SPLK-1003 by Splunk Actual Free Exam Q&As

Question 1

Which of the following enables compression for universal forwarders in outputs. conf?

A.

B.

C.

D.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 2

Which of the following applies only to Splunk index data integrity check?

A. Raw data in the index B. Data model acceleration C. Summary Index D. Lookup table

Discussion 0

Correct Answer: A Vote an answer

Question 3

Search heads in a company's European offices need to be able to search data in their New York offices. They also need to restrict access to certain indexers. What should be configured to allow this type of action?

A. Indexer clustering B. LDAP control C. Search head clustering D. Distributed search

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 4

Which of the following must be done to define user permissions when integrating Splunk with LDAP?

A. Map Users B. Map LDAP to Active Directory C. Map Groups D. Map LDAP Inheritance

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 5

Where are license files stored?

A. $SPLUNK_HOME/etc/apps/licenses B. $SPLUNK_HOME/etc/system C. $SPLUNK_HOME/etc/licenses D. $SPLUNK_HOME/etc/secure

Discussion 0

Correct Answer: C Vote an answer

Question 6

User role inheritance allows what to be inherited from the parent role? (select all that apply)

A. Search history B. Parents C. Capabilities D. Index access

Discussion 0

Correct Answer: C,D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 7

Which of the following apply to how distributed search works? (select all that apply)

A. The search head consolidates the individual results and prepares reports B. Peers run searches in parallel and return their portion of results. C. The search head dispatches searches to the peers D. The search peers pull the data from the forwarders.

Discussion 0

Correct Answer: A,B,C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 8

Which option accurately describes the purpose of the HTTP Event Collector (HEC)?

A. A token-based HTTP input that is secure and scalable and that does not require the use of forwarders. B. A token-based HTTP input that is secure and scalable and that requires the use of forwarders C. A token-based HTTP input that is insecure and non-scalable and that does not require the use of forwarders. D. An agent-based HTTP input that is secure and scalable and that does not require the use of forwarders.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 9

What is the order in which apps are searched for tags.confat search time?

A. Lexicographical B. Reverse-lexicographical C. Alphabetical D. Alpha-numeric

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 10

The volume of data from collecting log files from 50 Linux servers and 200 Windows servers will require multiple indexers. Following best practices, which types of Splunk component instances are needed?

A. Indexers, search head, deployment server, license master, universal forwarder B. Indexers, search head, universal forwarders, license master C. Indexers, search head, deployment server, license master, universal forwarder, heavy forwarder D. Indexers, search head, deployment server, universal forwarders

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Splunk Enterprise Certified Admin - SPLK-1003 Exam Practice Test