Which of the following is a useful resource for gathering requirements for a Splunk deployment?

The Splunk community forum for jokes

Splunk documentation on capacity planning

A Splunk architect is planning a deployment with a daily ingest of 1 TB. They want to retain data for 1 year. They are considering using a single indexer with 20 TB of storage. What is the most important consideration?

The indexer will need to be upgraded to handle the ingest rate

The indexer will have too much storage

The indexer will have enough storage

The indexer will run out of storage before the retention period ends

A company is planning a Splunk deployment and has identified the following: 50 servers running Windows Server 2019, 10 Linux servers, and a mix of network devices. They expect to ingest 500 GB/day and need to retain data for 1 year. Which of the following is a key environmental characteristic that must be documented?

The number of employees in the company

Operating systems of the servers

What is the primary purpose of using a requirements gathering checklist in a Splunk deployment?

To replace the need for stakeholder interviews

To automate the installation of Splunk components

To provide a template for the final architecture diagram

To ensure all necessary information is collected without omissions

A Splunk architect is using a requirements gathering checklist to collect information. They have documented the number of users, daily ingest volume, and retention period. Which of the following items is also on the checklist and should be documented?

Network topology and firewall rules

The color of the server room walls

The brand of the coffee machine

SplunkEnterprise Certified Architect

Domain 1Objective 1

Gather Requirements SPLK-2002 Practice Questions (Page 4)

Part of the Requirements and Infrastructure Planning domain, which makes up ~12% of our current practice bank. Splunk does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–7 in this domain), expect 1–1 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

6concepts

Questions 16–20

16foundation · easy
Which of the following is a useful resource for gathering requirements for a Splunk deployment?
Select an answer first
17expert · hard
A Splunk architect is planning a deployment with a daily ingest of 1 TB. They want to retain data for 1 year. They are considering using a single indexer with 20 TB of storage. What is the most important consideration?
Select an answer first
18application · medium
A company is planning a Splunk deployment and has identified the following: 50 servers running Windows Server 2019, 10 Linux servers, and a mix of network devices. They expect to ingest 500 GB/day and need to retain data for 1 year. Which of the following is a key environmental characteristic that must be documented?
Select an answer first
19foundation · easy
What is the primary purpose of using a requirements gathering checklist in a Splunk deployment?
Select an answer first
20application · medium
A Splunk architect is using a requirements gathering checklist to collect information. They have documented the number of users, daily ingest volume, and retention period. Which of the following items is also on the checklist and should be documented?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SPLK-2002

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “SPLK-2002” is a trademark of its owner, used for identification only.