Online Access Free SPLK-1003 Practice Test

Local user accounts created in Splunk store passwords in which file?

• A.$ SFLUNK_HOME/etc/passwd
• B.$ S?LUNK_HOME/etc/users/passwd.conf
• C.$ SFLUNK_HOME/etc/authentication
• D.$ SPLUNK HOME/etc/users/authentication.conf

Which of the following authentication types requires scripting in Splunk?

• A.LDAP
• B.ADFS
• C.SAML
• D.RADIUS

Which of the following configuration files are used with a universal forwarder? (Choose all that apply.)

• A.outputs.conf
• B.monitor.conf
• C.inputs.conf
• D.forwarder.conf

Which option accurately describes the purpose of the HTTP Event Collector (HEC)?

• A.A token-based HTTP input that is secure and scalable and that does not require the use of forwarders.
• B.A token-based HTTP input that is secure and scalable and that requires the use of forwarders
• C.A token-based HTTP input that is insecure and non-scalable and that does not require the use of forwarders.
• D.An agent-based HTTP input that is secure and scalable and that does not require the use of forwarders.

The following stanzas in inputs. conf are currently being used by a deployment client:
[udp: //145.175.118.177:1001
Connection_host = dns
sourcetype = syslog
Which of the following statements is true of data that is received via this input?

• A.Local firewall ports do not need to be opened on the deployment client since the port is defined in inputs.conf.
• B.If Splunk is restarted, data will be queued and then sent when Splunk has restarted.
• C.If Splunk is restarted, data may be lost.
• D.The host value associated with data received will be the IP address that sent the data.