Examine How the MC Uses the Server Roles and Groups CORE-CERTIFIED-CONSULTANT Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A Splunk consultant is working with a customer that has a distributed deployment with multiple search head clusters and indexer clusters. The customer wants to use the Monitoring Console to monitor all components, but they also want to restrict visibility for different teams: Team A should only see search head health, and Team B should only see indexer health. The consultant has already assigned server roles correctly. What is the best way to achieve this?

   • ACreate server groups for each team and assign the relevant components; then use MC views with group filters.
   • BUse role-based access control (RBAC) on the MC to restrict which views each team can access.
   • CAssign different server roles to components for each team.
   • DInstall separate MCs for each team and configure them with only the relevant components.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary purpose of the Monitoring Console's server role classification?

   • ATo control which users can access the Monitoring Console
   • BTo assign license usage quotas to different instances
   • CTo determine which apps are installed on each instance
   • DTo organize and display monitoring data based on the function each instance performs
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A Splunk consultant is helping a customer optimize their Monitoring Console setup. The customer has a large deployment with multiple indexer clusters and many forwarders. They want to reduce the noise in the 'Forwarders' view by grouping forwarders by their primary function (e.g., web servers, application servers, database servers). What is the best way to achieve this?

   • ACreate server groups for each function and assign the forwarders accordingly; use the group filter in the Forwarders view.
   • BAssign different server roles to forwarders based on function.
   • CUse the default Forwarders view and rely on the host name to identify function.
   • DInstall a separate MC for each function group.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A consultant is configuring the Monitoring Console for a customer with a complex deployment: two search head clusters (SHC1, SHC2) and two indexer clusters (IDXC1, IDXC2). The customer wants to see a dashboard that shows the health of each cluster separately, but also a combined view of all search heads and all indexers. What is the most efficient configuration?

   • AUse the default views and rely on the host name to identify clusters.
   • BAssign different server roles to each cluster so they appear in separate views.
   • CInstall a separate MC for each cluster and combine dashboards manually.
   • DCreate server groups for each cluster (SHC1, SHC2, IDXC1, IDXC2) and assign the members; use the default views for combined health.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Where in the Monitoring Console would an administrator configure server roles and groups?

   • AIn the Search app under the Administration tab
   • BIn the Settings menu under Monitoring Console
   • CIn the system settings of each individual Splunk instance
   • DIn the deployment server's serverclass.conf file
   Reveal Solution Discussion Select an answer first