Splunk Core Certified Consultant — Question 27

When a forwarder phones home to a Deployment Server it compares the check-sum value of the forwarder’s app to the Deployment Server’s app.
What happens to the app if the check-sum values do not match?

Answer options

• A. The app on the forwarder is always deleted and re-downloaded from the Deployment Server.
• B. The app on the forwarder is only deleted and re-downloaded from the Deployment Server if the forwarder’s app has a smaller check-sum value.
• C. The app is downloaded from the Deployment Server and the changes are merged.
• D. A warning is generated on the Deployment Server stating the apps are out of sync. An Admin will need to confirm which version of the app should be used.

Correct answer: A

Explanation

The correct answer is A because when there is a mismatch in check-sum values, the forwarder app is considered out of sync, leading to its deletion and re-download from the Deployment Server to ensure consistency. Options B, C, and D are incorrect as they suggest conditions or processes that do not occur in this scenario, such as merging changes or only deleting under specific conditions.