A company has 200 Splunk Universal Forwarders that need a custom app with configuration files. The forwarders are split between two teams: the Linux team and the Windows team. Each team requires different settings in the app's configuration. The deployment server should push the app to all forwarders, but with team-specific configurations. What is the most efficient way to achieve this?

Create one server class for all forwarders and use deployment client overrides in each forwarder's inputs.conf to adjust settings.

Create one server class containing all forwarders and use a single app with settings that work for both teams.

Create two server classes, one for each team, and associate the app with both server classes, using separate app directories for each team's settings.

Create two separate deployment servers, one for each team, and configure each forwarder to point to the appropriate server.

What is the primary mechanism for distributing configuration updates to deployment clients?

The clients pull updates from the deployment server at regular intervals

Updates are distributed via a shared network filesystem

The deployment server pushes updates to clients in real time

Updates are sent via email to administrators who apply them manually

A deployment server is experiencing high CPU usage during peak hours. The administrator suspects that many clients are checking in simultaneously. What is the most effective way to reduce the load on the deployment server?

Reduce the number of server classes to simplify the deployment server's processing.

Increase the phonehome interval on all clients to reduce the frequency of check-ins.

Stagger the phonehome intervals across different client groups to distribute check-ins over time.

Disable the deployment server during peak hours.

SplunkCore Certified Consultant

Domain 7Objective 3

Describe Deployment System Configuration CORE-CERTIFIED-CONSULTANT Practice Questions (Page 1)

Part of the Configuration Management domain, which accounts for 8% of the CORE-CERTIFIED-CONSULTANT exam. Splunk does not publish an official question count, but from its 120-minute exam (~50–80 total, ~4–6 in this domain), expect 1–2 from this objective — we provide 11 practice questions to prepare you well beyond it. (estimate)

11questions here

3free pages

4concepts

8%of the exam

Questions 1–5

1application · medium
A company has 200 Splunk Universal Forwarders that need a custom app with configuration files. The forwarders are split between two teams: the Linux team and the Windows team. Each team requires different settings in the app's configuration. The deployment server should push the app to all forwarders, but with team-specific configurations. What is the most efficient way to achieve this?
Select an answer first
2foundation · easy
What is the primary mechanism for distributing configuration updates to deployment clients?
Select an answer first
3foundation · easy
Which Splunk interface is used to manage deployment server settings such as enabling/disabling the server and specifying the listening port?
Select an answer first
4expert · hard
A deployment server is experiencing high CPU usage during peak hours. The administrator suspects that many clients are checking in simultaneously. What is the most effective way to reduce the load on the deployment server?
Select an answer first
5foundation · easy
Which component of a deployment server configuration defines a group of deployment clients that receive the same set of apps?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CORE-CERTIFIED-CONSULTANT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “CORE-CERTIFIED-CONSULTANT” is a trademark of its owner, used for identification only.

Describe Deployment System Configuration CORE-CERTIFIED-CONSULTANT Practice Questions (Page 1)

Questions 1–5

What is the primary mechanism for distributing configuration updates to deployment clients?

Which Splunk interface is used to manage deployment server settings such as enabling/disabling the server and specifying the listening port?

A deployment server is experiencing high CPU usage during peak hours. The administrator suspects that many clients are checking in simultaneously. What is the most effective way to reduce the load on the deployment server?

Which component of a deployment server configuration defines a group of deployment clients that receive the same set of apps?

Keep studying — Configuration Management