Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
exam questions

Exam SPLK-1003 All Questions

View all questions & answers for the SPLK-1003 exam

Exam SPLK-1003 topic 1 question 23 discussion

Actual exam question from Splunk's SPLK-1003
Question #: 23
Topic #: 1
[All SPLK-1003 Questions]

Which of the following statements describe deployment management? (Choose all that apply.)

  • A. Requires an Enterprise license.
  • B. Is responsible for sending apps to forwarders.
  • C. Once used, is the only way to manage forwarders.
  • D. Can automatically restart the host OS running the forwarder.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Praf7
Highly Voted 4 years ago
Option A & B
upvoted 28 times
ucsdmiami2020
3 years, 1 month ago
Agreed A and B. Quoting two Splunk Reference URLs https://docs.splunk.com/Documentation/Splunk/8.2.2/Admin/Distdeploylicenses#:~:text=License%20requirements,do%20not%20index%20external%20data. "All Splunk Enterprise instances functioning as management components needs access to an Enterprise license. Management components include the deployment server, the indexer cluster manager node, the search head cluster deployer, and the monitoring console." https://docs.splunk.com/Documentation/Splunk/8.2.2/Updating/Aboutdeploymentserver "The deployment server is the tool for distributing configurations, apps, and content updates to groups of Splunk Enterprise instances."
upvoted 7 times
...
...
tommot
Highly Voted 4 years, 3 months ago
C is wrong. we can still use CLI and direct editing even after enabling DS.
upvoted 15 times
SasnycoN
2 years, 11 months ago
You can but they will be overwritten by the DS on the nest communication.
upvoted 4 times
EnidV
2 years, 1 month ago
The CLI could be used even on DS.
upvoted 2 times
...
...
...
bobixaka
Most Recent 1 year ago
Selected Answer: B
A and B
upvoted 1 times
...
bobixaka
1 year ago
Selected Answer: B
A and B are correct
upvoted 1 times
...
tmmt
1 year, 9 months ago
Selected Answer: B
Is A and B.
upvoted 1 times
...
mr56
1 year, 10 months ago
AB not C - For some complex configuration requirements, however, you might need to edit serverclass.conf directly. Important: If you switch from forwarder management to direct editing of serverclass.conf, you might not be able to use forwarder management for any subsequent configuration. This is because the forwarder management interface can handle only a subset of the configurations possible through serverclass.conf.
upvoted 1 times
...
PKV27
2 years, 6 months ago
A&B for sure, C,D - is discussable, by design not applicable C - is it possible use sys/local/*.conf, DS not overriding this confs with apps D - what about run ps script Restart-Computer on win OS? so it is possible to restart host OS
upvoted 2 times
...
BlueRoselia
2 years, 8 months ago
Data Admin pg 97 A&B Deployment Server is a built-in tool for managing configuration of Splunk instances –Allows you to manage remote Splunk instances centrally–Requires an Enterprise License –Handles the job of sending configurations (inputs.conf, outputs.conf, etc.) packaged as apps –Can automatically restart remote Splunk instances •Forwarder management is a graphical interface on top of deployment server •Monitoring Console Forwarder dashboards help you monitor the deployment •Best Practice: The Deployment Server should be a dedicated Splunk instance–In this class, you will use your test server as a deployment server
upvoted 2 times
...
Alusine
2 years, 9 months ago
Its ABCD....page 68 of PDF. Can Automatically restart the remote splunk instances, manages forwarder configurations
upvoted 1 times
kurzer_
2 years, 8 months ago
Exactly what you said, "It can restart remote SPLUNK INSTANCES" but not the Host OS. D is wrong!
upvoted 5 times
Mntman77
1 year, 4 months ago
exactly!
upvoted 1 times
...
Hurshbabe
1 year, 2 months ago
Restarting as instance is equivalent to restarting the OS so D is right
upvoted 1 times
Hurshbabe
1 year, 1 month ago
never mind my answer, its wrong
upvoted 1 times
...
...
...
...
Apis
2 years, 10 months ago
Selected Answer: A
A and B are correct
upvoted 3 times
...
ivaanovich
3 years, 2 months ago
Tricky one, but I'd say that C is also correct: once an app is put under Deployment Management, the app's folder (the whole of it) will be overwritten each time the UF detects that there's a mismatch between it's own content and that from the DS. So yes: once used, Deployment Management is the only way to manage THOSE APPS in the forwarders. (apps that are not under Deployment Management can still be managed locally. And of course you can always disable Deployment Management on an app and go back to manual updates, if you so wish).
upvoted 2 times
toney_mu
1 year, 9 months ago
You cna disable the DS and still push apps or update apps
upvoted 2 times
...
...
ckmunich
3 years, 3 months ago
Only A and B are right C is wrong. You can still use the CLI or edit the .conf files D is wrong. No Splunk component can cause the underlying OS to reboot.
upvoted 6 times
SasnycoN
2 years, 11 months ago
About C - But even if you made any changes to the files via CLI they will be overwritten by the DS in the next communication.
upvoted 1 times
...
...
mjl79
3 years, 4 months ago
A & B. C is wrong because you can still use the CLI or edit the .conf files and D is a sneaky answer designed to catch you out; No Splunk component can cause the underlying OS to reboot.
upvoted 1 times
SasnycoN
2 years, 11 months ago
What will happen if you use CLi to edit the .conf files and in the next communication DS detects that there are changes?!
upvoted 1 times
...
...
gsplunker
3 years, 9 months ago
Guess A,B and D
upvoted 4 times
gatundu_
2 weeks, 5 days ago
D is wrong. The DS can only start remote Splunk instances
upvoted 1 times
...
lollo1234
3 years, 7 months ago
NO! You cant restart fw os
upvoted 1 times
...
...
IDM
4 years, 1 month ago
A and B C is a trick as, it can restart the forwarder on the client NOT the client/HOST OS.
upvoted 5 times
...
oksey
4 years, 2 months ago
I would go for ABD
upvoted 4 times
...
ames
4 years, 2 months ago
I would say A, B, D. https://docs.splunk.com/Splexicon:Deploymentserver
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...