Question 1

What does setting site=site0 on all Search Head Cluster members do in a multi-site indexer cluster?

Options :

A : Disables search site affinity.

B : Sets all members to dynamic captaincy.

C : Enables multisite search artifact replication.

D : Enables automatic search site affinity discovery.

Answer: A

Question 2

What is the minimum reference server specification for a Splunk indexer?

Options :

A : 12 CPU cores, 12GB RAM, 800 IOPS

B :

16 CPU cores, 16GB RAM, 800 IOPS

C : 24 CPU cores, 16GB RAM, 1200 IOPS

D : 28 CPU cores, 32GB RAM, 1200 IOPS

Answer: A

Question 3

Which Splunk Enterprise offering has its own license?

Options :

A : Splunk Cloud Forwarder

B : Splunk Heavy Forwarder

C :

Splunk Universal Forwarder

D : Splunk Forwarder Management

Answer: C

Question 4

A search head cluster member contains the following in its server .conf. What is the Splunk server name of this member?

Options :

A : node1

B : shc4

C : idxc2

D : node3

Answer: D

Question 5

When configuring a Splunk indexer cluster, what are the default values for replication and search factor?

Options :

A :

replication_factor = 2search_factor = 2

B : replication_factor = 2search factor = 3

C :

replication_factor = 3search_factor = 2

D :

replication_factor = 3search factor = 3

Answer: C