Download Splunk.SPLK-1003.BrainDumps.2019-09-16.28q.tqb
| Vendor: | Splunk |
| Exam Code: | SPLK-1003 |
| Exam Name: | Splunk Enterprise Certified Admin |
| Date: | Sep 16, 2019 |
| File Size: | 102 KB |
Demo Questions
Question 1
Which parent directory contains the configuration files in Splunk?
- $SPLUNK_HOME/etc
- $SPLUNK_HOME/var
- $SPLUNK_HOME/conf
- $SPLUNK_HOME/default
Correct answer: A
Explanation:
Reference: https://docs.splunk.com/Documentation/Splunk/7.3.1/Admin/Configurationfiledirectories Reference: https://docs.splunk.com/Documentation/Splunk/7.3.1/Admin/Configurationfiledirectories
Question 2
Which forwarder type can parse data prior to forwarding?
- Universal forwarder
- Heaviest forwarder
- Hyper forwarder
- Heavy forwarder
Correct answer: D
Explanation:
Reference: https://docs.splunk.com/Documentation/Splunk/7.3.1/Forwarding/Typesofforwarders Reference: https://docs.splunk.com/Documentation/Splunk/7.3.1/Forwarding/Typesofforwarders
Question 3
Which Splunk component consolidates the individual results and prepares reports in a distributed environment?
- Indexers
- Forwarder
- Search head
- Search peers
Correct answer: A
Explanation:
Reference: https://docs.splunk.com/Documentation/Splunk/7.3.1/Indexer/Advancedindexingstrategy Reference: https://docs.splunk.com/Documentation/Splunk/7.3.1/Indexer/Advancedindexingstrategy
