Esri ArcGIS Enterprise System Design Professional (ESDP_2025) Certification Sample Questions

01. An organization runs development, test, and production. A team proposes retiring the development deployment and doing its build work directly in test, arguing that test already mirrors production and the two are rarely used at the same time.
What should the architect raise?
a) Build work would destabilise the environment that validates releases
b) Test would need to be resized to carry both kinds of work at once
c) Developers would gain access to production-like data held in test

02. A deployment has a portal and several federated ArcGIS Server sites owned by different departments. A team proposes upgrading the portal now and upgrading each server site over the following months, as and when its department can make time available.
What should the architect raise?
a) The portal must be upgraded last, after every federated site
b) Each federated site can be upgraded independently
c) Federated components are expected at compatible releases

03. A very large deployment cannot complete a full backup inside its overnight window, and the window cannot be extended. The business will tolerate losing at most a day's content, but wants recovery to be as simple and as quick as the constraint allows.
Which approach best balances these?
a) A full backup every night, accepting that it overruns the window
b) A weekly full backup, with nightly capture of the changes since
c) A full backup weekly, with no capture on the intervening nights

04. An organization already maintains its authoritative asset data in an enterprise geodatabase administered by its database team, with its own backup and change control. It now wants to publish services from that data.
How should the data be made available to the deployment?
a) Register the existing database, so published services reference it where it lives
b) Copy the data into the relational data store so the deployment manages it
c) Publish the data to the spatiotemporal store so it can be queried at scale

05. A deployment that has been stable for months begins failing, and users are affected across every department. The team's instinct is to start examining the deployment's own components one by one in detail, beginning with the servers.
What should the architect suggest they establish first?
a) Which component is consuming the most resource at present
b) Whether the failure reproduces in the test environment
c) The change made in or around the deployment beforehand

06. After a new machine is added to a deployment, users are intermittently signed out and some service requests are rejected as invalid. The failures follow no pattern by user and the credentials are correct.
Which characteristic of the new machine should be examined?
a) Whether it has been granted the same file system permissions as its peers
b) Whether its clock agrees with the other machines in the deployment
c) Whether it has sufficient memory for the workload it is receiving

07. A new requirement could be met by adding a further ArcGIS Server site, but the organization has no budget for additional licensing this year. An existing site already carries the role the requirement needs and has spare capacity outside business hours.
What should the architect propose?
a) Run the new work on the existing site in its spare capacity
b) Defer the requirement until licensing for a separate site can be funded
c) Add machines to the existing site

08. Two organizations collaborate. The receiving organization needs the shared layers to remain usable when the network link between the two sites is down.
Which sharing arrangement does this require?
a) Sending the content as references
b) Granting the receiving organization accounts in the originating deployment
c) Sending the content as copies

09. A security standard requires that unauthenticated requests never reach the application components. The deployment is published to external users through the perimeter network.
What does this require?
a) Authentication at the portal, since it is the deployment's identity authority
b) Authentication performed at the perimeter, before requests go inward
c) Authentication at the data tier, so no data is read without a verified identity

10. An architect must record, for the network team, the address that end users will type to reach the deployment.
Which address is that?
a) The organizational web address published through the web tier
b) The address of the machine running Portal for ArcGIS
c) The address of the machine running ArcGIS Data Store