Managing Forwarders Using Deployment Apps CLOUD-CERTIFIED-ADMIN Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which log file on the deployment server would you examine to troubleshoot deployment issues?

   • Asearch.log
   • Bmetrics.log
   • Csplunkd.log
   • Daudit.log
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A forwarder is reporting an error in its splunkd.log: 'Deployment app 'myapp' failed to install: file not found'. The app directory exists on the deployment server. What is the most likely cause?

   • AThe app directory contains a file that is referenced in a configuration but is missing from the package.
   • BThe app name in the server class does not match the directory name.
   • CThe forwarder does not have permission to write to the apps directory.
   • DThe deployment server is not running.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   An admin updates a deployment app by modifying the inputs.conf in the app's 'default' directory on the deployment server. The forwarders that receive this app are not picking up the changes. What is the most likely reason?

   • AThe forwarders are not checking in with the deployment server frequently enough.
   • BThe admin edited the app on the deployment server but did not increment the app version.
   • CThe forwarders have already applied the app and will not re-apply it unless the app is removed and re-added.
   • DThe admin modified the app on the deployment server but the forwarders are pointing to a different deployment server.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the primary purpose of a deployment app in Splunk forwarder management?

   • ATo store indexed data on the forwarder before it is sent to the indexer
   • BTo package configuration files and content that the deployment server distributes to forwarders
   • CTo provide a user interface for managing forwarders from the Splunk web console
   • DTo replace the need for a deployment server by embedding configuration directly in the forwarder's default config
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   An admin needs to update a deployment app that is used by 100 forwarders. The update involves a critical change to the outputs.conf. The admin wants to ensure that the update is applied gradually to avoid overwhelming the indexers. What is the best approach?

   • ACreate a new server class with a subset of forwarders, assign the updated app to it, and gradually move forwarders to the new class.
   • BUse the deployment server's 'rolling restart' feature to stagger the update.
   • CUpdate the app on the deployment server and let all forwarders receive it at once.
   • DSchedule the update during off-peak hours.
   Reveal Solution Discussion Select an answer first