Leading Splunk Cloud Certified Admin SPLK-1005 Preparation

NEW QUESTION 1
What is the name of the topology that allows you to initiate searches from an on-premises Splunk Enterprise search head to a single Splunk Cloud Platform deployment?

• A. Hybrid Search Topology
• B. Federated Search Topology
• C. Distributed Search Topology
• D. Clustered Search Topology

Answer: A

NEW QUESTION 2
Which setting in inputs.conf can be used to specify the maximum size of a file that can be monitored by Splunk?

• A. max_file_size
• B. max_file_age
• C. max_file_count
• D. max_file_bytes

Answer: A

NEW QUESTION 3
Which Windows-specific input type allows Splunk software to read special Windows log files such as the DNS debug server log?

• A. MonitorNoHandle
• B. Windows Event Log
• C. Windows Registry
• D. Windows Management Instrumentation (WMI)

Answer: A

NEW QUESTION 4
Which option can be used to specify the host value of the data when creating a file or directory monitor input?

• A. Set Host
• B. Select Host
• C. Choose Host
• D. Define Host

Answer: A

NEW QUESTION 5
What is the name of the input processor that allows you to monitor files that Windows rotates automatically on machines that run Windows Vista or Windows Server 2008 and higher?

• A. monitor
• B. MonitorNoHandle
• C. upload
• D. UploadNoHandle

Answer: B

NEW QUESTION 6
What is the name of the attribute that specifies the name of the stanza in the transforms.conf file that defines the data transformation in the props.conf file?

• A. REGEX
• B. FORMAT
• C. DEST_KEY
• D. TRANSFORMS

Answer: D

NEW QUESTION 7
Which file processor can be used to index files that are locked by another process on Windows systems?

• A. Monitor
• B. MonitornoHandle
• C. Upload
• D. None of the above

Answer: B

NEW QUESTION 8
What is the name of the tab in Splunk Web where you can set the indexes that a role can access?

• A. Inheritance
• B. Capabilities
• C. Indexes
• D. Restrictions

Answer: C

NEW QUESTION 9
What are the three types of data that indexes contain in Splunk Cloud?

• A. Raw data, index data, and metadata
• B. Raw data, event data, and metadata
• C. Raw data, index data, and event data
• D. Raw data, index data, and metrics data

Answer: A

NEW QUESTION 10
Which type of forwarder is a legacy option that is not recommended for new deployments?

• A. Universal forwarder
• B. Heavy forwarder
• C. Light forwarder
• D. Deployment client

Answer: C

NEW QUESTION 11
Which network protocol is recommended for sending data to Splunk because it guarantees the delivery of network packets?

• A. TCP
• B. UDP
• C. SNMP
• D. ICMP

Answer: A

NEW QUESTION 12
Which feature allows a heavy forwarder to route data to different indexers based on criteria such as source, sourcetype, or host?

• A. Data cloning
• B. Data filtering
• C. Data sampling
• D. Data masking

Answer: A

NEW QUESTION 13
Which type of forwarder can perform data parsing and enrichment before sending it to the indexer?

• A. Universal forwarder
• B. Heavy forwarder
• C. Deployment server
• D. Search head

Answer: B

NEW QUESTION 14
Which configuration file needs to be edited to enable local indexing on the forwarder?

• A. outputs.conf
• B. inputs.conf
• C. props.conf
• D. transforms.conf

Answer: A

NEW QUESTION 15
What is the name of the directory that contains all the Splunk indexes and other important data??

• A. /bin
• B. /var
• C. /etc
• D. /lib

Answer: B

NEW QUESTION 16
What is the main advantage of managed Splunk Cloud over self-service Splunk Cloud in terms of scalability and reliability?

• A. Managed Splunk Cloud provides a single-instance environment that can scale up to 10TB/day and offers a 100% uptime SLA.
• B. Managed Splunk Cloud provides a clustered environment that can scale up to 10TB/day and offers a 100% uptime SLA.
• C. Managed Splunk Cloud provides a single-instance environment that can scale up to 5TB/day and offers a 99.9% uptime SLA.
• D. Managed Splunk Cloud provides a clustered environment that can scale up to 5TB/day and offers a 99.9% uptime SLA.

Answer: B

NEW QUESTION 17
Which tool can be used to verify that data is actually being received on the specified port on the indexing server?

• A. tcpdump
• B. netstat
• C. ping
• D. traceroute

Answer: A

NEW QUESTION 18
......