Splunk Enterprise Security Certified Analyst — Question 29

A customer's deployment server is overwhelmed with forwarder connections after adding an additional 1000 clients. The default phone home interval is set to 60 seconds. To reduce the number of connection failures to the DS what is recommended?

Answer options

• A. Create a tiered deployment server topology.
• B. Reduce the phone home interval to 6 seconds.
• C. Leave the phone home interval at 60 seconds.
• D. Increase the phone home interval to 600 seconds.

Correct answer: D

Explanation

Increasing the phone home interval to 600 seconds allows clients to check in less frequently, thereby reducing the number of simultaneous connections to the deployment server. This helps prevent overload and connection failures. The other options either maintain or decrease the interval, which would exacerbate the issue rather than resolve it.