Configure Forwarders to Be Deployment Clients CLOUD-CERTIFIED-ADMIN Practice Questions (Page 4)

Questions 16–19

1. 16foundation · easy

   What happens to an app on a deployment client when the app is removed from the server class on the deployment server?

   • AThe app remains on the client and continues to receive updates from the deployment server.
   • BThe app remains on the client but is disabled and no longer receives updates.
   • CThe app is deleted from the client during the next deployment client check-in.
   • DThe client stops checking in with the deployment server until the app is re-added.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which Splunk command or view is used on a deployment server to monitor the status of deployment clients?

   • AThe 'show deployment' command in the Splunk CLI, which outputs client status.
   • BThe 'splunk list deploy-clients' CLI command, which displays client status in the terminal.
   • CThe Deployment Clients page in Splunk Web, which shows the last check-in time and status of each client.
   • DThe 'deploymentclient.log' file on the deployment server, which records all client check-ins.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A Splunk admin has a deployment server with three server classes: 'web_forwarders', 'db_forwarders', and 'all_forwarders'. The 'all_forwarders' class contains a base app that all forwarders should have. The 'web_forwarders' class contains a web-specific app. A new forwarder is added to the 'web_forwarders' class. What apps will this forwarder receive?

   • AThe base app from 'all_forwarders' only, because server classes are hierarchical.
   • BBoth the base app from 'all_forwarders' and the web-specific app from 'web_forwarders'.
   • COnly the web-specific app from the 'web_forwarders' class.
   • DNo apps, because the forwarder must be explicitly assigned to the 'all_forwarders' class.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A Splunk admin notices that a subset of universal forwarders is not receiving a newly deployed app from the deployment server. The forwarders are configured as deployment clients and were working previously. The admin checks the deployment server's UI and sees the forwarders listed, but their status shows 'Not Connected'. What is the most likely cause of this issue?

   • AThe app is not in the correct server class.
   • BThe forwarders are unable to reach the deployment server on the management port (8089).
   • CThe forwarders have the deployment client disabled in deploymentclient.conf.
   • DThe forwarders are sending data to the wrong indexer.
   Reveal Solution Discussion Select an answer first