setting of 1,000, which would not meet the requirement.
Option D relates to visual performance, not record retrieval.
Reference:
ArcGIS Server – Feature Service Settings and Tuning for Performance
=====================
A GIS administrator must share an imagery service with another ArcGIS Enterprise. The administrator
sets up a distributed collaboration with the other ArcGIS Enterprise and shares the service as a
reference. The users in the other organization keep being prompted for credentials.
Which action should the administrator perform?
A
A GIS administrator receives reports of slow-performing services and notices that disk space is filling
up after recent troubleshooting sessions.
In those sessions, the following tasks were performed:
Services added to the shared instance pool
Log retention settings reduced
Log level set to Debug
ArcGIS Server machine restarted
An additional ArcGIS Server site federated
What is causing this slow performance?
A
An ArcGIS Pro user receives the following error when trying to publish to ArcGIS Enterprise:
“Unable to publish to ArcGIS Server, error 001369: failed to create service”
The ArcGIS Server logs reveal:
Failed to create service
Internal server error
Unable to instantiate class for XML schema type
Invalid XML registry file
390 ArcSOC processes running
Server uses only half of available RAM
Which action should the administrator perform?
C
Explanation:
This issue is consistent with desktop heap exhaustion, especially when a high number of ArcSOC
processes (e.g., 390) are running on Windows. Desktop heap is a limited memory resource used for
GUI and system object management. When it runs out, services can fail to start and produce XML-
related errors.
Increasing the non-interactive desktop heap size in the Windows registry resolves this.
From Esri documentation:
“If the Windows desktop heap size is too low, ArcGIS Server may be unable to create new processes
(ArcSOC), causing service failures and related internal server errors.”
Option B is a generic fix and won’t address the specific heap exhaustion issue.
Option C doesn’t help if the root issue is OS-level heap size limits.
Reference:
ArcGIS Enterprise – ArcSOC process limits and Windows desktop heap size
=====================
An organization publishes a map image layer to ArcGIS Enterprise that references data from a user-
managed PostgreSQL geodatabase.
The schema of a table is updated to add a field, but the map service cannot be stopped due to a
Service Level Agreement (SLA). Schema locking is disabled.
Even after restarting the map service and database, the new field is not shown in the REST endpoint.
Which action should the administrator perform?
A
Explanation:
Map image layers (map services) do not automatically detect schema changes, especially in
registered enterprise geodatabases. Even with schema locking disabled, services cache the original
schema at the time of publishing. To reflect the new field, you must overwrite the existing service.
From ArcGIS Server documentation:
“If the schema of a dataset is changed after a service is published (such as adding a field), the change
is not automatically reflected in the service. You must overwrite the service or republish the map to
reflect schema updates.”
Option B is not applicable; field visibility in the portal reflects what's in the published service
definition.
Option C is related to editing access, not field visibility.
Option D is not a valid administrative action in this context.
Reference:
ArcGIS Server – Schema Changes and Map Service Behavior
An organization buys an additional 25 licenses for ArcGIS Pro and needs to assign the licenses to
ArcGIS Enterprise users.
Which license file is required to make those assignments?
C
Explanation:
When an organization purchases additional licenses (e.g., ArcGIS Pro), a new combined license file
must be generated that includes both the existing entitlements and the newly purchased ones. This
updated license file reflects the total number of licenses (original + new).
From the ArcGIS Enterprise Licensing documentation:
“When downloading a new license file from My Esri to assign additional licenses, the license file
must reflect the complete set of user types and extensions required. You must generate a new
license file that includes both the existing and new entitlements.”
Option A is incorrect because a license file with only the new licenses would overwrite the previous
file.
Option B is incorrect for the same reason—partial license files are not valid for merging with existing
licenses.
Option D does not accommodate the new licenses.
Reference:
ArcGIS Enterprise – Managing Portal License Files and User Entitlements
=====================
An organization configures an ArcGIS Enterprise portal to allow single sign-on using Integrated
Windows Authentication (IWA). Configuration includes:
All accounts in the Active Directory group gisusers are added to the portal
Existing users can sign in without entering credentials
However, new employees assigned to the same gisusers group cannot log in, create content, or join
groups.
What is causing this issue for the new employees?
B
A portal administrator is trying to enable web-tier authentication (IWA) for the ArcGIS Enterprise
portal using Active Directory and IIS.
Steps taken:
Configured portal with Microsoft version of ArcGIS Web Adaptor
Set identity store to Active Directory
Added AD users to the portal
Disabled anonymous access in Portal
Users are not prompted to sign in and are not automatically logged in.
What should the administrator do next?
A
Explanation:
When using IWA through the Web Adaptor (IIS), the IIS server itself must be configured to deny
anonymous access and allow Windows Authentication. Simply disabling anonymous access within
the Portal settings is not enough.
From Esri’s web-tier authentication guide:
“For IWA to function as expected, anonymous access must be disabled in IIS for the ArcGIS Web
Adaptor, and Windows Authentication must be enabled. If IIS still allows anonymous access, users
will bypass authentication prompts.”
Option B is irrelevant here—user types don’t affect login behavior.
Option C is a content sync feature, not related to authentication.
Option D (Enable Windows Authentication) is correct only if it hasn't already been done, but the
missing step is disabling anonymous access in IIS.
Reference:
ArcGIS Enterprise – Configuring Web-Tier Authentication with IIS
An ArcGIS Enterprise administrator wants to publish their feature classes as layers in bulk from a
registered geodatabase.
Which action should the administrator perform?
A
Explanation:
To publish feature classes as services in bulk from an enterprise geodatabase, it must first be
registered with the ArcGIS Server site. This registration tells ArcGIS Server where to access the data
directly for referenced service publishing. The proper way to do this is through ArcGIS Server
Manager.
From ArcGIS Enterprise documentation:
“To publish layers directly from a registered enterprise geodatabase without copying data, you must
register the geodatabase with your ArcGIS Server site using ArcGIS Server Manager.”
Option B is used for hosted services, not referenced publishing.
Option C is not the correct interface for registering data sources.
Option D involves hosting data, which is not applicable for referenced layers from a geodatabase.
Reference:
ArcGIS Server – Registering Data Stores for Publishing Referenced Services
=====================
A client has an internet-accessible ArcGIS Enterprise deployment with the Web Adaptors in the DMZ,
and the remaining components are on an internal network behind a firewall. A user on the internet
must access a web map in that environment.
Which ports must be open in the firewall between the DMZ and the internal network?
C
An organization experiences a temporary loss of service for its ArcGIS Enterprise deployment due to
expired licenses.
What should the administrator have done to prevent this issue?
A