Question 1

The frequency in which a deployment client contacts the deployment server is controlled by what?

Options :

A : polling_interval attribute in outputs.conf

B : phoneHomeIntervalInSecs attribute in outputs.conf

C : polling_interval attribute in deploymentclient.conf

D : phoneHomeIntervalInSecs attribute in deploymentclient.conf

Answer: D

Question 2

A customer currently has many deployment clients being managed by a single, dedicated deployment server.

The customer plans to double the number of clients.

What could be done to minimize performance issues?

Options :

A : Modify deploymentclient. conf to change from a Pull to Push mechanism.

B : Reduce the number of apps in the Manager Node repository.

C : Increase the current deployment client phone home interval.

D : Decrease the current deployment client phone home interval.

Answer: C

Question 3

Configurations from the deployer are merged into which location on the search head cluster member?

Options :

A : SPLUNK_HOME/etc/system/local

B : SPLUNK_HOME/etc/apps/APP_HOME/local

C : SPLUNK_HOME/etc/apps/search/default

D : SPLUNK_HOME/etc/apps/APP_HOME/default

Answer: A

Question 4

As of Splunk 9.0, which index records changes to . conf files?

Options :

A : _configtracker

B : _introspection

C : _internal

D : _audit

Answer: A

Question 5

Which Splunk Enterprise offering has its own license?

Options :

A : Splunk Cloud Forwarder

B : Splunk Heavy Forwarder

C :

Splunk Universal Forwarder

D : Splunk Forwarder Management

Answer: C

Higher Test Marks with Free Online SPLK-2002 Exam Practice