Splunk Core Certified Consultant — Question 35

Where is the recommended place to deploy input apps that are not permitted on Splunk Cloud?

Answer options

• A. Universal Forwarder or Heavy Forwarder.
• B. Heavy Forwarder only.
• C. Universal Forwarder only.
• D. Apps cannot be installed on on-prem instances.

Correct answer: A

Explanation

The recommended deployment for input apps that cannot be used on Splunk Cloud is either a Universal Forwarder or a Heavy Forwarder, as both can handle data inputs effectively. The option stating only a Heavy Forwarder is insufficient since it excludes the Universal Forwarder, which is also valid. The option suggesting only a Universal Forwarder is incorrect because it does not consider the Heavy Forwarder as an option. Lastly, the statement about apps not being installable on on-prem instances is false since they can be installed there.