Level 5 exam — IT & Systems

Exam — fresh questions

12 questions to validate level 5 with Sofiane, a support technician at a distribution SME in Algiers: IT-side cybersecurity, backup and recovery plan, asset management (ITSM/ITIL), documentation and professional specialization.
Answer everything, then click Check: your score and explanations will appear.

5.1 · Recall

1. What do we first seek to reduce in operational cybersecurity on the IT side?

The attack surface by disabling the unnecessary and hardening The number of backups by deleting the oldest ones The screen size by standardizing the whole IT fleet The number of users by closing accounts at random

Fewer exposed services, unnecessary software and privileged accounts reduce the attack surface: it is the founding principle.

5.2 · Recall

2. What does the RTO of a disaster recovery plan measure?

The amount of data we accept losing in total The maximum acceptable time before being operational again The number of backup servers to budget for The annual budget allocated to the recovery plan

RTO = maximum recovery time; RPO = tolerable data loss. These are the two benchmarks that size the plan.

5.3 · Recall

3. In ITIL, what is a “problem”?

An urgent ticket written by a user unhappy with the service A hardware failure affecting several workstations the same day The root cause of recurring incidents to address in depth A change request planned and approved in committee

An incident is a one-off interruption to resolve fast; a problem is the root cause of recurring incidents, to address in depth.

5.4 · Recall

4. Why is documenting IT procedures a continuity issue?

Because documentation allows increasing the customer invoice Because procedures replace any fleet management tool Because a written document avoids hiring staff Because shared knowledge avoids depending on a single person

Knowledge that exists only in one head stalls the business in case of absence: documentation makes it shared, reusable and actionable.

5.1 · Application

5. Sofiane discovers a service exposed on the Internet, not updated for months. What does he do first?

He leaves it as is because updates break production He applies the patch after testing on a pilot scope He unplugs the whole rack to cut off the entire network He adds extra antivirus without fixing the flaw

Known flaws are actively scanned: you patch after a pilot test, rather than leaving the door open.

5.2 · Application

6. Sofiane wants the payroll service to tolerate very little data loss. Which benchmark does that concern?

RTO, which sets the number of servers to plan RTO, which speeds up restore speed alone RPO, which requires very frequent backups RPO, which sets the maximum delay before recovery

RPO measures tolerable data loss: the less you accept, the more frequent backups must be.

5.3 · Application

7. Sofiane sees the same printer go down every Monday morning. What does he do according to ITIL?

He restarts it every Monday and closes the ticket immediately He ignores it, because a repeated incident is no longer an incident He replaces the printer without analyzing the real cause He looks for the root cause so the incident truly stops

Restarting fixes the incident of the moment; looking for the root cause (the problem) stops the recurrence.

5.5 · Application

8. Sofiane targets cloud administration. Which certification path is realistic?

A fundamentals cert (AZ-900) then an associate (AZ-104) Collecting ten different badges without ever practicing Starting directly with the most advanced certification Relying only on tutorials without ever taking an exam

You progress in tiers: fundamentals to frame things, then a more operational associate, practicing in parallel.

5.1 · Arbitration

9. The SME hesitates between stacking every tool or reducing the attack surface. Which choice is healthier?

Stack every available tool, even unused, out of caution Change nothing until a serious incident has been observed Reduce the attack surface and stack a few useful layers Rely only on the antivirus installed on each workstation

You first close the unnecessary (attack surface) then stack layers that serve: that is defense in depth.

5.2 · Arbitration

10. Management hesitates to fund a DRP. Which argument is most convincing?

A DRP costs a lot, better to wait for a real disaster Backups already exist, a plan would add nothing Just buy more disks and forget the tests Cost an interruption and translate it into RTO/RPO

Comparing the cost of an interruption to the cost of the plan and translating needs into RTO/RPO makes the investment concrete.

5.4 · Arbitration

11. Sofiane, the only one who knows a manipulation, must go on leave. What useful thing does he do before?

He writes a tested runbook so the team is autonomous He keeps the manipulation to himself and promises to be reachable He postpones his leave as long as nobody else knows how He notes a few unreadable words in a closed personal notebook

A tested runbook makes the team autonomous and reduces dependence on a single person: that is the spirit of documentation.

5.5 · Arbitration

12. A colleague of Sofiane wants to specialize in security. What advice does he give?

Take ten certifications in a month before any practice Build in tiers, backing each cert with practice Wait until perfectly expert before any certification Specialize before even acquiring the generalist foundation

You choose a path and progress in tiers, practicing in parallel: skill matters more than the badge.

What's next?

Score ≥ 80%: you master the fundamentals of security and professional development — put them into practice on Sofiane's real fleet.
Score between 50% and 80%: go back over the section(s) you missed (5.1 cybersecurity, 5.2 backup/DRP, 5.3 fleet/ITSM, 5.4 documentation, 5.5 specialization), reread the course, then retake the test.
Score < 50%: reread the whole level 5 while applying each 48h challenge (workstation review, DRP sketch, inventory and tickets, tested runbook, specialization journey) before trying again.
And after that? Keep Sofiane's reflexes — harden, patch, back up, document, specialize: they are what moves a support technician toward administration and security.