Free Splunk SPLK-2002 Exam Questions

Become Splunk Certified with updated SPLK-2002 exam questions and correct answers

Page: 1 / 40

Total 200 Questions | Updated On: Feb 11, 2026

Add To Cart

Question 1

(If the maxDataSize attribute is set to auto_high_volume in indexes.conf on a 64-bit operating system, what is the maximum hot bucket size?)

A : 4 GB

B : 750 MB

C : 10 GB

D : 1 GB

Answer: C

Question 2

(Where can files be placed in a configuration bundle on a search peer that will persist after a new configuration bundle has been deployed?)

A : In the $SPLUNK_HOME/etc/slave-apps//local folder.

B : In the $SPLUNK_HOME/etc/master-apps//local folder.

C : Nowhere; the entire configuration bundle is overwritten with each push.

D : In the $SPLUNK_HOME/etc/slave-apps/_cluster/local folder.

Answer: D

Question 3

(Which of the following is not facilitated by the deployer?)

A : Replication of knowledge objects.

B : Deployment of baseline app configurations.

C : Distribute non-replicated, non-runtime configuration updates.

D : Migration of app and user configurations into the search head cluster.

Answer: A

Question 4

Which of the following configuration attributes must be set in server, conf on the cluster manager in a single-site indexer cluster?

A : master_uri

B : site

C : replication_factor

D : site_replication_factor