Splunk Enterprise Certified Architect — Question 90

Which deployer push mode should be used when pushing built-in apps?

Answer options

• A. default_only
• B. full
• C. merge_to_default
• D. local_only

Correct answer: D

Explanation

The correct answer is D, local_only, as this mode is specifically designed for pushing built-in applications to the local environment. The other options either push to a default setting or merge changes, which are not suitable for this particular scenario.