Objective 10.1

Enterprise Certified Admin

Configure Forwarders

Objective 10.1 sits in Configuring Forwarders, which carries 5% of the Enterprise Certified Admin exam. The questions below are original, written from the official objective title above, and each explanation cites the Splunk page it rests on.

Objective title verbatim from the official objectives. Splunk exam page

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

10-1Configuring Forwarders

An administrator asks how the universal forwarder is obtained. What does Splunk say?

It is enabled from a full instanceEnabling from a full instance is how the heavy and light forwarders are created.
It is downloaded separatelyCorrect · your answerCorrect.
It ships inside an appApps add functionality to an existing instance.
It is built from sourceSplunk distributes it as a package rather than as source.

Correct.

Checked against help.splunk.com, August 2026

Concept

A separate package is what keeps the agent small on the machines it is installed on. It also means upgrading collectors is independent of upgrading the platform.

Why B

Splunk states that the universal forwarder is a separately downloadable piece of software, and that unlike the heavy and light forwarders you do not enable it from a full Splunk Enterprise instance.

Source

The universal forwarder is a separately downloadable piece of software. Unlike the heavy and light forwarders, you do not enable it from a full Splunk Enterprise instance.

Splunk Docs: Types of forwarders, checked August 2026
#forwarders#installation

Now you: objective 10.1 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

10-1Configuring Forwarders

An administrator asks what the universal forwarder can send data to. Which does Splunk name?

Sample question 2 of 3

10-1Configuring Forwarders

An administrator asks why the light forwarder existed. What does Splunk say it was for?

Sample question 3 of 3

10-1Configuring Forwarders

An administrator asks what the universal forwarder is best suited to. What does Splunk say?

Full Enterprise Certified Admin question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Configuring Forwarders