SPLK-2002: Splunk Enterprise Certified Architect Exam 2025
Latest practice tests to ace the Splunk Enterprise Certified Architect exam in one go!
SPLK-2002: Splunk Enterprise Certified Architect Exam 2025 free download
Latest practice tests to ace the Splunk Enterprise Certified Architect exam in one go!
Exam Details:
Level: Expert
Prerequisite certification:
Splunk Core Certified Power User
Splunk Enterprise Certified Admin
Prerequisite coursework:
Architecting Splunk Enterprise Deployments -> 9 Hours
Troubleshooting Splunk Enterprise -> 9 Hours
Splunk Cluster Administration -> 13.5 Hours
Splunk Enterprise Deployment Practical Lab -> 24 Hours
Length: 90 minutes
Format: 85 multiple choice questions
Pricing: $130 USD per exam attempt
Delivery: Exam is conducted by Pearson VUE
Topics Covered In The Exam -
1.0 Introduction 2%
1.1 Describe a deployment plan
1.2 Define the deployment process
2.0 Project Requirements 5%
2.1 Identify critical information about environment, volume, users, and
requirements
2.2 Apply checklists and resources to aid in collecting requirements
3.0 Infrastructure Planning: Index Design 5%
3.1 Understand design and size indexes
3.2 Estimate non-smart store related storage requirements
3.3 Identify relevant apps
4.0 Infrastructure Planning: Resource Planning 7%
4.1 List sizing considerations
4.2 Identify disk storage requirements
4.3 Define hardware requirements for various Splunk components
4.4 Describe ES considerations for sizing and topology
4.5 Describe ITSI considerations for sizing and topology
4.6 Describe security, privacy, and integrity measures
5.0 Clustering Overview 5%
5.1 Identify non-smart store related storage and disk usage requirements
5.2 Identify search head clustering requirements
6.0 Forwarder and Deployment Best Practices 6%
6.1 Identify best practices for forwarder tier design
6.2 Understand configuration management for all Splunk components, using Splunk deployment tools
7.0 Performance Monitoring and Tuning 5%
7.1 Use limits.conf to improve performance
7.2 Use indexes.conf to manage bucket size
7.3 Tune props.conf
7.4 Improve search performance
8.0 Splunk Troubleshooting Methods and Tools 5%
8.1 Splunk diagnostic resources and tools
9.0 Clarifying the Problem 5%
9.1 Identify Splunk’s internal log files
9.2 Identify Splunk’s internal indexes
10.0 Licensing and Crash Problems 5%
10.1 License issues
10.2 Crash issues
11.0 Configuration Problems 5%
11.1 Input issues
12.0 Search Problems 5%
12.1 Search issues
12.2 Job inspector
13.0 Deployment Problems 5%
13.1 Forwarding issues
13.2 Deployment server issues
14.0 Large-scale Splunk Deployment Overview 5%
14.1 Identify Splunk server roles in clusters
14.2 License Master configuration in a clustered environment
15.0 Single-site Indexer Cluster 5%
15.1 Splunk single-site indexer cluster configuration
16.0 Multisite Indexer Cluster 5%
16.1 Splunk multisite indexer cluster overview
16.2 Multisite indexer cluster configuration
16.3 Cluster migration and upgrade considerations
17.0 Indexer Cluster Management and Administration 7%
17.1 Indexer cluster storage utilization options
17.2 Peer offline and decommission
17.3 Master app bundles
17.4 Monitoring Console for indexer cluster environment
18.0 Search Head Cluster 5%
18.1 Splunk search head cluster overview
18.2 Search head cluster configuration
19.0 Search Head Cluster Management and Administration 5%
19.1 Search head cluster deployer
19.2 Captaincy transfer
19.3 Search head member addition and decommissioning
20.0 KV Store Collection and Lookup Management 3%
20.1 KV Store collection in Splunk clusters
