Enterprise Certified Admin SPLK-1003 Practice Questions & Answers • ExamPrepare

Question 1

wmi.conf

wmi_inputs.conf

inputs.conf

What configuration file are remote Windows Management Instrumentation inputs defined in?

None, the inputs are defined outside of Splunk.

wmi.conf
inputs.conf
wmi_inputs.conf
None, the inputs are defined outside of Splunk.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

What configuration file are remote Windows Management Instrumentation inputs defined in?

wmi.conf
inputs.conf
wmi_inputs.conf
None, the inputs are defined outside of Splunk.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

How does the Monitoring Console monitor forwarders?

By pulling internal logs from forwarders.
By using the forwarder monitoring add-on.
With internal logs forwarded by forwarders.
With internal logs forwarded by deployment server.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

A Splunk admin has setup the following directory monitor for their custom application:

[monitor://myapp/logs]
ignoreOlderThan = 1h

What describes the behavior of Splunk?

Splunk reads all files in the directory, except those that have a modification time older than an hour. Splunk does not attempt to read those files again until it is restarted.
Splunk reads all files in the directory, except those that have a modification time older than an hour. Splunk will read those files as soon as they are modified.
Splunk reads all files in the directory, except those that have a create time older than an hour. Splunk does not attempt to read those files again until it is restarted.
Splunk reads all files in the directory, except those that have a create time older than an hour. Splunk will read those files as soon as they are accessed.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

Which of the following is a benefit of distributed search?

Peers run search in sequence.
Peers run search in parallel.
Resilience from indexer failure.
Resilience from search head failure.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

What action is required to enable forwarder management in Splunk Web?

Navigate to Settings > Forwarding and receiving, and click on Enable Forwarding.
Navigate to Settings > Server Settings > General Settings, and set an App server port.
Place an app in the SPLUNK_HOME/ etc/de ployment-apps directory of the deployment server.
Create a server class and map it to a client in SPLUNK_HOME/etc/system/local/serverclass.conf .

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.