Exam SPLK-2002 topic 1 question 49 discussion

Answer is B and C

this instance is a master, so master uri is not required, search factor is not set, so it will take the default value which is 2

D Cannot be the answer master_uri feature is deprecated instead use manager_uri

According to this documentation: https://docs.splunk.com/Documentation/Splunk/9.1.2/Indexer/Thesearchfactor And also this one: https://docs.splunk.com/Documentation/Splunk/9.1.3/Admin/Serverconf splunk has a default search_factor = 2 So answer B seems to be also correct. C is correct, because the password is in clear text and it should be encrypted by restarting the instance.

B/C since master_uri is deprecated correct attribute should be 'manager_uri'

Splunk Cluster Admin pdf => pg 30 Splunk defaults to replication_factor = 3 search_factor = 2 https://docs.splunk.com/Documentation/Splunk/9.1.1/Security/Aboutsecuringclusters When you edit the server.conf file to specify or change a pass4SymmKey, the Splunk platform encrypts the key in the server.conf file after you restart. Remember your key in plaintext, as it is very difficult to recover the key if you forget it. Correct Answer: B & C

The answer is B&C. Cluster pdf page no:30 (configuring Splunk master node)

B is not true, SF can be defined somewhere else

B and C

Answer is B and C. https://docs.splunk.com/Documentation/Splunk/8.2.4/DistSearch/Transfercaptain#Transfer_captaincy

pg 193/Cluster & https://docs.splunk.com/Documentation/Splunk/8.2.4/DistSearch/Transfercaptain#Transfer_captaincy

BC 100% Sure

B is wrong because search factor is not necessarilly replication factor

B and C