Splunk Enterprise Certified Architect - SPLK-2002 模擬練習

A. If Indexer Discovery is enabled, provides the list of available peer nodes to forwarders.

B. Distributes app bundles to peer nodes.

C. Generates and maintains the list of primary searchable buckets.

D. Ensures all peer nodes are always using the same version of Splunk.

A. The deployer must distribute configurations to search head cluster members to be valid configurations.

B. The deployer must be used to distribute non-replicable configurations to search head cluster members.

C. The deployer only distributes configurations to search head cluster members with splunk apply shcluster-bundle.

D. The deployer only distributes configurations to search head cluster members when they "phone home".

A. replication_factor = 3search_factor = 2

B. replication_factor = 3search factor = 3

C. replication_factor = 2search_factor = 2

D. replication_factor = 2search factor = 3

A. Two physical CPU cores, or four vCPU at 2GHz or greater speed per core.

B. A 1Gb Ethernet NIC, optional 2nd NIC for a management network.

C. 128 GB RAM.

D. An x86 32-bit chip architecture.

A. index=_metrics sourcetype=splunkd metrics destHost | dedup destHost

B. index=_internal sourcetype=splunkd metrics inputHost | dedup inputHost

C. index=_internal sourcetype=internal metrics destHost | dedup destHost

D. index=_internal sourcetype=splunkd metrics destHost | dedup destHost

A. splunk clean kvstore

B. splunk delete kvstore

C. splunk clear kvstore

D. splunk reinitialize kvstore

A. idxc2

B. node1

C. node3

D. shc4

A. (20 * 30 + 100) * 0.5 = 350 GB

B. 20 / 0.5 * 30 + 100 = 1300 GB

C. 20 * 30 + 100 = 700 GB

D. 20 * 0.5 * 30 + 100 = 400 GB

A. Add indexer CPU and memory to decrease search latency.

B. Add faster storage to the search heads to improve artifact replication.

C. Increase the size of the Operations Log.

D. Decrease latency between search heads.

A. 1. Initialize cluster rebalance operation.2. Remove master node from cluster.3. Trigger replication.

B. 1. Trigger replication.2. Remove master node from cluster.3. Initialize cluster rebalance operation.

C. 1. Install and initialize the instance.2. Delete Splunk Enterprise, if it exists.3. Join the SHC.

D. 1. Delete Splunk Enterprise, if it exists.2. Install and initialize the instance.3. Join the SHC.

A. Increasing the search factor in the cluster.

B. Increasing the replication factor in the cluster.

C. Increasing the number of CPUs on the indexers in the cluster.

D. Increasing the number of search heads in the cluster.

A. A license warning is generated, and there is no impact to the license peer.

B. The license peer is placed in violation, and search is blocked.

C. What happens depends on license type.

D. The license peer is placed in violation, and a warning is generated.

A. ITSI requires a dedicated deployment server.

B. Depending on the Key Performance Indicators that are being tracked, additional infrastructure may be needed.

C. ITSI in a Splunk deployment does not require additional hardware resources.

D. The amount of users using ITSI will not impact performance.

A. Disables search site affinity.

B. Sets all members to dynamic captaincy.

C. Enables multisite search artifact replication.

D. Enables automatic search site affinity discovery.