SPLK-2002 Free Practice Test

Which of the following should be included in a deployment plan?

1. A. Business continuity and disaster recovery plans.
2. B. Current logging details and data source inventory.
3. C. Current and future topology diagrams of the IT environment.
4. D. A comprehensive list of stakeholders, either direct or indirect.

Correct Answer: D

What does setting site=site0 on all Search Head Cluster members do in a multi-site indexer cluster?

1. A. Disables search site affinity.
2. B. Sets all members to dynamic captaincy.
3. C. Enables multisite search artifact replication.
4. D. Enables automatic search site affinity discovery.

Correct Answer: A

What is the minimum reference server specification for a Splunk indexer?

1. A. 12 CPU cores, 12GB RAM, 800 IOPS
2. B. 16 CPU cores, 16GB RAM, 800 IOPS
3. C. 24 CPU cores, 16GB RAM, 1200 IOPS
4. D. 28 CPU cores, 32GB RAM, 1200 IOPS

Correct Answer: A

Which of the following describe migration from single-site to multisite index replication?

1. A. A master node is required at each site.
2. B. Multisite policies apply to new data only.
3. C. Single-site buckets instantly receive the multisite policies.
4. D. Multisite total values should not exceed any single-site factors.

Correct Answer: D

Which of the following tasks should the architect perform when building a deployment plan? (Select all that apply.)

1. A. Use case checklist.
2. B. Install Splunk apps.
3. C. Inventory data sources.
4. D. Review network topology.

Correct Answer: D