Question 1

Which Splunk Enterprise offering has its own license?

Options :

A : Splunk Cloud Forwarder

B : Splunk Heavy Forwarder

C :

Splunk Universal Forwarder

D : Splunk Forwarder Management

Answer: C

Question 2

To optimize the distribution of primary buckets; when does primary rebalancing automatically occur? (Select all that apply.)

Options :

A : Rolling restart completes.

B : Master node rejoins the cluster.

C : Captain joins or rejoins cluster.

D : A peer node joins or rejoins the cluster.

Answer: A,B,D

Question 3

What does the deployer do in a Search Head Cluster (SHC)? (Select all that apply.)

Options :

A :

Distributes apps to SHC members.

B :

Bootstraps a clean Splunk install for a SHC.

C : Distributes non-search related and manual configuration file changes.

D : Distributes runtime knowledge object changes made by users across the SHC.

Answer: A

Question 4

What is the logical first step when starting a deployment plan?

Options :

A : Inventory the currently deployed logging infrastructure.

B : Determine what apps and use cases will be implemented.

C : Gather statistics on the expected adoption of Splunk for sizing.

D : Collect the initial requirements for the deployment from all stakeholders.

Answer: D

Question 5

What is the minimum reference server specification for a Splunk indexer?

Options :

A : 12 CPU cores, 12GB RAM, 800 IOPS

B :

16 CPU cores, 16GB RAM, 800 IOPS

C : 24 CPU cores, 16GB RAM, 1200 IOPS

D : 28 CPU cores, 32GB RAM, 1200 IOPS

Answer: A

Free SPLK-2002 Mock Exam – Practice Online Confidently