File Info
| Exam | Splunk Enterprise Certified Architect |
| Number | SPLK-2002 |
| File Name | Splunk.SPLK-2002.TestKing.2019-10-23.54q.tqb |
| Size | 192 KB |
| Posted | Oct 23, 2019 |
| Download | Splunk.SPLK-2002.TestKing.2019-10-23.54q.tqb |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
Which of the following will cause the greatest reduction in disk size requirements for a cluster of N indexers running Splunk Enterprise Security?
- Setting the cluster search factor to N-1.
- Increasing the number of buckets per index.
- Decreasing the data model acceleration range.
- Setting the cluster replication factor to N-1.
Correct answer: D
Explanation:
Reference: https://docs.splunk.com/Documentation/Splunk/7.3.2/Indexer/Systemrequirements Reference: https://docs.splunk.com/Documentation/Splunk/7.3.2/Indexer/Systemrequirements
Question 2
Search dashboards in the Monitoring Console indicate that the distributed deployment is approaching its capacity.
Which of the following options will provide the most search performance improvement?
- Replace the indexer storage to solid state drives (SSD).
- Add more search heads and redistribute users based on the search type.
- Look for slow searches and reschedule them to run during an off-peak time.
- Add more search peers and make sure forwarders distribute data evenly across all indexers.
Correct answer: C
Question 3
A Splunk architect has inherited the Splunk deployment at Buttercup Games and end users are complaining that the events are inconsistently formatted for a web sourcetype. Further investigation reveals that not all web logs flow through the same infrastructure: some of the data goes through heavy forwarders and some of the forwarders are managed by another department.
Which of the following items might be the cause for this issue?
- The search head may have different configurations than the indexers.
- The data inputs are not properly configured across all the forwarders.
- The indexers may have different configurations than the heavy forwarders.
- The forwarders managed by the other department are an older version than the rest.
Correct answer: D
