SPLK-1005 Online Practice Questions and Answers

Which command can be used to install a universal forwarder on a Linux system?

A. splunk install forwarder

B. splunk forwarder install

C. splunk add forward-server

D. splunk enable boot-start

Which configuration file needs to be edited to enable local indexing on the forwarder?

A. outputs.conf

B. inputs.conf

C. props.conf

D. transforms.conf

What is the name of the tab in Splunk Web where you can set the indexes that a role can access?

A. Inheritance

B. Capabilities

C. Indexes

D. Restrictions

Which file processor can be used to index files that are locked by another process on Windows systems?

A. Monitor

B. MonitornoHandle

C. Upload

D. None of the above

Which feature allows a light forwarder to reduce the amount of data sent to the indexer by discarding some events or fields?

A. Data cloning

B. Data filtering

C. Data sampling

D. Data masking

Which setting in inputs.conf can be used to specify the interval at which the script runs for a scripted input?

A. interval

B. frequency

C. schedule

D. cron

What is the name of the topology that allows you to initiate searches from an on-premises Splunk Enterprise search head to a single Splunk Cloud Platform deployment?

A. Hybrid Search Topology

B. Federated Search Topology

C. Distributed Search Topology

D. Clustered Search Topology

Which network protocol is recommended for sending data to Splunk because it guarantees the delivery of network packets?

A. TCP

B. UDP

C. SNMP

D. ICMP

What is the name of the Splunk Cloud feature that allows you to perform self-service administrative tasks such as creating indexes, inputs, and roles?

A. Admin Config Service

B. Admin Console

C. Admin Dashboard

D. Admin Toolkit

Which command can be used to add a data input using the CLI?

A. splunk add input

B. splunk add monitor

C. splunk add data

D. splunk add source