Splunk Core Certified Advanced Power User — Question 36

Which option accurately describes the purpose of the HTTP Event Collector (HEC)?

Answer options

• A. A token-based HTTP input that is secure and scalable and that requires the use of forwarders.
• B. A token-based HTTP input that is secure and scalable and that does not require the use of forwarders.
• C. An agent-based HTTP input that is secure and scalable and that does not require the use of forwarders.
• D. A token-based HTTP input that is insecure and non-scalable and that does not require the use of forwarders.

Correct answer: B

Explanation

The correct answer is B because the HTTP Event Collector (HEC) is designed to accept data securely and at scale without needing forwarders. Option A is incorrect as it implies the necessity of forwarders, while C describes an agent-based input, which does not apply to HEC. Option D incorrectly states that HEC is insecure and non-scalable, which contradicts its intended purpose.