Question 1

Which Splunk configuration file is used to enable data integrity checking?

Options :

A : props.conf

B : global.conf

C : indexes.conf

D : data_integrity.conf

Answer: C

Question 2

In which phase of the index time process does the license metering occur?

Options :

A : input phase

B : Parsing phase

C : Indexing phase

D : Licensing phase

Answer: C

Question 3

Which Splunk component distributes apps and certain other configuration updates to search head cluster members?

Options :

A : Deployer

B : Cluster master

C : Deployment server

D : Search head cluster master

Answer: C

Question 4

Using the CLI on the forwarder, how could the current forwarder to indexer configuration be viewed?

Options :

A : splunk btool server list --debug

B : splunk list forward-indexer

C : splunk list forward-server

D : splunk btool indexes list --debug

Answer: C

Question 5

Which of the following Splunk components require a separate installation package?

Options :

A : Deployment server

B : License master

C : Universal forwarder

D : Heavy forwarder

Answer: C