SPLK-1003 Practice Test

SPLK-1003 Practice Test practice questions, page 2 of 9, with answer review and explanations.

Question 6

Which parent directory contains the configuration files in Splunk?

  1. $SPLUNK_HOME/etc
  2. $SPLUNK_HOME/var
  3. $SPLUNK_HOME/conf
  4. $SPLUNK_HOME/default

Question 7

Which forwarder type can parse data prior to forwarding?

  1. Universal forwarder
  2. Heaviest forwarder
  3. Hyper forwarder
  4. Heavy forwarder

Question 8

Which Splunk component consolidates the individual results and prepares reports in a distributed environment?

  1. Indexers
  2. Forwarder
  3. Search head
  4. Search peers

Question 9

Which Splunk component distributes apps and certain other configuration updates to search head cluster members?

  1. Deployer
  2. Cluster master
  3. Deployment server
  4. Search head cluster master

Question 10

Where should apps be located on the deployment server that the clients pull from?

  1. $SPLUNK_HOME/etc/apps
  2. $SPLUNK_HOME/etc/search
  3. $SPLUNK_HOME/etc/master-apps
  4. $SPLUNK_HOME/etc/deployment-apps