What is a disadvantage of manually installing an app on each Splunk instance?

It is the only method that works for forwarders

It is time-consuming and prone to inconsistencies across instances

It requires a deployment server to be set up first

It does not allow the app to be used at all

A Splunk consultant is preparing to distribute a custom alert action add-on to 200 forwarders. The add-on contains only Python scripts, alert action configuration, and supporting libraries. The team wants to manage updates centrally without touching each forwarder manually. What should the consultant recommend?

Place the add-on in the $SPLUNK_HOME/etc/system/local directory on each forwarder.

Use a package manager like YUM to install the add-on on each forwarder.

Package the add-on as a deployment app and push it from a deployment server to the forwarder's apps directory.

Manually install the add-on on each forwarder using the Splunk Web interface.

A Splunk environment has a mix of forwarders and search heads. The consultant needs to deploy a new app to all forwarders but not to the search heads. The forwarders are already configured to receive apps from a deployment server. What is the most efficient way to accomplish this?

Use a package manager on the forwarders to install the app, and skip the search heads.

Manually install the app on each forwarder and search head, then remove it from the search heads.

Create a server class containing only the forwarders and associate the app with that server class on the deployment server.

Place the app in the deployment server's default app directory so all clients receive it.

A consultant is creating a deployment app that will be updated frequently. The team wants to track changes and roll back to previous versions if needed. What is the best practice for managing the app's versions?

Use a version control system like Git to track changes and tag releases.

Manually document changes in a text file within the app.

Rely on the deployment server's built-in version history.

Keep multiple copies of the app directory with different names.

SplunkCore Certified Consultant

Domain 7Objective 1

Describe a Deployment App CORE-CERTIFIED-CONSULTANT Practice Questions (Page 1)

Part of the Configuration Management domain, which accounts for 8% of the CORE-CERTIFIED-CONSULTANT exam. Splunk does not publish an official question count, but from its 120-minute exam (~50–80 total, ~4–6 in this domain), expect 1–2 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

6concepts

8%of the exam

Questions 1–5

1foundation · easy
What is a disadvantage of manually installing an app on each Splunk instance?
Select an answer first
2application · medium
A Splunk consultant is preparing to distribute a custom alert action add-on to 200 forwarders. The add-on contains only Python scripts, alert action configuration, and supporting libraries. The team wants to manage updates centrally without touching each forwarder manually. What should the consultant recommend?
Select an answer first
3application · medium
A Splunk environment has a mix of forwarders and search heads. The consultant needs to deploy a new app to all forwarders but not to the search heads. The forwarders are already configured to receive apps from a deployment server. What is the most efficient way to accomplish this?
Select an answer first
4application · medium
A consultant is creating a deployment app that will be updated frequently. The team wants to track changes and roll back to previous versions if needed. What is the best practice for managing the app's versions?
Select an answer first
5application · medium
A deployment app is being created to collect logs from a network device using a specific port. The consultant needs to ensure the app includes the necessary configuration to define this data input. Which configuration file should be included in the app?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CORE-CERTIFIED-CONSULTANT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “CORE-CERTIFIED-CONSULTANT” is a trademark of its owner, used for identification only.

Describe a Deployment App CORE-CERTIFIED-CONSULTANT Practice Questions (Page 1)

Questions 1–5

What is a disadvantage of manually installing an app on each Splunk instance?

A Splunk environment has a mix of forwarders and search heads. The consultant needs to deploy a new app to all forwarders but not to the search heads. The forwarders are already configured to receive apps from a deployment server. What is the most efficient way to accomplish this?

A consultant is creating a deployment app that will be updated frequently. The team wants to track changes and roll back to previous versions if needed. What is the best practice for managing the app's versions?

A deployment app is being created to collect logs from a network device using a specific port. The consultant needs to ensure the app includes the necessary configuration to define this data input. Which configuration file should be included in the app?

Keep studying — Configuration Management