These 10 beginner questions cover the Dynatrace Implementation Professional objectives: SaaS and Managed deployment models, ActiveGate, the Dynatrace Operator on Kubernetes, OpenPipeline, Grail buckets, log ingestion from external tools, data masking, IAM policy conditions and workflows.

Ready to test yourself? Take the graded Beginner test (free; sign in with Google, one click) to get your score.

  1. A customer runs Dynatrace SaaS and needs an ActiveGate in its data center. Which type of ActiveGate should it install?

    • A. A Cluster ActiveGate
    • B. A Managed Cluster node
    • C. An Environment ActiveGate ✔ correct
    • D. No ActiveGate works with SaaS

    Answer: C. With Dynatrace SaaS you only need Environment ActiveGates. Cluster ActiveGates belong to Dynatrace Managed deployments, and Managed Cluster nodes are the servers of a self-hosted Managed installation.

    Source: docs.dynatrace.com/docs/ingest-from/dynatrace-activegate · Domain: Explain Dynatrace platform architecture and deployment models

  2. A team cannot install OneAgent on some systems but still wants their logs in Dynatrace. Which TWO tools can send these logs to Dynatrace? (Select TWO)

    • A. Fluent Bit ✔ correct
    • B. Smartscape
    • C. OpenTelemetry Collector ✔ correct
    • D. A maintenance window
    • E. Segments

    Answer: A, C. Where OneAgent cannot be installed, Dynatrace still ingests logs, for example streamed with Fluent Bit or the Dynatrace OpenTelemetry Collector, or sent to the Log ingestion API. Smartscape, maintenance windows and segments are platform features for topology, planned work and filtering; they do not ingest logs.

    Source: docs.dynatrace.com/docs/analyze-explore-automate/logs/lma-log-ingestion · Domain: Integrate Dynatrace with external platforms and data sources

  3. A platform team wants to roll out Dynatrace on a Kubernetes cluster and have the rollout, configuration and lifecycle of its components handled automatically. What should they deploy?

    • A. Dynatrace Operator with a DynaKube custom resource ✔ correct
    • B. A Managed Cluster node inside every application pod
    • C. A separate workflow that installs agents per namespace
    • D. A OneAgent installer run by hand on each developer laptop

    Answer: A. Dynatrace Operator manages the automated rollout, configuration and lifecycle of Dynatrace components on Kubernetes. The custom resource of kind DynaKube defines which features are enabled, and the Operator reconciles the cluster to that state.

    Source: docs.dynatrace.com/docs/ingest-from/setup-on-k8s/how-it-works/components/dynatra · Domain: Deploy OneAgent and other data ingestion technologies

  4. What is Dynatrace OpenPipeline?

    • A. The Dynatrace pipeline for deploying apps to production
    • B. The secure proxy between OneAgents and the cluster
    • C. The query language used to explore data in Grail
    • D. The data handling solution that ingests and processes data ✔ correct

    Answer: D. OpenPipeline ingests and processes data from different sources, at any scale and in any format, before it is stored: routing, enrichment, sensitive-data handling and cost control. The proxy is ActiveGate and the query language is DQL.

    Source: docs.dynatrace.com/docs/platform/openpipeline · Domain: Configure and optimize OpenPipeline and data ingestion strategies

  5. A team sends logs to Dynatrace SaaS through the log ingest API from a tool it cannot change. An email address field must be masked before the logs are stored in Grail. Which approach fits?

    • A. Masking at capture with OneAgent
    • B. Masking at ingest with OpenPipeline ✔ correct
    • C. A maintenance window during business hours
    • D. A segment that hides the email field

    Answer: B. Masking at ingest uses OpenPipeline processors on data after it arrives in Dynatrace SaaS and before it is stored in Grail, and it works across ingest channels, so it suits sources you cannot change. At-capture masking with OneAgent needs OneAgent to collect the logs.

    Source: docs.dynatrace.com/docs/analyze-explore-automate/logs/lma-use-cases/methods-of-m · Domain: Apply security, governance, and privacy best practices

  6. A company wants one user group to read only the logs that belong to Team A. In a Dynatrace IAM policy, what limits access at record level?

