Online Access Free SPLK-2002 Practice Test

Other than high availability, which of the following is a benefit of search head clustering?

• A.Input settings are synchronized between search heads.
• B.Allows indexers to maintain multiple searchable copies of all data.
• C.Automatic replication of user knowledge objects.
• D.Fewer network ports are required to be opened between search heads.

Which of the following use cases would be made possible by multi-site clustering? (select all that apply)

• A.Seamlessly route searches to a redundant site in case of a site failure.
• B.Greatly reduce WAN traffic by preferentially searching assigned site (search affinity).
• C.Enable a forwarder to send data to multiple indexers.
• D.Use blockchain technology to audit search activity from geographically dispersed data centers.

Which part of the deployment plan is vital prior to installing Splunk indexer clusters and search head clusters?

• A.Education and training plans.
• B.Splunk deployment topology.
• C.Data source inventory.
• D.Data policy definitions.

Which Splunk cluster feature requires additional indexer storage?

• A.Search Head Clustering
• B.Indexer Acknowledgement
• C.Indexer Discovery
• D.Index Summarization

(What are the possible values for the mode attribute in server.conf for a Splunk server in the [clustering] stanza?)

• A.[clustering] mode = deployer
• B.[clustering] mode = peer
• C.[clustering] mode = searchhead
• D.[clustering] mode = manager