FirstTry
Enterprise Certified ArchitectSplunk Enterprise Certified Architect

Practice Exam 1

5 of this form’s 85 questions, drawn from across its domains, free. The explanation on every one of them is free too, at every tier, and always will be.

  1. Question 1 of 5

    4-4Infrastructure Planning: Resource Planning

    Ingest lag is climbing and you open the monitoring console to compare one indexer against the whole estate. Which two indexing performance dashboards does the console provide?

  2. Question 2 of 5

    6-2Forwarder and Deployment Best Practices

    You must change a props setting on all six peer nodes of an indexer cluster at once. Which method do you use?

  3. Question 3 of 5

    5-2Clustering Overview

    Your risk register requires the deployment to keep running through the loss of an entire data center. Which capability does that disaster recovery requirement need?

  4. Question 4 of 5

    17-4Indexer Cluster Management and Administration

    The manager node goes down. What does Splunk say the peers can continue doing?

  5. Question 5 of 5

    9-2Clarifying the Problem

    An auditor needs evidence of failed logins, setting changes and saved searches run last month. What does audit.log record?

0 of 85 completed

0%

The other 80 questions are the rest of this form: same 90 minute clock, same 750 cut score, and the same explanation on every question, which is never behind the wall. Practice Exam 1 of 2 on Enterprise Certified Architect.

What this exam covers

  • Introduction2 questions / 2% of the exam
  • Project Requirements5 questions / 5% of the exam
  • Infrastructure Planning: Index Design5 questions / 5% of the exam
  • Infrastructure Planning: Resource Planning6 questions / 7% of the exam
  • Clustering Overview5 questions / 5% of the exam
  • Forwarder and Deployment Best Practices5 questions / 6% of the exam
  • Performance Monitoring and Tuning4 questions / 5% of the exam
  • Splunk Troubleshooting Methods and Tools4 questions / 5% of the exam
  • Clarifying the Problem4 questions / 5% of the exam
  • Licensing and Crash Problems4 questions / 5% of the exam
  • Configuration Problems4 questions / 5% of the exam
  • Search Problems4 questions / 5% of the exam
  • Deployment Problems4 questions / 5% of the exam
  • Large-scale Splunk Deployment Overview4 questions / 5% of the exam
  • Single-site Indexer Cluster4 questions / 5% of the exam
  • Multisite Indexer Cluster4 questions / 5% of the exam
  • Indexer Cluster Management and Administration6 questions / 7% of the exam
  • Search Head Cluster4 questions / 5% of the exam
  • Search Head Cluster Management and Administration4 questions / 5% of the exam
  • KV Store Collection and Lookup Management3 questions / 3% of the exam

Checking what you already have access to.

Every question is original, written from the published objectives. We never reproduce, paraphrase, or imitate real exam content, and neither should anything else you study from.