[Q89-Q107] Dumps for Free Splunk SPLK-1003 Practice Exam Questions [Nov 09, 2023]

5/5 - (1 投票)

Dumps for Free Splunk SPLK-1003 Practice Exam Questions [Nov 09, 2023]

SPLK-1003 Dumps PDF And Certification Training

QUESTION 89
Which configuration file would be used to forward the Splunk internal logs from a search head to the indexer?

props.conf

inputs.conf

outputs.conf

collections.conf

QUESTION 90
Which of the following enables compression for universal forwarders in outputs. conf ?
A)

B)

C)

D)

Option A

Option B

Option C

Option D

QUESTION 91
Which configuration files are used to transform raw data ingested by Splunk? (Choose all that apply.)

props.conf

inputs.conf

rawdata.conf

transforms.conf

QUESTION 92
When running the command shown below, what is the default path in which deployment server. conf is created?
splunk set deploy-poll deployServer:port

SFLUNK_HOME/etc/deployment

SPLUNK_HOME/etc/system/local

SPLUNK_HOME/etc/system/default

SPLUNK_KOME/etc/apps/deployment

QUESTION 93
Which parent directory contains the configuration files in Splunk?

$SPLUNK_HOME/etc

$SPLUNK_HOME/var

$SPLUNK_HOME/conf

$SPLUNK_HOME/default

QUESTION 94
Where are deployment server apps mapped to clients?

Apps tab in forwarder management interface or clientapps.conf.

Clients tab in forwarder management interface or deploymentclient.conf.

Server Classes tab in forwarder management interface or serverclass.conf.

Client Applications tab in forwarder management interface or clientapps.conf.

QUESTION 95
If an update is made to an attribute in inputs.conf on a universal forwarder, on which Splunk component would the fishbucket need to be reset in order to reindex the data?

Indexer

Forwarder

Search head

Deployment server

QUESTION 96
Which authentication methods are natively supported within Splunk Enterprise? (select all that apply)

LDAP

SAML

RADIUS

Duo Multifactor Authentication

QUESTION 97
How often does Splunk recheck the LDAP server?

Every 5 minutes.

Each time a user logs in.

Each time Splunk is restarted.

Varies based on LDAP_refresh setting.

QUESTION 98
Which of the following is an appropriate description of a deployment server in a non-cluster environment?

Allows management of local Splunk instances, requires Enterprise license, handles job of sending configurations packaged as apps. can automatically restart remote Splunk instances.

Allows management of remote Splunk instances, requires Enterprise license, handles job of sending configurations, can automatically restart remote Splunk instances.

Allows management of remote Splunk instances, requires no license, handles job of sending configurations, can automatically restart remote Splunk instances.

Allows management of remote Splunk instances, requires Enterprise license, handles job of sending configurations, can manually restart remote Splunk instances.

QUESTION 99
Which of the following statements describes how distributed search works?

Forwarders pull data from the search peers.

Search heads store a portion of the searchable data.

The search head dispatches searches to the search peers.

Search results are replicated within the indexer cluster.

QUESTION 100
Which of the following are supported options when configuring optional network inputs?

Metadata override, sender filtering options, network input queues (quantum queues)

Metadata override, sender filtering options, network input queues (memory/persistent queues)

Filename override, sender filtering options, network output queues (memory/persistent queues)

Metadata override, receiver filtering options, network input queues (memory/persistent queues)

QUESTION 101
Load balancing on a Universal Forwarder is not scaling correctly. The forwarder’s outputs. and the tcpout stanza are setup correctly. What else could be the cause of this scaling issue? (select all that apply)

The receiving port is not properly setup to listen on the right port.

The inputs . conf’S _SYSZOG_ROVTING is not setup to use the right group names.

The DNS record used is not setup with a valid list of IP addresses.

The indexAndForward value is not set properly.

QUESTION 102
In which phase do indexed extractions in props.conf occur?

Inputs phase

Parsing phase

Indexing phase

Searching phase

QUESTION 103
User role inheritance allows what to be inherited from the parent role? (select all that apply)

Parents

Capabilities

Index access

Search history

QUESTION 104
During search time, which directory of configuration files has the highest precedence?

$SFLUNK_KOME/etc/system/local

$SPLUNK_KCME/etc/system/default

$SPLUNK_HCME/etc/apps/app1/local

$SPLUNK HCME/etc/users/admin/local

QUESTION 105
Which of the following configuration files are used with a universal forwarder? (Choose all that apply.)

inputs.conf

monitor.conf

outputs.conf

forwarder.conf

QUESTION 106
Which of the following statements apply to directory inputs? {select all that apply)

All discovered text files are consumed.

Compressed files are ignored by default

Splunk recursively traverses through the directory structure.

When adding new log files to a monitored directory, the forwarder must be restarted to take them into account.

QUESTION 107
This file has been manually created on a universal forwarder

A new Splunk admin comes in and connects the universal forwarders to a deployment server and deploys the same app with a new

Which file is now monitored?