Winter Special - Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: top65certs

SPLK-1003 VCE Exam Download

Page: 6 / 14
Total 185 questions

Splunk Enterprise Certified Admin Questions and Answers

Question 21

What is required when adding a native user to Splunk? (select all that apply)

Options:

A.

Password

B.

Username

C.

Full Name

D.

Default app

Question 22

An admin is running the latest version of Splunk with a 500 GB license. The current daily volume of new data

is 300 GB per day. To minimize license issues, what is the best way to add 10 TB of historical data to the

index?

Options:

A.

Buy a bigger Splunk license.

B.

Add 2.5 TB each day for the next 5 days.

C.

Add all 10 TB in a single 24 hour period.

D.

Add 200 GB of historical data each day for 50 days.

Question 23

Where should apps be located on the deployment server that the clients pull from?

Options:

A.

$SFLUNK_KOME/etc/apps

B.

$SPLUNK_HCME/etc/sear:ch

C.

$SPLUNK_HCME/etc/master-apps

D.

$SPLUNK HCME/etc/deployment-apps

Question 24

Which of the following are reasons to create separate indexes? (Choose all that apply.)

Options:

A.

Different retention times.

B.

Increase number of users.

C.

Restrict user permissions.

D.

File organization.

Page: 6 / 14
Total 185 questions