Objective 1.2
Enterprise Certified ArchitectDefine the deployment process
Objective 1.2 sits in Introduction, which carries 2% of the Enterprise Certified Architect exam. The questions below are original, written from the official objective title above, and each explanation cites the Splunk page it rests on.
Objective title verbatim from the official objectives. Splunk exam page ↗
A worked example
Shown solved, with the whole explanation open: this is what every question here carries.
Your team is tracing where timestamps get applied to a new source type. Which tier of a Splunk deployment handles the parsing segment?
Correct.
Checked against help.splunk.com, August 2026Concept
One tier owning two segments is why an indexer does more than store. Knowing that places a parsing problem on the right machine.
Why A
Splunk states that the data input tier handles the input segment, that the indexing tier handles the parsing and indexing segments, and that the search management tier handles the search segment.
Source
Splunk Docs: How data moves through Splunk deployments, checked August 2026The data input tier handles the input segment. The indexing tier handles the parsing and indexing segments. The search management tier handles the search segment.
Now you: objective 1.2 questions
No account needed. The explanation opens when you answer.
Sample question 1 of 2
During troubleshooting you find that events from one file are being merged into the wrong records. Which three pipelines make up the parsing pipeline?
Sample question 2 of 2
Your new forwarder is reading a log file that has not yet reached the parsing queue. What has the software already done to the raw stream in the input segment?
Full Enterprise Certified Architect question bank coming
We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.
Read the sources
These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.