Use this quick start guide to collect all the information about Splunk Core Consultant (SPLK-3003) Certification exam. This study guide provides a list of objectives and resources that will help you prepare for items on the SPLK-3003 Splunk Core Certified Consultant exam. The Sample Questions will help you identify the type and difficulty level of the questions and the Practice Exams will make you familiar with the format and environment of an exam. You should refer this guide carefully before attempting your actual Splunk Core Consultant certification exam.
The Splunk Core Consultant certification is mainly targeted to those candidates who want to build their career in Enterprise domain. The Splunk Core Certified Consultant exam verifies that the candidate possesses the fundamental knowledge and proven skills in the area of Splunk Core Consultant.
Splunk Core Consultant Exam Summary:
| Exam Name | Splunk Core Certified Consultant |
| Exam Code | SPLK-3003 |
| Exam Price | $130 (USD) |
| Duration | 120 mins |
| Number of Questions | 86 |
| Passing Score | 700 / 1000 |
| Books / Training | Core Certified Consultant Learning Path |
| Schedule Exam | Pearson VUE |
| Sample Questions | Splunk Core Consultant Sample Questions |
| Practice Exam | Splunk SPLK-3003 Certification Practice Exam |
Splunk SPLK-3003 Exam Syllabus Topics:
| Topic | Details | Weights |
|---|---|---|
| Deploying Splunk |
- Define Splunk Validated Architectures (SVA) - Articulate how and why Splunk grows from standalone environment to distributed environment with indexer and search head clustering - Explain the difference between high availability and disaster recovery and how both can be addressed in Splunk |
5% |
| Monitoring Console |
- Describe which instances are suitable to configure as the Monitoring Console - Articulate how to configure the MC for a single or distributed environment - Examine how the MC uses the server roles and groups - Describe how MC health checks are performed and can be extended |
8% |
| Access and Roles |
- Identify authentication methods - Describe LDAP concepts and configuration - List SAML and SSO options - Define roles and articulate how roles are used to secure data |
8% |
| Data Collection |
- Articulate the different ways data can be ingested by an indexer - Articulate how one Splunk instance communicates with another Splunk instance (S2S) - Describe the types and configuration of data inputs - Describe ways to troubleshoot data inputs |
15% |
| Indexing |
- List indexing artifacts and locations - Describe event processing and data pipelines - Describe the underlying text parsing and indexing process - List data retention controls |
14% |
| Search |
- Describe how to use search job inspection; explain the inner-workings of a search - List the different search types - Describe how to maximize search efficiency - Describe how sub-searches work |
14% |
| Configuration Management |
- Describe a deployment app - Articulate how a deployment server works - Describe deployment system configuration - Articulate how to manage deployment server |
8% |
| Indexer Clustering |
- Describe deployment and component configuration - Describe the life cycle of data using buckets - Determine failure modes and recovery processes - Articulate how multi-site clustering works - List migration procedures |
18% |
| Search Head Clustering |
- Articulate how to manage and deploy a search head cluster - Determine when a search head cluster may be needed and when a search head cluster would not be recommended - Describe content management using the deployer - Describe the role of the cluster members and the Captain - Articulate how captain election works (RAFT) |
10% |
To ensure success in Splunk Core Consultant certification exam, we recommend authorized training course, practice test and hands-on experience to prepare for Splunk Core Certified Consultant (SPLK-3003) exam.