Enterprise Certified Architect Exam Questions PDF download

QUESTION: 11

Which of the following are client filters available in serverclass.conf? (Select all that apply.)

DNS name.
IP address.
Splunk server role.
Platform (machine type).

Answer(s): A,B

Reference:

https://docs.splunk.com/Documentation/Splunk/7.3.1/Updating/Filterclients#Define_filters_through_serverclass.conf

QUESTION: 12

What log file would you search to verify if you suspect there is a problem interpreting a regular expression in a monitor stanza?

btool.log
metrics.log
splunkd.log
tailing_processor.log

Answer(s): C

Reference:

https://answers.splunk.com/answers/479312/how-to-edit-inputsconf-to-monitor-multiple-files-w-1.html

Reveal Solution Next Question

QUESTION: 13

Which Splunk tool offers a health check for administrators to evaluate the health of their Splunk deployment?

btool
DiagGen
SPL Clinic
Monitoring Console

Answer(s): D

Reference:

https://docs.splunk.com/Documentation/Splunk/7.3.1/DMC/DMCoverview

Reveal Solution Next Question

QUESTION: 14

In a four site indexer cluster, which configuration stores two searchable copies at the origin site, one searchable copy at site2, and a total of four searchable copies?

site_search_factor = origin:2, site1:2, total:4
site_search_factor = origin:2, site2:1, total:4
site_replication_factor = origin:2, site1:2, total:4
site_replication_factor = origin:2, site2:1, total:4

Answer(s): D

Reference:

https://docs.splunk.com/Documentation/Splunk/7.3.2/Indexer/Sitereplicationfactor

Reveal Solution Next Question

QUESTION: 15

Which of the following is true regarding Splunk Enterprise performance? (Select all that apply.)

Adding search peers increases the maximum size of search results.
Adding RAM to an existing search heads provides additional search capacity.
Adding search peers increases the search throughput as search load increases.
Adding search heads provides additional CPU cores to run more concurrent searches.

Answer(s): B,D

Reference:

https://docs.splunk.com/Documentation/Splunk/7.3.2/Capacity/HowsavedsearchesaffectSplunkEnterpriseperformance

Reveal Solution Next Question

Splunk Enterprise Certified Architect SPLK-2002 Dumps in PDF

Free Splunk SPLK-2002 Real Questions (page: 13)

QUESTION: 11

Reference:

QUESTION: 12

Reference:

QUESTION: 13

Reference:

QUESTION: 14

Reference:

QUESTION: 15

Reference: