Black Friday Special 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

New Release SPLK-2002 Splunk Enterprise Certified Architect Questions

Page: 3 / 12
Total 160 questions

Splunk Enterprise Certified Architect Questions and Answers

Question 9

Which of the following use cases would be made possible by multi-site clustering? (select all that apply)

Options:

A.

Use blockchain technology to audit search activity from geographically dispersed data centers.

B.

Enable a forwarder to send data to multiple indexers.

C.

Greatly reduce WAN traffic by preferentially searching assigned site (search affinity).

D.

Seamlessly route searches to a redundant site in case of a site failure.

Question 10

How can internal logging levels in a Splunk environment be changed to troubleshoot an issue? (select all that apply)

Options:

A.

Use the Monitoring Console (MC).

B.

Use Splunk command line.

C.

Use Splunk Web.

D.

Edit log-local. cfg.

Question 11

When troubleshooting a situation where some files within a directory are not being indexed, the ignored files are discovered to have long headers. What is the first thing that should be added to inputs.conf?

Options:

A.

Decrease the value of initCrcLength.

B.

Add a crcSalt= attribute.

C.

Increase the value of initCrcLength.

D.

Add a crcSalt= attribute.

Question 12

Which of the following are possible causes of a crash in Splunk? (select all that apply)

Options:

A.

Incorrect ulimit settings.

B.

Insufficient disk IOPS.

C.

Insufficient memory.

D.

Running out of disk space.

Page: 3 / 12
Total 160 questions