    • A. A separate Dynatrace environment for each individual log file of Team A
    • B. A process group detection rule for Team A
    • C. A WHERE condition, e.g. on storage:dt.security_context ✔ correct
    • D. A maintenance window that covers Team A's hours

    Answer: C. Policy statements can carry optional conditions that restrict access at resource or record level, for example ALLOW storage:logs:read WHERE storage:dt.security_context = "TeamA";. The policy is then bound to the user group.

    Source: docs.dynatrace.com/docs/manage/identity-access-management/permission-management/ · Domain: Design identity, access, permission, and policy models

  7. An engineer plans a workflow that exports all log data every hour to an external data lake. What does Dynatrace say about this design?

    • A. Workflows are not meant for mass data export; consider OpenPipeline or Extensions ✔ correct
    • B. Workflows are the recommended tool for exporting large volumes of data
    • C. Workflows can run only once per day, so an hourly export is impossible
    • D. Workflows can only send email and cannot reach external systems

    Answer: A. Workflows automate actions on monitoring data, such as reacting to problems, scheduling reports or calling external services. Dynatrace states they are not intended for mass data ingestion or export; for large-scale processing use OpenPipeline or Extensions.

    Source: docs.dynatrace.com/docs/analyze-explore-automate/workflows · Domain: Configure automation and workflow-based processes

  8. Besides routing OneAgent traffic, an ActiveGate can monitor Kubernetes and OpenShift clusters through the Kubernetes API and run ActiveGate extensions that collect data from remote technologies.

    • A. True ✔ correct
    • B. False

    Answer: A. True. An Environment ActiveGate routes OneAgent traffic and also has monitoring modules, for example Kubernetes/OpenShift monitoring and ActiveGate extensions. In the latest Dynatrace, the older ActiveGate modules for AWS, Azure and VMware monitoring are Dynatrace Classic: use AWS and Azure Cloud Platform Monitoring or the matching extension instead.

    Source: docs.dynatrace.com/docs/ingest-from/dynatrace-activegate/capabilities · Domain: Implement observability solutions across cloud and hybrid environments

  9. A bank's rules require the monitoring platform's cluster to run on servers inside its own network. Which Dynatrace deployment model fits this requirement?

    • A. Dynatrace SaaS
    • B. Dynatrace Managed ✔ correct
    • C. Dynatrace Hub
    • D. Dynatrace Playground

    Answer: B. Dynatrace Managed is installed on Managed Cluster nodes that the customer runs; without extra configuration the cluster is only reachable inside the internal network. Dynatrace SaaS is hosted by Dynatrace; Hub is the catalog of apps and extensions.

    Source: docs.dynatrace.com/managed/managed-cluster/basics/managed-deployments · Domain: Explain Dynatrace platform architecture and deployment models

  10. A company must keep audit-relevant logs much longer than debug logs. Which Grail feature lets an implementer store them with different retention times?

    • A. Views
    • B. Segments
    • C. Notebooks
    • D. Custom buckets ✔ correct

    Answer: D. Buckets are the logical storage units in Grail. Administrators can create custom buckets to apply different retention times, optimize performance or meet compliance needs. Views are virtual tables, and segments filter data; neither sets retention.

    Source: docs.dynatrace.com/docs/platform/grail/organize-data · Domain: Design Dynatrace solutions that align with business and technical requirements

Original practice questions written by xOps School (DevOpsSchool Private Limited) from the public Dynatrace exam objectives (Dynatrace University exam page (latest Dynatrace platform): 50 multiple-choice and multi-select questions, 2 hours, no lab part), checked 2026-10-27. They are not actual exam questions. xOps School is not affiliated with or endorsed by Dynatrace; exam names are trademarks of their owners. Official exam page: university.dynatrace.com/learn/courses/16/dynatrace-implementation-pro.

Last modified: Wednesday, 28 October 2026, 11:30 AM