SPLK-2002 practice questions 41–50

1. Question 41 · 167 in bank

   What is a recommended way to improve search performance?

   • ALeverage the NOT expression to limit returned results.
   • BFilter as much as possible in the initial search.
   • CUse the shortest query possible.
   • DUse non-streaming commands as early as possible.

   Show answer

   Answer: B

   Next question

2. Question 42 · 167 in bank

   Which instance can not share functionality with the deployer?

   • ALicense master
   • BMonitoring Console (MC)
   • CMaster node
   • DSearch head cluster member

   Show answer

   Answer: D

   Next question

3. Question 43 · 167 in bank

   A three-node search head cluster is skipping a large number of searches across time. What should be done to increase scheduled search capacity on the search head cluster?

   • ACreate a job server on the cluster.
   • BAdd another search head to the cluster.
   • Cserver.conf captain_is_adhoc_searchhead = true.
   • DChange limits.conf value for max_searches_per_cpu to a higher value.

   Show answer

   Answer: B

   Next question

4. Question 44 · 167 in bank

   If a license peer cannot communicate to a license manager for 72 hours or more, what will happen?

   • AThe license peer is placed in violation, and a warning is generated.
   • BA license warning is generated, and there is no impact to the license peer.
   • CThe license peer is placed in violation, and search is blocked.
   • DWhat happens depends on license type.

   Show answer

   Answer: C

   Next question

5. Question 45 · 167 in bank

   The frequency in which a deployment client contacts the deployment server is controlled by what?

   • Apolling_interval attribute in outputs.conf
   • BphoneHomeIntervalInSecs attribute in outputs.conf
   • Cpolling_interval attribute in deploymentclient.conf
   • DphoneHomeIntervalInSecs attribute in deploymentclient.conf

   Show answer

   Answer: D

   Next question

6. Question 46 · 167 in bank

   Which of the following is a benefit of using SmartStore?

   • AAutomatic selection of replication and search factors.
   • BSeparating storage from compute.
   • CCluster Manager is no longer required.
   • DKnowledge Object replication.

   Show answer

   Answer: B

   Next question

7. Question 47 · 167 in bank

   To activate replication for an index in an indexer cluster, what attribute must be configured in indexes.conf on all peer nodes?

   • ArepFactor = 0
   • Breplicate = 0
   • CrepFactor = auto
   • Dreplicate = auto

   Show answer

   Answer: C

   Next question

8. Question 48 · 167 in bank

   When implementing KV Store Collections in a search head cluster, which of the following considerations is true?

   • AThe KV Store Collection will not allow for changes to content if there are more than 50 search heads in the cluster.
   • BThe search head cluster captain is also the KV Store Primary when collection content changes.
   • CThe KV Store Primary coordinates with the search head cluster captain when collection content changes.
   • DEach search head in the cluster independently updates its KV store collection when collection content changes.

   Show answer

   Answer: C

   Next question

9. Question 49 · 167 in bank

   Select 3

   Which of the following clarification steps should be taken if apps are not appearing on a deployment client? (Select all that apply.)

   • ACheck serverclass.conf of the deployment server.
   • BCheck deploymentclient.conf of the deployment client.
   • CCheck the content of SPLUNK_HOME/etc/apps of the deployment server.
   • DSearch for relevant events in splunkd.log of the deployment server.

   Show answer

   Answer: ABD

   Next question

10. Question 50 · 167 in bank

    Which of the following security options must be explicitly configured (i.e. which options are not enabled by default)?

    • AData encryption between Splunk Web and splunkd.
    • BCertificate authentication between forwarders and indexers.
    • CCertificate authentication between Splunk Web and search head.
    • DData encryption for distributed search between search heads and indexers.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SPLK-2002 practice, question 41. 167 questions available.