Question 1

Which of the following tasks is the responsibility of a Splunk Cloud administrator?

Options :

A : Configuring deployer

B : Configuring cluster master

C : Configuring indexers

D : Configuring indexes

Answer: D

Question 2

When monitoring directories that contain mixed file types, which setting should be omitted from inputs, conf and instead be overridden in propo.conf?

Options :

A : sourcetype

B : host

C : source

D : index

Answer: A

Question 3

Which of the following statements is true about data transformations using SEDCMD?

Options :

A : Can only be used to mask or truncate raw data.

B : Configuredin props.conf and transform.conf.

C : Can be used to manipulate the sourcetype per event.

D : Operates on a REGEX pattern match of the source, sourcetype, or host of an event.

Answer: A

Question 4

What are the four default roles that Splunk Cloud Platform comes with?

Options :

A : admin, power, user, sc_admin

B : admin, power, user, can_delete

C : admin, power, user, guest

D : admin, power, user, can_write

Answer: A

Question 5

What are the two options for Dynamic Data Storage in Splunk Cloud that allow you to move expired data from indexes to another storage location?

Options :

A : Splunk Archive and Splunk Backup

B : Splunk Archive and Self Storage

C : Self Storage and Splunk Restore

D : Splunk Backup and Self Storage

Answer: B

Higher Test Marks with Free Online SPLK-1005 Exam Practice