Use this quick start guide to collect all the information about Splunk Enterprise Architect (SPLK-2002) Certification exam. This study guide provides a list of objectives and resources that will help you prepare for items on the SPLK-2002 Splunk Enterprise Certified Architect exam. The Sample Questions will help you identify the type and difficulty level of the questions and the Practice Exams will make you familiar with the format and environment of an exam. You should refer this guide carefully before attempting your actual Splunk Enterprise Architect certification exam.
The Splunk Enterprise Architect certification is mainly targeted to those candidates who want to build their career in Enterprise domain. The Splunk Enterprise Certified Architect exam verifies that the candidate possesses the fundamental knowledge and proven skills in the area of Splunk Enterprise Architect.
Splunk Enterprise Architect Exam Summary:
| Exam Name | Splunk Enterprise Certified Architect |
| Exam Code | SPLK-2002 |
| Exam Price | $130 (USD) |
| Duration | 90 mins |
| Number of Questions | 85 |
| Passing Score | 700 / 1000 |
| Schedule Exam | Pearson VUE |
| Sample Questions | Splunk Enterprise Architect Sample Questions |
| Practice Exam | Splunk SPLK-2002 Certification Practice Exam |
Splunk SPLK-2002 Exam Syllabus Topics:
| Topic | Details | Weights |
|---|---|---|
| Introduction |
- Describe a deployment plan - Define the deployment process |
2% |
| Project Requirements |
- Identify critical information about environment, volume, users, and requirements - Apply checklists and resources to aid in collecting requirements |
5% |
| Infrastructure Planning: Index Design |
- Understand design and size indexes - Estimate non-smart store related storage requirements - Identify relevant apps |
5% |
| Infrastructure Planning: Resource Planning |
- List sizing considerations - Identify disk storage requirements - Define hardware requirements for various Splunk components - Describe ES considerations for sizing and topology - Describe ITSI considerations for sizing and topology - Describe security, privacy, and integrity measures |
7% |
| Clustering Overview |
- Identify non-smart store related storage and disk usage requirements - Identify search head clustering requirements |
5% |
| Forwarder and Deployment Best Practices |
- Identify best practices for forwarder tier design - Understand configuration management for all Splunk components, using Splunk deployment tools |
6% |
| Performance Monitoring and Tuning |
- Use limits.conf to improve performance - Use indexes.conf to manage bucket size - Tune props.conf - Improve search performance |
5% |
| Splunk Troubleshooting Methods and Tools | - Splunk diagnostic resources and tools | 5% |
| Clarifying the Problem |
- Identify Splunk’s internal log files - Identify Splunk’s internal indexes |
5% |
| Licensing and Crash Problems |
- License issues - Crash issues |
5% |
| Configuration Problems | - Input issues | 5% |
| Search Problems |
- Search issues - Job inspector |
5% |
| Deployment Problems |
- Forwarding issues - Deployment server issues |
5% |
| Large-scale Splunk Deployment Overview |
- Identify Splunk server roles in clusters - License Master configuration in a clustered environment |
5% |
| Single-site Indexer Cluster | - Splunk single-site indexer cluster configuration | 5% |
| Multisite Indexer Cluster |
- Splunk multisite indexer cluster overview - Multisite indexer cluster configuration - Cluster migration and upgrade considerations |
5% |
| Indexer Cluster Management and Administration |
- Indexer cluster storage utilization options - Peer offline and decommission - Master app bundles - Monitoring Console for indexer cluster environment |
7% |
| Search Head Cluster |
- Splunk search head cluster overview - Search head cluster configuration |
5% |
| Search Head Cluster Management and Administration |
- Search head cluster deployer - Captaincy transfer - Search head member addition and decommissioning |
5% |
| KV Store Collection and Lookup Management | - KV Store collection in Splunk clusters | 3% |
To ensure success in Splunk Enterprise Architect certification exam, we recommend authorized training course, practice test and hands-on experience to prepare for Splunk Enterprise Certified Architect (SPLK-2002) exam.