SPLK-1003 Practice Test

SPLK-1003 Practice Test practice questions, page 4 of 9, with answer review and explanations.

Question 16

When configuring monitor inputs with whitelists or blacklists, what is the supported method of filtering the lists?

  1. Slash notation
  2. Regular expression
  3. Irregular expression
  4. Wildcard-only expression

Question 17

What is required when adding a native user to Splunk? (Choose all that apply.)

  1. Password
  2. Username
  3. Full Name
  4. Default app

Question 18

What are the minimum required settings when creating a network input in Splunk?

  1. Protocol, port number
  2. Protocol, port, location
  3. Protocol, username, port
  4. Protocol, IP, port number

Question 19

Which Splunk component requires a Forwarder license?

  1. Search head
  2. Heavy forwarder
  3. Heaviest forwarder
  4. Universal forwarder

Question 20

Which optional configuration setting in inputs.conf allows you to selectively forward the data to specific indexer(s)?

  1. _TCP_ROUTING
  2. _INDEXER_LIST
  3. _INDEXER_GROUP
  4. _INDEXER_ROUTING