An organization needs to send Windows event logs from 50 servers to Splunk Cloud. The servers are in a different AWS region than the Splunk Cloud stack. What is the recommended way to configure the forwarders?

Install a universal forwarder on each server and configure inputs.conf to monitor the Windows Event Log.

Use a syslog server to collect the logs and forward them to Splunk Cloud.

Configure the servers to send logs to an S3 bucket and use an add-on to ingest them.

Install a heavy forwarder on each server to parse the event logs before sending.

Which of the following is a key responsibility of a Splunk Cloud administrator in the context of forwarder management?

Performing data analysis and generating reports

Writing all search queries for end users

Managing the physical hardware of the forwarders

Ensuring forwarders are correctly configured to send data to the Splunk Cloud deployment

A company has a forwarder that is sending data to Splunk Cloud, but they want to ensure that the forwarder is always running and restarts automatically if it fails. What should they do?

Set up a scheduled task to restart the forwarder daily.

Use a cron job to check and restart the forwarder.

Run the forwarder in the foreground and rely on a supervisor.

Configure the forwarder as a service with automatic restart.

A Splunk Cloud admin wants to manage the configuration of 500 forwarders centrally. They want to push changes to inputs and outputs without logging into each machine. What should they use?

Splunk Cloud's monitoring console

Manual SSH and edit config files

SplunkCloud Certified Admin

Domain 6Objective 2

Explain the Use of Forwarder Management CLOUD-CERTIFIED-ADMIN Practice Questions (Page 1)

Part of the Forwarder Management domain, which accounts for 5% of the CLOUD-CERTIFIED-ADMIN exam. Splunk does not publish an official question count, but from its 75-minute exam (~30–50 total, ~2–3 in this domain), expect 1–1 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

4concepts

5%of the exam

Questions 1–5

1application · medium
A Splunk Cloud admin is planning to onboard a new data source from a Linux server. The server is in a remote office with limited bandwidth. What type of forwarder should they install?
Select an answer first
2application · medium
An organization needs to send Windows event logs from 50 servers to Splunk Cloud. The servers are in a different AWS region than the Splunk Cloud stack. What is the recommended way to configure the forwarders?
Select an answer first
3foundation · easy
Which of the following is a key responsibility of a Splunk Cloud administrator in the context of forwarder management?
Select an answer first
4application · medium
A company has a forwarder that is sending data to Splunk Cloud, but they want to ensure that the forwarder is always running and restarts automatically if it fails. What should they do?
Select an answer first
5application · medium
A Splunk Cloud admin wants to manage the configuration of 500 forwarders centrally. They want to push changes to inputs and outputs without logging into each machine. What should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CLOUD-CERTIFIED-ADMIN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “CLOUD-CERTIFIED-ADMIN” is a trademark of its owner, used for identification only.