Question 1

An ArcGIS Enterprise deployment is expanding one of its ArcGIS Server sites from one to three
machines because some services now require additional resources. Half the services use a shared
instance, and the other half includes dedicated instances.
What will happen to the minimum number of ArcSOCs running on the site?

Accepted Answer

A

Explanation: The minimum number of instances for an ArcGIS Server service, whether using a dedicated or shared pool, is a per-machine setting. When an ArcGIS Server site is expanded from one to three machines, the service configurations are replicated across all machines in the site. Consequently, each of the three machines will run the specified minimum number of ArcSOC processes for every service. This results in the total minimum number of running ArcSOCs across the entire site being three times the original amount.

Question 2

An organization publishes a map image layer to ArcGIS Enterprise that references data from a user-
managed PostgreSQL geodatabase.
The schema of a table is updated to add a field, but the map service cannot be stopped due to a
Service Level Agreement (SLA). Schema locking is disabled.
Even after restarting the map service and database, the new field is not shown in the REST endpoint.
Which action should the administrator perform?

Accepted Answer

A

Explanation: When a map image layer is published to ArcGIS Enterprise, it captures the schema of the source data at that moment. This schema is stored within the service definition and is used by the service to draw the map and respond to requests. Subsequent changes to the underlying database schema, such as adding a new field, are not automatically detected by the running service. Restarting the service only reinitializes the existing service configuration; it does not re-read the source data's schema. To incorporate the schema change, the service must be overwritten with a new definition based on the updated data source.

Question 3

A GIS analyst publishes a 3D scene from ArcGIS Pro to ArcGIS Enterprise to create a hosted 3D scene layer. Which data store hosts the data for the 3D scene layer?

Accepted Answer

A

Explanation: When a 3D scene is published from ArcGIS Pro to ArcGIS Enterprise as a hosted scene layer, the data is stored in the tile cache data store. This data store is specifically configured to manage the caches for hosted scene layers and tile layers. Scene layers are pre-generated caches (in the I3S/SLPK format) optimized for fast visualization of large 3D datasets over the web. The tile cache data store provides a highly scalable, file-based storage solution required for these caches.

Question 4

A GIS administrator is installing Portal for ArcGIS and ArcGIS Server on separate machines. They need
services to run continuously and comply with enterprise password policies.
Which account should be used to deploy the software?

Accepted Answer

B

Explanation: For a multi-machine ArcGIS Enterprise deployment, a domain account is necessary for the software components to communicate and access shared network resources. A group-managed service account (gMSA) is the recommended type of domain account for this purpose. A gMSA is managed by the domain controller, which handles password management automatically. This ensures that services can run continuously without interruption from password expiration policies, directly fulfilling the requirements of the scenario. Using a gMSA is a security best practice for enterprise environments.

Question 5

A GIS administrator is responsible for maintaining the stability of a large internal ArcGIS Enterprise
deployment. After the Domain CA certificate is replaced with a new one and the new PKCS#12
format PFX file is imported into all Portal for ArcGIS, ArcGIS Server, and ArcGIS Data Store
deployments, the following issues are identified:
When connecting directly to the Portal for ArcGIS administration endpoint via port 7443, the new
certificate is not recognized and is considered invalid
When connecting directly to the ArcGIS Server administration endpoint via port 6443, the new
certificate is not recognized and is considered invalid
When connecting to the ArcGIS Data Store endpoint via port 2443, the new certificate is recognized
and considered valid
What is causing this issue?

Accepted Answer

A

Explanation: ArcGIS Enterprise components like Portal for ArcGIS and ArcGIS Server maintain their own certificate trust stores. When a new server certificate from a Domain Certificate Authority (CA) is imported (typically via a PKCS#12/PFX file), the software must be able to validate the entire certificate chain up to a trusted root. If the new certificate was issued by a new or different intermediate or root CA, those CA certificates must be explicitly imported into the trust stores of both Portal and ArcGIS Server. The fact that the ArcGIS Data Store accepts the certificate while Portal and Server do not indicates a trust chain validation failure specific to the Portal and Server components, which is resolved by importing the necessary CA certificates.

Question 6

An organization configures an ArcGIS Enterprise portal to allow single sign-on using Integrated
Windows Authentication (IWA). Configuration includes:
All accounts in the Active Directory group gisusers are added to the portal
Existing users can sign in without entering credentials
However, new employees assigned to the same gisusers group cannot log in, create content, or join
groups.
What is causing this issue for the new employees?

Accepted Answer

B

Explanation: When ArcGIS Enterprise is configured to use enterprise groups for membership, accounts for new users are automatically created in the portal during their first sign-in attempt. This process assigns a pre-configured default user type and role. If the organization has exhausted the number of available licenses for that specific default user type, the portal cannot complete the account creation. This failure manifests as an inability for the new employee to log in, as their portal account cannot be provisioned. Existing users are unaffected because their accounts and licenses have already been provisioned.

Question 7

A GIS administrator must share an imagery service with another ArcGIS Enterprise. The administrator
sets up a distributed collaboration with the other ArcGIS Enterprise and shares the service as a
reference. The users in the other organization keep being prompted for credentials.
Which action should the administrator perform?

Accepted Answer

A

Explanation: When an item is shared as a reference in an ArcGIS Enterprise-to-Enterprise distributed collaboration, the URL still points to the source service. Members of the receiving portal must supply credentials that are valid in the source portal each time they open the layer. The only way to remove the repeated credential prompt is to share the layer “as a copy,” which republishes the data to the receiving ArcGIS Enterprise so that it is accessed locally with the user’s own portal token and no cross-portal authentication is required.

