exam questions

Exam SPLK-3003 All Questions

View all questions & answers for the SPLK-3003 exam

Exam SPLK-3003 topic 1 question 58 discussion

Actual exam question from Splunk's SPLK-3003
Question #: 58
Topic #: 1
[All SPLK-3003 Questions]

In preparation for the deployment of a new environment for a customer, which of the following mappings are correct per PS best practices?
A.

B.

C.

D.

Show Suggested Answer Hide Answer
Suggested Answer: B

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
ChantreyC
Highly Voted 4 years ago
I think B is right, the Indexers are showing etc/apps. Any config bundle would push to etc/slave-apps so it makes sense that what we see on the indexers doesn't match with etc/master-apps. B has the right config on all the other elements, the config bundle would just need to be pushed.
upvoted 11 times
pentel
2 years, 11 months ago
I think so, too. Also, what I sees in SCI 158p is the composition of SHC, but there is no contradiction between the APP of CM and the APP of SH.
upvoted 3 times
...
...
benjaminabbenhues
Most Recent 10 months ago
only logical answer is C. SH needs to know the indexes to search (org_all_indexes) and need config for the cluster to know its an search-head (org_cluster_search_base) Org_cluster_master_base is needed for the CM to know he is the CM and it need to tel its peer that there peers so org_cluster_indexer_base need to be deployed.
upvoted 1 times
...
RedYeti
2 years, 7 months ago
Correct answer is D. Explanation: Not A because "org_indexer_volume_indexes" should be pushed by CM as "org_all_indexes" so it shouldn't be in "/etc/apps" Not C because "org_cluster_indexer_base" shouldn't be in "master-apps" on CM and in "/etc/apps" in IDX ate the same time. it is one or the other, not both. B and D are the same except that in B, SH have "org_all_indexes" and "org_search_volume_indexes". SH don't need both, "org_search_volume_indexes" is sufficient so correct answer is D.
upvoted 2 times
RedYeti
2 years, 6 months ago
EDIT: Correct answer is B. B and D are the same except that in D, search head don't have "org_all_indexes" and "org_search_volume_indexes" so correct answer is B.
upvoted 2 times
...
...
splunkingyeti
4 years ago
I mean it is C. The only reason why i wouldn't say D, is due to the fact that only one of the apps from the CM has been pushed to the members.
upvoted 2 times
pbandj12
3 years, 9 months ago
agreed
upvoted 1 times
...
...
jugulinho
4 years, 1 month ago
i think D
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...