SPLK-1003 Practice Test

SPLK-1003 Practice Test practice questions, page 5 of 9, with answer review and explanations.

Question 21

To set up a network input in Splunk, what needs to be specified?

  1. File path.
  2. Username and password.
  3. Network protocol and port number.
  4. Network protocol and MAC address.

Question 22

Which Splunk forwarder type allows parsing of data before forwarding to an indexer?

  1. Universal forwarder
  2. Parsing forwarder
  3. Heavy forwarder
  4. Advanced forwarder

Question 23

Which of the following statements describe deployment management? (Choose all that apply.)

  1. Requires an Enterprise license.
  2. Is responsible for sending apps to forwarders.
  3. Once used, is the only way to manage forwarders.
  4. Can automatically restart the host OS running the forwarder.

Question 24

During search time, which directory of configuration files has the highest precedence?

  1. $SPLUNK_HOME/etc/system/local
  2. $SPLUNK_HOME/etc/system/default
  3. $SPLUNK_HOME/etc/apps/app1/local
  4. $SPLUNK_HOME/etc/users/admin/local

Question 25

Within props.conf, which stanzas are valid for data modification? (Choose all that apply.)

  1. Host
  2. Server
  3. Source
  4. Sourcetype