Exam SPLK-3003 topic 1 question 53 discussion

Actual exam question from Splunk's SPLK-3003

Question #: 53
Topic #: 1

A customer has a network device that transmits logs directly with UDP or TCP over SSL. Using PS best practices, which ingestion method should be used?

A. Open a TCP port with SSL on a heavy forwarder to parse and transmit the data to the indexing tier.
B. Open a UDP port on a universal forwarder to parse and transmit the data to the indexing tier.
C. Use a syslog server to aggregate the data to files and use a heavy forwarder to read and transmit the data to the indexing tier.
D. Use a syslog server to aggregate the data to files and use a universal forwarder to read and transmit the data to the indexing tier.

Show Suggested Answer

Suggested Answer: D 🗳️

by Redtonyeah at May 23, 2022, 4:50 a.m.