After installing Enterprise Security, the distributed configuration management tool can be used to create which app to configure indexers?

A site has a single existing search head which hosts a mix of both CIM and non-CIM compliant applications. All of the applications are mission-critical. The customer wants to carefully control cost, but wants good ES performance.
What is the best practice for installing ES?

Enterprise Security's dashboards primarily pull data from what type of knowledge object?

The Remote Access panel within the User Activity dashboard is not populating with the most recent hour of data. What data model should be checked for potential errors such as skipped searches?

What does the summariesonly=trueoption do for a correlation search?