Splunk Enterprise Certified Architect — Question 52

Which of the following resources should be collected to gather requirements for a Splunk deployment? (Choose all that apply.)

Answer options

• A. Use cases.
• B. Current log storage device mapping.
• C. Data sources.
• D. Which users can access data.

Correct answer: A, B, C, D

Explanation

All the options listed are essential for collecting requirements for a Splunk deployment. Use cases help identify the specific needs and scenarios for using Splunk, current log storage device mapping provides insights into existing infrastructure, data sources are critical for understanding what information will be analyzed, and knowing which users can access data is vital for security and compliance considerations.