Question 8

An organization is configuring ArcGIS Enterprise. They want to enable a single sign-on experience for users using their existing SAML identity provider. What action should the organization perform?

Accepted Answer

B

Explanation: To enable a single sign-on experience using a SAML-compliant identity provider (IdP), a trust relationship must be established between the IdP and ArcGIS Enterprise. In this configuration, ArcGIS Enterprise acts as the service provider (SP). A critical step in establishing this trust is to register the portal's service provider metadata with the IdP. This metadata file contains essential information, such as the portal's entity ID and assertion consumer service URLs, which the IdP requires to authenticate users and correctly redirect them back to the portal after successful authentication.

Question 9

Users are reporting service timeouts and performance issues. The administrator notices that only the
minimum number of instances are running during performance spikes. They want to monitor usage
trends before adjusting instance settings.
Which action should the administrator perform?

Accepted Answer

C

Explanation: ArcGIS Server Manager provides a built-in mechanism to collect, aggregate, and report on service statistics. These reports are specifically designed to help administrators understand usage trends over time, including metrics like request counts, average response times, timeouts, and instance usage. By creating and analyzing these reports, the administrator can gather the necessary data to determine if the minimum and maximum instance settings for services are configured appropriately to handle performance spikes, directly addressing the scenario's requirements before making changes.

Question 10

An organization buys an additional 25 licenses for ArcGIS Pro and needs to assign the licenses to ArcGIS Enterprise users. Which license file is required to make those assignments?

Accepted Answer

C

Explanation: When an organization purchases additional licenses for ArcGIS Pro to be managed through ArcGIS Enterprise, a new, updated license file must be obtained from My Esri. This file is cumulative; it contains all previously held entitlements (such as user types and other app licenses) in addition to the newly acquired 25 ArcGIS Pro licenses. The portal administrator then imports this single, consolidated file into Portal for ArcGIS to update the organization's entitlements. This process makes the new licenses available for assignment to users without disrupting existing license assignments.

Question 11

A GIS administrator team must perform system maintenance over the weekend. The team must
ensure that members do not add, publish, or edit any items in ArcGIS Enterprise. Members still need
the ability to access and view items as necessary.
Which action should the team perform?

Accepted Answer

A

Explanation: Placing ArcGIS Enterprise in read-only mode is the designated administrative procedure for system maintenance scenarios. This mode specifically prevents all members from creating, modifying, or deleting content, services, users, and groups. Crucially, it maintains view-only access, allowing members to continue accessing and viewing items, which directly fulfills all requirements of the maintenance task. This is a single, system-wide setting designed for this exact purpose, ensuring a controlled state during maintenance without causing a full service outage.

Question 12

A GIS administrator receives reports of slow-performing services and notices that disk space is filling
up after recent troubleshooting sessions.
In those sessions, the following tasks were performed:
Services added to the shared instance pool
Log retention settings reduced
Log level set to Debug
ArcGIS Server machine restarted
An additional ArcGIS Server site federated
What is causing this slow performance?

Accepted Answer

B

Explanation: Setting the ArcGIS Server log level to Debug causes the system to generate highly detailed and voluminous log files for all server activities. This action has two primary consequences that match the reported issues. First, the constant and intensive disk I/O operations required to write these extensive logs consume significant system resources (CPU and disk throughput), leading to slower service performance. Second, the large volume of log data generated rapidly consumes disk space. This single action directly explains both of the symptoms observed by the administrator.

Question 13

A GIS administrator is setting up a distributed collaboration between an ArcGIS Online organization
and an ArcGIS Enterprise organization for a data validation project. Users from a second ArcGIS
Online org will also participate.
What should the administrator set up?

Accepted Answer

A

Explanation: A single distributed collaboration is limited to having only one ArcGIS Online organization as a participant. To connect an ArcGIS Enterprise organization with two separate ArcGIS Online organizations, the administrator must configure two distinct collaborations. The ArcGIS Enterprise portal will participate in both collaborations, establishing one connection with the first ArcGIS Online organization and a second, separate connection with the other. This architecture is the only supported method to achieve the required data synchronization between all three organizations for the project.

Question 14

A new user is added to the organization and can see roads, building footprints, parcels, and traffic
data shared with them in Portal for ArcGIS. However, the user cannot use analysis tools in the portal,
even though the SpatialAnalysisTools service is verified to be running.
What is causing this issue?

Accepted Answer

B

Explanation: The standard feature analysis tools available in the Portal for ArcGIS website (e.g., in Map Viewer) create new hosted feature layers as their output. This functionality requires a federated ArcGIS GIS Server to be designated as the organization's hosting server. The hosting server provides the necessary data storage and processing environment for these outputs. Even if the SpatialAnalysisTools geoprocessing service is running on a federated server, if no server is configured as the hosting server, the analysis tools will be unavailable to all users in the portal, as there is no designated location to store the results.

Question 15

A client wants to perform incremental webgisdr backups daily and full backups weekly. They store all
data in the relational ArcGIS Data Store, with no tile or map caches.
Which action is required to enable incremental backups?

Accepted Answer

B

Explanation: The webgisdr utility's incremental backup mode relies on the functionality of the relational ArcGIS Data Store. To create an incremental backup, the tool needs access to the database transaction logs (also known as write-ahead logs or WALs) that have been generated since the last full backup. Enabling point-in-time recovery (PITR) on the relational data store is the specific action that configures it to continuously archive these transaction logs. Without PITR enabled, the logs are not preserved, and webgisdr cannot perform an incremental backup, only a full one.

Free Esri EAEP2201 Actual Exam Questions