Objective 10.1
Enterprise Certified AdminConfigure Forwarders
Objective 10.1 sits in Configuring Forwarders, which carries 5% of the Enterprise Certified Admin exam. The questions below are original, written from the official objective title above, and each explanation cites the Splunk page it rests on.
Objective title verbatim from the official objectives. Splunk exam page ↗
A worked example
Shown solved, with the whole explanation open: this is what every question here carries.
You already run a full Splunk Enterprise instance and now need universal forwarders on 200 laptops. How do you obtain the universal forwarder software?
Correct.
Checked against help.splunk.com, August 2026Concept
A separate package is what keeps the agent small on the machines it is installed on. It also means upgrading collectors is independent of upgrading the platform.
Why A
Splunk states that the universal forwarder is a separately downloadable piece of software, and that unlike the heavy and light forwarders you do not enable it from a full Splunk Enterprise instance.
Source
Splunk Docs: Types of forwarders, checked August 2026The universal forwarder is a separately downloadable piece of software. Unlike the heavy and light forwarders, you do not enable it from a full Splunk Enterprise instance.
Now you: objective 10.1 questions
No account needed. The explanation opens when you answer.
Sample question 1 of 3
A remote site has no route to your indexers, so its universal forwarders must hand data to an intermediate host first. What can a universal forwarder send data to?
Sample question 2 of 3
You find a light forwarder still running on an old server and have to explain in the decommission ticket what it was originally built for. What was its purpose?
Sample question 3 of 3
You are choosing an agent for 500 hosts that only need to ship logs, with no local searching or indexing. Which task is the universal forwarder the best tool for?
Full Enterprise Certified Admin question bank coming
We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.
Read the sources
These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.