Objective 6.1
Enterprise Certified ArchitectIdentify best practices for forwarder tier design
Objective 6.1 sits in Forwarder and Deployment Best Practices, which carries 6% of the Enterprise Certified Architect exam. The questions below are original, written from the official objective title above, and each explanation cites the Splunk page it rests on.
Objective title verbatim from the official objectives. Splunk exam page ↗
A worked example
Shown solved, with the whole explanation open: this is what every question here carries.
An engineer asks which forwarder Splunk recommends for sending data. Which does Splunk name?
Correct.
Checked against help.splunk.com, August 2026Concept
A component with one job is easy to place in a design and cheap to run everywhere. Splunk's own recommendation settles most collection decisions before they start.
Why A
Splunk states that the universal forwarder supersedes the light forwarder for nearly all purposes and represents the best tool for sending data to indexers.
Source
Splunk Docs: Types of forwarders, checked August 2026The universal forwarder supersedes the light forwarder for nearly all purposes and represents the best tool for sending data to indexers.
Now you: objective 6.1 questions
No account needed. The explanation opens when you answer.
Sample question 1 of 3
An administrator needs content based routing. Which forwarder does the design require?
Sample question 2 of 3
An analyst asks what the universal forwarder cannot do. Which does Splunk name?
Sample question 3 of 3
A team lead asks why the heavy forwarder disables features. What reason does Splunk give?
Full Enterprise Certified Architect question bank coming
We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.
Read the sources
These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.