SPLK-1005 Online Practice Questions and Answers

Which file processor can be used to index files that are locked by another process on Windows systems?

A. Monitor

B. MonitornoHandle

C. Upload

D. None of the above

Which input type can be used to monitor Windows Event Logs from a remote machine?

A. WinEventLog

B. WinEventLogCollections

C. WinEventLogForwarder

D. WinEventLogRemote

What is the name of the Splunk Cloud setting that allows you to specify the maximum amount of raw data allowed before data is removed from the index?

A. Max raw data size

B. Max data retention

C. Max index size

D. Max data volume

What is the main advantage of managed Splunk Cloud over self-service Splunk Cloud in terms of scalability and reliability?

A. Managed Splunk Cloud provides a single-instance environment that can scale up to 10TB/day and offers a 100% uptime SLA.

B. Managed Splunk Cloud provides a clustered environment that can scale up to 10TB/day and offers a 100% uptime SLA.

C. Managed Splunk Cloud provides a single-instance environment that can scale up to 5TB/day and offers a 99.9% uptime SLA.

D. Managed Splunk Cloud provides a clustered environment that can scale up to 5TB/day and offers a 99.9% uptime SLA.

Which feature of forwarders can protect the data from unauthorized access or tampering?

A. Data compression

B. SSL security

C. Data masking

D. Data encryption

Which setting in inputs.conf can be used to specify the SSL certificate for a TCP or UDP input?

A. sslCertPath

B. sslRootCAPath

C. sslPassword

D. All of the above

Which tool can be used to verify that data is actually being received on the specified port on the indexing server?

A. tcpdump

B. netstat

C. ping

D. traceroute

Which network protocol is recommended for sending data to Splunk because it guarantees the delivery of network packets?

A. TCP

B. UDP

C. SNMP

D. ICMP

Which option in Splunk Web can be used to create a new local TCP input?

A. Settings > Data Inputs > TCP > New Local TCP

B. Settings > Data Inputs > TCP > Add New

C. Settings > Data Inputs > TCP > Create New

D. Settings > Data Inputs > TCP > New Data Input

What is the name of the Splunk Enterprise feature that provides a security data and event management (SIEM) solution that uses machine data to detect and respond to threats?

A. Splunk Enterprise Security

B. Splunk Enterprise Intelligence

C. Splunk Enterprise Analytics

D. Splunk Enterprise Monitoring