An administrator wants to verify that a deployment server successfully pushed an updated app to all clients in a specific client class. Which method provides the most direct confirmation?

Check the deployment server's splunkd.log for 'Deployment app installed' messages for each client.

Review the clients' local apps directory to see if the app files exist.

Check the serverclass.conf for the correct app association.

Verify the clients are connected to the deployment server in the UI.

A company has a universal forwarder sending data to two indexers with auto load balancing. The forwarder's outputs.conf has both indexers listed. Recently, one indexer was decommissioned, but the forwarder still tries to connect to it. The forwarder's splunkd.log shows repeated connection timeouts to the decommissioned indexer. Data is still being sent to the remaining indexer, but the forwarder's queue is growing. What is the best action to resolve the issue and prevent data loss?

Add a third indexer to balance the load.

Increase the forwarder's output queue size to accommodate the delayed data.

Leave the configuration as is; the forwarder will eventually stop trying.

Remove the decommissioned indexer from outputs.conf and restart the forwarder.

A deployment client cannot connect to the deployment server. Which of the following is a common cause of this issue?

The client is not in the same domain as the server.

The client's deploymentclient.conf has the wrong server address.

The deployment server is not running.

The client's firewall is blocking outbound traffic on port 8089.

A deployment server is pushing an app to a client class, but the clients are receiving an older version of the app. The app's directory on the deployment server contains the new version. What is the most likely cause?

The clients have a local copy of the app that overrides the deployed version.

The deployment server is not restarting after app changes.

The deployment server's splunkd.log shows an error during deployment.

The client class is not matching the clients.

A deployment client is receiving an older version of an app than expected. What is a common cause of this issue?

The server class is configured to deploy the app only to certain clients.

The client's deploymentclient.conf has a different server address.

The app package on the deployment server is outdated.

The client's local app is newer than the deployed version.

SplunkEnterprise Certified Architect

Domain 6Objective 4

Forwarding and Deployment SPLK-2002 Practice Questions (Page 4)

Part of the Troubleshooting domain, which makes up ~14% of our current practice bank. Splunk does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

6concepts

Questions 16–20

16application · medium
An administrator wants to verify that a deployment server successfully pushed an updated app to all clients in a specific client class. Which method provides the most direct confirmation?
Select an answer first
17expert · hard
A company has a universal forwarder sending data to two indexers with auto load balancing. The forwarder's outputs.conf has both indexers listed. Recently, one indexer was decommissioned, but the forwarder still tries to connect to it. The forwarder's splunkd.log shows repeated connection timeouts to the decommissioned indexer. Data is still being sent to the remaining indexer, but the forwarder's queue is growing. What is the best action to resolve the issue and prevent data loss?
Select an answer first
18foundation · medium
A deployment client cannot connect to the deployment server. Which of the following is a common cause of this issue?
Select an answer first
19application · medium
A deployment server is pushing an app to a client class, but the clients are receiving an older version of the app. The app's directory on the deployment server contains the new version. What is the most likely cause?
Select an answer first
20foundation · medium
A deployment client is receiving an older version of an app than expected. What is a common cause of this issue?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SPLK-2002

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “SPLK-2002” is a trademark of its owner, used for identification only.