SPLK-1005 by Splunk Actual Free Exam Questions And Answers

Question 1

In case of a Change Request, which of the following should submit a support case for Splunk Support?

A. Splunk infrastructure owner.

B. Any person with the appropriate entitlement

C. Certified Splunk Cloud administrator.

D. The party requesting the change.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 2

A Splunk Cloud administrator is looking to allow a new group of Splunk users in the marketing department to access the Splunk environment and view a dashboard with relevant data. These users need to access marketing data (stored in the marketing_data index), but shouldn't be able to access other data, such as events related to security or operations.
Which approach would be the best way to accomplish these requirements?

A. Create a new role that does not inherit from any other role, turn on the same capabilities as the user role, and assign access to the marketing_data index.

B. Create a new user with access to the marketing_data index assigned.

C. Create a new role that inherits the admin rote and assign access to the marketing_dat.a index.

D. Create a new role that inherits the user role and remove the capability to search indexes other than marketing_data.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 3

Which monitor statement will retrieve only files that start with "access" in the directory
/opt/log/www2/?

A. [monitor:///opt/log/www2/access*]

B. [monitor:///opt/lug/.../access]

C. [monitor:///opt/log/.../]

D. [monitor:///opt/log/www2/]

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 4

Which Splunk Cloud feature primarily provides centralized operational dashboards for distributed infrastructure monitoring activities?

A. Search Head clustering authenticates users and distributes application packages toward enterprise endpoints continuously.

B. Monitoring Console displays deployment health metrics and distributed search performance information centrally.

C. Deployment Server permanently stores archived security logs for forensic investigations across enterprises globally.

D. Universal Forwarders synchronize indexed events and retention settings across cloud storage infrastructures automatically.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 5

By default, which of the following capabilities are granted to the sc_admin role?

A. indexes_edit, edit___token, admin_all_objects, delete_by_keyword

B. indexes_edit, edit_token_http, admin _all objects, edit limits_conf

C. indexes_edit, fsh_manage, admin_all_objects can_delete

D. indexes_edit, fsh_manage, acs_conf, list_indexesdiscovert

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 6

Which of the following is not a path used by Splunk to execute scripts?

A. SPLUNKHOMS/ctc/scripts/local

B. SPLUNK_HOME/bin/scripts

C. SPLUNK HOME/etc/appa/<app name>/bin

D. SPLUNK_HOME/etc/system/bin

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 7

How is it possible to test a script from the Splunk perspective before using it within a scripted input?

A. splunk script <scriptname>

B. splunk run <scriptname>

C. ./$SPLUNK_HOME/etc/apps/<app>/bin/<scriptname>

D. splunk cmd <scriptname>

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 8

Which of the following would always require raising a support ticket?

A. Data is not indexed in Splunk Cloud.

B. Search does not return expected results in Splunk Cloud.

C. Capacity or configuration changes in Splunk Cloud.

D. A user is unable to log into Splunk Cloud.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 9

What two files are used in the data transformation process?

A. props.conf and transforms.conf

B. transforms.conf and sourcetypes.conf

C. parsing.conf and transforms.conf

D. transforms.conf and fields.conf

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Splunk Cloud Certified Admin - SPLK-1005 Exam Practice Test

Contact Us

Useful Links

Latest Updated