SPLK-2002 Practice Test

SPLK-2002 Practice Test practice questions, page 6 of 7, with answer review and explanations.

Question 26

Which of the following security options must be explicitly configured (i.e. which options are not enabled by default)?

  1. Data encryption between Splunk Web and splunkd.
  2. Certificate authentication between forwarders and indexers.
  3. Certificate authentication between Splunk Web and search head.
  4. Data encryption for distributed search between search heads and indexers.

Question 27

Which of the following artifacts are included in a Splunk diag file? (Select all that apply.)

  1. OS settings.
  2. Internal logs.
  3. Customer data.
  4. Configuration files.

Question 28

Which command will permanently decommission a peer node operating in an indexer cluster?

  1. splunk stop -f
  2. splunk offline -f
  3. splunk offline --enforce-counts
  4. splunk decommission --enforce counts

Question 29

Which CLI command converts a Splunk instance to a license slave?

  1. splunk add licenses
  2. splunk list licenser-slaves
  3. splunk edit licenser-localslave
  4. splunk list licenser-localslave

Question 30

Splunk Enterprise platform instrumentation refers to data that the Splunk Enterprise deployment logs in the _introspection index. Which of the following logs are included in this index? (Select all that apply.)

  1. audit.log
  2. metrics.log
  3. disk_objects.log
  4. resource_usage.log