In which phase of the index time process does the license metering occur?

• A.Input phase
• B.Parsing phase
• C.Indexing phase
• D.Licensing phase

Comment: *

Name: *

Email: *

Verification: *

Which of the following apply to how distributed search works? (select all that apply)

• A.The search peers pull the data from the forwarders.
• B.Peers run searches in parallel and return their portion of results.
• C.The search head dispatches searches to the peers
• D.The search head consolidates the individual results and prepares reports

Comment: *

Name: *

Email: *

Verification: *

What is the correct order of steps in Duo Multifactor Authentication?

• A.1. Request Login
  2. Connect to SAML server
  3. Duo MFA
  4. Create User session
  5. Authentication Granted
  6. Log into Splunk
• B.1. Request Login
  2. Duo MFA
  3. Authentication Granted
  4. Connect to SAML server
  5. Log into Splunk
  6. Create User session
• C.1. Request Login
  2. Check authentication / group mapping
  3. Authentication Granted
  4. Duo MFA
  5. Create User session
  6. Log into Splunk
• D.1. Request Login
  2. Duo MFA
  3. Check authentication / group mapping
  4. Create User session
  5. Authentication Granted
  6. Log into Splunk

Comment: *

Name: *

Email: *

Verification: *

Which Splunk component distributes apps and certain other configuration updates to search head cluster members?

• A.Cluster master
• B.Search head cluster master
• C.Deployment server
• D.Deployer

Comment: *

Name: *

Email: *

Verification: *

A log file contains 193 days worth of timestamped events. Which monitor stanza would be used to collect data 45 days old and newer from that log file?

• A.includeNewerThan = -35d
• B.followTail = -45d
• C.ignoreOlderThan = 45d
• D.ignore = 45d

Comment: *

Name: *

Email: *

Verification: *