Free Splunk SPLK-2002 Exam Questions

Question 1

Which of the following configuration attributes must be set in server, conf on the cluster manager in a single-site indexer cluster?

A : master_uri

B : site

C : replication_factor

D : site_replication_factor

Answer: A

Question 2

A customer currently has many deployment clients being managed by a single, dedicated deployment server.The customer plans to double the number of clients.What could be done to minimize performance issues?

A : Modify deploymentclient. conf to change from a Pull to Push mechanism.

B : Reduce the number of apps in the Manager Node repository.

C : Increase the current deployment client phone home interval.

D : Decrease the current deployment client phone home interval.

Answer: C

Question 3

Which of the following options in limits, conf may provide performance benefits at the forwarding tier?

A : Enable the indexed_realtime_use_by_default attribute.

B : Increase the maxKBps attribute.

C : Increase the parallellngestionPipelines attribute.

D : Increase the max_searches per_cpu attribute.

Answer: C

Question 4

As of Splunk 9.0, which index records changes to . conf files?

A : _configtracker

B : _introspection

C : _internal

D : _audit

Answer: A

Question 5

A customer currently has many deployment clients being managed by a single, dedicated deployment server.The customer plans to double the number of clients.What could be done to minimize performance issues?

A : Modify deploymentclient. conf to change from a Pull to Push mechanism.

B : Reduce the number of apps in the Manager Node repository.

C : Increase the current deployment client phone home interval.

D : Decrease the current deployment client phone home interval.

Answer: C