最新的Splunk SPLK-2002免費考試真題

問題1

Which Splunk internal field can confirm duplicate event issues from failed file monitoring?

A. _indextime

B. _index_latest

C. latest

D. _time

正確答案: A

說明：（僅 Fast2test 成員可見）

問題2

Which of the following can a Splunk diag contain?

A. Search history, Splunk users and their roles, running processes, indexed data

B. Server specs, current open connections, internal Splunk log files, index listings

C. Splunk platform configuration details, Splunk users and their roles, current open connections, index listings

D. KV store listings, internal Splunk log files, search peer bundles listings, indexed data

正確答案: B

問題3

(A customer has a Splunk Enterprise deployment and wants to collect data from universal forwarders. What is the best step to secure log traffic?)

A. Ensure all forwarder traffic is routed through a web application firewall (WAF).

B. Create signed SSL certificates and use them to encrypt data between the forwarders and indexers.

C. Create signed SSL certificates and use them to encrypt data between the search heads and indexers.

D. Use the Splunk provided SSL certificates to encrypt data between the forwarders and indexers.

正確答案: B

說明：（僅 Fast2test 成員可見）

問題4

Which instance can not share functionality with the deployer?

A. Master node

B. Search head cluster member

C. Monitoring Console (MC)

D. License master

正確答案: D

說明：（僅 Fast2test 成員可見）

問題5

(A customer has converted a CSV lookup to a KV Store lookup. What must be done to make it available for an automatic lookup?)

A. Add the repFactor=true attribute in lookups.conf.

B. Add the replicate=true attribute in collections.conf.

C. Add the repFactor=true attribute in collections.conf.

D. Add the replicate=true attribute in lookups.conf.

正確答案: B

說明：（僅 Fast2test 成員可見）

問題6

Which Splunk internal index contains license-related events?

A. _internal

B. _audit

C. _introspection

D. _license

正確答案: A

說明：（僅 Fast2test 成員可見）

問題7

Which of the following use cases would be made possible by multi-site clustering? (select all that apply)

A. Greatly reduce WAN traffic by preferentially searching assigned site (search affinity).

B. Enable a forwarder to send data to multiple indexers.

C. Use blockchain technology to audit search activity from geographically dispersed data centers.

D. Seamlessly route searches to a redundant site in case of a site failure.

正確答案: A,D

說明：（僅 Fast2test 成員可見）

問題8

Which of the following is true for indexer cluster knowledge bundles?

A. app-name/default and app-name/local are pushed without change.

B. Only app-name/local is pushed.

C. Only app-name/default is pushed.

D. app-name/default and app-name/local are merged before pushing.

正確答案: D

說明：（僅 Fast2test 成員可見）

問題9

(When planning user management for a new Splunk deployment, which task can be disregarded?)

A. Determine the number of users present in Splunk log events.

B. Identify users authenticating with Splunk using LDAP or SAML.

C. Identify users authenticating with Splunk native authentication.

D. Determine the capabilities users need within the Splunk environment.

正確答案: A

說明：（僅 Fast2test 成員可見）

問題10

Which of the following statements describe search head clustering? (Select all that apply.)

A. The deployer must have sufficient CPU and network resources to process service requests and push configurations.

B. At least three search heads are needed.

C. A deployer is required.

D. Search heads must meet the high-performance reference server requirements.

正確答案: A,B,C

說明：（僅 Fast2test 成員可見）

最新的Splunk Enterprise Certified Architect - SPLK-2002免費考試真題

聯系我們

站內鏈接

最新更新