Question 1

Which tool(s) can be leveraged to diagnose connection problems between an indexer and forwarder? (Select

all that apply.)

Options :

A : telnet

B : tcpdump

C :

splunk btool

D :

splunk btprobe

Answer: B,C

Question 2

Stakeholders have identified high availability for searchable data as their top priority. Which of the following best addresses this requirement?

Options :

A : Increasing the search factor in the cluster.

B : Increasing the replication factor in the cluster.

C : Increasing the number of search heads in the cluster.

D : Increasing the number of CPUs on the indexers in the cluster.

Answer: B

Question 3

Which of the following configuration attributes must be set in server, conf on the cluster manager in a single-site indexer cluster?

Options :

A : master_uri

B : site

C : replication_factor

D : site_replication_factor

Answer: A

Question 4

A three-node search head cluster is skipping a large number of searches across time. What should be done to

increase scheduled search capacity on the search head cluster?

Options :

A : Create a job server on the cluster.

B : Add another search head to the cluster.

C : server.conf captain_is_adhoc_searchhead = true.

D : Change limits.conf value for max_searches_per_cpu to a higher value.

Answer: D

Question 5

What does setting site=site0 on all Search Head Cluster members do in a multi-site indexer cluster?

Options :

A : Disables search site affinity.

B : Sets all members to dynamic captaincy.

C : Enables multisite search artifact replication.

D : Enables automatic search site affinity discovery.

Answer: A

Higher Test Marks with Free Online SPLK-2002 Exam Practice