Exam objectives
Enterprise Certified ArchitectSplunk Enterprise Certified Architect exam objectives
The published blueprint is the contract: the exam can only test what is on this list. Domains carry their official weightings, and objectives with a practice page link straight to questions written for that objective.
Titles and weightings from the official objectives. Splunk exam page ↗
Introduction
2%of exam1.1 Describe a deployment planIn the bank
- 1.2 Define the deployment processPractice
Project Requirements
5%of examInfrastructure Planning: Index Design
5%of examInfrastructure Planning: Resource Planning
7%of exam- 4.1 List sizing considerationsPractice
- 4.2 Identify disk storage requirementsPractice
4.3 Define hardware requirements for various Splunk componentsIn the bank
4.4 Describe ES considerations for sizing and topologyIn the bank
4.5 Describe ITSI considerations for sizing and topology
4.6 Describe security, privacy, and integrity measuresIn the bank
Clustering Overview
5%of examForwarder and Deployment Best Practices
6%of examPerformance Monitoring and Tuning
5%of exam7.1 Use limits.conf to improve performanceIn the bank
7.2 Use indexes.conf to manage bucket sizeIn the bank
7.3 Tune props.confIn the bank
- 7.4 Improve search performancePractice
Splunk Troubleshooting Methods and Tools
5%of examClarifying the Problem
5%of examLicensing and Crash Problems
5%of examConfiguration Problems
5%of examSearch Problems
5%of examDeployment Problems
5%of examLarge-scale Splunk Deployment Overview
5%of exam- 14.1 Identify Splunk server roles in clustersPractice
14.2 License Master configuration in a clustered environment
Single-site Indexer Cluster
5%of examMultisite Indexer Cluster
5%of exam- 16.1 Splunk multisite indexer cluster overviewPractice
16.2 Multisite indexer cluster configurationIn the bank
- 16.3 Cluster migration and upgrade considerationsPractice
Indexer Cluster Management and Administration
7%of exam17.1 Indexer cluster storage utilization optionsIn the bank
- 17.2 Peer offline and decommissionPractice
17.3 Master app bundlesIn the bank
- 17.4 Monitoring Console for indexer cluster environmentPractice
Search Head Cluster
5%of examSearch Head Cluster Management and Administration
5%of exam- 19.1 Search head cluster deployerPractice
19.2 Captaincy transferIn the bank
- 19.3 Search head member addition and decommissioningPractice
KV Store Collection and Lookup Management
3%of examObjectives marked Practice open a page of original questions written for that objective, each with a full explanation cited to Splunk documentation.
Keep reading
Enterprise Certified Architect practice questions
Free sample questions with the full explanation on every answer.
Free Enterprise Certified Architect practice test
Ten real questions, playable now. No account, no card.
Enterprise Certified Architect passing score
The exact cut score, what kind of number it is, and the retake terms.
How hard is Enterprise Certified Architect?
An honest difficulty read from the format, the clock and the weights.