SPLK-1005 Online Practice Questions and Answers

What is the main advantage of self-service Splunk Cloud over managed Splunk Cloud in terms of cost and control?

A. Self-service Splunk Cloud costs less to get started and maintain and allows your organization total control in setup and security configurations.

B. Self-service Splunk Cloud costs more to get started and maintain but allows your organization total control in setup and security configurations.

C. Self-service Splunk Cloud costs less to get started and maintain but requires your organization to rely on Splunk for setup and security configurations.

D. Self-service Splunk Cloud costs more to get started and maintain and requires your organization to rely on Splunk for setup and security configurations.

What is the name of the tab in Splunk Web where you can set the indexes that a role can access?

A. Inheritance

B. Capabilities

C. Indexes

D. Restrictions

What is the name of the configuration file where you can set custom rules for event line breaking and line merging for a specific app?

A. inputs.conf

B. outputs.conf

C. props.conf

D. transforms.conf

What is the name of the first step that you need to perform to configure the LDAP authentication scheme with Splunk Web?

A. Create an LDAP strategy

B. Map LDAP groups to Splunk roles

C. Configure LDAP settings

D. Test LDAP connection

Which feature allows a light forwarder to reduce the amount of data sent to the indexer by discarding some events or fields?

A. Data cloning

B. Data filtering

C. Data sampling

D. Data masking

Which type of metadata can be used to identify the origin of the data?

A. Source

B. Source type

C. Host

D. Index

What is the main difference between events indexes and metrics indexes in Splunk Cloud?

A. Events indexes impose minimal structure and can accommodate any kind of data, while metrics indexes use a highly structured format to handle metrics data.

B. Events indexes use a highly structured format to handle event-based log data, while metrics indexes impose minimal structure and can accommodate any kind of data.

C. Events indexes store data in compressed form, while metrics indexes store data in uncompressed form.

D. Events indexes store data in uncompressed form, while metrics indexes store data in compressed form.

Which network protocol is recommended for sending data to Splunk because it guarantees the delivery of network packets?

A. TCP

B. UDP

C. SNMP

D. ICMP

Which configuration file parameter can be used to modify line termination settings interactively, using the Set Source Type page in Splunk Web?

A. LINE_BREAKER

B. SHOULD_LINEMERGE

C. BREAK_ONLY_BEFORE

D. TRUNCATE

What is the name of the input processor that allows you to monitor files that Windows rotates automatically on machines that run Windows Vista or Windows Server 2008 and higher?

A. monitor

B. MonitorNoHandle

C. upload

D. UploadNoHandle