Question 1

Which of the following are supported options when configuring optional network inputs?

Options :

A : Metadata override, sender filtering options, network input queues (quantum queues)

B : Metadata override, sender filtering options, network input queues (memory/persistent queues)

C : Filename override, sender filtering options, network output queues (memory/persistent queues)

D : Metadata override, receiver filtering options, network input queues (memory/persistent queues)

Answer: B

Question 2

In a distributed environment, which Splunk component is used to distribute apps and configurations to the
other Splunk instances?

Options :

A : Indexer

B : Deployer

C : Forwarder

D : Deployment server

Answer: D

Question 3

Which Splunk component does a search head primarily communicate with?

Options :

A : Indexer

B : Forwarder

C : Cluster master

D : Deployment server

Answer: A

Question 4

Which of the following statements describe deployment management? (select all that apply)

Options :

A : Requires an Enterprise license

B : Is responsible for sending apps to forwarders.

C : Once used, is the only way to manage forwarders

D : Can automatically restart the host OS running the forwarder.

Answer: A,B

Question 5

Which Splunk forwarder has a built-in license?

Options :

A : Light forwarder

B : Heavy forwarder

C : Universal forwarder

D : Cloud forwarder

Answer: C