Size and Estimate Storage SPLK-2002 Practice Questions (Page 3)

Questions 11–12

1. 11foundation · easy

   In a non-smart store deployment, which of the following components contributes to the total storage requirement for an index?

   • AOnly the raw data, because index files are stored on the search head
   • BOnly the index files, because raw data is stored in the smart store
   • CRaw data and index files, but not journal data because it is deleted after indexing
   • DRaw data, index files (tsidx), and journal data
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   In a Splunk indexer, what is the primary difference between hot and warm buckets in terms of disk storage?

   • AHot buckets are stored on faster disk, while warm buckets are stored on slower disk
   • BHot buckets are actively written to, while warm buckets are read-only and contain older data
   • CHot buckets are replicated, while warm buckets are not
   • DHot buckets are compressed, while warm buckets are uncompressed
   Reveal Solution Discussion Select an answer first