Objective 6.1
Enterprise Certified ArchitectIdentify best practices for forwarder tier design
Objective 6.1 sits in Forwarder and Deployment Best Practices, which carries 6% of the Enterprise Certified Architect exam. The questions below are original, written from the official objective title above, and each explanation cites the Splunk page it rests on.
Objective title verbatim from the official objectives. Splunk exam page ↗
A worked example
Shown solved, with the whole explanation open: this is what every question here carries.
You are rolling agents out to 900 Linux hosts that only need to ship syslog to the indexers. Which forwarder is the best tool for sending that data?
Correct.
Checked against help.splunk.com, August 2026Concept
A component with one job is easy to place in a design and cheap to run everywhere. Splunk's own recommendation settles most collection decisions before they start.
Why B
Splunk states that the universal forwarder supersedes the light forwarder for nearly all purposes and represents the best tool for sending data to indexers.
Source
Splunk Docs: Types of forwarders, checked August 2026The universal forwarder supersedes the light forwarder for nearly all purposes and represents the best tool for sending data to indexers.
Now you: objective 6.1 questions
No account needed. The explanation opens when you answer.
Sample question 1 of 3
An administrator needs content based routing. Which forwarder does the design require?
Sample question 2 of 3
An analyst wants to run a scheduled alert directly on one of your 900 universal forwarders. What can a universal forwarder not do?
Sample question 3 of 3
You install a heavy forwarder, a full Splunk Enterprise instance, and find several of its features switched off. Why are those features disabled?
Full Enterprise Certified Architect question bank coming
We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.
Read the sources
These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.