Question 1

Which forwarder is recommended by Splunk to use in a production environment?

Options :

A : Heavy forwarder

B : SSL forwarder

C : Lightweight forwarder

D : Universal forwarder

Answer: D

Question 2

Which feature of Splunk's role configuration can be used to aggregate multiple roles intended for groups of
users?

Options :

A : Linked roles

B : Grantable roles

C : Role federation

D : Role inheritance

Answer: D

Question 3

Which of the following authentication types requires scripting in Splunk?

Options :

A : ADFS

B : LDAP

C : SAML

D : RADIUS

Answer: D

Question 4

Using the CLI on the forwarder, how could the current forwarder to indexer configuration be viewed?

Options :

A : splunk btool server list --debug

B : splunk list forward-indexer

C : splunk list forward-server

D : splunk btool indexes list --debug

Answer: C

Question 5

What hardware attribute would need to be changed to increase the number of simultaneous searches (ad-hoc and scheduled) on a single search head?

Options :

A : Disk

B : CPUs

C : Memory

D : Network interface cards

Answer: B