Free Splunk Enterprise Certified Admin Practice Questions

A.  

Lightweight Directory Access Protocol (LDAP)

B.  

Security Assertion Markup Language (SAML)

C.  

Single Sign-on (SSO)

D.  

OpenlD

A.  

As an app.

B.  

As a forward.conf file.

C.  

As a monitor.conf file.

D.  

As a forwarder monitor profile.

A.  

Peers run search in sequence.

B.  

Peers run search in parallel.

C.  

Resilience from indexer failure.

D.  

Resilience from search head failure.

A.  

If Splunk cannot connect to the multifactor authentication provider, all logins will be denied.

B.  

Multifactor authentication is required to log into the host operating system.

C.  

The secretKey does not need to be protected since multifactor authentication is turned on.

D.  

If Splunk cannot connect to the multifactor authentication provider, authentications will be successful without completing a multifactor challenge.

A.  

On Universal Forwarder, $SPLUNK_HOME/etc/apps

B.  

On Deployment Server, $SPLUNK_HOME/etc/apps

C.  

On Deployment Server, $SPLUNK_HOME/etc/deployment-apps

D.  

On Universal Forwarder, $SPLUNK_HOME/etc/deployment-apps

A.  

Search head

B.  

Heavy forwarder

C.  

Heaviest forwarder

D.  

Universal forwarder

A.  

Create one outputs . conf file for each of the server addresses in the indexing tier.

B.  

Configure the outputs . conf file to point to any server in the indexing tier and Splunk will configure the data to be sent to all of the indexers.

C.  

Splunk does not do load balancing and requires a hardware load balancer to balance traffic across the indexers.

D.  

Set the stanza to have a server value equal to a comma-separated list of IP addresses and indexer ports for each of the indexers in the environment.

A.  

splunk btool server list --debug

B.  

splunk list forward-indexer

C.  

splunk list forward-server

D.  

splunk btool indexes list --debug

A.  

Having the change authentication capability will not allow setup of the LDAP integration.

B.  

Mappings can be changed at any time if the user has the power role.

C.  

A user cannot log in via LDAP unless they have an associated Splunk role.

D.  

LDAP integration will not function unless all groups are mapped to an LDAP group.

A.  

sourcetypes . conf

B.  

trans forms . conf

C.  

outputs . conf

D.  

props . conf