A site has a single existing search head which hosts a mix of both CIM and non-CIM compliant applications. All of the applications are mission-critical. The customer wants to carefully control cost, but wants good ES performance. What is the best practice for installing ES?

Which of the following are data models used by ES? (Choose all that apply)

What is the default schedule for accelerating ES Datamodels?

Which of the following is a risk of using the Auto Deployment feature of Distributed Configuration Management to distribute indexes.conf?

An administrator wants to ensure that none of the ES indexed data could be compromised through tampering. What feature would satisfy this requirement?