Splunk SOAR Certified Automation Developer — Question 7

When deploying ITSI on a distributed Splunk installation, which component must be installed on the search head(s)?

Answer options

• A. SA-ITOA
• B. ITSI app
• C. All ITSI components
• D. SA-ITSI-Licensechecker

Correct answer: C

Explanation

The correct answer is C because all ITSI components need to be present on the search head(s) for proper functionality and integration. Options A, B, and D are incorrect as they represent individual components that do not encompass the entirety of what is needed for a complete ITSI installation.