Question 1

Which Splunk component requires a Forwarder license?

Options :

A : Search head

B : Heavy forwarder

C : Heaviest forwarder

D : Universal forwarder

Answer: B

Question 2

Using the CLI on the forwarder, how could the current forwarder to indexer configuration be viewed?

Options :

A : splunk btool server list --debug

B : splunk list forward-indexer

C : splunk list forward-server

D : splunk btool indexes list --debug

Answer: C

Question 3

Which of the following authentication types requires scripting in Splunk?

Options :

A : ADFS

B : LDAP

C : SAML

D : RADIUS

Answer: D

Question 4

Which of the following Splunk components require a separate installation package?

Options :

A : Deployment server

B : License master

C : Universal forwarder

D : Heavy forwarder

Answer: C

Question 5

Which Splunk component distributes apps and certain other configuration updates to search head cluster members?

Options :

A : Deployer

B : Cluster master

C : Deployment server

D : Search head cluster master

Answer: C