logo
Exam overview and study plan

Cloud Certified Admin SPLK-1005 Practice Questions

Cloud Certified Admin

Read questions, check verified answers and discuss the reasoning. Use reading options to shape your revision, or switch to the simulator for timed practice.

View 30 free questions

30 questions in this view

Page 1 of 5

Question 1

05-07-2024 14:00:49.522 -0700 INFO  Metrics - group=per_host_thruput, series="buttercupisapony", kbps=0.001, eps=0.017, kb=0.072, ev=1, avg_age=4126456.000, max_age=4126456
05-07-2024 14:07:04.662 -0700 INFO  AutoLoadBalancedConnectionStrategy [6005795 TcpOutEloop] - Connected to idx=35.174.216.193:9997:0, pset=0, reuse=0. using ACK. autoBatch=1
05-05-2024 21:14:48.078 +0000 WARN AutoLoadBalancedConnectionStrategy [10422 TcpOutEloop] - Forwarder configured to use protocol level=0, which is no longer supported, will use the lowest supported protocol level=1
03-01-2024 13:35:28.653 ERROR TcpInputFd - SSL Error = error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol
Which of the following indicates that a forwarder is successfully connected into Splunk Cloud?

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

The following sample log event shows evidence of credit card numbers being present in the transactions.log file. 2020-09-10 11:19:00 action=new_transaction cc_num=4556723540397400 value=2.55 ccy=GBP

Which of these SEDCMD settings will mask this and other suspected credit card numbers with an 'x' character for each character being masked? The indexed event should be formatted as follows: Masked version: 2020-09-10 11:19:00 action=new_transaction cc_num=4556723xxxxxxxxx value=2.55 ccy=GBP

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

Consider the following configurations:

$SPLUNK_HOME/etc/apps/unix/local/inputs.conf

[monitor:///var/log/secure.log]
sourcetype = access_combined
index = security


$SPLUNK_HOME/etc/apps/search/local/inputs.conf

[monitor:///var/log/secure.log]
host = logsvr1
sourcetype = linux_secure

What is the value of the sourcetype property for this stanza based on Splunk's configuration file precedence?
linux_secure, access_combined
linux_secure
access_combined
NULL, or unset, due to configuration conflict

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

Which of the following tasks is the responsibility of a Splunk Cloud administrator?

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

Which of the following lists all parameters supported by the acceptFrom argument?

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

Splunk annotates data with only 3 metadata keys: host, source, and sourcetype.
Which of the following takes place during the input phase?
Splunk looks at the contents of the data to apply the correct source.
Splunk sets the character encoding of the data.
Splunk breaks data into individual lines.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.