SPLK-1005 Online Practice Questions and Answers

Which configuration file needs to be edited to enable local indexing on the forwarder?

A. outputs.conf

B. inputs.conf

C. props.conf

D. transforms.conf

What is the main advantage of self-service Splunk Cloud over managed Splunk Cloud in terms of cost and control?

A. Self-service Splunk Cloud costs less to get started and maintain and allows your organization total control in setup and security configurations.

B. Self-service Splunk Cloud costs more to get started and maintain but allows your organization total control in setup and security configurations.

C. Self-service Splunk Cloud costs less to get started and maintain but requires your organization to rely on Splunk for setup and security configurations.

D. Self-service Splunk Cloud costs more to get started and maintain and requires your organization to rely on Splunk for setup and security configurations.

Which file processor can be used to index files that are locked by another process on Windows systems?

A. Monitor

B. MonitornoHandle

C. Upload

D. None of the above

What is the name of the first step that you need to perform to configure the LDAP authentication scheme with Splunk Web?

A. Create an LDAP strategy

B. Map LDAP groups to Splunk roles

C. Configure LDAP settings

D. Test LDAP connection

What is the name of the configuration file that governs data inputs such as forwarders and file system monitoring?

A. inputs.conf

B. props.conf

C. transforms.conf

D. outputs.conf

Which setting in inputs.conf can be used to specify the SSL certificate for a TCP or UDP input?

A. sslCertPath

B. sslRootCAPath

C. sslPassword

D. All of the above

Which setting in inputs.conf can be used to specify the SSL certificate for a TCP or UDP input?

A. sslCertPath

B. sslRootCAPath

C. sslPassword

D. All of the above

Which network protocol is recommended for sending data to Splunk because it guarantees the delivery of network packets?

A. TCP

B. UDP

C. SNMP

D. ICMP

What is the name of the attribute that specifies the name of the stanza in the transforms.conf file that defines the data transformation in the props.conf file?

A. REGEX

B. FORMAT

C. DEST_KEY

D. TRANSFORMS

Which option in Splunk web can be used to access the Guided Data On-boarding feature?

A. Add data

B. Data inputs

C. Data summary

D. Data models