Which statement correctly describes a key difference between a universal forwarder and a heavy forwarder?

A universal forwarder can parse data, while a heavy forwarder cannot.

A heavy forwarder is lighter on system resources than a universal forwarder.

A universal forwarder can run searches, while a heavy forwarder cannot.

A heavy forwarder can index data locally, while a universal forwarder cannot.

An admin is configuring a universal forwarder to monitor a specific log file that is rotated daily. The admin wants to ensure that the forwarder continues to read the new file after rotation. What should be done?

Use a heavy forwarder to handle log rotation.

Configure the inputs.conf to monitor the directory containing the log file, not just the file.

Set the inputs.conf to use a wildcard for the file name.

Restart the forwarder every time the log rotates.

Which of the following is a required step when installing a universal forwarder that will send data to Splunk Cloud?

Install a heavy forwarder instead

Set the forwarder to receive data on port 9997

Configure the forwarder to use a deployment server

Enable SSL/TLS for secure communication

SplunkCloud Certified Admin

Domain 5Objective 3

Configure a Forwarder to Splunk Cloud CLOUD-CERTIFIED-ADMIN Practice Questions (Page 3)

Part of the Getting Data in Cloud domain, which accounts for 15% of the CLOUD-CERTIFIED-ADMIN exam. Splunk does not publish an official question count, but from its 75-minute exam (~30–50 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

8concepts

15%of the exam

Questions 11–15

11foundation · easy
Which statement correctly describes a key difference between a universal forwarder and a heavy forwarder?
Select an answer first
12foundation · easy
What is the default port used for secure forwarding (Splunk-to-Splunk) to Splunk Cloud?
Select an answer first
13application · medium
An admin is configuring a universal forwarder to monitor a specific log file that is rotated daily. The admin wants to ensure that the forwarder continues to read the new file after rotation. What should be done?
Select an answer first
14foundation · easy
Which Splunk command or view is used to monitor the health and data flow of forwarders in Splunk Cloud?
Select an answer first
15foundation · easy
Which of the following is a required step when installing a universal forwarder that will send data to Splunk Cloud?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CLOUD-CERTIFIED-ADMIN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “CLOUD-CERTIFIED-ADMIN” is a trademark of its owner, used for identification only.

Configure a Forwarder to Splunk Cloud CLOUD-CERTIFIED-ADMIN Practice Questions (Page 3)

Questions 11–15

Which statement correctly describes a key difference between a universal forwarder and a heavy forwarder?

What is the default port used for secure forwarding (Splunk-to-Splunk) to Splunk Cloud?

An admin is configuring a universal forwarder to monitor a specific log file that is rotated daily. The admin wants to ensure that the forwarder continues to read the new file after rotation. What should be done?

Which Splunk command or view is used to monitor the health and data flow of forwarders in Splunk Cloud?

Which of the following is a required step when installing a universal forwarder that will send data to Splunk Cloud?

Keep studying — Getting Data in Cloud