SPLK-2002 by Splunk Actual Free Exam Questions And Answers

Question 1

The KV store forms its own cluster within a SHC. What is the maximum number of SHC members KV store will form?

A. 100

B. Unlimited

C. 50

D. 25

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 2

(What is the best way to configure and manage receiving ports for clustered indexers?)

A. Define the receiving port in /etc/manager-apps/_cluster/local/inputs.conf and push it to the peer nodes.

B. Use Splunk Web to create the receiving port on each peer node.

C. Run the splunk enable listen command on each peer node.

D. Define the receiving port in /etc/deployment-apps/cluster-app/local/inputs.conf and deploy it to the peer nodes.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 3

Which of the following server. conf stanzas indicates the Indexer Discovery feature has not been fully configured (restart pending) on the Master Node?

A.

B.

C.

D.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 4

Which component in the splunkd.log will log information related to bad event breaking?

A. Audittrail

B. AggregatorMiningProcessor

C. IndexingPipeline

D. EventBreaking

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 5

The frequency in which a deployment client contacts the deployment server is controlled by what?

A. phoneHomeIntervalInSecs attribute in deploymentclient.conf

B. phoneHomeIntervalInSecs attribute in outputs.conf

C. polling_interval attribute in outputs.conf

D. polling_interval attribute in deploymentclient.conf

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 6

Which server.conf attribute should be added to the master node's server.conf file when decommissioning a site in an indexer cluster?

A. site_mappings

B. site_search_factor

C. available_sites

D. site_replication_factor

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 7

A Splunk deployment is being architected and the customer will be using Splunk Enterprise Security (ES) and Splunk IT Service Intelligence (ITSI). Through data onboarding and sizing, it is determined that over 200 discrete KPIs will be tracked by ITSI and 1TB of data per day by ES. What topology ensures a scalable and performant deployment?

A. Two search head clusters, one for ITSI and one for ES.

B. Two search heads, one for ITSI and one for ES.

C. One search head with both ITSI and ES installed.

D. One search head cluster with both ITSI and ES installed.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 8

Which command will permanently decommission a peer node operating in an indexer cluster?

A. splunk decommission --enforce counts

B. splunk stop -f

C. splunk offline -f

D. splunk offline --enforce-counts

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 9

metrics. log is stored in which index?

A. _introspection

B. main

C. _telemetry

D. _internal

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 10

In the deployment planning process, when should a person identify who gets to see network data?

A. Topology diagramming

B. Data source inventory

C. Deployment schedule

D. Data policy definition

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 11

A monitored log file is changing on the forwarder. However, Splunk searches are not finding any new data that has been added. What are possible causes? (select all that apply)

A. The last 256 bytes of the monitored file are not changing.

B. An admin ran splunk clean eventdata -index <indexname> on the indexer.

C. An admin has removed the Splunk fishbucket on the forwarder.

D. The first 256 bytes of the monitored file are not changing.

Discussion 0

Correct Answer: A,C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 12

Which of the following statements describe licensing in a clustered Splunk deployment? (Select all that apply.)

A. Each cluster member requires its own clustering license.

B. Cluster members must share the same license pool and license master.

C. Free licenses do not support clustering.

D. Replicated data does not count against licensing.

Discussion 0

Correct Answer: C,D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Splunk Enterprise Certified Architect - SPLK-2002 Exam Practice Test

Contact Us

Useful Links

Latest Updated