A company runs a Splunk Cloud deployment with two indexers. The forwarders are configured to send data to both indexers using auto load balancing. During a network outage on one indexer, the forwarder continues sending to the healthy indexer, but the queue fills up and data is dropped. The admin wants to ensure data is not lost during such outages. What should the admin configure?

Set the indexer discovery to manual and list only the healthy indexer in outputs.conf.

Increase the maxQueueSize in inputs.conf for the monitor input.

Set useACK to true in outputs.conf and increase the maxQueueSize for the forwarder's output queue.

Enable compression by setting compressed to true in outputs.conf.

In inputs.conf, what does a stanza like [monitor:///var/log/app.log] define?

A data input that monitors a file or directory for new data.

An output destination for forwarded data.

A network input that listens on a TCP port.

A script that runs periodically to generate data.

How does increasing the forwarder's buffer size (e.g., via maxQueueSize) affect data throughput?

It can improve throughput by allowing more data to be held during temporary network congestion.

It only affects the compression ratio.

It always decreases throughput because of increased memory usage.

It has no effect on throughput or reliability.

A forwarder is configured to send data to a Splunk Cloud indexer over SSL. The admin receives a certificate error in the forwarder's logs. The indexer's certificate is signed by an internal CA. What should the admin do to resolve the error?

Add the internal CA certificate to the forwarder's trust store and restart the forwarder.

Change the output group to use tcp:// instead of ssl://.

Set sslVerifyServerCert to false in outputs.conf.

Copy the indexer's certificate to the forwarder's etc/auth directory.

SplunkCloud Certified Admin

Domain 5Objective 5

Describe Optional Forwarder Settings CLOUD-CERTIFIED-ADMIN Practice Questions (Page 6)

Part of the Getting Data in Cloud domain, which accounts for 15% of the CLOUD-CERTIFIED-ADMIN exam. Splunk does not publish an official question count, but from its 75-minute exam (~30–50 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

8concepts

15%of the exam

Questions 26–29

26application · medium
A company runs a Splunk Cloud deployment with two indexers. The forwarders are configured to send data to both indexers using auto load balancing. During a network outage on one indexer, the forwarder continues sending to the healthy indexer, but the queue fills up and data is dropped. The admin wants to ensure data is not lost during such outages. What should the admin configure?
Select an answer first
27foundation · easy
In inputs.conf, what does a stanza like [monitor:///var/log/app.log] define?
Select an answer first
28foundation · easy
How does increasing the forwarder's buffer size (e.g., via maxQueueSize) affect data throughput?
Select an answer first
29expert · medium
A forwarder is configured to send data to a Splunk Cloud indexer over SSL. The admin receives a certificate error in the forwarder's logs. The indexer's certificate is signed by an internal CA. What should the admin do to resolve the error?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CLOUD-CERTIFIED-ADMIN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “CLOUD-CERTIFIED-ADMIN” is a trademark of its owner, used for identification only.

Describe Optional Forwarder Settings CLOUD-CERTIFIED-ADMIN Practice Questions (Page 6)

Questions 26–29

In inputs.conf, what does a stanza like [monitor:///var/log/app.log] define?

How does increasing the forwarder's buffer size (e.g., via maxQueueSize) affect data throughput?

A forwarder is configured to send data to a Splunk Cloud indexer over SSL. The admin receives a certificate error in the forwarder's logs. The indexer's certificate is signed by an internal CA. What should the admin do to resolve the error?

Keep studying — Getting Data in Cloud