Splunk SOAR Certified Automation Developer — Question 6

In distributed search, which components need to be installed on instances other than the search head?

Answer options

• A. SA-IndexCreation and SA-ITSI-Licensechecker on indexers.
• B. SA-IndexCreation and SA-ITOA on indexers; SA-ITSI-Licensechecker and SA-UserAccess on the license master.
• C. SA-IndexCreation on idexers; SA-ITSI-Licensechecker and SA-UserAccess on the license master.
• D. SA-ITSI-Licensechecker on indexers.

Correct answer: A

Explanation

The correct answer is A because SA-IndexCreation and SA-ITSI-Licensechecker are specifically required to be installed on indexers to facilitate proper indexing and ITSI functionalities. The other options include components that are either incorrectly assigned to the wrong instances or not required for the tasks specified.