[2026] Splunk Enterprise Certified Architect - SPLK-2002 무료 시험 문제

문제1

Which search will show all deployment client messages from the client (UF)?

A. index=_audit component=DC* host=<ds> | stats count by message

B. index=_audit component=DC* host=<uf> | stats count by message

C. index=_internal component=DS* host=<ds> | stats count by message

D. index=_internal component= DC* host=<uf> | stats count by message

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제2

Which of the following commands is used to clear the KV store?

A. splunk delete kvstore

B. splunk clean kvstore

C. splunk clear kvstore

D. splunk reinitialize kvstore

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제3

If there is a deployment server with many clients and one deployment client is not updating apps, which of the following should be done first?

A. Increase the amount of memory for the deployment server.

B. Choose a longer phone home interval for all of the deployment clients.

C. Choose a corrective action based on the splunkd. log of the deployment client.

D. Increase the number of CPU cores for the deployment server.

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제4

A Splunk environment collecting 10 TB of data per day has 50 indexers and 5 search heads. A single-site indexer cluster will be implemented. Which of the following is a best practice for added data resiliency?

A. Set the Replication Factor based on allowed search head failure.

B. Always use the default Replication Factor of 3.

C. Set the Replication Factor based on allowed indexer failure.

D. Set the Replication Factor to 49.

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제5

When designing the number and size of indexes, which of the following considerations should be applied?

A. Number of installed apps, expected daily ingest volume, data retention time policies

B. Expected daily ingest volume, access controls, number of concurrent users

C. Data retention time policies, number of installed apps, access controls

D. Expected daily ingest volumes, data retention time policies, access controls

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제6

In which phase of the Splunk Enterprise data pipeline are indexed extraction configurations processed?

A. Input

B. Parsing

C. Indexing

D. Search

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제7

Which of the following statements describe search head clustering? (Select all that apply.)

A. At least three search heads are needed.

B. A deployer is required.

C. Search heads must meet the high-performance reference server requirements.

D. The deployer must have sufficient CPU and network resources to process service requests and push configurations.

정답: A,B,D

설명: (Fast2test 회원만 볼 수 있음)

문제8

(Which index does Splunk use to record user activities?)

A. _telemetry

B. _internal

C. _kvstore

D. _audit

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제9

Which index-time props.conf attributes impact indexing performance? (Select all that apply.)

A. SHOULD_LINEMERGE

B. ANNOTATE_PUNCT

C. REPORT

D. LINE_BREAKER

정답: A,D

설명: (Fast2test 회원만 볼 수 있음)

문제10

(Which of the following is a benefit of using SmartStore?)

A. Automatic selection of replication and search factors.

B. Separating storage from compute.

C. Cluster Manager is no longer required.

D. Knowledge Object replication.

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제11

When using ingest-based licensing, what Splunk role requires the license manager to scale?

A. Deployment clients

B. Search peers

C. There are no roles that require the license manager to scale

D. Search heads

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제12

A Splunk deployment is being architected and the customer will be using Splunk Enterprise Security (ES) and Splunk IT Service Intelligence (ITSI). Through data onboarding and sizing, it is determined that over 200 discrete KPIs will be tracked by ITSI and 1TB of data per day by ES. What topology ensures a scalable and performant deployment?

A. One search head cluster with both ITSI and ES installed.

B. Two search head clusters, one for ITSI and one for ES.

C. Two search heads, one for ITSI and one for ES.

D. One search head with both ITSI and ES installed.

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제13

Which Splunk internal field can confirm duplicate event issues from failed file monitoring?

A. _time

B. latest

C. _index_latest

D. _indextime

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제14

Where does the Splunk deployer send apps by default?

A. etc/slave-apps/<app-name>/default

B. etc/shcluster/<app-name>/default

C. etc/apps/<appname>/default

D. etc/deploy-apps/<app-name>/default

정답: B

설명: (Fast2test 회원만 볼 수 있음)

Splunk Enterprise Certified Architect - SPLK-2002무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트