Free Splunk Enterprise Certified Architect Practice Questions

A.  

Setting the cluster search factor to N-1.

B.  

Increasing the number of buckets per index.

C.  

Decreasing the data model acceleration range.

D.  

Setting the cluster replication factor to N-1.

A.  

Indexer

B.  

Deployer

C.  

Master Node

D.  

Monitoring Console

A.  

Expected daily ingest volume, access controls, number of concurrent users

B.  

Number of installed apps, expected daily ingest volume, data retention time policies

C.  

Data retention time policies, number of installed apps, access controls

D.  

Expected daily ingest volumes, data retention time policies, access controls

A.  

Increase the default value of sessionTimeout in server, conf.

B.  

Increase the default limit for maxKBps in limits.conf.

C.  

Decrease the value of forceTimebasedAutoLB in outputs. conf.

D.  

Decrease the default value of phoneHomelntervallnSecs in deploymentclient .conf.

A.  

Index files (*. tsidx files).

B.  

Bloom filters (bloomfilter files).

C.  

Index source metadata (sources.data files).

D.  

Index sourcetype metadata (SourceTypes. data files).

A.  

Indexers

B.  

Forwarders

C.  

Search head

D.  

Cluster master

A.  

site_mappings

B.  

available_sites

C.  

site_search_factor

D.  

site_replication_factor

A.  

replication_factor = 2search_factor = 2

B.  

replication_factor = 2search factor = 3

C.  

replication_factor = 3search_factor = 2

D.  

replication_factor = 3search factor = 3

A.  

etc/slave-apps//default

B.  

etc/deploy-apps//default

C.  

etc/apps//default

D.  

etc/shcluster//default

A.  

index=_audit component=DC* host= | stats count by message

B.  

index=_audit component=DC* host= | stats count by message

C.  

index=_internal component= DC* host= | stats count by message

D.  

index=_internal component=DS* host= | stats count by message