Self-assessment

The questions and options provided in this section are similar to the question pattern used in the certification exam. If you have difficulty answering any question, feel free to revisit the corresponding section in this chapter. Best of luck!

1. Choose the data indexing phases (Select all that apply).
   1. Indexing
   2. Parsing
   3. Input
   4. Ingestion
2. Which phase involves data collection and contains various data input options for indexing?
   1. Parsing
   2. Input
   3. Ingest
   4. Indexing
3. In which phase is the license calculated?
   1. Input
   2. Parsing
   3. Indexing
   4. Ingest
4. You are a data administrator working with data stored in files on a source system running the latest version of a Linux OS. Which of the following methods for Splunk data input would you choose?
   1. Write a script to monitor the file and forward it directly to the indexer
   2. Install a UF and configure file-based monitoring
   3. Transfer the file to an FTP where the indexer polls for a file to ingest
   4. Write a script to read each line and send it to the HEC
...