Splunk Enterprise Security Certified Admin — Question 79

Which of the following is a recommended pre-installation step?

Answer options

• A. Install the latest Python distribution on the search head.
• B. Download the latest version of KV Store from MongoDB.com.
• C. Configure search head forwarding.
• D. Disable the default search app.

Correct answer: C

Explanation

Configuring search head forwarding is essential to ensure that the search head can send data to the indexer properly, making it the correct pre-installation step. The other options, while important in different contexts, are not specifically recommended as pre-installation steps for this scenario.