Online Access Free SPLK-2002 Practice Test

Why should intermediate forwarders be avoided when possible?

• A.Because intermediate forwarders cannot be managed by a deployment server.
• B.To eliminate potential performance bottlenecks.
• C.To decrease mean time between failures.
• D.To minimize license usage and cost.

What is the logical first step when starting a deployment plan?

• A.Determine what apps and use cases will be implemented.
• B.Gather statistics on the expected adoption of Splunk for sizing.
• C.Inventory the currently deployed logging infrastructure.
• D.Collect the initial requirements for the deployment from all stakeholders.

(Which indexes.conf attribute would prevent an index from participating in an indexer cluster?)

• A.site_mappings = default_mapping
• B.available_sites = none
• C.repFactor = 0
• D.repFactor = auto

A customer currently has many deployment clients being managed by a single, dedicated deployment server.
The customer plans to double the number of clients.
What could be done to minimize performance issues?

• A.Reduce the number of apps in the Manager Node repository.
• B.Increase the current deployment client phone home interval.
• C.Decrease the current deployment client phone home interval.
• D.Modify deploymentclient. conf to change from a Pull to Push mechanism.

How does the average run time of all searches relate to the available CPU cores on the indexers?

• A.Average run time increases as the number of CPU cores on the indexers decreases.
• B.Average run time increases as the number of CPU cores on the indexers increases.
• C.Average run time is independent of the number of CPU cores on the indexers.
• D.Average run time decreases as the number of CPU cores on the indexers decreases.