Objective 3.3
Enterprise Certified ArchitectIdentify relevant apps
Objective 3.3 sits in Infrastructure Planning: Index Design, which carries 5% of the Enterprise Certified Architect exam. The questions below are original, written from the official objective title above, and each explanation cites the Splunk page it rests on.
Objective title verbatim from the official objectives. Splunk exam page ↗
A worked example
Shown solved, with the whole explanation open: this is what every question here carries.
An administrator asks where user data goes by default. What does Splunk say?
Correct.
Checked against help.splunk.com, August 2026Concept
A single destination by default means ingest works before anybody designs an index layout. Splitting comes later, driven by retention and access.
Why A
Splunk states that by default it puts all user data into a single, preconfigured index, that it also employs several other indexes for internal purposes, and that you can add new indexes to meet your requirements.
Source
Splunk Docs: Indexes, indexers, and indexer clusters, checked August 2026Splunk Enterprise, by default, puts all user data into a single, preconfigured index. It also employs several other indexes for internal purposes. You can add new indexes and manage existing ones to meet your data requirements.
Now you: objective 3.3 questions
No account needed. The explanation opens when you answer.
Sample question 1 of 2
You are deciding where to send CPU utilization samples and firewall events in the same deployment. How many types of index does Splunk Enterprise support?
Sample question 2 of 2
Credit card numbers appear in an application log, and some of its events belong in a separate index. Which user-defined actions can Splunk perform while indexing?
Full Enterprise Certified Architect question bank coming
We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.
Read the sources
These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.