Lab S00 — Knowledge Check

10 questions · Select all that apply where indicated · Submit when ready to see your results

Question 1

What is our Splunk Enterprise Ubuntu Server set up as?

Select all that apply

Forwarder Search Head Deployment Server Heavy Forwarder

Question 2

A deployment server is designed to distribute to Splunk instances:

Select all that apply

Files Apps Configurations Logs

Question 3

What do you need to install separately on Ubuntu 22.04 before installing Splunk?

wget python libc curl

Question 4

Under which settings section do you set up your Search Head's port to listen for incoming data?

Forwarding and Receiving Data Inputs Indexes Server Settings

Question 5

What is the default port for receiving data in Splunk?

8000 8080 9997 9887

Question 6

What does TA stand for in Splunk apps?

Technical Addition Trusted Authority Technology Add-on Training Assistant

Question 7

Which app is used as a deployment app to push stream capability to the Universal Forwarder?

SplunkForwarder splunk_assist splunk_app_stream Splunk_TA_stream

Question 8

You don't have to manually copy an app to the $SPLUNK_HOME/etc/deployment-apps folder for it to be deployable.

True False

Question 9

Under which settings section do you create new Server Classes?

Data Inputs Forwarder Management Server Settings Server Controls

Question 10

Under which folder in a Splunk app does Splunk prioritize .conf files?

default bin etc local

Scroll up to review your answers and explanations.