Online Access Free SPLK-1005 Practice Test

Given the following set of files, which of the monitor stanzas below will result in Splunk monitoring all of the files ending with .log?
Files:
/var/log/www1/secure.log
/var/log/www1/access.log
/var/log/www2/logs/secure.log
/var/log/www2/access.log
/var/log/www2/access.log.1

• A.[monitor:///var/log/*/*.log]
• B.[monitor:///var/log/.../*.log]
• C.[monitor:///var/log/*/*]
• D.[monitor:///var/log/.../*]

A customer has worked with their LDAP administrator to configure an LDAP strategy in Splunk.
The configuration works, and user Mia can log into Splunk using her LDAP Account. After some time, the Splunk Cloud administrator needs to move Mia from the user role to the power role.
How should they accomplish this?

• A.Ask the LDAP administrator to move Mia's account to an appropriately mapped LDAP group.
• B.Create a role named Power in Splunk, then map Mia's account to that role.
• C.Have Mia log into Splunk, then update her own role in user settings.
• D.Use the Cloud Monitoring Console app as an administrator to map Mia's account to the power role.

Li was asked to create a Splunk configuration to monitor syslog files stored on Linux servers at their organization. This configuration will be pushed out to multiple systems via a Splunk app using the on- prem deployment server.
The system administrators have provided Li with a directory listing for the logging locations on three syslog hosts, which are representative of the file structure for all systems collecting this data. An example from each system is shown below:

• A.
• B.
• C.
• D.

Which Splunk Cloud administration task commonly requires assistance from Splunk Support engineering teams directly?

• A.Configuring monitored file inputs for onboarding enterprise production application log sources continuously.
• B.Increasing cloud storage capacity for extended indexed event retention requirements enterprise- wide significantly.
• C.Defining saved searches and dashboard visualizations for operational monitoring and reporting activities.
• D.Creating user accounts and assigning role-based permissions across organizational business departments globally.

Which of the following is an accurate statement about the delete command?

• A.By default, only admins can run the delete command.
• B.The delete command removes events from disk.
• C.Deleting events reclaims disk space.
• D.Events are virtually deleted by marking them as deleted.