Forwarder Management SPLK-1003 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · medium

   Which Splunk component acts as the central management point for distributing configurations and apps to forwarders?

   • AIndexer
   • BSearch head
   • CForwarder
   • DDeployment server
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A company has a deployment server that manages forwarders for different environments: production, staging, and development. The administrator needs to push a new configuration to the staging forwarders first for testing. After successful testing, the same configuration should be pushed to production. The configuration is stored in a deployment app. What is the best approach?

   • AUse a separate deployment server for staging and production to isolate the deployments.
   • BManually copy the configuration to the staging forwarders, and after testing, use the deployment server for production.
   • CCreate two client groups (staging and production), assign the app to the staging group first, and after testing, assign the app to the production group.
   • DCreate a single client group for all environments and push the app to all forwarders at once.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company has a deployment server managing forwarders for two departments: Sales and Engineering. The Sales forwarders need to monitor a specific application log, while Engineering forwarders need to monitor system logs. The administrator has created a deployment app for each department. What is the correct way to ensure each department's forwarders receive the correct app?

   • ACreate a client group for each department, assign the appropriate deployment app to each group, and set the client name on each forwarder to match the group.
   • BPlace the deployment apps in the deployment server's apps directory and they will automatically be sent to all forwarders.
   • CAssign the deployment apps directly to each forwarder by editing the forwarder's inputs.conf.
   • DCreate a single client group for all forwarders and assign both deployment apps to that group.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A forwarder is configured as a deployment client, but it is not receiving any apps from the deployment server. The administrator has verified that the deployment server is running and the client name is correct. What is a likely cause of this issue?

   • AThe deployment server's apps are not in the correct directory.
   • BThe forwarder's deploymentclient.conf has the wrong targetUri, so it cannot connect to the deployment server.
   • CThe forwarder's client name is not unique across the deployment server.
   • DThe forwarder's outputs.conf is missing the deployment server's address.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company has a mix of Windows and Linux forwarders. The administrator needs to push a Windows-specific configuration to only the Windows forwarders. What is the best way to achieve this using deployment management?

   • ACreate a client group for Windows forwarders, assign the Windows-specific app to that group, and set the client name on each Windows forwarder to match the group.
   • BCreate a deployment app with the Windows configuration and place it in the deployment server's apps directory; it will be pushed to all forwarders.
   • CConfigure the Windows forwarders to use a different deployment server than the Linux forwarders.
   • DUse the deployment server's UI to select individual forwarders and assign the app to each one.
   Reveal Solution Discussion Select an answer first