
SplunkEnterprise Certified Architect
Domain 2Objective 1
Identify Non-Smart Store Related Storage and Disk Usage Requirements SPLK-2002 Practice Questions (Page 3)
Part of the Clustering and Deployment Architecture domain, which makes up ~20% of our current practice bank. Splunk does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–12 in this domain), expect 1–2 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)
23questions here
5free pages
8concepts
Questions 11–15
- 11
A company is deploying a non-smartstore Splunk environment with the following architecture: 4 indexers, 1 search head, and 1 cluster master. The ingest rate is 100 GB/day, retention is 180 days, replication factor is 3, and search factor is 2. The architect is creating a storage plan and must allocate disk space for each component. Which component will require the MOST disk space?
Select an answer first - 12
An indexer receives 100 GB of raw data per day and retains it for 30 days. What is the minimum disk space needed for the indexed data, assuming no replication and no compression overhead?
Select an answer first - 13
Which of the following factors directly increases the disk space required for indexer storage in a non-smartstore deployment?
Select an answer first - 14
A Splunk architect is designing a non-smartstore indexer cluster with a replication factor of 4 and 10 indexers. The cluster master will manage a large number of buckets. The architect is concerned about the cluster master's disk I/O performance. Which factor is MOST likely to impact the cluster master's disk I/O?
Select an answer first - 15
In a Splunk indexer cluster, what is the effect of increasing the replication factor from 2 to 3 on the total disk space required for indexed data?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “SPLK-2002” is a trademark of its owner, used for identification only.