SPLK-2002 無料問題集「Splunk Enterprise Certified Architect」

（A）Manages alert action suppressions (throttling).

（B）Is the job scheduler for the entire SHC.

（C）Synchronizes the member list with the KV store primary.

（D）Replicates the SHC's knowledge bundle to the search peers.

（A）2 search heads, 1 deployer, 2 indexers

（B）3 search heads, 1 deployer, 3 indexers

（C）2 search heads, 1 deployer, 3 indexers

（D）1 search head, 1 deployer, 3 indexers

（A）The local folder is copied to the local folder on the search heads.

（B）The local folder is ignored and only the default folder is copied to the search heads.

（C）Only certain . conf files in the local folder are deployed to the search heads.

（D）The local folder is merged into the default folder and deployed to the search heads.

（A）Two search heads, one for ITSI and one for ES.

（B）Two search head clusters, one for ITSI and one for ES.

（C）One search head cluster with both ITSI and ES installed.

（D）One search head with both ITSI and ES installed.

（A）replication_factor = 3search_factor = 2

（B）replication_factor = 2search_factor = 2

（C）replication_factor = 3search factor = 3

（D）replication_factor = 2search factor = 3

（A）Decrease latency between search heads.

（B）Add faster storage to the search heads to improve artifact replication.

（C）Increase the size of the Operations Log.

（D）Add indexer CPU and memory to decrease search latency.

（A）System local directory.

（B）App default directories, in ASCII order.

（C）App local directories, in ASCII order.

（D）System default directory.

（A）Events are not being sorted in reverse chronological order.

（B）Different users are seeing different extracted fields from the same search.

（C）Error messages are appearing underneath the search bar in Splunk Web.

（D）Dashboard panels are showing "Waiting for queued job to start" on page load.

（A）10MB

（B）30MB

（C）20 MB

（D）25MB

（A）splunk_instrumentation.log

（B）crash-2022-05-13-ll:42:57.1og

（C）splunkd.log

（D）splunkd_stderr.log