A company has two Splunk Cloud indexers in different regions. The forwarders are configured to send data to both indexers with auto load balancing. The admin wants to ensure that if one region's indexer is down, the forwarder sends all data to the other region. The forwarder is currently using useACK=true. What else should the admin verify?

The output group uses ssl:// for both indexers.

The forwarder has compression enabled.

The output group lists both indexers and has autoLB=true.

The forwarder has a single output group with only one indexer.

A forwarder sends data to two indexers. The admin wants to ensure that if one indexer fails, the forwarder does not drop data while waiting for it to recover. What should the admin configure?

Configure the forwarder to send to only one indexer at a time.

Set the output group to use tcp:// instead of ssl://.

Disable compression to speed up the transfer.

Enable useACK and set the output queue to a larger size.

A forwarder is being configured to send data to a Splunk Cloud indexer over SSL. The admin has the indexer's certificate. What must the admin do on the forwarder to establish a trusted SSL connection?

Copy the indexer's certificate to the forwarder's etc/auth directory and set the protocol to tcp://.

Place the indexer's CA certificate in the forwarder's trust store and reference it in outputs.conf with ssl://.

Place the forwarder's own certificate in the indexer's trust store and use tcp://.

Set the sslVerifyServerCert to false in outputs.conf to bypass certificate validation.

What is the role of acknowledgment settings (useAck=true) in forwarder-to-indexer communication?

They ensure the indexer confirms receipt of data, allowing the forwarder to retry if needed.

They increase the queue size for buffering.

They encrypt data to protect confidentiality.

They compress data to reduce bandwidth.

SplunkCloud Certified Admin

Domain 5Objective 5

Describe Optional Forwarder Settings CLOUD-CERTIFIED-ADMIN Practice Questions (Page 5)

Part of the Getting Data in Cloud domain, which accounts for 15% of the CLOUD-CERTIFIED-ADMIN exam. Splunk does not publish an official question count, but from its 75-minute exam (~30–50 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

8concepts

15%of the exam

Questions 21–25

21expert · medium
A company has two Splunk Cloud indexers in different regions. The forwarders are configured to send data to both indexers with auto load balancing. The admin wants to ensure that if one region's indexer is down, the forwarder sends all data to the other region. The forwarder is currently using useACK=true. What else should the admin verify?
Select an answer first
22application · medium
A forwarder sends data to two indexers. The admin wants to ensure that if one indexer fails, the forwarder does not drop data while waiting for it to recover. What should the admin configure?
Select an answer first
23application · medium
A forwarder is being configured to send data to a Splunk Cloud indexer over SSL. The admin has the indexer's certificate. What must the admin do on the forwarder to establish a trusted SSL connection?
Select an answer first
24foundation · easy
What is the role of acknowledgment settings (useAck=true) in forwarder-to-indexer communication?
Select an answer first
25foundation · easy
Which configuration file on a universal forwarder defines which data sources are monitored and how they are read?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CLOUD-CERTIFIED-ADMIN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “CLOUD-CERTIFIED-ADMIN” is a trademark of its owner, used for identification only.

Describe Optional Forwarder Settings CLOUD-CERTIFIED-ADMIN Practice Questions (Page 5)

Questions 21–25

A forwarder sends data to two indexers. The admin wants to ensure that if one indexer fails, the forwarder does not drop data while waiting for it to recover. What should the admin configure?

A forwarder is being configured to send data to a Splunk Cloud indexer over SSL. The admin has the indexer's certificate. What must the admin do on the forwarder to establish a trusted SSL connection?

What is the role of acknowledgment settings (useAck=true) in forwarder-to-indexer communication?

Which configuration file on a universal forwarder defines which data sources are monitored and how they are read?

Keep studying — Getting Data in Cloud