Refresh Splunk Cloud Certified Admin SPLK-1005 Actual Exam

NEW QUESTION 1
Which configuration file parameter can be used to modify line termination settings interactively, using the Set Source Type page in Splunk Web?

• A. LINE_BREAKER
• B. SHOULD_LINEMERGE
• C. BREAK_ONLY_BEFORE
• D. TRUNCATE

Answer: B

NEW QUESTION 2
Which option can be used to specify the source type of the data when creating a file or directory monitor input?

• A. Set Source Type
• B. Select Source Type
• C. Choose Source Type
• D. Define Source Type

Answer: A

NEW QUESTION 3
What is the name of the option that you need to check in Splunk Web to enable LDAP authentication for your Splunk Cloud Platform deployment?

• A. LDAP
• B. External
• C. LDAP/External
• D. External/LDAP

Answer: C

NEW QUESTION 4
Which setting in inputs.conf can be used to specify the maximum size of a file that can be monitored by Splunk?

• A. max_file_size
• B. max_file_age
• C. max_file_count
• D. max_file_bytes

Answer: A

NEW QUESTION 5
What are the four default roles that Splunk Cloud Platform comes with?

• A. admin, power, user, can_delete
• B. admin, power, user, sc_admin
• C. admin, power, user, guest
• D. admin, power, user, can_write

Answer: B

NEW QUESTION 6
Which feature of forwarders can protect the data from unauthorized access or tampering?

• A. Data compression
• B. SSL security
• C. Data masking
• D. Data encryption

Answer: B

NEW QUESTION 7
What is the regular expression format that represents any sequence of newlines and carriage returns, which is the default value of the LINE_BREAKER setting?

• A. ( [\r\n]+)
• B. ( [\s]+)
• C. ( [\w]+)
• D. ( [\p]+)

Answer: A

NEW QUESTION 8
Which feature allows a heavy forwarder to route data to different indexers based on criteria such as source, sourcetype, or host?

• A. Data cloning
• B. Data filtering
• C. Data sampling
• D. Data masking

Answer: A

NEW QUESTION 9
What is the name of the default field that stores the timestamps in UNIX time when data is indexed?

• A. _time
• B. _timestamp
• C. _date
• D. _epoch

Answer: A

NEW QUESTION 10
Which configuration file determines how a universal forwarder forwards data to the indexer?

• A. inputs.conf
• B. outputs.conf
• C. props.conf
• D. transforms.conf

Answer: B

NEW QUESTION 11
What is the name of the configuration file where you can define data transformations using regular expressions and other attributes?

• A. limits.conf
• B. props.conf
• C. inputs.conf
• D. transforms.conf

Answer: D

NEW QUESTION 12
Which command can be used to install the Splunk universal forwarder credentials package on the universal forwarder machine?

• A. splunk install app <path_to_credentials_package>
• B. splunk add app <path_to_credentials_package>
• C. splunk install forwarder-credentials <path_to_credentials_package>
• D. splunk add forwarder-credentials <path_to_credentials_package>

Answer: A

NEW QUESTION 13
What is the name of the Splunk Enterprise feature that provides a security data and event management (SIEM) solution that uses machine data to detect and respond to threats?

• A. Splunk Enterprise Security
• B. Splunk Enterprise Intelligence
• C. Splunk Enterprise Analytics
• D. Splunk Enterprise Monitoring

Answer: A

NEW QUESTION 14
Which command can be used to run a ‘splunk diag’ on both the indexer and the forwarder?

• A. splunk diag -collect all -uri https://<username>:<password>@<host>:<port>
• B. splunk diag -collect all -auth <username>:<password>
• C. splunk diag -collect all -server <host>:<port>
• D. splunk diag -collect all -user <username> -password <password>

Answer: B

NEW QUESTION 15
Which type of forwarder can act as an intermediate forwarder to receive data from other forwarders and send it to the indexer?

• A. Universal forwarder
• B. Heavy forwarder
• C. Light forwarder
• D. Any type of forwarder

Answer: B

NEW QUESTION 16
What is the name of the Splunk Cloud feature that allows you to perform self-service administrative tasks such as creating indexes, inputs, and roles?

• A. Admin Config Service
• B. Admin Console
• C. Admin Dashboard
• D. Admin Toolkit

Answer: A

NEW QUESTION 17
What is the name of the Splunk Cloud setting that allows you to specify the maximum amount of raw data allowed before data is removed from the index?

• A. Max raw data size
• B. Max data retention
• C. Max index size
• D. Max data volume

Answer: A

NEW QUESTION 18
What is the main difference between events indexes and metrics indexes in Splunk Cloud?

• A. Events indexes impose minimal structure and can accommodate any kind of data, while metrics indexes use a highly structured format to handle metrics data.
• B. Events indexes use a highly structured format to handle event-based log data, while metrics indexes impose minimal structure and can accommodate any kind of data.
• C. Events indexes store data in compressed form, while metrics indexes store data in uncompressed form.
• D. Events indexes store data in uncompressed form, while metrics indexes store data in compressed form.

Answer: A

NEW QUESTION 19
Which type of forwarder has the lowest system resource usage and the highest data throughput?

• A. Universal forwarder
• B. Heavy forwarder
• C. Light forwarder
• D. Deployment client

Answer: A

NEW QUESTION 20
Which option can be used to specify the host value of the data when creating a file or directory monitor input?

• A. Set Host
• B. Select Host
• C. Choose Host
• D. Define Host

Answer: A

NEW QUESTION 21
......