Splunk Updated SPLK-1003 Exam Questions and Answers by alyssia

When configuring multiple LDAP strategies in Splunk, the order in which they are listed in the authentication.conf file determines the sequence in which Splunk searches them during authentication.

From the official Splunk documentation:

"To configure multiple LDAP strategies, set the authSettings setting to a comma-separated list of all strategies, in the order in which you want to query the strategies."

— Configure LDAP using configuration files - Splunk Documentation

Therefore, Splunk will search each LDAP strategy in the order specified in the authSettings parameter of the authentication.conf file.

The next step to enable the communication between the forwarder and the deployment server after installing a new forwarder with a manually created deploymentclient.conf is to restart Splunk on the deployment client. The deploymentclient.conf file contains the settings for the deployment client, which is a Splunk instance that receives updates from the deployment server. The file must include the targetUri attribute, which specifies the hostname and management port of the deployment server. To apply the changes in the deploymentclient.conf file, Splunk must be restarted on the deployment client. Therefore, option C is the correct answer. References: Splunk Enterprise Certified Admin | Splunk, [Configure deployment clients - Splunk Documentation]

https://docs.splunk.com/Documentation/Splunk/8.2.2/Updating/Aboutdeploymentserver

"The deployment server is the tool for distributing configurations, apps, and content updates to groups of Splunk Enterprise instances."