Examers.io
ExamsOrganizationsHow it worksPricingHelp & FAQ
Sign inStart free
Splunk logo

SplunkEnterprise Certified Architect

Domain 2Objective 4

Understand Configuration Management for All Splunk Components, Using SPLK-2002 Practice Questions (Page 1)

Part of the Clustering and Deployment Architecture domain, which makes up ~20% of our current practice bank. Splunk does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–12 in this domain), expect 1–2 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)

19questions here
4free pages
7concepts

Questions 1–5

  1. 1application · medium

    A Splunk admin is troubleshooting why a specific input is not being ingested. The admin has verified that the input is defined in `inputs.conf` and the forwarder is running. Which command should the admin run to check if the input is recognized by Splunk?

    Select an answer first
  2. 2expert · hard

    A Splunk admin is troubleshooting why a search-time extraction is not working as expected. The admin has verified that the `props.conf` and `transforms.conf` files are correctly defined in the app. The admin suspects that another app or system-level configuration is overriding the settings. Which command should the admin run to identify the source of the override?

    Select an answer first
  3. 3application · medium

    A Splunk admin needs to verify the effective value of a setting in `server.conf` on a search head. The admin wants to see the value that is actually being used, considering that the setting may be defined in multiple files. Which command should the admin run?

    Select an answer first
  4. 4foundation · easy

    Which command is most useful for troubleshooting configuration issues by showing the effective settings for a specific stanza?

    Select an answer first
  5. 5foundation · easy

    To define a new index in Splunk, which configuration file would you edit?

    Select an answer first
Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SPLK-2002

Keep studying — Clustering and Deployment Architecture

Full SPLK-2002 curriculum →Every domain, objective & concept — with linked practiceSPLK-2002 exam overview →Splunk Enterprise Certified Architect

Other objectives in Clustering and Deployment Architecture

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “SPLK-2002” is a trademark of its owner, used for identification only.