SPLK-1003無料問題集「Splunk Enterprise Certified Admin」

質問 1

What conf file needs to be edited to set up distributed search groups?

（A）props.conf

（B）distibutedsearch.conf

（C）search.conf

（D）distsearch.conf

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

After an Enterprise Trial license expires, it will automatically convert to a Free license. How many days is an Enterprise Trial license valid before this conversion occurs?

（A）7 days

（B）90 days

（C）14 days

（D）60 days

正解：D 解答を投票する

質問 3

All search-time field extractions should be specified on which Splunk component?

（A）Deployment server

（B）Universal forwarder

（C）Search head

（D）Indexer

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Which of the following enables compression for universal forwarders in outputs. conf ?

（A）

（B）

（C）

（D）

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

When running a real-time search, search results are pulled from which Splunk component?

（A）Search heads

（B）Search peers

（C）Heavy forwarders

（D）Heavy forwarders and search peers

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

What is the difference between the two wildcards ... and - for the monitor stanza in inputs, conf?

（A）... is not supported in monitor stanzas

（B）* matches anything in that specific directory path segment, whereas ... recurses through subdirectories as well.

（C）There is no difference, they are interchangable and match anything beyond directory boundaries.

（D）... matches anything in that specific directory path segment, whereas - recurses through subdirectories as well.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

During search time, which directory of configuration files has the highest precedence?

（A）$SPLUNK HCME/etc/users/admin/local

（B）$SPLUNK_KCME/etc/system/default

（C）$SFLUNK_KOME/etc/system/local

（D）$SPLUNK_HCME/etc/apps/app1/local

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

What are the values for host and index for [stanza1] used by Splunk during index time, given the following configuration files?

（A）host=server1
index=unixinfo

（B）host=searchsvr1
index=searchinfo

（C）host=unixsvr1
index=unixinfo

（D）host=server1
index=searchinfo

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

This file has been manually created on a universal forwarder

A new Splunk admin comes in and connects the universal forwarders to a deployment server and deploys the same app with a new

Which file is now monitored?

（A）none of the above

（B）/var/log/maillog and /var/log/messages

（C）/var/log/maillog

（D）/var/log/messages

正解：C 解答を投票する

質問 10

A company moves to a distributed architecture to meet the growing demand for the use of Splunk. What parameter can be configured to enable automatic load balancing in the Universal Forwarder to send data to the indexers?

（A）Set the stanza to have a server value equal to a comma-separated list of IP addresses and indexer ports for each of the indexers in the environment.

（B）Splunk does not do load balancing and requires a hardware load balancer to balance traffic across the indexers.

（C）Configure the outputs . conf file to point to any server in the indexing tier and Splunk will configure the data to be sent to all of the indexers.

（D）Create one outputs . conf file for each of the server addresses in the indexing tier.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

SPLK-1003 無料問題集「Splunk Enterprise Certified Admin」

弊社を連絡する

関連リンク

トップ試験