SPLK-2002無料問題集「Splunk Enterprise Certified Architect」

質問 1

Stakeholders have identified high availability for searchable data as their top priority. Which of the following best addresses this requirement?

（A）Increasing the number of CPUs on the indexers in the cluster.

（B）Increasing the search factor in the cluster.

（C）Increasing the number of search heads in the cluster.

（D）Increasing the replication factor in the cluster.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

If .delta replication fails during knowledge bundle replication, what is the fall-back method for Splunk?

（A）.Restart splunkd.

（B）.delta replication.

（C）.bundle replication.

（D）Restart mongod.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Users are asking the Splunk administrator to thaw recently-frozen buckets very frequently. What could the Splunk administrator do to reduce the need to thaw buckets?

（A）Change f rozenTimePeriodlnSecs to a larger value.

（B）Change coldToFrozenDir to a different location.

（C）Change maxTotalDataSizeMB to a smaller value.

（D）Change maxHotSpanSecs to a larger value.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

A customer plans to ingest 600 GB of data per day into Splunk. They will have six concurrent users, and they also want high data availability and high search performance. The customer is concerned about cost and wants to spend the minimum amount on the hardware for Splunk. How many indexers are recommended for this deployment?

（A）Two indexers not in a cluster, assuming users run many long searches.

（B）Two indexers clustered, assuming a high volume of saved/scheduled searches.

（C）Three indexers not in a cluster, assuming a long data retention period.

（D）Two indexers clustered, assuming high availability is the greatest priority.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

In search head clustering, which of the following methods can you use to transfer captaincy to a different member? (Select all that apply.)

（A）Use the Monitoring Console.

（B）Use the Search Head Clustering settings menu from Splunk Web on any member.

（C）Run the splunk transfer shcluster-captain command from the current captain.

（D）Run the splunk transfer shcluster-captain command from the member you would like to become the captain.

正解：B、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

The master node distributes configuration bundles to peer nodes. Which directory peer nodes receive the bundles?

（A）apps

（B）slave-apps

（C）deployment-apps

（D）master-apps

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

Following Splunk recommendations, where could the Monitoring Console (MC) be installed in a distributed deployment with an indexer cluster, a search head cluster, and 1000 forwarders?

（A）On a search head in the cluster.

（B）On the deployment server.

（C）On a search peer in the cluster.

（D）On the search head cluster deployer.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

Which of the following commands is used to clear the KV store?

（A）splunk reinitialize kvstore

（B）splunk clear kvstore

（C）splunk clean kvstore

（D）splunk delete kvstore

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

Splunk Enterprise platform instrumentation refers to data that the Splunk Enterprise deployment logs in the
_introspection index. Which of the following logs are included in this index? (Select all that apply.)

（A）resource_usage.log

（B）metrics.log

（C）disk_objects.log

（D）audit.log

正解：A、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 10

Which search head cluster component is responsible for pushing knowledge bundles to search peers, replicating configuration changes to search head cluster members, and scheduling jobs across the search head cluster?

（A）Deployment server

（B）Master

（C）Captain

（D）Deployer

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

SPLK-2002 無料問題集「Splunk Enterprise Certified Architect」

弊社を連絡する

関連リンク

トップ試験