What is the first step when preparing to install ES?

1. A. Install ES.
2. B. Determine the data sources used.
3. C. Determine the hardware required.
4. D. Determine the size and scope of installation.

Correct Answer: D

Which of the following is a key feature of a glass table?

1. A. Rigidity.
2. B. Customization.
3. C. Interactive investigations.
4. D. Strong data for later retrieval.

Correct Answer: B

Which of the following features can the Add-on Builder configure in a new add-on?

1. A. Expire data.
2. B. Normalize data.
3. C. Summarize data.
4. D. Translate data.

Correct Answer: B
Reference: https://docs.splunk.com/Documentation/AddonBuilder/3.0.1/UserGuide/Overview

To which of the following should the ES application be uploaded?

1. A. The indexer.
2. B. The KV Store.
3. C. The search head.
4. D. The dedicated forwarder.

Correct Answer: C
Reference: https://docs.splunk.com/Documentation/ES/6.1.0/Install/InstallEnterpriseSecuritySHC

Which of the following actions can improve overall search performance?

1. A. Disable indexed real-time search.
2. B. Increase priority of all correlation searches.
3. C. Reduce the frequency (schedule) of lower-priority correlation searches.
4. D. Add notable event suppressions for correlation searches with high numbers of false positives.

Correct Answer: A